Writing Secure PHP Code – PHP Security Tutorial

Course Curriculum

Chapter 1: Getting Started

Lecture 1: Important – Working Files – Download These First

Lecture 2: 0101 What Does The Course Cover?

Lecture 3: 0102 How To Set Up For The Course

Chapter 2: Nature And Scope Of The Problem

Lecture 1: 0201 What Is The Threat? – Part 1

Lecture 2: 0202 What Is The Threat? – Part 2

Lecture 3: 0203 What Are The Consequences When A Website Is Not Protected Against Attacks?

Lecture 4: 0204 Most Common Forms Of Attack – Part 1

Lecture 5: 0205 Most Common Forms Of Attack – Part 2

Lecture 6: 0206 Most Common Vulnerabilities Attackers Can Exploit

Lecture 7: 0207 Helpful Resources

Lecture 8: 0208 Lab: Hacking Into Sweets Complete – Instructions

Lecture 9: 0209 Lab: Hacking Into Sweets Complete – Solution

Chapter 3: Understanding Filtering, Validation, And Output Escaping

Lecture 1: 0301 What Is Filtering, Validation, Output Escaping, And Why Do It?

Lecture 2: 0302 PHP Filtering Functions And Techniques

Lecture 3: 0303 PHP Validation Functions And Techniques

Lecture 4: 0304 PHP Output Escaping Functions

Lecture 5: 0305 Using filter_var() To Filter And Validate

Lecture 6: 0306 Lab: Filtering And Validating Posted Form Data – Instructions

Lecture 7: 0307 Lab: Filtering And Validating Posted Form Data – Solutions

Chapter 4: Preventing The Most Common Forms Of Attack

Lecture 1: 0401 Cross-Site Scripting Attacks – Part 1

Lecture 2: 0402 Cross-Site Scripting Attacks – Part 2

Lecture 3: 0403 Cross-Site Scripting Attacks – Part 3

Lecture 4: 0404 Session Hijacking And Forgery Attacks – Part 1

Lecture 5: 0405 Session Hijacking And Forgery Attacks – Part 2

Lecture 6: 0406 Remote Code Injection Attacks – Part 1

Lecture 7: 0407 Remote Code Injection Attacks – Part 2

Lecture 8: 0408 Lab: Improving Security On An Existing Website – Instructions

Lecture 9: 0409 Lab: Improving Security On An Existing Website – Solutions

Chapter 5: Protecting Against Common Website Vulnerabilities

Lecture 1: 0501 Unplanned Information Disclosure – Part 1

Lecture 2: 0502 Unplanned Information Disclosure – Part 2

Lecture 3: 0503 Predictable Resource Location

Lecture 4: 0504 Insufficient Authorization

Lecture 5: 0505 Improper Access Controls

Lecture 6: 0506 Avoiding Misconfiguration

Lecture 7: 0507 Protecting File Uploads

Lecture 8: 0508 Lab: Improving Security On An Existing Website – Instructions

Lecture 9: 0509 Lab: Improving Security On An Existing Website – Solutions

Chapter 6: Protecting Against SQL Injection Attacks

Lecture 1: 0601 How Can You Protect A MySQL Database?

Lecture 2: 0602 MySQL Database Escaping And Quoting

Lecture 3: 0603 Using Prepared Statements

Lecture 4: 0604 Lab: Protecting A MySQL Database Against SQL Injection – Instructions

Lecture 5: 0605 Lab: Protecting A MySQL Database Against SQL Injection – Solutions

Chapter 7: Conclusion

Lecture 1: 0701 Wrap Up