Track 09

Security

Learn the security habits needed to protect PHP applications.

Lessons

  1. 01Security Model
  2. 02User-Submitted Data
  3. 03Validation And Normalisation
  4. 04Output Escaping
  5. 05Cross-Site Scripting (XSS)
  6. 06Cross-Site Request Forgery (CSRF)
  7. 07SQL Injection
  8. 08Authentication And Authorisation Security
  9. 09Password Hashing
  10. 10Session Security
  11. 11Cookie Security
  12. 12Upload Security
  13. 13Secrets Management
  14. 14SSRF, Path Traversal, File Inclusion, And Command Injection
  15. 15Mass Assignment And Insecure Direct Object Reference
  16. 16JWT And API Token Security
  17. 17Rate Limiting And Abuse Prevention
  18. 18Cryptographic Randomness
  19. 19OpenSSL And Sodium Overview
  20. 20Filesystem Security
  21. 21Error Display Versus Logging
  22. 22Keeping PHP Current
  23. 23OWASP Top 10 Orientation For PHP Applications
  24. 24Security Review Checklist