Track 09
Security
Learn the security habits needed to protect PHP applications.
Lessons
- 01Security Model
- 02User-Submitted Data
- 03Validation And Normalisation
- 04Output Escaping
- 05Cross-Site Scripting (XSS)
- 06Cross-Site Request Forgery (CSRF)
- 07SQL Injection
- 08Authentication And Authorisation Security
- 09Password Hashing
- 10Session Security
- 11Cookie Security
- 12Upload Security
- 13Secrets Management
- 14SSRF, Path Traversal, File Inclusion, And Command Injection
- 15Mass Assignment And Insecure Direct Object Reference
- 16JWT And API Token Security
- 17Rate Limiting And Abuse Prevention
- 18Cryptographic Randomness
- 19OpenSSL And Sodium Overview
- 20Filesystem Security
- 21Error Display Versus Logging
- 22Keeping PHP Current
- 23OWASP Top 10 Orientation For PHP Applications
- 24Security Review Checklist