PHP Patterns and Refactoring Training Course

This course equips PHP developers with essential skills to protect their applications against modern Internet-based threats. It explores web vulnerabilities through practical PHP examples, extending beyond the OWASP Top Ten to address various injection attacks, script injections, session handling flaws, insecure direct object references, file upload issues, and more. PHP-related vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- or state-related problems. Specific examples include open_basedir circumvention, denial-of-service attacks via magic floats, and hash table collision attacks. In each case, participants will learn key techniques and functions to mitigate these risks.

A significant emphasis is placed on client-side security, addressing vulnerabilities in JavaScript, Ajax, and HTML5. The course introduces several PHP security extensions, including hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are covered in the context of PHP configuration (php.ini), Apache, and general server settings. Additionally, the course provides an overview of security testing tools and techniques for developers and testers, including security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and configuration practices are reinforced with hands-on exercises. These demonstrate the impact of successful attacks, show how to implement mitigation strategies, and introduce the use of various extensions and tools.

Participants attending this course will

• Gain a solid understanding of security concepts, IT security, and secure coding principles
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand client-side vulnerabilities and adopt secure coding practices
• Develop a practical grasp of cryptography
• Learn to utilize various PHP security features effectively
• Identify common coding errors and understand how to avoid them
• Stay informed about recent vulnerabilities in the PHP framework
• Acquire practical experience with security testing tools
• Access resources and further reading on secure coding practices

Audience

Developers

A wide range of proven and tested patterns are readily accessible to everyone. Often, the task involves adapting the names and applying the pattern to a specific technology. This approach can save hundreds of hours that would otherwise be devoted to design and testing. Training Objectives This course has two primary goals: first, it enables you to reuse well-known patterns; second, it empowers you to create and reuse patterns tailored to your organization. It helps you estimate how patterns can reduce costs, systematize the design process, and generate a code framework based on your patterns. Audience Software designers, business analysts, project managers, programmers, developers, operational managers, and software division managers. Course Style The course emphasizes use cases and their relationship with specific patterns. Most examples are explained in UML and simple Java examples (the language may vary if the course is booked as a closed course). It guides you through the sources of the patterns and shows you how to catalogue and describe patterns for reuse across your organization.

This instructor-led live training in Portugal (online or onsite) is aimed at intermediate-level Java developers who wish to apply design patterns to improve software structure, maintainability, and scalability.

By the end of this training, participants will be able to:

• Understand the purpose and benefits of design patterns.
• Apply Creational, Structural, and Behavioral patterns effectively in Java.
• Improve code reusability, scalability, and maintainability.
• Refactor existing codebases using design patterns.

This instructor-led, live training in Portugal (online or onsite) is designed for intermediate-level PHP developers aiming to apply design patterns effectively within their projects.

By the end of this training, participants will be able to:

• Grasp the purpose and advantages of design patterns.
• Recognize and apply suitable design patterns to common scenarios.
• Organize PHP applications according to industry-recognized best practices.
• Incorporate patterns into modern frameworks like Symfony or Zend.

This training is tailored for JavaScript developers focused on designing and implementing sophisticated Internet applications. The curriculum emphasizes bringing best practices to JavaScript programming while highlighting common pitfalls. A key focus is exploring object-oriented programming capabilities within the JavaScript syntax.

The rapid evolution of microservices and container technologies in recent years has fundamentally transformed how we design, develop, deploy, and operate software. Modern applications must be engineered for scalability, elasticity, resilience, and adaptability to change. To meet these new demands, contemporary architectures require a distinct set of patterns and best practices. This training explores methods to identify, comprehend, and adapt to these evolving requirements.

Target Audience
This course is designed for individuals who possess a foundational understanding of container technology and Kubernetes concepts but may lack practical, real-world experience. Drawing on use cases and lessons learned from actual projects, the goal is to inspire participants to create and manage superior cloud-native applications.

• Developers
• Operations Staff
• DevOps Professionals
• QA Engineers
• IT Project Managers

Course Format

• Interactive lectures and discussions
• Extensive exercises and practical application
• Hands-on implementation within a live laboratory environment

Course Customization Options

• To request a customized training session for this course, please contact us to arrange.

This instructor-led, live training in Portugal introduces the fundamentals of Laravel and guides participants through the creation of a Laravel-based web application.

This instructor-led, live training in Portugal (online or onsite) is aimed at developers who wish to learn and use Livewire to build modern and dynamic application interfaces.

By the end of this training, participants will be able to:

• Build and test livewire components.
• Build applications using the Livewire library.
• Create dynamic components within PHP.

This instructor-led, live training in Portugal (online or onsite) is designed for web developers who wish to use Laravel and Vue.js for fullstack web development.

By the end of this training, participants will be able to:

• Develop web applications using Laravel and Vue.js.
• Integrate the Laravel backend API with Vue.js.
• Deploy a Laravel application.

This instructor-led live training (available online or onsite) is designed for web developers who wish to build middleware and web services in Laravel.

Upon completion of this training, participants will be able to:

• Utilize Laravel’s PHP Artisan command-line tool to generate code and components.
• Develop RESTful APIs in Laravel that support browsing, reading, editing, adding, and deleting operations.
• Filter and sort results based on URL parameters using RESTful APIs.

As distributed systems become increasingly complex, the challenge has shifted from the intricacies of a single application to the complexity inherent in the architecture of interconnected systems. This course explores the dynamic relationship between Software Architecture and Technical Enterprise Architecture. These two domains are closely linked, yet this connection is often not fully articulated. For instance, decomposing a complex monolithic application into two distinct systems that communicate via web services necessitates significant changes to both the individual systems and the architectural interactions between them.

Throughout this course, we will examine the trade-offs involved, along with prevalent patterns and solutions for managing complex systems and the communication channels within and between them.