PHP Patterns and Refactoring Training Course

This course equips PHP developers with the essential skills needed to make their applications resilient against modern internet threats. It explores web vulnerabilities through PHP examples that go beyond the OWASP Top Ten, addressing various injection attacks, script injections, session handling issues, insecure direct object references, file upload vulnerabilities, and more. PHP-related vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- or state-related issues. For the latter, we examine attacks like open_basedir circumvention, denial-of-service via magic float, and hash table collision attacks. In each scenario, participants will learn the key techniques and functions required to mitigate these risks.

Particular emphasis is placed on client-side security, addressing issues related to JavaScript, Ajax, and HTML5. The course introduces various PHP extensions for cryptography (such as hash, mcrypt, and OpenSSL) and for input validation (including Ctype, ext/filter, and HTML Purifier). Best practices for hardening PHP configuration (php.ini settings), Apache, and the server environment are also covered. Additionally, participants will gain an overview of security testing tools and techniques available to developers and testers, including security scanners, penetration testing tools, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and configuration practices are reinforced through hands-on exercises. These activities demonstrate the consequences of successful attacks, show how to apply mitigation techniques, and guide participants in using various extensions and tools.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Gain knowledge of client-side vulnerabilities and secure coding practices
• Develop a practical understanding of cryptography
• Learn to utilize various PHP security features
• Identify typical coding mistakes and learn how to avoid them
• Stay informed about recent PHP framework vulnerabilities
• Acquire practical experience with security testing tools
• Access resources and further reading on secure coding practices

Audience

Developers

Numerous proven patterns are readily accessible to all. Often, the process simply involves adapting their names and applying them within a specific technology. This approach can save hundreds of hours that would otherwise be dedicated to design and testing. Training Goals This course has two primary objectives: first, to enable the reuse of well-established patterns, and second, to empower you to create and reuse patterns tailored to your organization. It helps you estimate how patterns can reduce costs, streamline the design process, and generate a code framework based on your patterns. Audience Software designers, business analysts, project managers, programmers and developers as well as operational managers and software division managers. Course Style The course focuses on use cases and their relationship with a specific pattern. Most of the examples are explained in UML and in simple Java examples (the language can change if the course is booked as a closed course). It guides you through the sources of the patterns as well as showing you how to catalogue and describe patterns which can be reused across your organization.

This instructor-led, live training in Mexico (online or onsite) is aimed at intermediate-level Java developers who wish to apply design patterns to improve software structure, maintainability, and scalability.

By the end of this training, participants will be able to:

• Understand the purpose and benefits of design patterns.
• Apply Creational, Structural, and Behavioral patterns effectively in Java.
• Improve code reusability, scalability, and maintainability.
• Refactor existing codebases using design patterns.

This instructor-led live training in Mexico (online or onsite) targets intermediate-level PHP developers who wish to effectively apply design patterns in their projects.

By the conclusion of this training, participants will be able to:

• Grasp the purpose and advantages of using design patterns.
• Identify and implement suitable design patterns for various common scenarios.
• Organize PHP applications according to industry-recognized best practices.
• Integrate patterns into modern frameworks like Symfony or Zend.

This course is intended for JavaScript developers who wish to design and implement sophisticated web applications. The training focuses on conveying best practices in JavaScript development while highlighting common pitfalls. A key aspect of the curriculum involves exploring object-oriented programming concepts within the context of JavaScript syntax.

The rapid advancement of microservices and container technologies has profoundly transformed how we architect, develop, deploy, and operate software. Today's applications demand optimization for scalability, elasticity, fault tolerance, and adaptability. To meet these evolving needs, modern architectures necessitate a distinct set of patterns and best practices. This training explores methods to identify, comprehend, and adapt to these contemporary requirements.

Target Audience
This course is designed for professionals who possess a foundational understanding of container technology and Kubernetes concepts but may lack extensive practical experience. Grounded in real-world use cases and lessons learned from actual projects, the aim is to inspire participants to create and manage superior cloud-native applications.

• Developers
• Operations staff
• DevOps professionals
• QA Engineers
• IT Project Managers

Course Format

• Interactive lectures and discussions
• Extensive exercises and practical applications
• Hands-on implementation within a live-lab environment

Course Customization Options

• To arrange customized training for this course, please contact us.

This instructor-led, live training in Mexico introduces the fundamentals of Laravel and walks participants through the creation of a Laravel-based web application.

This instructor-led live training in Mexico (online or onsite) is designed for developers who wish to learn and use Livewire to build modern and dynamic application interfaces.

Upon completion of this training, participants will be able to:

• Develop and test Livewire components.
• Construct applications using the Livewire library.
• Implement dynamic components within PHP.

This instructor-led, live training in Mexico (online or onsite) is designed for web developers who want to use Laravel and Vue.js for full-stack web development.

By the end of this training, participants will be able to:

• Develop web applications with Laravel and Vue.js.
• Integrate the Laravel backend API into Vue.js.
• Deploy a Laravel application.

This instructor-led, live training (available online or onsite) is designed for web developers who wish to build middleware and web services in Laravel.

Upon completing this training, participants will be able to:

• Utilize Laravel PHP Artisan to generate code and components.
• Construct RESTful APIs in Laravel capable of browsing, reading, editing, adding, and deleting data.
• Filter and sort results based on URL parameters using RESTful APIs.

As distributed systems grow increasingly complex, the challenge shifts from individual system complexity to the architectural intricacies of interconnected systems. This course explores the relationship between Software Architecture and Technical Enterprise Architecture, two fields that are closely linked yet often lack clear definition. For instance, decomposing a complex monolithic application into two distinct systems communicating via web services can induce significant changes in both the new systems and the architecture connecting them.

The course will address trade-offs, widely adopted patterns, and solutions for managing complex systems and their internal and external communications.