Laravel: Middleware Development Training Course

This instructor-led, live training in Guatemala introduces the fundamentals of Laravel and walks participants through the creation of a Laravel-based web application.

This instructor-led, live training in Guatemala (online or onsite) is aimed at developers who wish to learn and use Livewire to build modern and dynamic application interfaces.

By the end of this training, participants will be able to:

• Build and test livewire components.
• Build applications using the Livewire library.
• Create dynamic components within PHP.

This instructor-led, live training in Guatemala (online or onsite) is aimed at web developers who wish to use Laravel and Vue JS for fullstack web development.

By the end of this training, participants will be able to:

• Develop web applications with Laravel and Vue JS.
• Integrate the Laravel backend API into Vue JS.
• Deploy a Laravel application.

This course deals with developing web applications in PHP. The course has been created for people already familiar with other procedural programming languages. During the course participants will learn how to create a simple dynamic application with PHP and a MySQL database.

This course has been created for PHP programmers and website developers interested in PHP code optimization.

The course shows how to find a bottleneck and how to refactor or change the code in the appropriate way.

During this course, participants will deal with real web page examples which will be tracked, analysed and optimized.

The course familiarizes participants with the PHP language and its integration with the Web environment. The participant will learn how to make a dynamic page, write database applications and to protect applications from unauthorized access.

The training program prepares you for professional web designer (occupation code: 213202 for Standards of Professional Qualifications) in respect of "HTML and CSS in web design" and includes a programming problem using JavaScript and PHP language.

The following program assumes that the participant will be able to design and make websites using HTML 4.0 and Cascading Style Sheets 2.0. In building a web site, you will use the HTML tags to place text, graphics, tables, and interactive forms on the web page, and also links to other web pages and web sites. Using Cascading Style Sheets 2.0 you will perform formatting of web content according to customer requirements.

Course graduates can seek employment in service companies involved in web designing or start consulting service (self-employed). The training program covers the issues of creating web sites using HTML and CSS.

The course will cover the design patterns with particular emphasis on patterns used in PHP.

The course is designed for intermediate PHP developers who want to enrich their knowledge and learn best practices in programming and web development techniques based on object-oriented programming and design patterns.

The course is designed for experienced programmers who want to explore issues related to the use of patterns and refactoring. Each participant know the properties and practical examples of the use of these patterns, which in turn will enable the efficient build correct the application code.

Yii is a high-performance PHP framework best for developing Web 2.0 applications.

Symfony is a set of PHP Components, a Web Application framework, a Philosophy and a Community.

The course provides essential skills for PHP developers necessary to make their applications resistant to contemporary attacks through the Internet. Web vulnerabilities are discussed through PHP-based examples going beyond the OWASP top ten, tackling various injection attacks, script injections, attacks against session handling of PHP, insecure direct object references, issues with file upload, and many others. PHP-related vulnerabilities are introduced grouped into the standard vulnerability types of missing or improper input validation, incorrect error and exception handling, improper use of security features and time- and state-related problems. For this latter we discuss attacks like the open_basedir circumvention, denial-of-service through magic float or the hash table collision attack. In all cases participants will get familiar with the most important techniques and functions to be used to mitigate the enlisted risks.

A special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. A number of security-related extensions to PHP are introduced like hash, mcrypt and OpenSSL for cryptography, or Ctype, ext/filter and HTML Purifier for input validation. The best hardening practices are given in connection with PHP configuration (setting php.ini), Apache and the server in general. Finally, an overview is given to various security testing tools and techniques which developers and testers can use, including security scanners, penetration testing and exploit packs, sniffers, proxy servers, fuzzing tools and static source code analyzers.

Both the introduction of vulnerabilities and the configuration practices are supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to apply mitigation techniques and introducing the use of various extensions and tools.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Have a practical understanding of cryptography
• Learn to use various security features of PHP
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities of the PHP framework
• Get practical knowledge in using security testing tools
• Get sources and further readings on secure coding practices

Audience

Developers

Even experienced programmers do not master by all means the various security services offered by their development platforms, and are likewise not aware of the different vulnerabilities that are relevant for their developments. This course targets developers using both Java and PHP, providing them essential skills necessary to make their applications resistant to contemporary attacks through the Internet.

Levels of Java security architecture are walked through by tackling access control, authentication and authorization, secure communication and various cryptographic functions. Various APIs are also introduced that can be used to secure your code in PHP, like OpenSSL for cryptography or HTML Purifier for input validation. On server side, the best practices are given for hardening and configuring the operating system, the web container, the file system, the SQL server and the PHP itself, while a special focus is given to client-side security through security issues of JavaScript, Ajax and HTML5.

General web vulnerabilities are discussed by examples aligned to the OWASP Top Ten, showing various injection attacks, script injections, attacks against session handling, insecure direct object references, issues with file uploads, and many others. The various Java- and PHP-specific language problems and issues stemming from the runtime environment are introduced grouped into the standard vulnerability types of missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues and mobile code-related vulnerabilities.

Participants can try out the discussed APIs, tools and the effects of configurations for themselves, while the introduction of vulnerabilities are all supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct the bugs and apply mitigation techniques, and introducing the use of various extensions and tools.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Learn to use various security features of PHP
• Understand security concepts of Web services
• Get practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
• Get sources and further readings on secure coding practices

Audience

Developers

Behat is a Behavior Driven Development (BDD) test framework written in PHP. It facilitates communication among developers, testers, business stakeholders and clients during the software development process. Behat allows non-technical people to write clear descriptions of an application's intended behavior, then runs those "scenarios" as functional tests against the application.

In this instructor-led, live training, participants will learn how to write and execute BDD style test cases using Behat and PHP.

By the end of this training, participants will be able to:

• Run automated tests written in the human-readable, "Given, When, Then" Gherkin language
• Use Behat based test cases to improve collaboration between technical and non-technical teams
• Integrate Behat with Selenium, Mink, Goutte and other browser emulators to drive tests and generate reports
• Extend Behat functionality through its extension system
• Test numerous usage scenarios through terminal commands, REST APIs, and more.

Audience

• Test engineers
• Developers

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice