About the Author

Chris Shiflett

Hi, I'm Chris, a web developer and a founding member of Analog. I live and work in Brooklyn, NY.


Securing PHP Code with Zend

I worked hard on the PHP security tutorial that I gave at OSCON this year, and I have been delighted by the attention it has been receiving since. The PHP Security Workbook that accompanied the talk is still a frequent recommendation among PHP sites worldwide, and people continue to express their interest in attending a similar course.

For those who don't have the time or money to attend this course at a conference (I'll be giving it next at ApacheCon in Las Vegas), Zend has a solution: Zend Online Training. These courses are delivered online using Interwise iClass. While this appears to be an excellent training platform, it only runs on Windows, which is a bummer. Personally, I'll be emulating Windows on my Apple PowerBook using VirtualPC (yes, I bought a Microsoft product to help me teach a security course). I realize that the platform restriction likely poses a problem for many PHP developers, but hopefully you can emulate Windows or borrow a friend's computer for a few hours.

I'll be giving a 3 hour course entitled Securing PHP Code, and the cost is only $99 (USD). The course is described as follows:

Security is critical to every PHP application - don't let insecure programming practices leave you vulnerable. Firewalls and secure servers cannot compensate for an insecure application, and the majority of the responsibility lies in the hands of the developer.

This class teaches secure programming practices by demonstrating common types of attacks and practical methods to defend against those attacks.

Through careful examination of each attack, you not only gain a better appreciation, but also a deeper understanding of the protective measures being discussed. You can use the best practices you learn in this class to improve the security of both your current and future PHP applications.

If you have 3 hours and $99 to spare, join me on 18 Oct 2004 at 11 AM EST (3 PM GMT) and learn how to improve the security of your PHP applications.

About This Post

Securing PHP Code with Zend was posted on Wed, 15 Sep 2004 at 21:27:26 GMT.

0 Comments

Post A Comment

Personal Details and Comment

Style Guide

Line breaks are converted to paragraphs. Also use:

  • <a href="" title="">text</a>1
  • <em>text</em>
  • <blockquote><p>text</p></blockquote>
  • <code>2  <?php  if ($foo) {      $foo = TRUE;  }  ?></code>
  1. Note: <code> can be used inline (e.g. in paragraphs) or in a block as shown. Include whitespace and newlines in blocks.

Please enter Chris (my first name) below. This is a primitive spam prevention technique, and I apologize for the inconvenience.

Preview and Submit

Upcoming Talks

ConFoo

10 - 12 Mar 2010

At Hilton Montréal Bonaventure, Montréal, Canada.

South by Southwest

12 - 16 Mar 2010

At Austin Convention Center, Austin, Texas.

Dutch PHP Conference

10 - 12 Jun 2010

At TBD, Amsterdam, Netherlands.

O'Reilly Open Source Convention

19 - 23 Jul 2010

At Oregon Convention Center, Portland, Oregon.

New Comments

Niall Kelly wrote:

Having tried other methods without success and looked through plenty of bloated documentation, th...

Posted in Git on Snow Leopard
liukang wrote:

I have problem with this example. In my php.ini magic_quotes_gpc is off so i'm using only addsla...

Posted in addslashes() Versus mysql_real_escape_string()
RyanTheGreat wrote:

Well, I'm not Chris, but I will do my best to address the questions raised in the comments by Ian...

Posted in Security Corner: Cross-Site Request Forgeries
Chris Shiflett wrote:

Thanks for the kind words, Simon. I'm glad you liked the tutorial. In case it's helpful, here'...

Posted in Webstock
Chris Shiflett wrote:

Hi Robin, I plan to post something about it, but it's going to be hard to express everything i...

Posted in Webstock

Browse Comments


Work and Books

Analog Essential PHP Security HTTP Developer's Handbook