Advanced CakePHP Training Course

This course teaches PHP developers how to build functional web applications using the popular CakePHP MVC web development framework. The course covers beginning principles and approaches, then moves into advanced topics that help enhance the behavior, flexibility and security of an application. Discussions are interactive and the learning is practical and hands-on.

Format of the Course

• Overview of CakePHP features and capabilities together with step-by-step development of a sample application.

The training program prepares you for professional web designer (occupation code: 213202 for Standards of Professional Qualifications) in respect of "HTML and CSS in web design" and includes a programming problem using JavaScript and PHP language.

The following program assumes that the participant will be able to design and make websites using HTML 4.0 and Cascading Style Sheets 2.0. In building a web site, you will use the HTML tags to place text, graphics, tables, and interactive forms on the web page, and also links to other web pages and web sites. Using Cascading Style Sheets 2.0 you will perform formatting of web content according to customer requirements.

Course graduates can seek employment in service companies involved in web designing or start consulting service (self-employed). The training program covers the issues of creating web sites using HTML and CSS.

In this instructor-led, live training in Morocco, participants will learn how to implement advanced PHP programming tools and techniques.

By the end of this training, participants will be able to:

• Learn advanced concepts in PHP programming.
• Establish consistency and solve advanced problems using PHP programming.
• Explore additional ways to build more flexible software using PHP.

Advanced PHP and Secure Coding Course

Behat is a Behavior Driven Development (BDD) test framework written in PHP. It facilitates communication among developers, testers, business stakeholders and clients during the software development process. Behat allows non-technical people to write clear descriptions of an application's intended behavior, then runs those "scenarios" as functional tests against the application.

In this instructor-led, live training, participants will learn how to write and execute BDD style test cases using Behat and PHP.

By the end of this training, participants will be able to:

• Run automated tests written in the human-readable, "Given, When, Then" Gherkin language
• Use Behat based test cases to improve collaboration between technical and non-technical teams
• Integrate Behat with Selenium, Mink, Goutte and other browser emulators to drive tests and generate reports
• Extend Behat functionality through its extension system
• Test numerous usage scenarios through terminal commands, REST APIs, and more.

Audience

• Test engineers
• Developers

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice

This instructor-led, live training in Morocco (online or onsite) is aimed at engineers who wish to use open source tools to automate the process of building, testing and deploying PHP applications and services.

By the end of this training, participants will be able to:

• Install and configure different open source tools to enable continuous integration, testing and deployment.
• Understand the advantages and disadvantages of employment different open source CI tools such as such as Gitlab CI and Jenkins.
• Combine CI tools with open source tools for unit testing as well as integration testing a PHP application.

Even experienced programmers do not master by all means the various security services offered by their development platforms, and are likewise not aware of the different vulnerabilities that are relevant for their developments. This course targets developers using both Java and PHP, providing them essential skills necessary to make their applications resistant to contemporary attacks through the Internet.

Levels of Java security architecture are walked through by tackling access control, authentication and authorization, secure communication and various cryptographic functions. Various APIs are also introduced that can be used to secure your code in PHP, like OpenSSL for cryptography or HTML Purifier for input validation. On server side, the best practices are given for hardening and configuring the operating system, the web container, the file system, the SQL server and the PHP itself, while a special focus is given to client-side security through security issues of JavaScript, Ajax and HTML5.

General web vulnerabilities are discussed by examples aligned to the OWASP Top Ten, showing various injection attacks, script injections, attacks against session handling, insecure direct object references, issues with file uploads, and many others. The various Java- and PHP-specific language problems and issues stemming from the runtime environment are introduced grouped into the standard vulnerability types of missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues and mobile code-related vulnerabilities.

Participants can try out the discussed APIs, tools and the effects of configurations for themselves, while the introduction of vulnerabilities are all supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct the bugs and apply mitigation techniques, and introducing the use of various extensions and tools.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Learn to use various security features of PHP
• Understand security concepts of Web services
• Get practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
• Get sources and further readings on secure coding practices

Audience

Developers

The course provides essential skills for PHP developers necessary to make their applications resistant to contemporary attacks through the Internet. Web vulnerabilities are discussed through PHP-based examples going beyond the OWASP top ten, tackling various injection attacks, script injections, attacks against session handling of PHP, insecure direct object references, issues with file upload, and many others. PHP-related vulnerabilities are introduced grouped into the standard vulnerability types of missing or improper input validation, incorrect error and exception handling, improper use of security features and time- and state-related problems. For this latter we discuss attacks like the open_basedir circumvention, denial-of-service through magic float or the hash table collision attack. In all cases participants will get familiar with the most important techniques and functions to be used to mitigate the enlisted risks.

A special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. A number of security-related extensions to PHP are introduced like hash, mcrypt and OpenSSL for cryptography, or Ctype, ext/filter and HTML Purifier for input validation. The best hardening practices are given in connection with PHP configuration (setting php.ini), Apache and the server in general. Finally, an overview is given to various security testing tools and techniques which developers and testers can use, including security scanners, penetration testing and exploit packs, sniffers, proxy servers, fuzzing tools and static source code analyzers.

Both the introduction of vulnerabilities and the configuration practices are supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to apply mitigation techniques and introducing the use of various extensions and tools.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Have a practical understanding of cryptography
• Learn to use various security features of PHP
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities of the PHP framework
• Get practical knowledge in using security testing tools
• Get sources and further readings on secure coding practices

Audience

Developers

The course will cover the design patterns with particular emphasis on patterns used in PHP.

Internet of Things (IoT) is a network infrastructure that connects physical objects and software applications wirelessly, allowing them to communicate with each other and exchange data via network communications, cloud computing, and data capture. PHP is a server-side scripting language recommended for IoT due to its superior performance.

In this instructor-led, live training, participants will learn how to develop IoT applications using PHP.

By the end of this training, participants will be able to:

• Understand the fundamentals of IoT architecture
• Install and configure tools (IBM Watson IoT Platform, IoT Starter for Android Application) to aid in developing PHP applications
• Learn the benefits of using PHP in programming IoT systems
• Build, test, deploy, and troubleshoot an IoT system using PHP

Audience

• Developers
• Engineers

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice

Note

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Morocco (online or onsite) is aimed at developers who wish to use Lumen to build Laravel-based microservices and applications.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing microservices with Lumen.
• Understand the benefits of implementing microservices using Lumen and PHP.
• Perform and implement the microservices functions and operations using the Lumen framework.
• Protect and control access to the microservices architectures by building security layers.

This instructor-led, live training in Morocco (online or onsite) is aimed at web developers who wish to create a web application with Magento 2.

By the end of this training, participants will be able to:

• Master Magento 2 development patterns, design patterns, and approaches.
• Create and personalize themes in Magento 2.
• Implement customizations to Magento 2 functionality with extensions.

This instructor-led, live training in Morocco (online or onsite) is aimed at developers who wish to use PHP 8 to develop, build, and test complex enterprise-level web applications such as e-commerce sites, CRM systems, WMS, etc.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing web applications with PHP 8.
• Learn more about the new features in PHP 8 and how to implement them.
• Get a refresher of the PHP basics and some programming tips.
• Use the new functions in PHP 8 to improve the performance of web applications.
• Know the best practices on enhancing the security and stability of web applications with PHP 8. 

This course deals with developing web applications in PHP. The course has been created for people already familiar with other procedural programming languages. During the course participants will learn how to create a simple dynamic application with PHP and a MySQL database.

This course has been created for PHP programmers and website developers interested in PHP code optimization.

The course shows how to find a bottleneck and how to refactor or change the code in the appropriate way.

During this course, participants will deal with real web page examples which will be tracked, analysed and optimized.