PHP Patterns and Refactoring Training Course

This training course prepares participants for the role of a professional web designer (occupational code: 213202 per the Standards of Professional Qualifications), with a primary focus on “HTML and CSS in web design.” It also includes a programming component that covers problem-solving using JavaScript and PHP.

The program is designed to equip participants with the skills needed to create and design websites using HTML4/HTML5 alongside Cascading Style Sheets CSS2/CSS3/CSS4. Throughout the website building process, learners will apply HTML tags to organize text, images, tables, and interactive forms on web pages, as well as establish links to other pages and external sites. Concurrently, Cascading Style Sheets 2.0 will be used to style and format web content according to specific client requirements.

Upon completion, participants will be well-positioned to pursue opportunities within service-oriented companies specializing in web design or to establish their own consulting practice as self-employed professionals. The course content emphasizes the practical aspects of website creation using HTML and CSS, ensuring a solid foundation for real-world application.

This instructor-led, live training in Malaysia (online or onsite) is designed for data scientists and software engineers who wish to use AdaBoost to build boosting algorithms for machine learning with Python.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start building machine learning models with AdaBoost.
• Understand the ensemble learning approach and how to implement adaptive boosting.
• Learn how to build AdaBoost models to boost machine learning algorithms in Python.
• Use hyperparameter tuning to increase the accuracy and performance of AdaBoost models.

In this instructor-led live training conducted in Malaysia, participants will learn how to implement advanced PHP programming tools and techniques.

By the end of this training, participants will be able to:

• Master advanced concepts in PHP programming.
• Establish consistency and solve advanced problems using PHP programming.
• Explore additional methods to build more flexible software using PHP.

This instructor-led, live training in Malaysia (online or onsite) is designed for engineers who wish to use open-source tools to automate the process of building, testing, and deploying PHP applications and services.

By the end of this training, participants will be able to:

• Install and configure various open-source tools to enable continuous integration, testing, and deployment.
• Understand the advantages and disadvantages of employing different open-source CI tools, such as GitLab CI and Jenkins.
• Combine CI tools with open-source frameworks for unit testing as well as integration testing of PHP applications.

Even seasoned programmers do not always master the full range of security services provided by their development platforms, nor are they fully aware of the vulnerabilities relevant to their specific projects. This course is designed for developers working with both Java and PHP, equipping them with essential skills to make their applications resilient against contemporary internet-based attacks.

The course guides participants through the layers of Java security architecture, addressing access control, authentication, authorization, secure communication, and various cryptographic functions. It also introduces key PHP APIs, such as OpenSSL for cryptography and HTML Purifier for input validation, to help secure code. On the server side, best practices are provided for hardening and configuring the operating system, web container, file system, SQL server, and PHP itself. A special focus is placed on client-side security, covering security issues related to JavaScript, Ajax, and HTML5.

General web vulnerabilities are discussed using examples aligned with the OWASP Top Ten, illustrating various injection attacks, script injections, session handling attacks, insecure direct object references, file upload issues, and more. The course introduces Java- and PHP-specific language problems and runtime environment issues, grouped into standard vulnerability types such as missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues, and mobile code-related vulnerabilities.

Participants can experiment with the discussed APIs, tools, and configuration effects firsthand. Each introduction to vulnerabilities is supported by hands-on exercises that demonstrate the consequences of successful attacks, show how to correct bugs and apply mitigation techniques, and introduce the use of various extensions and tools.

Participants attending this course will

• Understand the basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Learn about client-side vulnerabilities and secure coding practices
• Learn to use various security features of the Java development environment
• Gain a practical understanding of cryptography
• Learn to use various security features of PHP
• Understand the security concepts of web services
• Acquire practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Stay informed about recent vulnerabilities in Java and PHP frameworks and libraries
• Access sources and further readings on secure coding practices

Audience

Developers

This course equips PHP developers with the essential skills required to harden applications against modern internet-based threats. It explores web vulnerabilities through practical PHP examples that extend beyond the OWASP Top Ten, addressing issues such as injection attacks, script injection, session handling weaknesses, insecure direct object references, file upload flaws, and more. The curriculum categorizes PHP-related vulnerabilities into standard types, including inadequate or missing input validation, improper error and exception handling, misused security features, and time- or state-related defects. Specific attack vectors discussed include open_basedir circumvention, denial-of-service attacks via magic floats, and hash table collision exploits. Participants will master the critical techniques and functions needed to mitigate these risks.

A significant emphasis is placed on client-side security, covering vulnerabilities in JavaScript, Ajax, and HTML5. The course introduces key PHP extensions for cryptography, such as hash, mcrypt, and OpenSSL, as well as those for input validation, including Ctype, ext/filter, and HTML Purifier. Best practices for hardening are provided regarding PHP configuration (php.ini), Apache server settings, and general server administration. Additionally, the course offers an overview of various security testing tools and techniques available to developers and testers, including security scanners, penetration testing utilities, exploit kits, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the vulnerability concepts and configuration guidelines are reinforced through hands-on exercises. These practical sessions demonstrate the impact of successful attacks, illustrate how to implement mitigation strategies, and guide the use of various extensions and tools.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Understand web vulnerabilities beyond the OWASP Top Ten and learn how to prevent them
• Gain insight into client-side vulnerabilities and secure coding methodologies
• Develop a practical understanding of cryptography
• Learn to effectively utilise various PHP security features
• Identify common coding mistakes and discover how to avoid them
• Stay informed about recent vulnerabilities within the PHP framework
• Acquire hands-on experience with security testing tools
• Access resources and further reading materials on secure coding practices

Audience

Developers

This instructor-led live training in Malaysia (online or onsite) is designed for intermediate-level PHP developers who want to apply design patterns effectively in their projects.

By the end of this training, participants will be able to:

• Understand the purpose and benefits of design patterns.
• Identify and implement appropriate design patterns for common scenarios.
• Structure PHP applications using industry-recognized best practices.
• Integrate patterns into modern frameworks such as Symfony or Zend.

This instructor-led, live training in Malaysia introduces the fundamentals of Laravel and walks participants through the creation of a Laravel-based web application.

This instructor-led live training, offered in Malaysia (online or onsite), is tailored for developers who want to learn and utilize Livewire to build modern and dynamic application interfaces.

By the end of this training, participants will be able to:

• Develop and test Livewire components.
• Create applications using the Livewire library.
• Build dynamic components within PHP.

This instructor-led live training in Malaysia (online or onsite) is designed for web developers who wish to use Laravel and Vue.js for fullstack web development.

By the end of this training, participants will be able to:

• Develop web applications with Laravel and Vue.js.
• Integrate the Laravel backend API into Vue.js.
• Deploy a Laravel application.

This instructor-led live training in Malaysia (available online or onsite) is designed for developers who intend to utilize Lumen to develop Laravel-based microservices and applications.

By the conclusion of this training, participants will be able to:

• Configure the necessary development environment to initiate microservice development with Lumen.
• Comprehend the benefits of implementing microservices using Lumen and PHP.
• Carry out and implement microservices functions and operations using the Lumen framework.
• Protect and control access to microservices architectures by constructing security layers.

This instructor-led, live training in Malaysia (online or onsite) is designed for web developers who wish to build web applications using Magento 2.

Upon completing this training, participants will be able to:

• Master Magento 2 development patterns, design patterns, and methodologies.
• Create and customise themes within Magento 2.
• Implement functional customisations for Magento 2 using extensions.

This instructor-led, live training in Malaysia (online or onsite) targets developers who wish to use PHP 8 to develop, build, and test complex enterprise-level web applications such as e-commerce sites, CRM systems, WMS, etc.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start developing web applications with PHP 8.
• Learn more about the new features in PHP 8 and how to implement them.
• Get a refresher of the PHP basics and some programming tips.
• Use the new functions in PHP 8 to improve the performance of web applications.
• Know the best practices on enhancing the security and stability of web applications with PHP 8.

This course focuses on building web applications using PHP. It is designed for individuals who already have experience with procedural programming languages. Throughout the course, participants will learn how to develop a simple dynamic application utilizing PHP and a MySQL database.

This instructor-led live training, available online or onsite, is designed for web developers who wish to build middleware and web services in Laravel.

By the end of this training, participants will be able to:

• Use Laravel PHP Artisan to generate code and components.
• Build RESTful APIs in Laravel that can browse, read, edit, add, and delete.
• Filter and sort results based on URL parameters using RESTful APIs.