Building Microservices with Lumen PHP Framework Training Course

The training program prepares participants for the role of professional web designer (occupation code: 213202, as per the Standards of Professional Qualifications) with a focus on "HTML and CSS in Web Design." It also includes a programming challenge utilizing JavaScript and PHP languages.

This program is designed to equip participants with the skills necessary to design and develop websites using HTML 4.0 and Cascading Style Sheets (CSS) 2.0. Participants will learn to use HTML tags to incorporate text, graphics, tables, and interactive forms on web pages, as well as to create links to other web pages and sites. Additionally, they will apply CSS 2.0 to format web content according to client specifications.

Upon completion of the course, graduates will be prepared to seek employment in service companies that specialize in web design or to establish their own consulting services (self-employed). The training program comprehensively covers the creation and development of websites using HTML and CSS, aligning with best practices for government and private sector workflows.

This instructor-led, live training (online or onsite) is designed for data scientists and software engineers who wish to utilize AdaBoost to develop boosting algorithms for machine learning with Python. By the end of this training, participants will be able to: - Set up the required development environment to begin building machine learning models with AdaBoost. - Understand the ensemble learning methodology and how to implement adaptive boosting techniques. - Learn how to construct AdaBoost models to enhance machine learning algorithms in Python. - Utilize hyperparameter tuning to improve the accuracy and performance of AdaBoost models, ensuring they meet the standards required for government applications.

In this instructor-led, live training for government participants, attendees will learn how to implement advanced PHP programming tools and techniques. By the end of this training, participants will be able to: - Master advanced concepts in PHP programming. - Establish consistency and address complex challenges using PHP programming. - Discover additional methods to develop more adaptable software solutions using PHP.

This instructor-led, live training in US (online or onsite) is aimed at engineers who wish to use open source tools to automate the process of building, testing, and deploying PHP applications and services for government. By the end of this training, participants will be able to: - Install and configure various open source tools to facilitate continuous integration, testing, and deployment. - Understand the benefits and limitations of using different open source CI tools such as GitLab CI and Jenkins. - Integrate CI tools with open source solutions for unit testing and integration testing of PHP applications.

Even experienced programmers may not fully master the security services provided by their development platforms, nor are they always aware of the vulnerabilities pertinent to their applications. This course is designed for developers using both Java and PHP, equipping them with essential skills to enhance the resilience of their applications against modern Internet-based attacks.

The curriculum delves into the layers of Java security architecture, addressing topics such as access control, authentication, authorization, secure communication, and cryptographic functions. For PHP, various APIs are introduced for securing code, including OpenSSL for cryptography and HTML Purifier for input validation. On the server side, best practices for hardening and configuring the operating system, web container, file system, SQL server, and PHP itself are covered. Special attention is given to client-side security, exploring issues related to JavaScript, Ajax, and HTML5.

General web vulnerabilities are discussed with examples aligned to the OWASP Top Ten, covering various injection attacks, script injections, session handling attacks, insecure direct object references, file upload issues, and more. The course also addresses Java- and PHP-specific language problems and runtime environment issues, categorized into standard vulnerability types such as missing or improper input validation, misuse of security features, incorrect error and exception handling, time- and state-related problems, code quality issues, and vulnerabilities related to mobile code.

Participants will have the opportunity to experiment with APIs, tools, and configurations firsthand. The introduction of vulnerabilities is supported by hands-on exercises that demonstrate the consequences of successful attacks, show how to correct bugs and apply mitigation techniques, and introduce various extensions and tools.

Upon completing this course, participants will

• Understand basic concepts of security, IT security, and secure coding for government applications
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Gain knowledge of client-side vulnerabilities and secure coding practices
• Learn to utilize various security features in the Java development environment
• Acquire a practical understanding of cryptography
• Learn to use various security features in PHP
• Understand the security concepts of web services
• Gain practical knowledge in using security testing tools
• Identify typical coding mistakes and learn how to avoid them
• Stay informed about recent vulnerabilities in Java and PHP frameworks and libraries
• Access sources and further readings on secure coding practices

Audience

Developers

This course provides essential skills for PHP developers to enhance the security of their applications against modern internet-based attacks. It covers web vulnerabilities through PHP-based examples, delving beyond the OWASP Top Ten to address various injection attacks, script injections, session handling issues, insecure direct object references, file upload problems, and more. Vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, improper use of security features, and time- and state-related issues. Specific topics include open_basedir circumvention, denial-of-service through magic float, and hash table collision attacks. Participants will gain proficiency in the key techniques and functions necessary to mitigate these risks. The course also emphasizes client-side security, addressing JavaScript, Ajax, and HTML5 vulnerabilities. It introduces several PHP security extensions, including hash, mcrypt, OpenSSL for cryptography, Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening PHP configuration (setting php.ini), Apache, and the server in general are discussed. An overview of security testing tools and techniques is provided, covering security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers. Both the introduction to vulnerabilities and configuration practices are supported by hands-on exercises that demonstrate the consequences of successful attacks, illustrate mitigation techniques, and introduce various extensions and tools. Participants attending this course will: - Understand basic concepts of security, IT security, and secure coding - Learn about web vulnerabilities beyond OWASP Top Ten and how to avoid them - Gain knowledge of client-side vulnerabilities and secure coding practices - Acquire a practical understanding of cryptography - Learn to use various security features of PHP - Identify typical coding mistakes and learn how to avoid them - Stay informed about recent vulnerabilities in the PHP framework - Gain practical experience with security testing tools - Receive sources and further readings on secure coding practices This course is designed for government developers who seek to enhance their application security skills.

This instructor-led, live training in US (online or onsite) is aimed at intermediate-level PHP developers who wish to effectively apply design patterns in their projects for government. By the end of this training, participants will be able to: - Understand the purpose and benefits of design patterns. - Identify and implement appropriate design patterns for common scenarios. - Structure PHP applications using industry-recognized best practices. - Integrate patterns into modern frameworks such as Symfony or Zend.

This instructor-led, live training in US provides an introduction to the fundamentals of Laravel and guides participants through the development of a Laravel-based web application for government use. The training emphasizes best practices for government workflows, governance, and accountability.

This instructor-led, live training in [location] (online or onsite) is designed for developers who wish to learn and utilize Livewire to create modern and dynamic application interfaces for government. By the end of this training, participants will be able to: - Develop and test Livewire components. - Build applications using the Livewire library. - Create dynamic components within PHP.

This instructor-led, live training in US (online or onsite) is aimed at web developers who wish to utilize Laravel and Vue JS for full-stack web development for government applications. By the end of this training, participants will be able to: - Develop web applications using Laravel and Vue JS. - Integrate the Laravel backend API with Vue JS. - Deploy a Laravel application in a secure and efficient manner.

This instructor-led, live training (online or onsite) is designed for web developers who wish to create a web application using Magento 2. By the end of this training, participants will be able to: - Master Magento 2 development patterns, design patterns, and methodologies. - Design and customize themes in Magento 2. - Implement customizations to Magento 2 functionality through extensions. This training aligns with best practices for government web applications, ensuring that developers can meet the specific needs of public sector projects.

This instructor-led, live training (online or onsite) is aimed at developers who wish to utilize PHP 8 for developing, building, and testing complex enterprise-level web applications such as e-commerce platforms, CRM systems, and WMS solutions. By the end of this training, participants will be able to: - Set up the required development environment to begin creating web applications with PHP 8. - Gain an understanding of the new features in PHP 8 and how to effectively implement them. - Review the fundamentals of PHP and receive programming best practices. - Utilize the new functions in PHP 8 to enhance the performance of web applications. - Learn the best practices for improving the security and stability of web applications with PHP 8, ensuring alignment with public sector workflows and governance standards for government.

This course is designed to develop web applications using PHP, tailored for individuals who are already proficient in other procedural programming languages. Throughout the course, participants will gain the skills necessary to create a basic dynamic application utilizing PHP alongside a MySQL database, ensuring alignment with best practices for government and industry standards.

The course is designed for experienced programmers seeking to delve into issues related to the use of patterns and refactoring. Participants will gain a thorough understanding of the properties and practical applications of these patterns, enabling them to efficiently construct accurate and reliable application code for government projects.

This instructor-led, live training (available online or onsite) is designed for web developers who wish to develop middleware and web services using Laravel. By the end of this training, participants will be able to: - Utilize Laravel PHP Artisan to generate code and components. - Construct RESTful APIs in Laravel that support browsing, reading, editing, adding, and deleting data. - Filter and sort results based on URL parameters through RESTful APIs. This training aligns with the need for robust and efficient web development practices for government agencies.