Contenu du cours
Module 1 — Discovering PHP
Understand what PHP is, set up a local environment and write your first script.
0/4
What is PHP and where does it run?
12:00
Setting up a local environment
13:00
Your first script: echo
10:00
Quiz — Module 1
Module 2 — Language basics
Variables, types, operators, conditions and loops.
0/4
Variables and data types
12:00
Operators and if / else conditions
13:00
The for and while loops
12:00
Quiz — Module 2
Module 3 — Functions, arrays and forms
Create functions, work with arrays and handle data coming from a form.
0/4
Creating and using functions
13:00
Arrays
12:00
Reading form data with $_POST
13:00
Quiz — Module 3
Module 4 — PHP and data
Reuse code, talk to MySQL and secure user input.
0/4
Including files to reuse code
11:00
Introduction to MySQL databases
14:00
Basic security: escaping user input
13:00
Quiz — Module 4
PHP for beginners

Never trust data sent by a user. A form field can contain malicious code. Three reflexes cover the essentials.

1. Protecting against SQL injection

Never insert a form value straight into a query. Use prepared statements (PDO): the value is treated as plain data, never as SQL code.

2. Protecting against XSS flaws

Before displaying data that was typed in, run it through htmlspecialchars(). This turns tags into harmless text and blocks script injection.

3. Validating and filtering

  • Check the expected format (does an email actually look like an email?).
  • Use filter_var() to validate or clean up.
  • Check the length and the type of the data.

Key point: prepared statements against SQL injection, htmlspecialchars() against XSS. The golden rule: never trust user input.

Précédent
Suivant

Learning often happens in classrooms
but it doesn’t have to.

+33 7 69 66 94 80
info@postdy.fr
Prix indicatifs, convertis depuis l'euro