SymfonyCon
From to , I will be in Amsterdam at SymfonyCon. There I will give the presentation "Testing with(out) dependencies".
Every security vulnerability in your PHP application stems from a missing test. This presentation challenges the traditional separation between security and testing, demonstrating that comprehensive PHPUnit test coverage is your most effective first line of defence against common security weaknesses.
Using the Common Weakness Enumeration (CWE) list, a comprehensive catalogue of software security flaws, as a reference, this presentation will explore the most critical weaknesses affecting PHP applications. These include SQL injection (CWE-89), cross-site scripting (CWE-79) and command injection (CWE-78), as well as other prevalent vulnerabilities. You will learn to recognise attack vectors and, most importantly, how to write PHPUnit tests that would have prevented vulnerabilities from reaching production.
This presentation currently exists only as an idea and has not yet been accepted by a conference.
My name is Sebastian Bergmann and I am the creator of PHPUnit, the industry-standard testing framework that has greatly improved the professionalism of PHP software development.
As founding partner of and consultant with The PHP Consulting Company (thePHP.cc), I assist teams in adopting PHPUnit, optimizing its use, refining development workflows, and writing more testable code.
More events where you can meet me are listed here.
My interactive online training courses are designed to provide you with practical knowledge that you can apply immediately. The next ones starting soon are listed here.
From to , I will be in Amsterdam at SymfonyCon. There I will give the presentation "Testing with(out) dependencies".
You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.
You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.