Secure Coding, Testing and Deployment for Web Applications
A practical 3-week course on shipping web applications safely: the OWASP Top 10:2025, preventing injection and broken access control, automated tests with PHPUnit, static analysis, Docker, and CI/CD with GitHub Actions. Includes a recurring certificate valid for 12 months.
Week 1 teaches secure coding through the OWASP Top 10:2025: broken access control, injection and cross-site scripting, authentication, secrets and software supply chain risks, with vulnerable and fixed PHP examples side by side. Week 2 builds an automated safety net: the testing pyramid, unit and integration tests with PHPUnit, test doubles, and static analysis with PHPStan. Week 3 covers delivery: containerising an application with Docker, a GitHub Actions pipeline that tests, analyses and deploys, and running in production with logging, alerting, graceful error handling and rollbacks.
The examples use PHP and MySQL, but the principles apply to any web stack. The course is taught by Prevail Ejimadu, a software developer and product builder who designs efficient workflows and ships production systems, and it completes the Software Engineering Professional learning path after Git and GitHub for Professional Developers and Building REST APIs with Laravel.
Recurring certificate: security threats and tooling change every year, so the certificate for this course is valid for 12 months. You will be reminded 30 days before it expires and re-enrolled at no cost to refresh your knowledge and earn a new certificate.
What You'll Learn
Recurring certificate: valid 1 year
The certificate for this course stays valid for 1 year, so employers know your knowledge is current. You are reminded 30 days before it expires, then enrolled again at no cost to refresh the course and earn a new certificate.
How recurring certification worksPart of a learning path
Take this course on its own, or get it with the other courses of the path at the bundle price.
Prerequisites
Working knowledge of PHP and SQL
Git basics (branches, commits, pull requests)
Composer installed; Docker Desktop or Docker Engine for Week 3
Building REST APIs with Laravel is recommended but not required
Course Content
9 lessonsWeek 1: Secure Coding with the OWASP Top 10:2025
The most critical web application risks and how to prevent them in code.Weekly objectives
By the end of Week 1, learners will be able to:
Name and explain the OWASP Top 10:2025 categories
Fix injection and cross-site scripting flaws
Implement access control, password storage, sessions and secrets correctly
The OWASP Top 10:2025 and Thinking Like an Attacker
50 minPreventing Injection and Cross-Site Scripting
55 minAccess Control, Authentication, Secrets and Dependencies
55 minWeek 2: Automated Testing and Code Quality
The testing pyramid, unit and integration tests with PHPUnit, test doubles, and static analysis.Weekly objectives
By the end of Week 2, learners will be able to:
Choose the right kind of test for each risk
Write unit and integration tests with PHPUnit
Use test doubles and static analysis to catch bugs early
The Testing Pyramid and Unit Tests with PHPUnit
55 minIntegration Tests, Test Doubles and Test Data
55 minStatic Analysis, Code Style and Review Checklists
45 minWeek 3: Containers, CI/CD and Running in Production
Docker, a GitHub Actions pipeline that tests, analyses and deploys, and production logging, alerting, error handling and rollback.Weekly objectives
By the end of Week 3, learners will be able to:
Containerise a PHP application with Docker Compose
Build a CI/CD pipeline with quality gates
Operate a deployment safely with monitoring and rollback
Containers with Docker and Docker Compose
55 minCI/CD with GitHub Actions
55 minRunning in Production: Logging, Alerting, Errors and Rollback
55 min
Prevail Ejimadu
Lead Instructor
About the Instructor
Prevail Ejimadu is a software developer and product builder known for creating practical, scalable digital solutions with a strong focus on real-world impact. His work spans across frontend and backend development, where he combines tools like Laravel, JavaScript frameworks, and modern APIs to build complete, production-ready systems.
He has a deep interest in automation, microservices, and building intelligent systems, from Telegram bots and SaaS platforms to blockchain-integrated applications. Rather than just writing code, Prevail focuses on solving problems, designing efficient workflows, and turning ideas into usable products.
Beyond development, he is a teacher and technical writer, committed to helping others break into tech with clarity and confidence. His approach emphasizes simplicity, practical execution, and building projects that actually work in the real world.
Prevail’s work sits at the intersection of engineering, product thinking, and innovation, which is driven by a goal to build tools, platforms, and systems that people can rely on.
No Reviews Yet
Be the first to review this course!
recurring, valid 1 year
Related Courses
You might also be interested in these courses
