|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/create-a-calendar-booking-system-in-php-and-mysql/
课程评论:没有评论
**课程名称:** 使用 PHP 和 MySQL 创建日历预订系统 **课程概述:** 本课程将从零开始教授您如何构建一个功能完善的日历预订系统。您将学习如何创建日历界面、使用 CSS 进行样式设计、设置 MySQL 数据库、以及实现用户预订、编辑和删除日历条目的功能。 课程重点关注应用程序的安全性,将介绍以下关键安全实践: * **表单数据处理:** 如何对表单数据进行清理和验证,确保输入的有效性和安全性。 * **数据库交互:** 使用预处理语句(Prepared Statements)来防范 SQL 注入攻击。 * **防止跨站脚本攻击 (XSS):** 通过实现内容安全策略 (Content Security Policy, CSP) 来保护应用程序免受 XSS 攻击。 * **其他安全措施:** 讲解如何通过设置各种 HTTP 头部来保护应用程序免受恶意使用,并实施跨站请求伪造 (CSRF) 防护。 * **验证码生成:** 创建自定义验证码以防止机器人滥用。 本课程不依赖于任何第三方框架(如 fullCalendar 或 Google Calendar)。课程内容讲解详尽,适合初学者和有一定 PHP 经验并希望提升 Web 安全技能的学习者。每节课都提供源代码。
Hi and welcome,Thanks for taking the time to browse this section.What will we be doing in this course?We will be creating a simple calendar from scratch where we will allow users to make booking entries into it and interacting with the database. Users can then edit and delete bookings.We're also securing the application.We're not using any frameworks such as fullCalendar or Google calendar.Whether you have some PHP experience and wish to improve your Web Security skills then this course may suit you.- Creating the calendar- Styling the calendar using CSS- Setting up the MySQL database- Insert a calendar entry(booking) into the calendar- Sanitize and validate the forms in our application- Display and style the current date- Displaying booking information from the database- Delete and edit a calendar entry- Creating our own captcha to the form to protect from bots- Using prepared statements to prepare against SQL injection attacks- Implement a Content Security Policy to protect the application against XSS attacks- Implement various headers to protect the application from malicious use- Implement Cross-Site Request Forgery(CSFR)Lectures are explained in great detail so to cater for a wide audience(beginners and intermediate).Source code included in each lecture.