Web Development
Certified Web Developer
Build and deploy real full-stack applications: HTML and CSS that work, modern JavaScript, Node.js and REST APIs, databases, authentication, Docker deployment and the web security that comes with shipping to the internet.
Build things that work, then make them safe to expose
Web development taught without the security half produces applications that work perfectly on a
laptop and fall over on the internet. This course teaches both at once, in the order a real project
needs them: markup, styling, behaviour, a server, a database, authentication, deployment.
The security material is not a module at the end. It appears in the module where each decision
happens — why you parameterise the query in the database module, why you validate the upload in the
files module, why you set the cookie flags in the authentication module.
What you will be able to do
- Write semantic, accessible HTML and responsive CSS without a framework
- Build interactive interfaces with modern JavaScript, the DOM, and the fetch API
- Build a REST API with Node.js, with validation, error handling and no injection
- Model and query a relational database properly, with migrations
- Implement authentication correctly: password hashing, sessions, cookie flags, CSRF defence
- Containerise and deploy an application with TLS, environment configuration and secrets handled
properly
- Review your own application with the mindset of someone trying to break it
Assumed knowledge
None. Module 1 assumes you have never written code. You will need basic command line comfort by
module 5.
Syllabus
-
1
How the web works
HTTP, the request-response cycle, the browser security model, and what each layer does.
Locked -
2
HTML and CSS
Semantic structure, accessibility, layout, and the specific things that break.
Locked -
3
JavaScript in the browser
The DOM, events, the fetch API, modules, and where browser code goes wrong.
Locked -
4
Node.js, REST APIs and databases
Server-side JavaScript, API design, SQL, and the bugs that live in the server layer.
Locked -
5
Authentication, sessions and file uploads
Password storage, session management, MFA, OAuth, and the two areas developers get most wrong.
Locked -
6
Deployment, DevOps and taking an application to the internet
Docker, CI/CD, TLS, secrets, observability, and reviewing your own work before launch.
Locked
Final exam
Locked. Enrol in the course to unlock the final exam.