(According to their own learning experience, the lecturer designed a course "PHP code audit practice" suitable for the introduction of code audit. The first and second chapters of this course systematically explain some basic knowledge of code audit: preparation of code audit environment, general steps of code audit, security configuration of INI file, some common dangerous functions, common types of Web vulnerabilities, and mastering the use of relevant audit tools. The third chapter focuses on the code audit process of common web vulnerability types.)