Class AdminHttpViewController
Class AdminHttpViewController
This class contains some helper methods for handling view requests. Be careful always when outputting raw user data to HTML or when handling POST requests because insufficient protection will lead to XSS and CSRF vulnerabilities.
- HttpViewController implements HttpViewControllerInterface
- ┗ AdminHttpViewController implements AdminStatusOnlyInterface
Direct known subclasses
AbstractModuleCenterModuleController,
AdminAccessAjaxController,
ContentManagerPagesAjaxController,
ContentManagerPagesController,
ContentManagerProductContentsAjaxController,
ContentManagerProductContentsController,
CustomerGroupAjaxController,
CustomerGroupController,
CustomerLoginController,
DashboardController,
DynamicShopMessagesController,
EmailsController,
AdminAccessController,
EmbeddedModuleController,
FileManagerController,
GeschaeftskundenversandController,
GXModuleCenterModuleButtonActionsAjaxController,
ImageProcessingController,
InvoicesModalsAjaxController,
InvoicesOverviewAjaxController,
InvoicesOverviewController,
JSWidgetsAjaxController,
LawsController,
AdminFavoritesAjaxController,
ManufacturerAjaxController,
ManufacturerController,
MaxFileSizeController,
ModuleCenterController,
NewAttributesController,
OrdersModalsAjaxController,
OrdersOverviewAjaxController,
OrdersOverviewController,
OrderStatusAjaxController,
OrderTooltipController,
AdminInfoBoxAjaxController,
PackedDownloadController,
PayPalConfigurationController,
PersonalDataController,
QuantityUnitAjaxController,
QuantityUnitController,
QuickEditOverviewAjaxController,
QuickEditOverviewController,
QuickEditProductPropertiesAjaxController,
QuickEditSpecialPricesAjaxController,
ResponsiveFilemanagerController,
AfterbuyAjaxController,
SessionTimeoutAjaxController,
ShipcloudController,
ShippingPaymentMatrixAjaxController,
ShopKeyController,
SlidersDetailsAjaxController,
SlidersDetailsController,
SlidersOverviewAjaxController,
SlidersOverviewController,
StaticSeoUrlAjaxController,
StaticSeoUrlController,
AmazonPayConfigurationController,
TemplateConfigurationController,
UserConfigurationController,
VersionInfoController,
VPEAjaxController,
VPEController,
CatalogSelectWidgetAjaxController,
ContentManagerElementsAjaxController,
ContentManagerElementsController
Indirect known subclasses
AfterbuyModuleCenterModuleController,
BrickfoxModuleCenterModuleController,
IntrashipModuleCenterModuleController,
ItRechtModuleCenterModuleController,
JanolawModuleCenterModuleController,
LettrModuleCenterModuleController,
MagnalisterModuleCenterModuleController,
MailbeezModuleCenterModuleController,
MediafinanzModuleCenterModuleController,
NewsletterLinkModuleCenterModuleController,
ParcelshopfinderModuleCenterModuleController,
PayOneModuleCenterModuleController,
EkomiModuleCenterModuleController,
PostfinderModuleCenterModuleController,
ProductAttributesModuleCenterModuleController,
ProtectedShopsModuleCenterModuleController,
ResponsiveFileManagerModuleCenterModuleController,
SharedShoppingCartModuleCenterModuleController,
ShipcloudModuleCenterModuleController,
TrustedShopsModuleCenterModuleController,
YategoModuleCenterModuleController,
YoochooseModuleCenterModuleController,
FindologicModuleCenterModuleController,
GeschaeftskundenversandModuleCenterModuleController,
GoogleAdwordConversionModuleCenterModuleController,
GXModuleCenterModuleController,
HeidelpayModuleCenterModuleController,
HermesModuleCenterModuleController,
IloxxModuleCenterModuleController
Category: System
Link: http://en.wikipedia.org/wiki/Cross-site_scripting
Link: http://en.wikipedia.org/wiki/Cross-site_request_forgery
Implements: HttpViewControllerInterface
Located at Services/System/Http/AdminHttpViewController.inc.php
Methods summary
public
validateCurrentAdminStatus( void )
Makes sure that the admin status is currently given in session
Methods inherited from HttpViewController
__construct(),
_callActionMethod(),
_getPostData(),
_getPostDataCollection(),
_getQueryParameter(),
_getQueryParametersCollection(),
_getServerData(),
_render(),
_validatePageToken(),
actionDefault(),
getTemplateFile(),
proceed()
Properties summary
Properties inherited from HttpViewController
$assets,
$contentView,
$httpContextReader,
$httpResponseProcessor,
$postDataArray,
$queryParametersArray,
$serverDataArray