Class ContentManagerPagesController
This class contains some helper methods for handling view requests. Be careful always when outputting raw user data to HTML or when handling POST requests because insufficient protection will lead to XSS and CSRF vulnerabilities.
| category |
System |
|---|---|
| package |
AdminHttpViewControllers |
__construct(\HttpContextReaderInterface $httpContextReader, \HttpResponseProcessorInterface $httpResponseProcessor, \ContentViewInterface $defaultContentView)
\HttpContextReaderInterface
\HttpResponseProcessorInterface
\ContentViewInterface
_callActionMethod(string $actionName) : \HttpControllerResponseInterface
| Throws |
|
|---|
stringName of action method to call, without 'action'-Suffix.
\HttpControllerResponseInterfaceResponse message.
_checkScriptpageFileUploads() : array
array
_createNewContentGroupId(\CI_DB_query_builder $queryBuilder) : integer
\CI_DB_query_builderQuery builder instance to access the database.
integerNew content manager group id.
_getAssets() : \AssetCollection
_getContentData() : array
array
_getContentType(array $queryResult) : string
arrayData sets of query for content_manager table.
stringWhether "content", "file" or "link".
_getCreationData(string $action) : array|boolean|\KeyValueCollection
The action determines the target location after clicking the submit button.
stringShould be whether "home", "header", "footer" or "boxes".
array|boolean|\KeyValueCollection
_getEditData() : \KeyValueCollection
_getPostData(string $keyName) : string|null
This method is the object oriented layer for $_POST[$keyName].
stringExpected key of post parameter.
string|nullEither the expected value or null, of not found.
_getPostDataCollection() : \KeyValueCollection
_getProductsContentFiles() : array
arrayList with allowed script files.
_getQueryParameter(string $keyName) : mixed|null
This method is the object oriented layer for $_GET[$keyName].
stringExpected key of query parameter.
mixed|nullEither the expected value or null, of not found.
_getQueryParametersCollection() : \KeyValueCollection
_getScriptPageFiles() : array
arrayList with allowed script files.
_getServerData(string $keyName) : string|null
This method is the object oriented layer for $_SERVER[$keyName].
stringExpected key of server parameter.
string|nullEither the expected value or null, of not found.
_getTemplate(string $type, string $name) : \ExistingFile
Take a look on the template files which are located in html/content/content_manager/$type directory to know possible values for the $name argument.
stringContent manager type, whether "pages", "elements" or "product_contents".
stringName of template file.
\ExistingFile
_getUpdateResponse(string $contentManagerType, integer $contentGroupId, $editMethod = 'edit') : \RedirectHttpControllerResponse
stringName of content manager controller class.
integerContent id of last edited content.
\RedirectHttpControllerResponse
_insertContentData(\CI_DB_query_builder $queryBuilder, array $contentData) : $this|\ContentManagerPagesController
\CI_DB_query_builderQuery builder instance to access the database.
arrayContent data array.
$this|\ContentManagerPagesControllerSame instance for chained method calls.
_isFilemanagerAvailable() : boolean
boolean
_prepareContentManagerGroupCheckData() : string
string
_preparePostData(string $type) : array
stringContent manager type, whether "home", "header", "footer" or "boxes".
arrayPrepared data array for inserting or updating in database.
_render(string $templateFile, array $contentArray) : string
stringTemplate file to render.
arrayContent array which represent the variables of the template.
stringRendered template.
_setExpertMode()
_updateContentData(\CI_DB_query_builder $queryBuilder, array $contentData, integer $contentGroupId) : $this|\ContentManagerPagesController
\CI_DB_query_builderQuery builder instance to access the database.
arrayContent data array.
integerContent group id.
$this|\ContentManagerPagesControllerSame instance for chained method calls.
_validatePageToken(string $customExceptionMessage = null)
Example: public function proceed(HttpContextInterface $httpContext) { parent::proceed($httpContext); // proceed http context from parent class if($_SERVER['REQUEST_METHOD'] === 'POST') { $this->_validatePageToken(); // CSRF Protection } }
| Throws |
|
|---|
string(optional) You can specify a custom exception message.
actionCreateBoxes() : \AdminLayoutHttpControllerResponse
actionCreateHeader() : \AdminLayoutHttpControllerResponse
actionCreateHome() : \AdminLayoutHttpControllerResponse
actionCreateOthers() : \AdminLayoutHttpControllerResponse
actionCreateWithdrawal() : \AdminLayoutHttpControllerResponse
actionDefault() : \HttpControllerResponseInterface
Every controller child class requires at least the default action method, which is invoked when the ::_getQueryParameterData('do') value is not separated by a trailing slash.
Every action method have to return an instance which implements the http controller response interface.
\HttpControllerResponseInterface
actionEdit() : \AdminLayoutHttpControllerResponse
actionSaveBoxes() : \RedirectHttpControllerResponse
actionSaveHeader() : \RedirectHttpControllerResponse
actionSaveHome() : \RedirectHttpControllerResponse
actionSaveOthers() : \RedirectHttpControllerResponse
actionSaveWithdrawal() : \RedirectHttpControllerResponse
actionUpdate() : \RedirectHttpControllerResponse
getTemplateFile(string $templateFile) : \ExistingFile
| Throws |
|
|---|
stringThe relative path and filename to search for
\ExistingFilecontaining absolute file path to the given template file
init()
proceed(\HttpContextInterface $httpContext)
The action method is determined by the http context reader instance and the current request context. Re-implement this method in child classes to enable XSS and CSRF protection on demand.
| see | \HttpResponseProcessorInterface::proceed \HttpContextReaderInterface::getActionName |
|---|---|
| Throws |
|
validateCurrentAdminStatus()
| Throws |
|
|---|
userConfigurationService : \UserConfigurationService
languageTextManager : \LanguageTextManager
| var |
|---|
\LanguageTextManager
queryBuilder : \CI_DB_query_builder
| var |
|---|
\CI_DB_query_builder
fieldMap : array
| var |
|---|
array
switcherFields : array
| var |
|---|
array
typeMap : array
| var |
|---|
array
contentTypeFileFlagMap : array
| var |
|---|
array
fileTypMap : array
| var |
|---|
array
isExpertMode : boolean
| var |
|---|
boolean
httpContextReader : \HttpContextReaderInterface
httpResponseProcessor : \HttpResponseProcessorInterface
queryParametersArray : array
| var |
|---|
array
postDataArray : array
| var |
|---|
array
assets : \AssetCollectionInterface
serverDataArray : array
| var |
Server data. |
|---|
array