Class ContentManagerPagesController
This class contains some helper methods for handling view requests. Be careful always when outputting raw user data to HTML or when handling POST requests because insufficient protection will lead to XSS and CSRF vulnerabilities.
category |
System |
---|---|
package |
AdminHttpViewControllers |
__construct(\HttpContextReaderInterface $httpContextReader, \HttpResponseProcessorInterface $httpResponseProcessor, \ContentViewInterface $defaultContentView)
\HttpContextReaderInterface
\HttpResponseProcessorInterface
\ContentViewInterface
_callActionMethod(string $actionName) : \HttpControllerResponseInterface
Throws |
|
---|
string
Name of action method to call, without 'action'-Suffix.
\HttpControllerResponseInterface
Response message.
_checkScriptpageFileUploads() : array
array
_createNewContentGroupId(\CI_DB_query_builder $queryBuilder) : integer
\CI_DB_query_builder
Query builder instance to access the database.
integer
New content manager group id.
_getAssets() : \AssetCollection
_getContentData() : array
array
_getContentType(array $queryResult) : string
array
Data sets of query for content_manager table.
string
Whether "content", "file" or "link".
_getCreationData(string $action) : array|boolean|\KeyValueCollection
The action determines the target location after clicking the submit button.
string
Should be whether "home", "header", "footer" or "boxes".
array|boolean|\KeyValueCollection
_getEditData() : \KeyValueCollection
_getPostData(string $keyName) : string|null
This method is the object oriented layer for $_POST[$keyName].
string
Expected key of post parameter.
string|null
Either the expected value or null, of not found.
_getPostDataCollection() : \KeyValueCollection
_getProductsContentFiles() : array
array
List with allowed script files.
_getQueryParameter(string $keyName) : mixed|null
This method is the object oriented layer for $_GET[$keyName].
string
Expected key of query parameter.
mixed|null
Either the expected value or null, of not found.
_getQueryParametersCollection() : \KeyValueCollection
_getScriptPageFiles() : array
array
List with allowed script files.
_getServerData(string $keyName) : string|null
This method is the object oriented layer for $_SERVER[$keyName].
string
Expected key of server parameter.
string|null
Either the expected value or null, of not found.
_getTemplate(string $type, string $name) : \ExistingFile
Take a look on the template files which are located in html/content/content_manager/$type directory to know possible values for the $name argument.
string
Content manager type, whether "pages", "elements" or "product_contents".
string
Name of template file.
\ExistingFile
_getUpdateResponse(string $contentManagerType, integer $contentGroupId, $editMethod = 'edit') : \RedirectHttpControllerResponse
string
Name of content manager controller class.
integer
Content id of last edited content.
\RedirectHttpControllerResponse
_insertContentData(\CI_DB_query_builder $queryBuilder, array $contentData) : $this|\ContentManagerPagesController
\CI_DB_query_builder
Query builder instance to access the database.
array
Content data array.
$this|\ContentManagerPagesController
Same instance for chained method calls.
_isFilemanagerAvailable() : boolean
boolean
_prepareContentManagerGroupCheckData() : string
string
_preparePostData(string $type) : array
string
Content manager type, whether "home", "header", "footer" or "boxes".
array
Prepared data array for inserting or updating in database.
_render(string $templateFile, array $contentArray) : string
string
Template file to render.
array
Content array which represent the variables of the template.
string
Rendered template.
_setExpertMode()
_updateContentData(\CI_DB_query_builder $queryBuilder, array $contentData, integer $contentGroupId) : $this|\ContentManagerPagesController
\CI_DB_query_builder
Query builder instance to access the database.
array
Content data array.
integer
Content group id.
$this|\ContentManagerPagesController
Same instance for chained method calls.
_validatePageToken(string $customExceptionMessage = null)
Example: public function proceed(HttpContextInterface $httpContext) { parent::proceed($httpContext); // proceed http context from parent class if($_SERVER['REQUEST_METHOD'] === 'POST') { $this->_validatePageToken(); // CSRF Protection } }
Throws |
|
---|
string
(optional) You can specify a custom exception message.
actionCreateBoxes() : \AdminLayoutHttpControllerResponse
actionCreateHeader() : \AdminLayoutHttpControllerResponse
actionCreateHome() : \AdminLayoutHttpControllerResponse
actionCreateOthers() : \AdminLayoutHttpControllerResponse
actionCreateWithdrawal() : \AdminLayoutHttpControllerResponse
actionDefault() : \HttpControllerResponseInterface
Every controller child class requires at least the default action method, which is invoked when the ::_getQueryParameterData('do') value is not separated by a trailing slash.
Every action method have to return an instance which implements the http controller response interface.
\HttpControllerResponseInterface
actionEdit() : \AdminLayoutHttpControllerResponse
actionSaveBoxes() : \RedirectHttpControllerResponse
actionSaveHeader() : \RedirectHttpControllerResponse
actionSaveHome() : \RedirectHttpControllerResponse
actionSaveOthers() : \RedirectHttpControllerResponse
actionSaveWithdrawal() : \RedirectHttpControllerResponse
actionUpdate() : \RedirectHttpControllerResponse
getTemplateFile(string $templateFile) : \ExistingFile
Throws |
|
---|
string
The relative path and filename to search for
\ExistingFile
containing absolute file path to the given template file
init()
proceed(\HttpContextInterface $httpContext)
The action method is determined by the http context reader instance and the current request context. Re-implement this method in child classes to enable XSS and CSRF protection on demand.
see | \HttpResponseProcessorInterface::proceed \HttpContextReaderInterface::getActionName |
---|---|
Throws |
|
validateCurrentAdminStatus()
Throws |
|
---|
userConfigurationService : \UserConfigurationService
languageTextManager : \LanguageTextManager
var |
---|
\LanguageTextManager
queryBuilder : \CI_DB_query_builder
var |
---|
\CI_DB_query_builder
fieldMap : array
var |
---|
array
switcherFields : array
var |
---|
array
typeMap : array
var |
---|
array
contentTypeFileFlagMap : array
var |
---|
array
fileTypMap : array
var |
---|
array
isExpertMode : boolean
var |
---|
boolean
httpContextReader : \HttpContextReaderInterface
httpResponseProcessor : \HttpResponseProcessorInterface
queryParametersArray : array
var |
---|
array
postDataArray : array
var |
---|
array
assets : \AssetCollectionInterface
serverDataArray : array
var |
Server data. |
---|
array