Class ContentManagerProductContentsController
This class contains some helper methods for handling view requests. Be careful always when outputting raw user data to HTML or when handling POST requests because insufficient protection will lead to XSS and CSRF vulnerabilities.
| category |
System |
|---|---|
| package |
AdminHttpViewControllers |
__construct(\HttpContextReaderInterface $httpContextReader, \HttpResponseProcessorInterface $httpResponseProcessor, \ContentViewInterface $defaultContentView)
\HttpContextReaderInterface
\HttpResponseProcessorInterface
\ContentViewInterface
_callActionMethod(string $actionName) : \HttpControllerResponseInterface
| Throws |
|
|---|
stringName of action method to call, without 'action'-Suffix.
\HttpControllerResponseInterfaceResponse message.
_checkProductContentFileUploads() : array
array
_createNewContentGroupId(\CI_DB_query_builder $queryBuilder) : integer
\CI_DB_query_builderQuery builder instance to access the database.
integerNew content manager group id.
_getAssets() : \AssetCollection
_getCkEditorData()
_getContentType(array $queryResult) : string
arrayData sets of query for content_manager table.
stringWhether "content", "file" or "link".
_getEditData()
_getFileType( $file) : string
string
_getOverviewData() : array
array
_getPostData(string $keyName) : string|null
This method is the object oriented layer for $_POST[$keyName].
stringExpected key of post parameter.
string|nullEither the expected value or null, of not found.
_getPostDataCollection() : \KeyValueCollection
_getProductContentCustomerGroups()
_getProductContentEditData()
_getProductContentProducts()
_getProductsContentFiles() : array
arrayList with allowed script files.
_getQueryParameter(string $keyName) : mixed|null
This method is the object oriented layer for $_GET[$keyName].
stringExpected key of query parameter.
mixed|nullEither the expected value or null, of not found.
_getQueryParametersCollection() : \KeyValueCollection
_getScriptPageFiles() : array
arrayList with allowed script files.
_getServerData(string $keyName) : string|null
This method is the object oriented layer for $_SERVER[$keyName].
stringExpected key of server parameter.
string|nullEither the expected value or null, of not found.
_getTemplate(string $type, string $name) : \ExistingFile
Take a look on the template files which are located in html/content/content_manager/$type directory to know possible values for the $name argument.
stringContent manager type, whether "pages", "elements" or "product_contents".
stringName of template file.
\ExistingFile
_getUpdateResponse(string $contentManagerType, integer $contentGroupId, $editMethod = 'edit') : \RedirectHttpControllerResponse
stringName of content manager controller class.
integerContent id of last edited content.
\RedirectHttpControllerResponse
_insertContentData(\CI_DB_query_builder $queryBuilder, array $contentData) : $this|\ContentManagerPagesController
\CI_DB_query_builderQuery builder instance to access the database.
arrayContent data array.
$this|\ContentManagerPagesControllerSame instance for chained method calls.
_insertIntoProductContentDescriptionsAndResources(array $productContentDescriptionData, array $productContentResourceData, $type)
array
array
_insertIntoProductContentProducts( $productContentId, $type)
_insertIntoProductContentsAndReturnInsertId( $type)
_insertProductContentPostData( $type)
_isFilemanagerAvailable() : boolean
boolean
_prepareContentManagerGroupCheckData() : string
string
_prepareProductContentDescriptionData( $productContentId, $type)
_prepareProductContentResourceData( $type)
_render(string $templateFile, array $contentArray) : string
stringTemplate file to render.
arrayContent array which represent the variables of the template.
stringRendered template.
_setExpertMode()
_updateContentData(\CI_DB_query_builder $queryBuilder, array $contentData, integer $contentGroupId) : $this|\ContentManagerPagesController
\CI_DB_query_builderQuery builder instance to access the database.
arrayContent data array.
integerContent group id.
$this|\ContentManagerPagesControllerSame instance for chained method calls.
_updateIntoProductContentDescriptionsAndResources(array $productContentDescriptionData, array $productContentResourceData)
array
array
_updateIntoProductContentProducts( $productContentId, $type)
_updateIntoProductContentsAndReturnInsertId( $type)
_validatePageToken(string $customExceptionMessage = null)
Example: public function proceed(HttpContextInterface $httpContext) { parent::proceed($httpContext); // proceed http context from parent class if($_SERVER['REQUEST_METHOD'] === 'POST') { $this->_validatePageToken(); // CSRF Protection } }
| Throws |
|
|---|
string(optional) You can specify a custom exception message.
actionDefault() : \HttpControllerResponseInterface
Every controller child class requires at least the default action method, which is invoked when the ::_getQueryParameterData('do') value is not separated by a trailing slash.
Every action method have to return an instance which implements the http controller response interface.
\HttpControllerResponseInterface
actionEdit()
actionEditFile() : \AdminLayoutHttpControllerResponse|boolean
actionEditLink() : \AdminLayoutHttpControllerResponse|boolean
actionNew() : \AdminLayoutHttpControllerResponse|boolean
actionSaveFile() : \RedirectHttpControllerResponse
actionSaveLink() : \RedirectHttpControllerResponse
actionSaveText() : \RedirectHttpControllerResponse
actionUpdate()
getTemplateFile(string $templateFile) : \ExistingFile
| Throws |
|
|---|
stringThe relative path and filename to search for
\ExistingFilecontaining absolute file path to the given template file
init()
proceed(\HttpContextInterface $httpContext)
The action method is determined by the http context reader instance and the current request context. Re-implement this method in child classes to enable XSS and CSRF protection on demand.
| see | \HttpResponseProcessorInterface::proceed \HttpContextReaderInterface::getActionName |
|---|---|
| Throws |
|
validateCurrentAdminStatus()
| Throws |
|
|---|
userConfigurationService : \UserConfigurationService
languageTextManager : \LanguageTextManager
| var |
|---|
\LanguageTextManager
queryBuilder : \CI_DB_query_builder
| var |
|---|
\CI_DB_query_builder
descriptionFields : array
| var |
|---|
array
resourceFields : array
| var |
|---|
array
contentTypeFileFlagMap : array
| var |
|---|
array
fileTypMap : array
| var |
|---|
array
isExpertMode : boolean
| var |
|---|
boolean
httpContextReader : \HttpContextReaderInterface
httpResponseProcessor : \HttpResponseProcessorInterface
queryParametersArray : array
| var |
|---|
array
postDataArray : array
| var |
|---|
array
assets : \AssetCollectionInterface
serverDataArray : array
| var |
Server data. |
|---|
array