Class JSWidgetsAjaxController
This class contains some helper methods for handling view requests. Be careful always when outputting raw user data to HTML or when handling POST requests because insufficient protection will lead to XSS and CSRF vulnerabilities.
| category |
System |
|---|---|
| package |
AdminHttpViewControllers |
| extends |
AdminHttpViewController |
__construct(\HttpContextReaderInterface $httpContextReader, \HttpResponseProcessorInterface $httpResponseProcessor, \ContentViewInterface $defaultContentView)
\HttpContextReaderInterface
\HttpResponseProcessorInterface
\ContentViewInterface
_callActionMethod(string $actionName) : \HttpControllerResponseInterface
| Throws |
|
|---|
stringName of action method to call, without 'action'-Suffix.
\HttpControllerResponseInterfaceResponse message.
_getPostData(string $keyName) : string|null
This method is the object oriented layer for $_POST[$keyName].
stringExpected key of post parameter.
string|nullEither the expected value or null, of not found.
_getPostDataCollection() : \KeyValueCollection
_getQueryParameter(string $keyName) : mixed|null
This method is the object oriented layer for $_GET[$keyName].
stringExpected key of query parameter.
mixed|nullEither the expected value or null, of not found.
_getQueryParametersCollection() : \KeyValueCollection
_getServerData(string $keyName) : string|null
This method is the object oriented layer for $_SERVER[$keyName].
stringExpected key of server parameter.
string|nullEither the expected value or null, of not found.
_render(string $templateFile, array $contentArray) : string
stringTemplate file to render.
arrayContent array which represent the variables of the template.
stringRendered template.
_serializeCustomerGroup(\CustomerGroupInterface $customerGroup) : array
| TODO |
: Replace the methods with the customer group serializer, once it is finished. |
|---|
arraySerialized customer group array.
_serializeCustomerGroupCollection(\CustomerGroupCollection $customerGroupCollection) : array
| TODO |
: Replace the methods with the customer group serializer, once it is finished. |
|---|
arraySerialized customer group collection array.
_serializeCustomerGroupConfigurations(\CustomerGroupConfigurationsInterface $configurations) : array
| TODO |
: Replace the methods with the customer group serializer, once it is finished. |
|---|
\CustomerGroupConfigurationsInterfaceCustomer group configuration object to be serialized.
arraySerialized customer group configuration array.
_serializeCustomerGroupNames(array $customerGroupNames) : array
| TODO |
: Replace the methods with the customer group serializer, once it is finished. |
|---|
arrayCustomer group names array to be serialized.
arraySerialized customer group names array.
_serializeCustomerGroupSettings(\CustomerGroupSettingsInterface $settings) : array
| TODO |
: Replace the methods with the customer group serializer, once it is finished. |
|---|
arraySerialized customer group settings array.
_validatePageToken(string $customExceptionMessage = null)
Example: public function proceed(HttpContextInterface $httpContext) { parent::proceed($httpContext); // proceed http context from parent class if($_SERVER['REQUEST_METHOD'] === 'POST') { $this->_validatePageToken(); // CSRF Protection } }
| Throws |
|
|---|
string(optional) You can specify a custom exception message.
actionDefault() : \HttpControllerResponseInterface
Every controller child class requires at least the default action method, which is invoked when the ::_getQueryParameterData('do') value is not separated by a trailing slash.
Every action method have to return an instance which implements the http controller response interface.
\HttpControllerResponseInterface
actionIconInput()
actionIsGroupCheckEnabled() : \JsonHttpControllerResponse
If true, the response provide information about the existing customer groups.
\JsonHttpControllerResponse
actionResponsiveFileManagerExists() : \JsonHttpControllerResponse
getTemplateFile(string $templateFile) : \ExistingFile
| Throws |
|
|---|
stringThe relative path and filename to search for
\ExistingFilecontaining absolute file path to the given template file
proceed(\HttpContextInterface $httpContext)
The action method is determined by the http context reader instance and the current request context. Re-implement this method in child classes to enable XSS and CSRF protection on demand.
| see | \HttpContextReaderInterface::getActionName \HttpResponseProcessorInterface::proceed |
|---|---|
| Throws |
|
validateCurrentAdminStatus()
| Throws |
|
|---|
httpContextReader : \HttpContextReaderInterface
httpResponseProcessor : \HttpResponseProcessorInterface
queryParametersArray : array
| var |
|---|
array
postDataArray : array
| var |
|---|
array
assets : \AssetCollectionInterface
serverDataArray : array
| var |
Server data. |
|---|
array