当前位置： 维易PHP培训学院 > PHP学习 > 内容正文

PHP学习：YII Framework学习之request与response用法(基于CHttpRequest响应)

作者：VEPHP   时间 2017-10-07

《PHP学习：YII Framework学习之request与response用法(基于CHttpRequest响应)》要点：
本文介绍了PHP学习：YII Framework学习之request与response用法(基于CHttpRequest响应)，希望对您有用。如果有疑问，可以联系我们。

相关主题：YII框架

PHP学习本文实例讲述了YII Framework学习之request与response用法.分享给大家供大家参考,具体如下：

PHP学习YII中提供了CHttpRequest,封装了哀求常用的方法.具体代码如下：

  1. PHP学习
  2. class CHttpRequest extends CApplicationComponent
  3. {
  4.   public $enableCookieValidation=false;
  5.   public $enableCsrfValidation=false;
  6.   public $csrfTokenName='YII_CSRF_TOKEN';
  7.   public $csrfCookie;
  8.   private $_requestUri;
  9.   private $_pathInfo;
  10.   private $_scriptFile;
  11.   private $_scriptUrl;
  12.   private $_hostInfo;
  13.   private $_baseUrl;
  14.   private $_cookies;
  15.   private $_preferredLanguage;
  16.   private $_csrfToken;
  17.   private $_deleteParams;
  18.   private $_putParams;
  19.   public function init()
  20.   {
  21.     parent::init();
  22.     $this->normalizeRequest();
  23.   }
  24.   protected function normalizeRequest()
  25.   {
  26.     // normalize request
  27.     if(function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc())
  28.     {
  29.       if(isset($_GET))
  30.         $_GET=$this->stripSlashes($_GET);
  31.       if(isset($_POST))
  32.         $_POST=$this->stripSlashes($_POST);
  33.       if(isset($_REQUEST))
  34.         $_REQUEST=$this->stripSlashes($_REQUEST);
  35.       if(isset($_COOKIE))
  36.         $_COOKIE=$this->stripSlashes($_COOKIE);
  37.     }
  38.     if($this->enableCsrfValidation)
  39.       Yii::app()->attachEventHandler('onBeginRequest',array($this,'validateCsrfToken'));
  40.   }
  41.   public function stripSlashes(&$data)
  42.   {
  43.     return is_array($data)?array_map(array($this,'stripSlashes'),$data):stripslashes($data);
  44.   }
  45.   public function getParam($name,$defaultValue=null)
  46.   {
  47.     return isset($_GET[$name]) ? $_GET[$name] : (isset($_POST[$name]) ? $_POST[$name] : $defaultValue);
  48.   }
  49.   public function getQuery($name,$defaultValue=null)
  50.   {
  51.     return isset($_GET[$name]) ? $_GET[$name] : $defaultValue;
  52.   }
  53.   public function getPost($name,$defaultValue=null)
  54.   {
  55.     return isset($_POST[$name]) ? $_POST[$name] : $defaultValue;
  56.   }
  57.   public function getDelete($name,$defaultValue=null)
  58.   {
  59.     if($this->_deleteParams===null)
  60.       $this->_deleteParams=$this->getIsDeleteRequest() ? $this->getRestParams() : array();
  61.     return isset($this->_deleteParams[$name]) ? $this->_deleteParams[$name] : $defaultValue;
  62.   }
  63.   public function getPut($name,$defaultValue=null)
  64.   {
  65.     if($this->_putParams===null)
  66.       $this->_putParams=$this->getIsPutRequest() ? $this->getRestParams() : array();
  67.     return isset($this->_putParams[$name]) ? $this->_putParams[$name] : $defaultValue;
  68.   }
  69.   protected function getRestParams()
  70.   {
  71.     $result=array();
  72.     if(function_exists('mb_parse_str'))
  73.       mb_parse_str(file_get_contents('php://input'), $result);
  74.     else
  75.       parse_str(file_get_contents('php://input'), $result);
  76.     return $result;
  77.   }
  78.   public function getUrl()
  79.   {
  80.     return $this->getRequestUri();
  81.   }
  82.   public function getHostInfo($schema='')
  83.   {
  84.     if($this->_hostInfo===null)
  85.     {
  86.       if($secure=$this->getIsSecureConnection())
  87.         $http='https';
  88.       else
  89.         $http='http';
  90.       if(isset($_SERVER['HTTP_HOST']))
  91.         $this->_hostInfo=$http.'://'.$_SERVER['HTTP_HOST'];
  92.       else
  93.       {
  94.         $this->_hostInfo=$http.'://'.$_SERVER['SERVER_NAME'];
  95.         $port=$secure ? $this->getSecurePort() : $this->getPort();
  96.         if(($port!==80 && !$secure) || ($port!==443 && $secure))
  97.           $this->_hostInfo.=':'.$port;
  98.       }
  99.     }
  100.     if($schema!=='')
  101.     {
  102.       $secure=$this->getIsSecureConnection();
  103.       if($secure && $schema==='https' || !$secure && $schema==='http')
  104.         return $this->_hostInfo;
  105.       $port=$schema==='https' ? $this->getSecurePort() : $this->getPort();
  106.       if($port!==80 && $schema==='http' || $port!==443 && $schema==='https')
  107.         $port=':'.$port;
  108.       else
  109.         $port='';
  110.       $pos=strpos($this->_hostInfo,':');
  111.       return $schema.substr($this->_hostInfo,$pos,strcspn($this->_hostInfo,':',$pos+1)+1).$port;
  112.     }
  113.     else
  114.       return $this->_hostInfo;
  115.   }
  116.   public function setHostInfo($value)
  117.   {
  118.     $this->_hostInfo=rtrim($value,'/');
  119.   }
  120.   public function getBaseUrl($absolute=false)
  121.   {
  122.     if($this->_baseUrl===null)
  123.       $this->_baseUrl=rtrim(dirname($this->getScriptUrl()),'\\/');
  124.     return $absolute ? $this->getHostInfo() . $this->_baseUrl : $this->_baseUrl;
  125.   }
  126.   public function setBaseUrl($value)
  127.   {
  128.     $this->_baseUrl=$value;
  129.   }
  130.   public function getScriptUrl()
  131.   {
  132.     if($this->_scriptUrl===null)
  133.     {
  134.       $scriptName=basename($_SERVER['SCRIPT_FILENAME']);
  135.       if(basename($_SERVER['SCRIPT_NAME'])===$scriptName)
  136.         $this->_scriptUrl=$_SERVER['SCRIPT_NAME'];
  137.       else if(basename($_SERVER['PHP_SELF'])===$scriptName)
  138.         $this->_scriptUrl=$_SERVER['PHP_SELF'];
  139.       else if(isset($_SERVER['ORIG_SCRIPT_NAME']) && basename($_SERVER['ORIG_SCRIPT_NAME'])===$scriptName)
  140.         $this->_scriptUrl=$_SERVER['ORIG_SCRIPT_NAME'];
  141.       else if(($pos=strpos($_SERVER['PHP_SELF'],'/'.$scriptName))!==false)
  142.         $this->_scriptUrl=substr($_SERVER['SCRIPT_NAME'],0,$pos).'/'.$scriptName;
  143.       else if(isset($_SERVER['DOCUMENT_ROOT']) && strpos($_SERVER['SCRIPT_FILENAME'],$_SERVER['DOCUMENT_ROOT'])===0)
  144.         $this->_scriptUrl=str_replace('\\','/',str_replace($_SERVER['DOCUMENT_ROOT'],'',$_SERVER['SCRIPT_FILENAME']));
  145.       else
  146.         throw new CException(Yii::t('yii','CHttpRequest is unable to determine the entry script URL.'));
  147.     }
  148.     return $this->_scriptUrl;
  149.   }
  150.   public function setScriptUrl($value)
  151.   {
  152.     $this->_scriptUrl='/'.trim($value,'/');
  153.   }
  154.   public function getPathInfo()
  155.   {
  156.     if($this->_pathInfo===null)
  157.     {
  158.       $pathInfo=$this->getRequestUri();
  159.       if(($pos=strpos($pathInfo,'?'))!==false)
  160.         $pathInfo=substr($pathInfo,0,$pos);
  161.       $pathInfo=urldecode($pathInfo);
  162.       $scriptUrl=$this->getScriptUrl();
  163.       $baseUrl=$this->getBaseUrl();
  164.       if(strpos($pathInfo,$scriptUrl)===0)
  165.         $pathInfo=substr($pathInfo,strlen($scriptUrl));
  166.       else if($baseUrl==='' || strpos($pathInfo,$baseUrl)===0)
  167.         $pathInfo=substr($pathInfo,strlen($baseUrl));
  168.       else if(strpos($_SERVER['PHP_SELF'],$scriptUrl)===0)
  169.         $pathInfo=substr($_SERVER['PHP_SELF'],strlen($scriptUrl));
  170.       else
  171.         throw new CException(Yii::t('yii','CHttpRequest is unable to determine the path info of the request.'));
  172.       $this->_pathInfo=trim($pathInfo,'/');
  173.     }
  174.     return $this->_pathInfo;
  175.   }
  176.   public function getRequestUri()
  177.   {
  178.     if($this->_requestUri===null)
  179.     {
  180.       if(isset($_SERVER['HTTP_X_REWRITE_URL'])) // IIS
  181.         $this->_requestUri=$_SERVER['HTTP_X_REWRITE_URL'];
  182.       else if(isset($_SERVER['REQUEST_URI']))
  183.       {
  184.         $this->_requestUri=$_SERVER['REQUEST_URI'];
  185.         if(isset($_SERVER['HTTP_HOST']))
  186.         {
  187.           if(strpos($this->_requestUri,$_SERVER['HTTP_HOST'])!==false)
  188.             $this->_requestUri=preg_replace('/^\w+:\/\/[^\/]+/','',$this->_requestUri);
  189.         }
  190.         else
  191.           $this->_requestUri=preg_replace('/^(http|https):\/\/[^\/]+/i','',$this->_requestUri);
  192.       }
  193.       else if(isset($_SERVER['ORIG_PATH_INFO'])) // IIS 5.0 CGI
  194.       {
  195.         $this->_requestUri=$_SERVER['ORIG_PATH_INFO'];
  196.         if(!empty($_SERVER['QUERY_STRING']))
  197.           $this->_requestUri.='?'.$_SERVER['QUERY_STRING'];
  198.       }
  199.       else
  200.         throw new CException(Yii::t('yii','CHttpRequest is unable to determine the request URI.'));
  201.     }
  202.     return $this->_requestUri;
  203.   }
  204.   public function getQueryString()
  205.   {
  206.     return isset($_SERVER['QUERY_STRING'])?$_SERVER['QUERY_STRING']:'';
  207.   }
  208.   public function getIsSecureConnection()
  209.   {
  210.     return isset($_SERVER['HTTPS']) && !strcasecmp($_SERVER['HTTPS'],'on');
  211.   }
  212.   public function getRequestType()
  213.   {
  214.     return strtoupper(isset($_SERVER['REQUEST_METHOD'])?$_SERVER['REQUEST_METHOD']:'GET');
  215.   }
  216.   public function getIsPostRequest()
  217.   {
  218.     return isset($_SERVER['REQUEST_METHOD']) && !strcasecmp($_SERVER['REQUEST_METHOD'],'POST');
  219.   }
  220.   public function getIsDeleteRequest()
  221.   {
  222.     return isset($_SERVER['REQUEST_METHOD']) && !strcasecmp($_SERVER['REQUEST_METHOD'],'DELETE');
  223.   }
  224.   public function getIsPutRequest()
  225.   {
  226.     return isset($_SERVER['REQUEST_METHOD']) && !strcasecmp($_SERVER['REQUEST_METHOD'],'PUT');
  227.   }
  228.   public function getIsAjaxRequest()
  229.   {
  230.     return isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH']==='XMLHttpRequest';
  231.   }
  232.   public function getServerName()
  233.   {
  234.     return $_SERVER['SERVER_NAME'];
  235.   }
  236.   public function getServerPort()
  237.   {
  238.     return $_SERVER['SERVER_PORT'];
  239.   }
  240.   public function getUrlReferrer()
  241.   {
  242.     return isset($_SERVER['HTTP_REFERER'])?$_SERVER['HTTP_REFERER']:null;
  243.   }
  244.   public function getUserAgent()
  245.   {
  246.     return isset($_SERVER['HTTP_USER_AGENT'])?$_SERVER['HTTP_USER_AGENT']:null;
  247.   }
  248.   public function getUserHostAddress()
  249.   {
  250.     return isset($_SERVER['REMOTE_ADDR'])?$_SERVER['REMOTE_ADDR']:'127.0.0.1';
  251.   }
  252.   public function getUserHost()
  253.   {
  254.     return isset($_SERVER['REMOTE_HOST'])?$_SERVER['REMOTE_HOST']:null;
  255.   }
  256.   public function getScriptFile()
  257.   {
  258.     if($this->_scriptFile!==null)
  259.       return $this->_scriptFile;
  260.     else
  261.       return $this->_scriptFile=realpath($_SERVER['SCRIPT_FILENAME']);
  262.   }
  263.   public function getBrowser($userAgent=null)
  264.   {
  265.     return get_browser($userAgent,true);
  266.   }
  267.   public function getAcceptTypes()
  268.   {
  269.     return isset($_SERVER['HTTP_ACCEPT'])?$_SERVER['HTTP_ACCEPT']:null;
  270.   }
  271.   private $_port;
  272.   public function getPort()
  273.   {
  274.     if($this->_port===null)
  275.       $this->_port=!$this->getIsSecureConnection() && isset($_SERVER['SERVER_PORT']) ? (int)$_SERVER['SERVER_PORT'] : 80;
  276.     return $this->_port;
  277.   }
  278.   public function setPort($value)
  279.   {
  280.     $this->_port=(int)$value;
  281.     $this->_hostInfo=null;
  282.   }
  283.   private $_securePort;
  284.   public function getSecurePort()
  285.   {
  286.     if($this->_securePort===null)
  287.       $this->_securePort=$this->getIsSecureConnection() && isset($_SERVER['SERVER_PORT']) ? (int)$_SERVER['SERVER_PORT'] : 443;
  288.     return $this->_securePort;
  289.   }
  290.   public function setSecurePort($value)
  291.   {
  292.     $this->_securePort=(int)$value;
  293.     $this->_hostInfo=null;
  294.   }
  295.   public function getCookies()
  296.   {
  297.     if($this->_cookies!==null)
  298.       return $this->_cookies;
  299.     else
  300.       return $this->_cookies=new CCookieCollection($this);
  301.   }
  302.   public function redirect($url,$terminate=true,$statusCode=302)
  303.   {
  304.     if(strpos($url,'/')===0)
  305.       $url=$this->getHostInfo().$url;
  306.     header('Location: '.$url, true, $statusCode);
  307.     if($terminate)
  308.       Yii::app()->end();
  309.   }
  310.   public function getPreferredLanguage()
  311.   {
  312.     if($this->_preferredLanguage===null)
  313.     {
  314.       if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE']) && ($n=preg_match_all('/([\w\-_]+)\s*(;\s*q\s*=\s*(\d*\.\d*))?/',$_SERVER['HTTP_ACCEPT_LANGUAGE'],$matches))>0)
  315.       {
  316.         $languages=array();
  317.         for($i=0;$i<$n;++$i)
  318.           $languages[$matches[1][$i]]=empty($matches[3][$i]) ? 1.0 : floatval($matches[3][$i]);
  319.         arsort($languages);
  320.         foreach($languages as $language=>$pref)
  321.           return $this->_preferredLanguage=CLocale::getCanonicalID($language);
  322.       }
  323.       return $this->_preferredLanguage=false;
  324.     }
  325.     return $this->_preferredLanguage;
  326.   }
  327.   public function sendFile($fileName,$content,$mimeType=null,$terminate=true)
  328.   {
  329.     if($mimeType===null)
  330.     {
  331.       if(($mimeType=CFileHelper::getMimeTypeByExtension($fileName))===null)
  332.         $mimeType='text/plain';
  333.     }
  334.     header('Pragma: public');
  335.     header('Expires: 0');
  336.     header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
  337.     header("Content-type: $mimeType");
  338.     if(ini_get("output_handler")=='')
  339.       header('Content-Length: '.(function_exists('mb_strlen') ? mb_strlen($content,'8bit') : strlen($content)));
  340.     header("Content-Disposition: attachment; filename=\"$fileName\"");
  341.     header('Content-Transfer-Encoding: binary');
  342.     if($terminate)
  343.     {
  344.       // clean up the application first because the file downloading could take long time
  345.       // which may cause timeout of some resources (such as DB connection)
  346.       Yii::app()->end(0,false);
  347.       echo $content;
  348.       exit(0);
  349.     }
  350.     else
  351.       echo $content;
  352.   }
  353.   public function xSendFile($filePath, $options=array())
  354.   {
  355.     if(!is_file($filePath))
  356.       return false;
  357.     if(!isset($options['saveName']))
  358.       $options['saveName']=basename($filePath);
  359.     if(!isset($options['mimeType']))
  360.     {
  361.       if(($options['mimeType']=CFileHelper::getMimeTypeByExtension($filePath))===null)
  362.         $options['mimeType']='text/plain';
  363.     }
  364.     if(!isset($options['xHeader']))
  365.       $options['xHeader']='X-Sendfile';
  366.     header('Content-type: '.$options['mimeType']);
  367.     header('Content-Disposition: attachment; filename="'.$options['saveName'].'"');
  368.     header(trim($options['xHeader']).': '.$filePath);
  369.     if(!isset($options['terminate']) || $options['terminate'])
  370.       Yii::app()->end();
  371.     return true;
  372.   }
  373.   public function getCsrfToken()
  374.   {
  375.     if($this->_csrfToken===null)
  376.     {
  377.       $cookie=$this->getCookies()->itemAt($this->csrfTokenName);
  378.       if(!$cookie || ($this->_csrfToken=$cookie->value)==null)
  379.       {
  380.         $cookie=$this->createCsrfCookie();
  381.         $this->_csrfToken=$cookie->value;
  382.         $this->getCookies()->add($cookie->name,$cookie);
  383.       }
  384.     }
  385.     return $this->_csrfToken;
  386.   }
  387.   protected function createCsrfCookie()
  388.   {
  389.     $cookie=new CHttpCookie($this->csrfTokenName,sha1(uniqid(mt_rand(),true)));
  390.     if(is_array($this->csrfCookie))
  391.     {
  392.       foreach($this->csrfCookie as $name=>$value)
  393.         $cookie->$name=$value;
  394.     }
  395.     return $cookie;
  396.   }
  397.   public function validateCsrfToken($event)
  398.   {
  399.     if($this->getIsPostRequest())
  400.     {
  401.       // only validate POST requests
  402.       $cookies=$this->getCookies();
  403.       if($cookies->contains($this->csrfTokenName) && isset($_POST[$this->csrfTokenName]))
  404.       {
  405.         $tokenFromCookie=$cookies->itemAt($this->csrfTokenName)->value;
  406.         $tokenFromPost=$_POST[$this->csrfTokenName];
  407.         $valid=$tokenFromCookie===$tokenFromPost;
  408.       }
  409.       else
  410.         $valid=false;
  411.       if(!$valid)
  412.         throw new CHttpException(400,Yii::t('yii','The CSRF token could not be verified.'));
  413.     }
  414.   }
  415. }

PHP学习request操作的相关办法,一目了然.

  1. PHP学习
  2. public function init()
  3. {
  4.   parent::init();
  5.   $this->normalizeRequest();
  6. }
  7. protected function normalizeRequest()
  8. {
  9.   // normalize request
  10.   if(function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc())
  11.   {
  12.     if(isset($_GET))
  13.       $_GET=$this->stripSlashes($_GET);
  14.     if(isset($_POST))
  15.       $_POST=$this->stripSlashes($_POST);
  16.     if(isset($_REQUEST))
  17.       $_REQUEST=$this->stripSlashes($_REQUEST);
  18.     if(isset($_COOKIE))
  19.       $_COOKIE=$this->stripSlashes($_COOKIE);
  20.   }
  21.   if($this->enableCsrfValidation)
  22.     Yii::app()->attachEventHandler('onBeginRequest',array($this,'validateCsrfToken'));
  23. }
  24. public function stripSlashes(&$data)
  25. {
  26.   return is_array($data)?array_map(array($this,'stripSlashes'),$data):stripslashes($data);
  27. }

PHP学习可以看到yii对$_GET\$_POST\$_REQUEST\$_COOKIE进行了必要的过滤处理,所以可以放心的使用数据.

PHP学习常用的有如下办法：

PHP学习获取get参数

  1. PHP学习
  2. public function getParam($name,$defaultValue=null)

PHP学习获取get参数

  1. PHP学习
  2. public function getQuery($name,$defaultValue=null)

PHP学习获取post数据

  1. PHP学习
  2. public function getPost($name,$defaultValue=null)

PHP学习获取哀求的url

  1. PHP学习
  2. public function getUrl()

PHP学习获取主机信息

  1. PHP学习
  2. public function getHostInfo($schema='')

PHP学习设置

  1. PHP学习
  2. public function setHostInfo($value)

PHP学习获取根目录

  1. PHP学习
  2. public function getBaseUrl($absolute=false)

PHP学习获取当前url

  1. PHP学习
  2. public function getScriptUrl()

PHP学习获取哀求的url

  1. PHP学习
  2. public function getRequestUri()

PHP学习获取querystring

  1. PHP学习
  2. public function getQueryString()

PHP学习判断是否是https

  1. PHP学习
  2. public function getIsSecureConnection()

PHP学习获取哀求类型

  1. PHP学习
  2. public function getRequestType()

PHP学习是否是post哀求

  1. PHP学习
  2. public function getIsPostRequest()

PHP学习是否是ajax哀求

  1. PHP学习
  2. public function getIsAjaxRequest()

PHP学习获取服务器名称

  1. PHP学习
  2. public function getServerName()

PHP学习获取服务端口

  1. PHP学习
  2. public function getServerPort()

PHP学习获取引用路径

  1. PHP学习
  2. public function getUrlReferrer()

PHP学习获取用户ip地址

  1. PHP学习
  2. public function getUserHostAddress()

PHP学习获取用户主机名称

  1. PHP学习
  2. public function getUserHost()

PHP学习获取执行脚本名称

  1. PHP学习
  2. public function getScriptFile()

PHP学习获取cookie

  1. PHP学习
  2. public function getCookies()

PHP学习重定向

  1. PHP学习
  2. public function redirect($url,$terminate=true,$statusCode=302)

PHP学习设置下载文件头

  1. PHP学习
  2. public function sendFile($fileName,$content,$mimeType=null,$terminate=true)
  3. {
  4. if($mimeType===null)
  5. {
  6. if(($mimeType=CFileHelper::getMimeTypeByExtension($fileName))===null)
  7. $mimeType='text/plain';
  8. }
  9. header('Pragma: public');
  10. header('Expires: 0');
  11. header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
  12. header("Content-type: $mimeType");
  13. if(ini_get("output_handler")=='')
  14. header('Content-Length: '.(function_exists('mb_strlen') ? mb_strlen($content,'8bit') : strlen($content)));
  15. header("Content-Disposition: attachment; filename=\"$fileName\"");
  16. header('Content-Transfer-Encoding: binary');
  17. if($terminate)
  18. {
  19. // clean up the application first because the file downloading could take long time
  20. // which may cause timeout of some resources (such as DB connection)
  21. Yii::app()->end(0,false);
  22. echo $content;
  23. exit(0);
  24. }
  25. else
  26. echo $content;
  27. }
  28. public function xSendFile($filePath, $options=array())
  29. {
  30. if(!is_file($filePath))
  31. return false;
  32. if(!isset($options['saveName']))
  33. $options['saveName']=basename($filePath);
  34. if(!isset($options['mimeType']))
  35. {
  36. if(($options['mimeType']=CFileHelper::getMimeTypeByExtension($filePath))===null)
  37. $options['mimeType']='text/plain';
  38. }
  39. if(!isset($options['xHeader']))
  40. $options['xHeader']='X-Sendfile';
  41. header('Content-type: '.$options['mimeType']);
  42. header('Content-Disposition: attachment; filename="'.$options['saveName'].'"');
  43. header(trim($options['xHeader']).': '.$filePath);
  44. if(!isset($options['terminate']) || $options['terminate'])
  45. Yii::app()->end();
  46. return true;
  47. }

PHP学习为了防止csrf,yii提供了相应的方法
(
CSRF(Cross-site request forgery),中文名称：跨站哀求伪造,也被称为：one click attack/session riding,缩写为：CSRF/XSRF.
《CSRF的攻击方式详解 黑客必备知识》
)

  1. PHP学习
  2. public function getCsrfToken()
  3. {
  4. if($this->_csrfToken===null)
  5. {
  6. $cookie=$this->getCookies()->itemAt($this->csrfTokenName);
  7. if(!$cookie || ($this->_csrfToken=$cookie->value)==null)
  8. {
  9. $cookie=$this->createCsrfCookie();
  10. $this->_csrfToken=$cookie->value;
  11. $this->getCookies()->add($cookie->name,$cookie);
  12. }
  13. }
  14. return $this->_csrfToken;
  15. }
  16. protected function createCsrfCookie()
  17. {
  18. $cookie=new CHttpCookie($this->csrfTokenName,sha1(uniqid(mt_rand(),true)));
  19. if(is_array($this->csrfCookie))
  20. {
  21. foreach($this->csrfCookie as $name=>$value)
  22. $cookie->$name=$value;
  23. }
  24. return $cookie;
  25. }
  26. public function validateCsrfToken($event)
  27. {
  28. if($this->getIsPostRequest())
  29. {
  30. // only validate POST requests
  31. $cookies=$this->getCookies();
  32. if($cookies->contains($this->csrfTokenName) && isset($_POST[$this->csrfTokenName]))
  33. {
  34. $tokenFromCookie=$cookies->itemAt($this->csrfTokenName)->value;
  35. $tokenFromPost=$_POST[$this->csrfTokenName];
  36. $valid=$tokenFromCookie===$tokenFromPost;
  37. }
  38. else
  39. $valid=false;
  40. if(!$valid)
  41. throw new CHttpException(400,Yii::t('yii','The CSRF token could not be verified.'));
  42. }
  43. }

PHP学习对于$_GET的使用,不仅仅可以使用$_GET和以上提供的相关办法,在action中,可以绑定到action的办法参数.

PHP学习http://www.yiiframework.com/doc/guide/1.1/zh_cn/basics.controller

PHP学习这里就一并罗列官方给出的说明.

PHP学习从版本 1.1.4 开始,Yii 提供了对自动动作参数绑定的支持. 就是说,控制器动作可以定义命名的参数,参数的值将由 Yii 自动从 $_GET 填充.

PHP学习为了详细说明此功能,假设我们需要为 PostController 写一个 create 动作.此动作需要两个参数：

PHP学习category: 一个整数,代表帖子(post)要颁发在的那个分类的ID.
language: 一个字符串,代表帖子所使用的语言代码.
从 $_GET 中提取参数时,我们可以不再下面这种无聊的代码了：

  1. PHP学习
  2. class PostController extends CController
  3. {
  4.   public function actionCreate()
  5.   {
  6.     if(isset($_GET['category']))
  7.       $category=(int)$_GET['category'];
  8.     else
  9.       throw new CHttpException(404,'invalid request');
  10.     if(isset($_GET['language']))
  11.       $language=$_GET['language'];
  12.     else
  13.       $language='en';
  14.     // ... fun code starts here ...
  15.   }
  16. }

PHP学习现在使用动作参数功能,我们可以更轻松的完成任务：

  1. PHP学习
  2. class PostController extends CController
  3. {
  4.   public function actionCreate($category, $language='en')
  5.   {
  6.     $category=(int)$category;
  7.     // ... fun code starts here ...
  8.   }
  9. }

PHP学习注意我们在动作方法 actionCreate 中添加了两个参数. 这些参数的名字必须和我们想要从 $_GET 中提取的名字一致. 当用户没有在哀求中指定 $language 参数时,这个参数会使用默认值 en . 由于 $category 没有默认值,如果用户没有在 $_GET 中提供 category 参数, 将会自动抛出一个 CHttpException (错误代码 400) 异常. Starting from version 1.1.5, Yii also supports array type detection for action parameters. This is done by PHP type hinting using the syntax like the following:

  1. PHP学习
  2. class PostController extends CController
  3. {
  4.   public function actionCreate(array $categories)
  5.   {
  6.     // Yii will make sure $categories be an array
  7.   }
  8. }

PHP学习That is, we add the keyword array in front of $categories in the method parameter declaration. By doing so, if $_GET['categories'] is a simple string, it will be converted into an array consisting of that string.

PHP学习Note: If a parameter is declared without the array type hint, it means the parameter must be a scalar (i.e., not an array). In this case, passing in an array parameter via $_GET would cause an HTTP exception.

PHP学习request的使用你只要保持和以前在php中的使用方式一样,在yii中是不会出错的

PHP学习更多关于Yii相关内容感兴趣的读者可查看本站专题：《Yii框架入门及常用技巧总结》、《php优秀开发框架总结》、《smarty模板入门基础教程》、《php日期与时间用法总结》、《php面向对象程序设计入门教程》、《php字符串(string)用法总结》、《php+mysql数据库操作入门教程》及《php常见数据库操作技巧汇总》

PHP学习希望本文所述对大家基于Yii框架的PHP程序设计有所赞助.

欢迎参与《PHP学习：YII Framework学习之request与response用法(基于CHttpRequest响应)》讨论，分享您的想法，维易PHP学院为您提供专业教程。

转载请注明本页网址：
http://www.vephp.com/jiaocheng/7010.html


    标签：  




同类教程排行


特辑教程