Go beyond the documentation and explore some of what's possible if you stretch symfony to its limits. We will look at a number of aspects of symfony 1.4 and Doctrine 1.2 and tease out some powerful functionality you may not have expected to find, but will doubtless be able to use. Topics covered will include routing, forms, the config cache and record listeners. If you're comfortable in symfony and wondering what's next, this session is for you.

1. Advanced symfony Techniques
Kris Wallsmith

2. @kriswallsmith
• Release Manager for symfony 1.3 & 1.4
• On Symfony and Doctrine teams
• Senior Software Engineer at
• 10 years experience with PHP and web development
• Open source evangelist and international speaker
• Hopeless plugin developer…

3. • DbFinderPlugin • sfPropelActAsPolymorphicBehaviorPlugin
• sfControlPanelPlugin • sfSimpleBlogPlugin
• sfDoctrineDynamicFormRelationsPlugin • sfSimpleCMSPlugin
• sfDoctrineMasterSlavePlugin • sfSimpleForumPlugin
• sfFeed2Plugin • sfSpyPlugin
• sfFormYamlEnhancementsPlugin • sfSslRequirementPlugin
• sfGoogleAnalyticsPlugin • sfStatsPlugin
• sfGoogleWebsiteOptimizerPlugin • sfTaskExtraPlugin
• sfModerationPlugin • sfWebBrowserPlugin
• sfPagerNavigationPlugin

4. Please see me if you want to
help with or take over
a plugin's maintenance.
Lots to choose from!

5. #phpmatsuri
October 2-3, 2010
Tokyo

6. #phpmatsuri
• Around 90 attendees
• CakePHP, Symfony, & Lithium
were represented
• Most folks were CakePHP users
• CakePHP documentation was
translated early, so…
• Please help translate Symfony2 &
Doctrine2 documentation!

8. CAUTION
PSEUDO CODE
AHEAD

9. Host Aware Routing

10. domain.com

11. foobar.domain.com

12. barfoo.domain.com

13. homepage:
url: /
param: { module: main, action: indexOrDash }

14. homepage:
url: /
param: { module: main, action: indexOrDash }
if (preg_match('/.../', $r->getHost(), $m))

15. class sfRoute
• ->matchesUrl(...)
Does the supplied URL match this route?
GET / HTTP/1.0
Host: foobar.domain.com

16. class sfRoute
Ver y slow
• ->matchesUrl(...)
url_for('main/dashboard?username=foobar')
Does the supplied URL match this route?
• ->matchesParameters(...)
Do the supplied parameters match this route?

17. class sfRoute
• ->matchesUrl(...)
Does the supplied URL match this route?
• ->matchesParameters(...)
url_for('@dashboard?username=foobar')
Do the supplied parameters match this route?
• ->generate(...)
Generate a URL using this route and these parameters.

18. ->matchesUrl(...)
• $url
The current URI
• $context
An array of contextual information, including the current host
• Returns false or an array of parameters extracted from the URI

19. ->matchesParameters(...)
• $params
An associative array of parameter names and values
• $context
An array of contextual information, including the current host
• Returns true or false

20. ->generate(...)
• $params
An associative array of parameter names and values
• $context
An array of contextual information, including the current host
• $absolute
Whether to generate an absolute URL
• Returns the generated URL

21. Process the host string with a
second, internal route

22. public function __construct(...)
{
list($host, $pattern) = explode('/', $pattern, 2);
$hostRoute = $this->createHostRoute($host, ...);
parent::__construct(...);
}

23. public function matchesUrl($url, $c)
{
// check parent::matchesUrl() first
$hp = $hostRoute->matchesUrl('/'.$c['host'], $c);
// include host parameters in return
}

24. public function matchesParameters($p, $c)
{
$hp = $this->extractHostParams($p);
return
parent::matchesParameters($p, $c)
&&
$hostRoute->matchesParameters($hp, $c);
}

25. public function generate($p, $c, $abs)
{
$hp = $this->extractHostParams($p);
// protocol, prefix...
$host = $hostRoute->generate($hp, $c, false);
$uri = parent::generate($p, $c, false);
return $protocol.':/'.$host.$prefix.$uri;
}

26. homepage:
url: /
param: { module: main, action: indexOrDash }

27. Hard
co d
homepage: e
d F
TL
url: domain.com/ :(
class: sfHostAwareRoute
param: { module: main, action: index }
dashboard:
url: :username.domain.com/
class: sfHostAwareRoute
param: { module: main, action: dashboard }

28. homepage:
url: %APP_HOST%/
class: sfHostAwareRoute
param: { module: main, action: index }
dashboard:
url: :username.%APP_HOST%/
class: sfHostAwareRoute
param: { module: main, action: dashboard }

29. Custom Config Handler

30. class sfHostAwareRoutingConfigHandler
extends sfRoutingConfigHandler
{
protected function parse($configFiles)
{
return array_map(
array($this, 'filterRoute'),
parent::parse($configFiles)
);
}
// ...
}

31. FTW!
Free
protected function filterRoute($route)
{
list($class, $args) = $route;
$args[0] = $this->replaceConstants($args[0]);
return array($class, $args);
}

32. # config_handlers.yml
config/routing.yml:
class: sfHostAwareRoutingConfigHandler
file: %SF_LIB_DIR%/sfHostAwareRout...

33. sfHostAwareRoutingPlugin
Add subdomains to your routing rules.

34. Graceful POST Authentication

35. An example…

38. CENSORED
CENSORED

40. W here's my
blog pos t!?
!
AIL
F

41. Extend the security filter

42. class GracefulSecurityFilter
extends sfBasicSecurityFilter
{
protected function forwardToLoginAction()
{
// stash the interrupted request
$attr->add(array(
'module' => $context->getActionName(),
'action' => $context->getModuleName(),
'method' => $request->getMethod(),
'params' => $requestParams->getAll(),
), 'stash');
parent::forwardToLoginAction();
}
}

43. # filters.yml
security:
class: GracefulSecurityFilter

44. Replay the stashed request
after login

45. // called after authentication
protected function replayStashedRequest()
{
if ($s = $attr->removeNamespace('stash'))
{
$request->setMethod($s['method']);
$params->clear();
$params->add($s['params']);
$this->forward($s['module'], $s['action']);
}
}

46. Extra Security

47. An example…

50. # security.yml
acceptInvitation:
is_secure: true
extra_credentials:
account: { lifetime: 300 }

51. Events to the rescue!

52. controller.change_action

53. // connect to the event
$ed->connect('controller.change_action', $cb)

54. // check security.yml
$action->getSecurityValue('extra_credentials')

55. // check current user
$u->getAttribute('extra_credentials', array())

56. // remove any expired credentials
$now = time();
foreach ($creds as $name => $attr)
{
if ($now > $attr['expires_at'])
{
unset($creds[$name]);
}
}

57. // stash credentials and referer
$u->setAttribute('challenge_credentials', ...)
$u->setAttribute('challenge_referer', ...)

58. // forward to challenge form
$controller->forward('security', 'challenge')
throw new sfStopException();

59. // add the granted credentials
$now = time();
foreach ($new as $name => $attr)
{
$creds[$name] = array(
'expires_at' => $now + $attr['lifetime'],
);
}
$u->setAttribute('extra_credentials', $creds);

60. // send them on their way
$this->redirect($referer);

61. sfExtraSecurityPlugin
Re-prompt your users for authentication.

62. Javascript Compression

63. <script src="http://domain.com/widget.js"></script>

64. class jsActions extends sfActions
{
public function executeWidget(sfWebRequest $req)
{
$this->lightbox = $req->hasParameter('lb');
$this->debug = $req->hasParameter('debug');
}
}

65. <?php if ($debug): ?>
console.log("embedding mootools");
<?php endif; ?>
var e = document.createElement("script");
e.src = "<?php echo public_path('js/moo.js', true) ?>";
e.async = true;
document.body.appendChild(e);
// etc...

66. Custom View Class

67. # module.yml
all:
view_class: Javascript
JavascriptView

68. class JavascriptView extends sfPHPView
{
public function render()
{
return $this->compress(parent::render());
}
protected function compress()
{
// ...
}
}

69. $i = tempnam(sys_get_temp_dir(), __CLASS__);
$o = tempnam(sys_get_temp_dir(), __CLASS__);
file_put_contents($i, $content);
shell_exec(vsprintf(
'java -jar %s --type js -o %s %s',
array_map('escapeshellarg', array($yui, $o, $i))
));
return file_get_contents($o);

70. Standard Caching

71. # cache.yml
widget:
enabled: true
with_layout: true

72. developer.yahoo.com/yui/compressor/

73. A Few Apache Tricks

74. rm web/.htaccess

75. AllowOverride None

76. <Directory /path/to/web>
Include /path/to/.htaccess
</Directory>

77. Core Assets

78. Missing Asset
s #FAIL :(

79. AliasMatch /sf/(.*)
/path/to/symfony/data/web/sf/$1
AliasMatch /sfDoctrinePlugin/(.*)
/path/to/sfDoctrinePlugin/web/$1
NameVirtualHost *:80
<VirtualHost _default_:80>
# ...

80. Assets Fo u nd FTW!

81. The Dreaded Trailing Slash…

83. AIL
#F

84. RewriteEngine On
RewriteRule ^(.*)/$ /$1 [R=301,L]

85. GET /about/ HTTP/1.1
Host: domain.com
HTTP/1.1 301 Moved Permanently
Location: http://domain.com/about

86. Embedded Forms

87. Book
One book has many authors,
Authors one author has many books.
Person

88. Book:
columns:
title: string(255)
relations:
authors: { class: Person, refClass: BookAuthor }
BookAuthor:
columns:
book_id: integer
author_id: integer
relations:
book: { local: book_id }
author: { class: Person, local: author_id }
Person:
columns:
name: string(255)

90. // embed related forms
$this->embedRelation('authors');
unset($this['authors_list']);

97. // embed related forms dynamically!
$this->embedDynamicRelation('authors');

98. form.method_not_found
form.filter_values

99. // called when a form is configured
public function embedDynamicRelation($name)
{
$rel = $table->getRelation($name);
$this->rels[] = $rel;
$this->doEmbed($name, $obj->get($rel->getAlias()));
}

100. // called when a form is bound
public function filterValues(sfEvent $event, $values)
{
foreach ($this->rels as $rel)
{
$name = $rel->getName();
$this->doEmbed($name, $values[$name]);
}
$obj->addListener(new DeleteListener($form));
}

101. $parent = new BaseForm();
foreach ($values as $i => $value) {
if (is_object($value)) {
// create form with object
} elseif ($value['id']) {
// find previously embedded form
} else {
// create a new form
}
$parent->embedForm($i, $child);
}
$form->embedForm($rel->getName(), $parent);

102. // extract existing objects from embedded forms
// and compare to the current object collection
public function preSave(Doctrine_Event $event)
{
foreach ($coll as $i => $obj)
{
$pos = array_search($obj, $existing, true);
if (false === $pos) $coll->remove($i);
if ($column['notnull']) $obj->delete();
}
}

103. sfDoctrineDynamicFormRelationsPlugin
Common sense embedded forms.

104. Questions?
• Host aware routing
• Graceful POST authentication
• Extra security
• Javascript compression
• Apache tricks
• Embedded forms

105. OpenSky is Hiring!
http://engineering.shopopensky.com
Please contact me if you're interested.

106. Thank you!