1. Advanced symfony Techniques
Kris Wallsmith

2. @kriswallsmith
• Release Manager for symfony 1.3 & 1.4
• On Symfony and Doctrine teams
• Senior Software Engineer at
• 10 years experience with PHP and web development
• Open source evangelist and international speaker
• Hopeless plugin developer…

3. • DbFinderPlugin • sfPropelActAsPolymorphicBehaviorPlugin
• sfControlPanelPlugin • sfSimpleBlogPlugin
• sfDoctrineDynamicFormRelationsPlugin • sfSimpleCMSPlugin
• sfDoctrineMasterSlavePlugin • sfSimpleForumPlugin
• sfFeed2Plugin • sfSpyPlugin
• sfFormYamlEnhancementsPlugin • sfSslRequirementPlugin
• sfGoogleAnalyticsPlugin • sfStatsPlugin
• sfGoogleWebsiteOptimizerPlugin • sfTaskExtraPlugin
• sfModerationPlugin • sfWebBrowserPlugin
• sfPagerNavigationPlugin

4. Please see me if you want to
help with or take over
a plugin's maintenance.
Lots to choose from!

5. #phpmatsuri
October 2-3, 2010
Tokyo

6. #phpmatsuri
• Around 90 attendees
• CakePHP, Symfony, & Lithium
were represented
• Most folks were CakePHP users
• CakePHP documentation was
translated early, so…
• Please help translate Symfony2 &
Doctrine2 documentation!

8. CAUTION
PSEUDO CODE
AHEAD

9. Host Aware Routing

10. domain.com

11. foobar.domain.com

12. barfoo.domain.com

13. homepage:
url: /
param: { module: main, action: indexOrDash }

14. homepage:
url: /
param: { module: main, action: indexOrDash }
if (preg_match('/.../', $r->getHost(), $m))

15. class sfRoute
• ->matchesUrl(...)
Does the supplied URL match this route?
GET / HTTP/1.0
Host: foobar.domain.com

16. class sfRoute
Ver y slow
• ->matchesUrl(...)
url_for('main/dashboard?username=foobar')
Does the supplied URL match this route?
• ->matchesParameters(...)
Do the supplied parameters match this route?

17. class sfRoute
• ->matchesUrl(...)
Does the supplied URL match this route?
• ->matchesParameters(...)
url_for('@dashboard?username=foobar')
Do the supplied parameters match this route?
• ->generate(...)
Generate a URL using this route and these parameters.

18. ->matchesUrl(...)
• $url
The current URI
• $context
An array of contextual information, including the current host
• Returns false or an array of parameters extracted from the URI

19. ->matchesParameters(...)
• $params
An associative array of parameter names and values
• $context
An array of contextual information, including the current host
• Returns true or false

20. ->generate(...)
• $params
An associative array of parameter names and values
• $context
An array of contextual information, including the current host
• $absolute
Whether to generate an absolute URL
• Returns the generated URL

21. Process the host string with a
second, internal route

22. public function __construct(...)
{
list($host, $pattern) = explode('/', $pattern, 2);
$hostRoute = $this->createHostRoute($host, ...);
parent::__construct(...);
}

23. public function matchesUrl($url, $c)
{
// check parent::matchesUrl() first
$hp = $hostRoute->matchesUrl('/'.$c['host'], $c);
// include host parameters in return
}

24. public function matchesParameters($p, $c)
{
$hp = $this->extractHostParams($p);
return
parent::matchesParameters($p, $c)
&&
$hostRoute->matchesParameters($hp, $c);
}

25. public function generate($p, $c, $abs)
{
$hp = $this->extractHostParams($p);
// protocol, prefix...
$host = $hostRoute->generate($hp, $c, false);
$uri = parent::generate($p, $c, false);
return $protocol.':/'.$host.$prefix.$uri;
}

26. homepage:
url: /
param: { module: main, action: indexOrDash }

27. Hard
co d
homepage: e
d F
TL
url: domain.com/ :(
class: sfHostAwareRoute
param: { module: main, action: index }
dashboard:
url: :username.domain.com/
class: sfHostAwareRoute
param: { module: main, action: dashboard }

28. homepage:
url: %APP_HOST%/
class: sfHostAwareRoute
param: { module: main, action: index }
dashboard:
url: :username.%APP_HOST%/
class: sfHostAwareRoute
param: { module: main, action: dashboard }

29. Custom Config Handler

30. class sfHostAwareRoutingConfigHandler
extends sfRoutingConfigHandler
{
protected function parse($configFiles)
{
return array_map(
array($this, 'filterRoute'),
parent::parse($configFiles)
);
}
// ...
}

31. FTW!
Free
protected function filterRoute($route)
{
list($class, $args) = $route;
$args[0] = $this->replaceConstants($args[0]);
return array($class, $args);
}

32. # config_handlers.yml
config/routing.yml:
class: sfHostAwareRoutingConfigHandler
file: %SF_LIB_DIR%/sfHostAwareRout...

33. sfHostAwareRoutingPlugin
Add subdomains to your routing rules.

34. Graceful POST Authentication

35. An example…

38. CENSORED
CENSORED

40. W here's my
blog pos t!?
!
AIL
F

41. Extend the security filter

42. class GracefulSecurityFilter
extends sfBasicSecurityFilter
{
protected function forwardToLoginAction()
{
// stash the interrupted request
$attr->add(array(
'module' => $context->getActionName(),
'action' => $context->getModuleName(),
'method' => $request->getMethod(),
'params' => $requestParams->getAll(),
), 'stash');
parent::forwardToLoginAction();
}
}

43. # filters.yml
security:
class: GracefulSecurityFilter

44. Replay the stashed request
after login

45. // called after authentication
protected function replayStashedRequest()
{
if ($s = $attr->removeNamespace('stash'))
{
$request->setMethod($s['method']);
$params->clear();
$params->add($s['params']);
$this->forward($s['module'], $s['action']);
}
}

46. Extra Security

47. An example…

50. # security.yml
acceptInvitation:
is_secure: true
extra_credentials:
account: { lifetime: 300 }

51. Events to the rescue!

52. controller.change_action

53. // connect to the event
$ed->connect('controller.change_action', $cb)

54. // check security.yml
$action->getSecurityValue('extra_credentials')

55. // check current user
$u->getAttribute('extra_credentials', array())

56. // remove any expired credentials
$now = time();
foreach ($creds as $name => $attr)
{
if ($now > $attr['expires_at'])
{
unset($creds[$name]);
}
}

57. // stash credentials and referer
$u->setAttribute('challenge_credentials', ...)
$u->setAttribute('challenge_referer', ...)

58. // forward to challenge form
$controller->forward('security', 'challenge')
throw new sfStopException();

59. // add the granted credentials
$now = time();
foreach ($new as $name => $attr)
{
$creds[$name] = array(
'expires_at' => $now + $attr['lifetime'],
);
}
$u->setAttribute('extra_credentials', $creds);

60. // send them on their way
$this->redirect($referer);

61. sfExtraSecurityPlugin
Re-prompt your users for authentication.

62. Javascript Compression

63. <script src="http://domain.com/widget.js"></script>

64. class jsActions extends sfActions
{
public function executeWidget(sfWebRequest $req)
{
$this->lightbox = $req->hasParameter('lb');
$this->debug = $req->hasParameter('debug');
}
}

65. <?php if ($debug): ?>
console.log("embedding mootools");
<?php endif; ?>
var e = document.createElement("script");
e.src = "<?php echo public_path('js/moo.js', true) ?>";
e.async = true;
document.body.appendChild(e);
// etc...

66. Custom View Class

67. # module.yml
all:
view_class: Javascript
JavascriptView

68. class JavascriptView extends sfPHPView
{
public function render()
{
return $this->compress(parent::render());
}
protected function compress()
{
// ...
}
}

69. $i = tempnam(sys_get_temp_dir(), __CLASS__);
$o = tempnam(sys_get_temp_dir(), __CLASS__);
file_put_contents($i, $content);
shell_exec(vsprintf(
'java -jar %s --type js -o %s %s',
array_map('escapeshellarg', array($yui, $o, $i))
));
return file_get_contents($o);

70. Standard Caching

71. # cache.yml
widget:
enabled: true
with_layout: true

72. developer.yahoo.com/yui/compressor/

73. A Few Apache Tricks

74. rm web/.htaccess

75. AllowOverride None

76. <Directory /path/to/web>
Include /path/to/.htaccess
</Directory>

77. Core Assets

78. Missing Asset
s #FAIL :(

79. AliasMatch /sf/(.*)
/path/to/symfony/data/web/sf/$1
AliasMatch /sfDoctrinePlugin/(.*)
/path/to/sfDoctrinePlugin/web/$1
NameVirtualHost *:80
<VirtualHost _default_:80>
# ...

80. Assets Fo u nd FTW!

81. The Dreaded Trailing Slash…

83. AIL
#F

84. RewriteEngine On
RewriteRule ^(.*)/$ /$1 [R=301,L]

85. GET /about/ HTTP/1.1
Host: domain.com
HTTP/1.1 301 Moved Permanently
Location: http://domain.com/about

86. Embedded Forms

87. Book
One book has many authors,
Authors one author has many books.
Person

88. Book:
columns:
title: string(255)
relations:
authors: { class: Person, refClass: BookAuthor }
BookAuthor:
columns:
book_id: integer
author_id: integer
relations:
book: { local: book_id }
author: { class: Person, local: author_id }
Person:
columns:
name: string(255)

90. // embed related forms
$this->embedRelation('authors');
unset($this['authors_list']);

97. // embed related forms dynamically!
$this->embedDynamicRelation('authors');

98. form.method_not_found
form.filter_values

99. // called when a form is configured
public function embedDynamicRelation($name)
{
$rel = $table->getRelation($name);
$this->rels[] = $rel;
$this->doEmbed($name, $obj->get($rel->getAlias()));
}

100. // called when a form is bound
public function filterValues(sfEvent $event, $values)
{
foreach ($this->rels as $rel)
{
$name = $rel->getName();
$this->doEmbed($name, $values[$name]);
}
$obj->addListener(new DeleteListener($form));
}

101. $parent = new BaseForm();
foreach ($values as $i => $value) {
if (is_object($value)) {
// create form with object
} elseif ($value['id']) {
// find previously embedded form
} else {
// create a new form
}
$parent->embedForm($i, $child);
}
$form->embedForm($rel->getName(), $parent);

102. // extract existing objects from embedded forms
// and compare to the current object collection
public function preSave(Doctrine_Event $event)
{
foreach ($coll as $i => $obj)
{
$pos = array_search($obj, $existing, true);
if (false === $pos) $coll->remove($i);
if ($column['notnull']) $obj->delete();
}
}

103. sfDoctrineDynamicFormRelationsPlugin
Common sense embedded forms.

104. Questions?
• Host aware routing
• Graceful POST authentication
• Extra security
• Javascript compression
• Apache tricks
• Embedded forms

105. OpenSky is Hiring!
http://engineering.shopopensky.com
Please contact me if you're interested.

106. Thank you!