BEAR v0.9 (Saturday)

Key Concept

• Intuitiveness
• Drivability
• Separation of concern
• Minimalism

Software Design

•
Page Controller

•
RESTful Resource Oriented Architecture

• Resource(Data) Transfer Object

• Dependency Service Locator

• BEAR_Base

•
• Interface oriented design

• Keep It Simple and Stupid

• Page
Ro
Resource
Ro
View

• App.php

• Use
Inject
AOP
@OP
Factory
Dependency

• GoF PoEAA

• phpunit

• No Impedance mismatch

• Value Document Link

•

• UA ( )

• CLI
• jQuery

Software Technology
ROA - EDP - AOP - DI - Page

Basic

• PHP 5.2+
• +PEAR +Zend

•
ROA: Resource Oriented Architecture

•
EDP: Event Driven Programing

•
@OP: Attribute(Annotation) Oriented Programing

•
AOP: Aspect Oriented Programing

(PoEAA)
•
× Front Controller

•
• Page
Layout

•
Service Locator

•
DI = Dependency Injection

MVC 3 Components

• Model
• View
• Controller

Bear 3 Components

• Resource
• View
• Page

Resource (Model)
Page (Controller) DB File XML Page
View
Client Resource
CRUD I/F

RO
read User?id=5
Private CRUD Resource Access
Code
Header Page
Body

View GET /user?id=5
Public HTTP Access

HTML Bot
PC JS
JSON Mobile
Game
iPhone

XML

Resource (Model)
Page (Controller) DB File XML Page
View
Client Resource
CRUD I/F

RO
read User?id=5
Private CRUD Resource Access
Code
Header Page
Body

View GET /user?id=5 RO
Public HTTP Access

HTML Bot
PC JS Socket CLI REST
JSON Mobile
Game
iPhone

XML

DB File XML Page

Resource

read User?id=5
Ro

ROA -int Code API
-array Headers
-array Body

CLI / HTTP / Socket Interface

Shell Socket REST Java / Perl / Ruby / Python

Client - Server (CS)

Resource

Server

•
Client
Page

Client - Stateless - Server (CSS)

Resource

read User?id=5 • 1
•
set id=5; •
get User; •
Page

Client - Cache - Stateless - Server (C$SS)

Resource

•

Resource Cache
Page

Uniform - Client - Cache - Stateless - Server (UC$SS)

Resource
onCreate onRead onUpdate onDelete

read User?id=5
•
getUserName(5)
Resource Cache
Page

Uniform - Layered - Client - Cache - Stateless - Server (ULC$SS)

Proﬁle Follower

•
Cache Cache

User
•
•
•
Cache

Page

RESTful

• REST

• REST RESTful

BEAR RESTful

Resource

Page
URI
class Page_User_Index extends App_Page Uniform Interfac
Link
{
public function onInit(){ DB, XML, Local/Remote
Create
... Read
->read($params)->set(); Update
} Delete

public function onOutput(){
->display();
} View

<html>
<body>{$user}</body>
</html>

Resource

Resource

Page
URI
Link
{
Create
... Read
} Delete

->display();
} View

<html>
</html>

ROA

• Resource Oriented Architecture
•

ROA
•
Addressability
•
Statelessness
•
Connectedness
•
Uniform Interface

•
•
• URI URN + URL

• URL L Locater URI

•

• POST/GET/PUT/DELETE, C/R/U/D

Resource in REST(1)

http://www.excite.co.jp/weather/japan/area/?prid=4400&arid=4410

http://yohei-y.blogspot.com/2005/04/rest-3.html

Resource in REST(2)

• Uniform Interface

GET( PUT( POST ), DELETE

•

BEAR Resource
“user/proﬁle/?user_id=10”
“post/number.xml”

• URI
“http://example.com/rss.xml”

• CRUD Interface create read update delete

• Link user blog

Resource Request
Resource CRUD

Resource Request in REST
• HTTP POST/GET/PUT/DELETE

Resource

POST
REST Client
GET
PUT
DELETE
HTTP/1.1 200 OK
GET /user?id=10 HTTP/1.0 Date: Wed, 04 Feb 2009 09:56:24 GMT
Server: Apache/2.2.0 (Unix)
Content-Type: text/html
...

Resource Request in BEAR
• BEAR HTTP

• HTTP
Page Resource (Ro)

Resource

POSTCreate class User_Blog extends
Page { onCreate
GETRead
class User_Index extends App_Page onRead
public function onRead($values)
PUTUpdate SQL
{ Delete { onUpdate
DELETE INSERT
public function onInit(){ ... onDelete
SELECT
... return $row;
UPDATE
$resource->read($params)->set(); }
DELETE
} }
Ro
-Code
$this->display();
-Header
}
-Body

Resource

read path/to/readme.txt

Resource

Resource

create ro://self/Shop/Purchace/id=10

Resource

Resource

read myOfﬁce://room/reservation

Java / Perl / Tes

Resource

ID ( )

create ro://self/Shop/Purchace/id=10

ID ( )

HTTP

(WWW)

Resource Object −

• Ro

Resource
Create
Page Read class User_Blog extends App_Ro
Update {
class Page_User_Index extends App_Page Delete public function onRead($values)
{ {
public function onInit(){ ...
... return $row;
$resource->read($params)->set(‘user’); }
} Ro }
return $array;
public function onOutput(){ -Code or
$this->display(); -Header return $Ro;
} -Body

Ro

• HTTP
• code, header, body
• CRUD
•

Ro - Property

• Code (200 OK, 400 Bad Req, 500 Err)
• Header
• Body
• Link URI

Resource Code
• HTTP

Resource

Page class User_Blog extends
{
class User_Index extends App_Page public function onRead($values)
{ { 500 Internal Error
... return $row;
$resource->read($params)->set(); } DB
400 Bad Request
} }
200 OK
$this->display();
URI
}

Ro - CRUD Interface
BEAR HTTP SQL

• onCreate($values) create POST CREATE

• onRead($values) read GET SELECT

• onUpdate($values) update PUT UPDATE

• onDelete($values) delete DELETE DELETE

Template Option
• $code, $body, $headers

Page

$options['template'] = 'user';
$params = array(‘uri’ => $uri, ‘options’ => $options); page template
$resource->read($params)->set(‘user);

value resource template resource html
App/views/elements/user.tpl

+ =

Cache Option
• HTML

•
HTML

<p>{$user}</p>

Value
Page

$options['cache']['key'] = 'user';
$options['cache']['life'] = 60;
...
$resource->read($params)->set(‘user’, ‘object’);

Resource Request
• “ ” set()

• lazy onOutput() view
PHP

$ro = $resource->read($params)->getRo();
Eager
$body = $resource->read($params)->getBody();
$resource->read($params)->set(‘user’); Lazy (onOutput)

$resource->read($params)->set(‘user’, ‘lazy’); Lazy (view)
$resource->update($params)->requestOnShutdown(); Lazy (shutdown)

Resource Set Option
value / object / lazy

set ‘value’

• string
body

Page

$resource->read($params)->set(‘user’, ‘value’);

View

{$user}

without template with template

set ‘object’
• view set

Page

$resource->read($params)->set(‘user’, ‘object’);

View

as string as array as object

{$user} {$user.name} {if $user->getCode() == 200}

set ‘lazy’
• view

Page
$resource->read($params1)->set(‘user’, ‘value’);
$resource->read($params2)->set(‘profile’, ‘lazy’);
$resource->read($params2)->set(‘friend’, ‘lazy’);

View ( UA )

for PC for iPhone for Mobile

{$user} {$user} {$user}
{$profile} {$profile}
{$friend}

Resource - AOP
• Ro (AOP)

• phpdoc

Before Advice
Reource

class Entry extends App_Ro
{
/**
* read
*
* @return array
Around Advice
*
* @aspect before App_Aspect_Auth
* @aspect around App_Aspect_Timer
*/ onRead
{

Advice Type
•
•
Before Advice After Advice Around Advice

onRead

onRead
onRead

Return Advice
onRead

Resource - Annotation
• @required
• 400(Bad Request)

Reource

class App_Ro_User extends App_Ro
{
/**
* create
*
* @return array
*
* @required name
* @required age
*/
public function onCreate($values)
{

Ro - onLink
• onLink

Blog Reource

User Reource class App_Ro_ User_Blog extends App_Ro
{
class App_Ro_User extends App_Ro public function onRead($values)
{ {
public function onRead($values) $blogId = $values[‘id’];
{ ...
... }
return $row; }
}

public function onLink($values)
{
$links = array(
‘blog’=>”usr/blog/?id={$values[‘blog_id’]}”);
return $links;
}
}

Resource Link
•
class Page_User_Blog_Latest_Comment extends App_Page
{
public function onInit(){ Fluent Interface
...
$resource->read($params)->link(‘blog’)->link(‘latest_entry’)->link(‘comment’)->set();
}

...link(‘comment’)->set()->p();

Mock Resource
•
No Resource

View
Page

$options['mock']['name'] = 'test';
$options['mock']['x'] = array('name', 'age', 'gender');
$options['mock']['y'] = 5;
...
$resource->read($params)->set();

Pull by View
• Page View Push
View Resource Pull Reource

class App_Ro_News_Today extends App_Ro
{
Page
class Page_User_Index extends App_Page {
{ retrun $news
public function onOutput(){ }
$this->display(); }
} Push Pull
View
{if $showNews}
{resource uri=”news/today” template=”news.tpl” values=$today}
{resource uri=”socket:://example.com/int_news” template=”news.tpl”}
{/if}

Pull Resource in Page
view ”Pull”

top/logo top/date

news/pict

top/news ad/media

login/status
stock/today

ad/service
media/topic

ad/recmd ad/pr

Static Resource
• URI

•
CSV, XML, Yaml
•

Resource URI
• URI

• URI = Uniform Resource Indentiﬁer ( )

Local Class Resource
“blog/entry” = “ro://self/blog/entry”
class User_Blog extends App_Ro
{
Page
class User_Index extends App_Page Remote Class Resource (HTTP)
{ “http://example.com/blog/entry”
Create
public function onInit(){
Read Remote Class Resource (Socket)
...
Update “socket://example.com/blog/entry”
Delete
}

public function onOutput(){ Local File Resource
$this->display(); “blog/entry.xml”
} Remote File Resource
“http://example.com/blog/entry.xml”

Resource Option

•
• read

• create Once Exactly)
POE (POST

Page
Resource

Page
URI
Link
{
Create
... Read
} Delete

->display();
} View

<html>
</html>

Page - Event Driven
•1
•
• on

onClick onInit onOutput onAction

onInject onExpection

Page - File Structure
1

<?php
include ‘App.php’; App/BEAR

class Page_Blog_Entry_Latest extends App_Page
{
public function onInit(array $args)
{
...
}

}

BEAR_Main::run('Page_Blog_Entry_Latest');

Page - output - html
{
{
$resource = BEAR::dependency('BEAR_Resource');
$uri = 'Blog/Entry/Latest'; URI
$values[‘id’] = $args[‘blog_id’]; arguments
$options['cache']['life'] = 60; Cache
$options['pager'] = 5; Pager
// read and set
$params = array('uri'=>$uri, 'values'=>$values, 'options'=>$options);
} What ?

{$blog_entry_latest}
public function onOutput() {$pager.link}
{ Convention Over Configuration
$this->display(); Where ? page/blog/entry/latest.tpl
}
}

Page - output
{
{
$resource = BEAR::dependency('BEAR_Resource');
$uri = 'blog/entry/latest';
$values[‘id’] = $args[‘blog_id’];
$options['cache']['life'] = 60;
$options['pager'] = 5;
// read and set
$params = array('uri'=>$uri, 'values'=>$values, 'options'=>$options);
}

public function onOutput()
{
$this->output(‘json’);
}
} XML RSS Excel PHP JSON Flash HTML

Form
• PEAR::QuickForm
• FORM A

FORM B

•
• PC/ /...)

{$form.name.error}
{$form.name.html}
{$form}

Page Flow

onInject onInject
onInit onInit

Error OK

onOutput onOutput onAction

Page - formAction

class Page_Form_Simple extends App_Page
{
secure

public function onAction(array $submit)
{
$this->set('submit', $submit);
$this->display('simple.action.tpl');
}
}
BEAR_Main::run('Page_Form_Simple');

Page Arguments
• onInit(array $args) $args

•
$this->injectGet(‘id’);
$id = $_GET[‘id];
$this->injectArg(‘id’, 5);

CLI/

Page Flow
injectGet( $_GET
)
onInject() $_COOKIE
injectArg() CLI

onClick(array $args)

onInit(array $args)

onOutput()

Page - Clcik
• “Click” Page

• <a> {a}

• Click

Active Link Click

Page Class
class Help extends App_Page
• onClick< > onInit()

{
public function onClickUp(){
$this->_order = 'DESC';
}
template
public function onClickHelp($id){
$this->showHelp($id); {a click=”Up”} {/a}
}
{a click=”Help” val=$helpId} {/a}
...
}

Redirect Click
• Click

Page B
class Page_Blog_Entry extends
App_Page
{
public function onClickUp($user){
$this->_order = 'DESC';
}
Page A

$options['click'] = 'up';
$options['val'] = $user;
self::redirect('blog/entry', $options);

{a} tag

• <a>

• click
{a click=print} {/a}

• val
{a href="/" val=$values} {/a}

Page Cache

• Init Cache
• Page Cache

Page - Init Cache
• init set
• View
class Page_Today_Index extends App_Page
{
public function onInit() {
....
$resource->set(‘news’);
...
$resource->set(‘weather’);
}
}

$options[‘cache’]['type'] = 'init';
$options[‘cache’]['life'] = '600';
BEAR_Main::run('Page_Today_Index', $options);

Page - Page Cache
• HTTP
class Page_Today_Index extends App_Page
{
public function onInit() {
....
$resource->set(‘news’);
...
$resource->set(‘weather’);
}
}

$options[‘cache’]['type'] = 'page';
$options[‘cache’]['life'] = '600';
BEAR_Main::run('Page_Today_Index', $options);

View

Resource

Page
URI
Link
{
Create
... Read
} Delete

->display();
} View

<html>
</html>

View - Layout
• page/ layout/ element/

layouts/
<html xmlns="http://www.w3.org/1999/xhtml">
Create elements/
<head> Read
<title> Update
{* *}{$layout.title} Delete <h1>$layout.title</h1>

</title>

</head> pages/
<body>
{* *}{include file="elements/header.tpl"}
{foreach item=row from=$entry}
{* *}{$content_for_layout} $entry.title<br />
$entry.body<br />
{* *}{$layout.footer}
</body>
</html>

View - Static and Mobile
• YAML
• {$layout}
• default/mobile PC/
• tpl ” ”

layout/default.tpl layout/default.mobile.tpl

<html>
<header>
<title>{$lauout.title}</title> page/user/blog.yaml
</header> default:
{$content_for_layout} title: Hello PC World.
<body> mobile:
title: Hello Mobile World.
layout:default.tpl

<body>
{$layout.title}
</body> page/user/blog.tpl page/user/blog.mobile.tpl

View - Mobile

• .mobile.
tpl

• UTF-8

•

layout/default.tpl layout/default.mobile.tpl

page/index.tpl page/index.mobile.tpl

Image
•
GD( ),
iMagic( ),
Cairo( )
Cairo

iMagic

GD

Cache

Client

resource

init

page

Uniﬁed Cache Layer

PEAR:Cache_Lite APC memcached

Cache - File & APC
•
•
• web APC>memcached

IP

Cache - Memcached
•
memcached
cluster

IP
IP

Auto Loader

• require, include
•
• PEAR (PSR-0)
App_DB_Oracle App/Db/Oracle.php

Java Script

• bear.jquery.js BEAR
• AJAX
• QuickForm AJAX

DI (Dependency Injection)

•” ”

•
•
•

DI -
class App_Foo extends BEAR_Base
{
public function __construct(array $config) 1.
{
parent::__construct($config);
}

public function onInject() 2.
{
$this->_bar = BEAR::dependency('App_Bar');
}

public function getBar(){ 3.
return $this->_bar->get();
}
}

__construct() onInject()

factory()

DI -
$foo = BEAR::dependency('App_Foo', $config, $options);
echo $foo->getBar();

• new dependency
• array $conﬁg1

•

DB
• BEAR_Query
• URI method
dsn

• DB SELECT
LIMIT
/Limit

• AOP create/update

BEAR_Query
class App_Ro_User_Entry extends App_Ro
{
public function onInject()
{
parent::onInject();
0=LIMIT 1=DB
$this->_queryConfig['pager'] = 1;
$this->_queryConfig['perPage'] = 5;
$this->_query = BEAR::dependency('BEAR_Query', $this->_queryConfig,
false);
}

{
$result = $this->_query->insert($values);
}
$values SQL
{ $values
...
return $result = $this->_query->select($sql, $values);
}

DB LIMIT

DB - Transaction

class App_Ro_User extends App_Ro
{
/**
*
* @aspect around App_Aspect_Transaction
*/
{
$this->_query->insert($values);
}

onPull
• onPull
class App_Ro_User_Blog extends App_Ro
{

class App_Ro_User_Blog_Entry_Latest extends App_Ro /**
{ *
* @required user_id
*/
/** public function onRead($values){}
*
* @required blog_id
*/
public function onRead($values){}

public function onPull($values)
{
// ask, map
$pull = self::pullLink('user/blog');
$values['blog_id'] = $pull['id'];
return $values
}
}

Dev - Log
Application Log

Smarty Variables

Ajax Log

Registry

$_GLOBALS

Include ﬁles

Dev - Code

PEAR / Zend

BEAR Shell
• CLI
• AJAX web shell

•

phpdoc

Security (1)
• XSS
Smaty {$val|escape}

• SQL
Mdb2::quote() Prepared Statement

• CSRF ( )

One Time Token Post Once Exactly

AJAX Cookie Verify

Security (2) - Form
HTML_QuickForm::exportValues()
•
setDefaults() /
setConstants()
public function(array $submit){
• }
...
” ”

Are you sure ?
Maybe
YES NO

Security (3) - Log
• CRUD + URI + Val

2009/02/02 12:20AM [00ff] CREATE entry?title=my+big+day

2009/02/02 12:30AM [00ff] UPDATECREATE blog?title=great+blog
2009/02/02 12:20AM [00ff] user?name=giro&id=10
2009/02/02 12:30AM [00ff] DELETE UPDATE user?name=giro&id=10
2009/02/02 12:30AM [00ff] user?id=10
2009/02/02 12:20AM [00ff] CREATE user?name=taro&age=20&gender=m
2009/02/02 12:30AM [00ff] DELETE user?id=10
2009/02/02 12:30AM [00ff] UPDATE user?name=giro&id=10

2009/02/02 12:30AM [00ff] DELETE user?id=10

Security (4) - ACL

•” ”
Zend::ACL

• ACL

Security (5) - CSRF

•

• bear.jquery.js CSRF

Double-Submit Cookie CSRF defense

Next
• web

• (Android iPhone

•
• (AJAX)

•

BEAR v0.9 (Saturday)

More Related Content

What's hot

Similar to BEAR v0.9 (Saturday)

More from Akihito Koriyama

Recently uploaded

BEAR v0.9 (Saturday)

Editor's Notes