Yii Application Development Cookbook - Second Edition

Yii Application Development Cookbook - Second Edition - Second Edition

Overview of this book

The Yii framework is a rapidly growing PHP5 MVC framework often referred to as Rails for PHP. It has already become a solid base for many exciting web applications such as Stay.com and can be a good base for your developments, too. This book will help you to learn Yii quickly and in more depth for use in for your developments."Yii Application Development Cookbook" will show you how to use Yii efficiently. You will learn about taking shortcuts using core features, creating your own reusable code base, using test driven development, and many more topics that will give you a lot of experience in a moderate amount of time.The second edition fixes all errata found in the first edition and also features new recipes on the client side, HTTP caching, and using Composer with Yii.The chapters of the book are generally independent and since this book's goal is to enhance a practical approach to Yii development, you can start reading from the chapter you need most, be it Ajax and jQuery, Database, Active Record, and Model Tricks, or Extending Yii."Yii Application Development Cookbook" will help you to learn more about the Yii framework and application development practices in general, showing shortcuts and dangerous things you shouldn't do.With all the recipes grouped in 13 chapters, you will write your applications more efficiently using shortcuts and using Yii core functionality in a good way. The most interesting topics are; Yii application deployment, a guide to writing your own extensions, advanced error handling, debugging and logging, application security, performance tuning, and much more."Yii Application Development Cookbook" will help you to learn more about the Yii framework and application development practices in general. You will write your applications more efficiently using shortcuts and using Yii core functionality in a good way.

Yii Application Development Cookbook Second Edition

Credits

About the Author

About the Reviewers

www.PacktPub.com

Preface

Free Chapter

Under the Hood

Introduction

Using getters and setters

Using Yii events

Using import and autoloading

Using exceptions

Configuring components

Configuring widget defaults

Using Yii core collections

Working with requests

Router, Controller, and Views

Introduction

Configuring URL rules

Generating URLs by path

Using regular expressions in URL rules

Creating URL rules for static pages

Providing your own URL rules at runtime

Using a base controller

Using external actions

Displaying static pages with CViewAction

Using flash messages

Using the controller context in a view

Reusing views with partials

Using clips

Using decorators

Defining multiple layouts

Paginating and sorting data

AJAX and jQuery

Introduction

Loading a block through AJAX

Managing assets

Including resources in the page

Working with JSON

Passing configuration from PHP to JavaScript

Handling variable number of inputs

Rendering content at the client side

Working with Forms

Introduction

Writing your own validators

Uploading files

Adding CAPTCHA

Customizing CAPTCHA

Creating a custom input widget with CInputWidget

Testing Your Application

Introduction

Setting up the testing environment

Writing and running unit tests

Using fixtures

Testing the application with functional tests

Generating code coverage reports

Database, Active Record, and Model Tricks

Introduction

Getting data from a database

Defining and using multiple DB connections

Using scopes to get models for different languages

Processing model fields with AR event-like methods

Applying markdown and HTML

Highlighting code with Yii

Automating timestamps

Setting up an author automatically

Implementing single table inheritance

Using Zii Components

Creating custom grid columns

Extending Yii

Introduction

Creating model behaviors

Creating components

Creating reusable controller actions

Creating reusable controllers

Creating a widget

Creating CLI commands

Creating filters

Creating modules

Creating a custom view renderer

Making extensions distribution-ready

Error Handling, Debugging, and Logging

Introduction

Using different log routes

Analyzing the Yii error stack trace

Logging and using the context information

Implementing your own smart 404 handler

Security

Introduction

Using controller filters

Using CHtml and CHtmlPurifier to prevent XSS

Preventing SQL injections

Preventing CSRF

Using RBAC

Performance Tuning

Introduction

Following best practices

Speeding up session handling

Using cache dependencies and chains

Profiling an application with Yii

Leveraging HTTP caching

Using External Code

Introduction

Using Zend Framework from Yii

Customizing the Yii autoloader

Using Kohana inside Yii

Using PEAR inside Yii

Using Composer with Yii

Deployment

Introduction

Changing the Yii directory layout

Moving an application out of webroot

Sharing the framework directory

Moving configuration parts into separate files

Using multiple configurations to simplify the deployment

Implementing and executing cron jobs

Maintenance mode

Index

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Using CHtml and CHtmlPurifier to prevent XSS

XSS stands for cross-site scripting and is a type of vulnerability that allows one to inject a client-side script (typically, JavaScript) in the page viewed by other users. Considering the power of the client-side scripting this can lead to very serious consequences such as bypassing security checks, getting other user credentials, or data leaks.

In this recipe, we will see how to prevent XSS by escaping the output with both CHtml and CHtmlPurifier.

Getting ready

Generate a fresh web application by using yiic webapp. Create protected/controllers/XssController.php as follows:

<?php
class XssController extends CController
{
  public function actionSimple()
  {
    echo 'Hello, '.$_GET['username'].'!';
  }
}

Normally, it will be used as /xss/simple?username=Alexander. However, as the main security principle "filter input, escape output" was not taken into account, malicious users will be able to use it in the following way:

/xss/simple?username=&lt...

Yii Application Development Cookbook - Second Edition - Second Edition

Yii Application Development Cookbook - Second Edition - Second Edition

Overview of this book

Related Content you might be interested in

Current Title:

Yii Application Development Cookbook - Second Edition - Second Edition

Using CHtml and CHtmlPurifier to prevent XSS

Getting ready