class SS_HTTPRequest implements ArrayAccess (View source)

Represents a HTTP-request, including a URL that is tokenised for parsing, and a request method (GET/POST/PUT/DELETE). This is used by {@link RequestHandler} objects to decide what to do.

Caution: objects of this class are immutable, e.g. echo $request['a']; works as expected, but $request['a'] = '1'; has no effect.

The intention is that a single SS_HTTPRequest object can be passed from one object to another, each object calling match() to get the information that they need out of the URL. This is generally handled by {@link RequestHandler::handleRequest()}.

Methods

__construct($httpMethod, $url, $getVars = array(), $postVars = array(), $body = null)

Construct a SS_HTTPRequest from a URL relative to the site root.

setUrl($url)

Allow the setting of a URL

bool
isGET()

No description

bool
isPOST()

No description

bool
isPUT()

No description

bool
isDELETE()

No description

bool
isHEAD()

No description

setBody(string $body)

No description

null|string
getBody()

No description

array
getVars()

No description

array
postVars()

No description

array
requestVars()

Returns all combined HTTP GET and POST parameters passed into this request. If a parameter with the same name exists in both arrays, the POST value is returned.

mixed
getVar(string $name)

No description

mixed
postVar(string $name)

No description

mixed
requestVar(string $name)

No description

string
getExtension()

Returns a possible file extension found in parsing the URL as denoted by a "."-character near the end of the URL.

bool
isMedia()

Checks if the {@link SS_HTTPRequest->getExtension()} on this request matches one of the more common media types embedded into a webpage - e.g. css, png.

addHeader(string $header, string $value)

Add a HTTP header to the response, replacing any header of the same name.

array
getHeaders()

No description

mixed
getHeader(string $header)

Remove an existing HTTP header

removeHeader(string $header)

Remove an existing HTTP header by its name, e.g. "Content-Type".

string
getURL(bool $includeGetVars = false)

Returns the URL used to generate the page

bool
isAjax()

Returns true if this request an ajax request, based on custom HTTP ajax added by common JavaScript libraries, or based on an explicit "ajax" request parameter.

bool
offsetExists(unknown_type $offset)

Enables the existence of a key-value pair in the request to be checked using array syntax, so isset($request['title']) will check for $_POST['title'] and $_GET['title']

unknown
offsetGet(unknown_type $offset)

Access a request variable using array syntax. eg: $request['title'] instead of $request->postVar('title')

offsetSet($offset, $value)

No description

offsetUnset($offset)

No description

static SS_HTTPResponse
send_file($fileData, $fileName, null $mimeType = null)

Construct an SS_HTTPResponse that will deliver a file to the client.

array|bool
match($pattern, bool $shiftOnSuccess = false)

Matches a URL pattern The pattern can contain a number of segments, separated by / (and an extension indicated by a .)

array
allParams()

No description

string
shiftAllParams()

Shift all the parameter values down a key space, and return the shifted value.

array
latestParams()

No description

string|null
latestParam(string $name)

No description

array
routeParams()

No description

setRouteParams($params)

No description

array
params()

No description

string
param(string $name)

Finds a named URL parameter (denoted by "$"-prefix in $url_handlers) from the full URL, or a parameter specified in the route table

string
remaining()

Returns the unparsed part of the original URL separated by commas. This is used by {@link RequestHandler->handleRequest()} to determine if further URL processing is necessary.

bool
isEmptyPattern($pattern)

Returns true if this is a URL that will match without shifting off any of the URL.

string|array
shift(int $count = 1)

Shift one or more parts off the beginning of the URL.

bool
allParsed()

Returns true if the URL has been completely parsed.

string
getIP()

Returns the client IP address which originated this request.

array
getAcceptMimetypes(bool $includeQuality = false)

Returns all mimetypes from the HTTP "Accept" header as an array.

string
httpMethod()

No description

$this
setHttpMethod(string $method)

Explicitly set the HTTP method for this request.

static string
detect_method(string $origMethod, array $postVars) deprecated

Gets the "real" HTTP method for a request. This method is no longer used to mitigate the risk of web cache poisoning.

Details

__construct($httpMethod, $url, $getVars = array(), $postVars = array(), $body = null)

Construct a SS_HTTPRequest from a URL relative to the site root.

Parameters

$httpMethod
$url
$getVars
$postVars
$body

SS_HTTPRequest setUrl($url)

Allow the setting of a URL

This is here so that RootURLController can change the URL of the request without us loosing all the other info attached (like headers)

Parameters

$url

Return Value

SS_HTTPRequest

The updated request

bool isGET()

Return Value

bool

bool isPOST()

Return Value

bool

bool isPUT()

Return Value

bool

bool isDELETE()

Return Value

bool

bool isHEAD()

Return Value

bool

SS_HTTPRequest setBody(string $body)

Parameters

string $body

Return Value

SS_HTTPRequest

$this

null|string getBody()

Return Value

null|string

array getVars()

Return Value

array

array postVars()

Return Value

array

array requestVars()

Returns all combined HTTP GET and POST parameters passed into this request. If a parameter with the same name exists in both arrays, the POST value is returned.

Return Value

array

mixed getVar(string $name)

Parameters

string $name

Return Value

mixed

mixed postVar(string $name)

Parameters

string $name

Return Value

mixed

mixed requestVar(string $name)

Parameters

string $name

Return Value

mixed

string getExtension()

Returns a possible file extension found in parsing the URL as denoted by a "."-character near the end of the URL.

Doesn't necessarily have to belong to an existing file, as extensions can be also used for content-type-switching.

Return Value

string

bool isMedia()

Checks if the {@link SS_HTTPRequest->getExtension()} on this request matches one of the more common media types embedded into a webpage - e.g. css, png.

This is useful for things like determining wether to display a fully rendered error page or not. Note that the media file types is not at all comprehensive.

Return Value

bool

addHeader(string $header, string $value)

Add a HTTP header to the response, replacing any header of the same name.

Parameters

string $header

Example: "Content-Type"

string $value

Example: "text/xml"

array getHeaders()

Return Value

array

mixed getHeader(string $header)

Remove an existing HTTP header

Parameters

string $header

Return Value

mixed

SS_HTTPRequest removeHeader(string $header)

Remove an existing HTTP header by its name, e.g. "Content-Type".

Parameters

string $header

Return Value

SS_HTTPRequest

$this

string getURL(bool $includeGetVars = false)

Returns the URL used to generate the page

Parameters

bool $includeGetVars

whether or not to include the get parameters\

Return Value

string

bool isAjax()

Returns true if this request an ajax request, based on custom HTTP ajax added by common JavaScript libraries, or based on an explicit "ajax" request parameter.

Return Value

bool

bool offsetExists(unknown_type $offset)

Enables the existence of a key-value pair in the request to be checked using array syntax, so isset($request['title']) will check for $_POST['title'] and $_GET['title']

Parameters

unknown_type $offset

Return Value

bool

unknown offsetGet(unknown_type $offset)

Access a request variable using array syntax. eg: $request['title'] instead of $request->postVar('title')

Parameters

unknown_type $offset

Return Value

unknown

offsetSet($offset, $value)

Parameters

$offset
$value

offsetUnset($offset)

Parameters

$offset

static SS_HTTPResponse send_file($fileData, $fileName, null $mimeType = null)

Construct an SS_HTTPResponse that will deliver a file to the client.

Caution: Since it requires $fileData to be passed as binary data (no stream support), it's only advisable to send small files through this method.

Parameters

$fileData
$fileName
null $mimeType

Return Value

SS_HTTPResponse

array|bool match($pattern, bool $shiftOnSuccess = false)

Matches a URL pattern The pattern can contain a number of segments, separated by / (and an extension indicated by a .)

The parts can be either literals, or, if they start with a $ they are interpreted as variables.

  • Literals must be provided in order to match
  • $Variables are optional
  • However, if you put ! at the end of a variable, then it becomes mandatory.

For example:

  • admin/crm/list will match admin/crm/$Action/$ID/$OtherID, but it won't match admin/crm/$Action!/$ClassName!

The pattern can optionally start with an HTTP method and a space. For example, "POST $Controller/$Action". This is used to define a rule that only matches on a specific HTTP method.

Parameters

$pattern
bool $shiftOnSuccess

Return Value

array|bool

array allParams()

Return Value

array

string shiftAllParams()

Shift all the parameter values down a key space, and return the shifted value.

Return Value

string

array latestParams()

Return Value

array

string|null latestParam(string $name)

Parameters

string $name

Return Value

string|null

array routeParams()

Return Value

array

SS_HTTPRequest setRouteParams($params)

Parameters

$params

Return Value

SS_HTTPRequest

$this

array params()

Return Value

array

string param(string $name)

Finds a named URL parameter (denoted by "$"-prefix in $url_handlers) from the full URL, or a parameter specified in the route table

Parameters

string $name

Return Value

string

Value of the URL parameter (if found)

string remaining()

Returns the unparsed part of the original URL separated by commas. This is used by {@link RequestHandler->handleRequest()} to determine if further URL processing is necessary.

Return Value

string

Partial URL

bool isEmptyPattern($pattern)

Returns true if this is a URL that will match without shifting off any of the URL.

This is used by the request handler to prevent infinite parsing loops.

Parameters

$pattern

Return Value

bool

string|array shift(int $count = 1)

Shift one or more parts off the beginning of the URL.

If you specify shifting more than 1 item off, then the items will be returned as an array

Parameters

int $count

Shift Count

Return Value

string|array

bool allParsed()

Returns true if the URL has been completely parsed.

This will respect parsed but unshifted directory parts.

Return Value

bool

string getIP()

Returns the client IP address which originated this request.

Return Value

string

array getAcceptMimetypes(bool $includeQuality = false)

Returns all mimetypes from the HTTP "Accept" header as an array.

Parameters

bool $includeQuality

Don't strip away optional "quality indicators", e.g. "application/xml;q=0.9" (Default: false)

Return Value

array

string httpMethod()

Return Value

string

HTTP method (all uppercase)

$this setHttpMethod(string $method)

Explicitly set the HTTP method for this request.

Parameters

string $method

Return Value

$this

static string detect_method(string $origMethod, array $postVars) deprecated

deprecated 3.7.5

Gets the "real" HTTP method for a request. This method is no longer used to mitigate the risk of web cache poisoning.

Parameters

string $origMethod

Original HTTP method from the browser request

array $postVars

Return Value

string

HTTP method (all uppercase)

See also

https://www.silverstripe.org/download/security-releases/CVE-2019-19326