* @since 2.0 */ class Controller extends \yii\base\Controller { /** * @var boolean whether to enable CSRF validation for the actions in this controller. * CSRF validation is enabled only when both this property and [[Request::enableCsrfValidation]] are true. */ public $enableCsrfValidation = true; /** * Binds the parameters to the action. * This method is invoked by [[Action]] when it begins to run with the given parameters. * This method will check the parameter names that the action requires and return * the provided parameters according to the requirement. If there is any missing parameter, * an exception will be thrown. * @param \yii\base\Action $action the action to be bound with parameters * @param array $params the parameters to be bound to the action * @return array the valid parameters that the action can run with. * @throws HttpException if there are missing parameters. */ public function bindActionParams($action, $params) { if ($action instanceof InlineAction) { $method = new \ReflectionMethod($this, $action->actionMethod); } else { $method = new \ReflectionMethod($action, 'run'); } $args = array(); $missing = array(); foreach ($method->getParameters() as $param) { $name = $param->getName(); if (array_key_exists($name, $params)) { $args[] = $params[$name]; unset($params[$name]); } elseif ($param->isDefaultValueAvailable()) { $args[] = $param->getDefaultValue(); } else { $missing[] = $name; } } if (!empty($missing)) { throw new HttpException(400, Yii::t('yii', 'Missing required parameters: {params}', array( '{params}' => implode(', ', $missing), ))); } return $args; } /** * @inheritdoc */ public function beforeAction($action) { if (parent::beforeAction($action)) { return !$this->enableCsrfValidation || Yii::$app->getRequest()->validateCsrfToken(); } else { return false; } } /** * Creates a URL using the given route and parameters. * * This method enhances [[UrlManager::createUrl()]] by supporting relative routes. * A relative route is a route without a leading slash, such as "view", "post/view". * * - If the route is an empty string, the current [[route]] will be used; * - If the route contains no slashes at all, it is considered to be an action ID * of the current controller and will be prepended with [[uniqueId]]; * - If the route has no leading slash, it is considered to be a route relative * to the current module and will be prepended with the module's uniqueId. * * After this route conversion, the method calls [[UrlManager::createUrl()]] to create a URL. * * @param string $route the route. This can be either an absolute route or a relative route. * @param array $params the parameters (name-value pairs) to be included in the generated URL * @return string the created URL */ public function createUrl($route, $params = array()) { if (strpos($route, '/') === false) { // empty or an action ID $route = $route === '' ? $this->getRoute() : $this->getUniqueId() . '/' . $route; } elseif ($route[0] !== '/') { // relative to module $route = ltrim($this->module->getUniqueId() . '/' . $route, '/'); } return Yii::$app->getUrlManager()->createUrl($route, $params); } /** * Redirects the browser to the specified URL. * This method is a shortcut to [[Response::redirect()]]. * * @param string|array $url the URL to be redirected to. This can be in one of the following formats: * * - a string representing a URL (e.g. "http://example.com") * - a string representing a URL alias (e.g. "@example.com") * - an array in the format of `array($route, ...name-value pairs...)` (e.g. `array('site/index', 'ref' => 1)`) * [[Html::url()]] will be used to convert the array into a URL. * * Any relative URL will be converted into an absolute one by prepending it with the host info * of the current request. * * @param integer $statusCode the HTTP status code. If null, it will use 302 * for normal requests, and [[ajaxRedirectCode]] for AJAX requests. * See [[http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html]] * for details about HTTP status code * @return Response the current response object */ public function redirect($url, $statusCode = null) { return Yii::$app->getResponse()->redirect(Html::url($url), $statusCode); } /** * Redirects the browser to the home page. * @return Response the current response object */ public function goHome() { return Yii::$app->getResponse()->redirect(Yii::$app->getHomeUrl()); } /** * Refreshes the current page. * This method is a shortcut to [[Response::refresh()]]. * @param string $anchor the anchor that should be appended to the redirection URL. * Defaults to empty. Make sure the anchor starts with '#' if you want to specify it. * @return Response the response object itself */ public function refresh($anchor = '') { return Yii::$app->getResponse()->redirect(Yii::$app->getRequest()->getUrl() . $anchor); } }