lifetype-1.2/class/action/templateaction.class.php

Go to the documentation of this file.

<?php

        lt_include( PLOG_CLASS_PATH."class/action/blogaction.class.php" );
    lt_include( PLOG_CLASS_PATH."class/view/templateview.class.php" );
    lt_include( PLOG_CLASS_PATH."class/data/validator/templatenamevalidator.class.php" );
    lt_include( PLOG_CLASS_PATH."class/view/errorview.class.php" );

    class TemplateAction extends BlogAction 
    {

        function TemplateAction( $actionInfo, $request )
        {
                $this->BlogAction( $actionInfo, $request );

                $this->registerFieldValidator( "show", new TemplateNameValidator());

            $view = new ErrorView( $this->_blogInfo );
            $view->setErrorMessage( "Bad characters in the template name." );
            $this->setValidationErrorView( $view );
        }

        function perform()
        {
                // get the value of the template we're trying to render
                $templateFile = $this->_request->getValue( "show" );
                // then, check if it has any extraneous character
            if( !$templateFile || strstr( $templateFile, ".." )) {
                lt_include( PLOG_CLASS_PATH."class/view/errorview.class.php" );

                    $view = new ErrorView( $this->_blogInfo, "error_parameter_missing" );
                    $this->setValidationErrorView( $view );

                $this->_view = new ErrorView( $this->_blogInfo );
                $this->_view->setValue( "message", "error_incorrect_parameter" );
                $this->setCommonData();

                return false;
            }           
                // get the name of the template file and create the view
                $this->_view = new TemplateView( $this->_blogInfo, $templateFile);
                // NOTE: this passes unvalidated data to the view,
                // need to validate it in the template if you are
                // going to use it.
            $this->_view->setValue( "request", $this->_request );
            // add all the common information to the view
            $this->setCommonData();

            return true;
        }
    }
?>

© 2008 LifeType. All rights reserved.	International | Germany | Taiwan | Russia | Ukraine	Sitemap | Contact | Hosting by Lime Daley