Module/view redirect while preserving POST variables

Monday 18 February 2008 10:10:41 pm

Let's say we have a standard form with NewButton and 'content/action' action, which is supposed to initiate an object:

  <form method="post" action="/index.php/pl/content/action">
    <input name="ClassIdentifier" value="some_class" type="hidden">
    <input name="NodeID" value="64" type="hidden">
    <input name="ContentLanguageCode" value="pol-PL" type="hidden">
    <input class="button" name="NewButton" value="Create some object" type="submit">
  </form>

Now, before we actually perform this action, we would like to perform some other operations in order to determine whether 'content/action' action should actually be performed. So, I create my own module and view, for example 'check/new', and modify the above form:

  <form method="post" action="/index.php/pl/check/new">
    <input name="ClassIdentifier" value="some_class" type="hidden">
    <input name="NodeID" value="64" type="hidden">
    <input name="ContentLanguageCode" value="pol-PL" type="hidden">
    <input class="button" name="NewButton" value="Create some object" type="submit">
  </form>

Now, in my own module I process the variables, and decide that new object can be created. <b>How do I redirect to 'content/action' with all those hidden post vars preserved? Is it possible with eZ API?</b>. Standard $Module->redirectTo(...) methods do not seem to pass the post variables.

I'd be grateful for any hints!

--
Company: mediaSELF Sp. z o.o., http://www.mediaself.pl
eZ references: http://ez.no/partners/worldwide_partners/mediaself
eZ certified developer: http://ez.no/certification/verify/272585
eZ blog: http://ez.ryba.eu

Tuesday 19 February 2008 1:17:18 am

Bruce,

<i>You might be able to do something list this:</i>

Seems like something worked, the action.php view file was indeed executed (I was able to check that and even POST variables are there). The problem is that it didn't perform what I expected, it is supposed to do what it would have normally done - assign a new node and proceed to the edit view. Unfortunately, that didn't happen ;(

Thanks,

PS. Not sure if before_publish is what I need plus hoped to avoid that and carry out the task in my own module/view.

--
Company: mediaSELF Sp. z o.o., http://www.mediaself.pl
eZ references: http://ez.no/partners/worldwide_partners/mediaself
eZ certified developer: http://ez.no/certification/verify/272585
eZ blog: http://ez.ryba.eu

Tuesday 19 February 2008 1:41:11 am

Hi Piotrek

Try this

$module = eZModule::exists( 'content' );
$module->setCurrentAction('NewObjectAddNodeAssignment','action');
$module->run('action');

@Gaetano
Your are right, though probably should be it's own thread?

Cheers
Bruce

My Blog: http://www.stuffandcontent.com/
Follow me on twitter: http://twitter.com/brucemorrison
Consolidated eZ Publish Feed : http://friendfeed.com/rooms/ez-publish

Tuesday 19 February 2008 2:52:00 am

Hi Piotrek

Try storing the POST variables in the session then redirecting to content/action...from user/login.php

    
    // Save array of previous post variables in session variable
    $post = $http->attribute( 'post' );
    $lastPostVars = array();
    foreach ( array_keys( $post ) as $postKey )
    {
        if ( substr( $postKey, 0, 5 ) == 'Last_' )
            $lastPostVars[ substr( $postKey, 5, strlen( $postKey ) )] = $post[ $postKey ];
    }
    if ( count( $lastPostVars ) > 0 )
    {
        $postData = $lastPostVars;
        $http->setSessionVariable( 'LastPostVars', $lastPostVars );
    }

content/action.php merges these with it's own POST variables. I think the is the mechanism that allows object creation to continue after a login is required.

I'll leave it for now but I'm positive it's possible and not difficult ;)

Cheers
Bruce

My Blog: http://www.stuffandcontent.com/
Follow me on twitter: http://twitter.com/brucemorrison
Consolidated eZ Publish Feed : http://friendfeed.com/rooms/ez-publish

Tuesday 19 February 2008 11:48:22 am

It got tricky again when loggedin/anonymous user redirections came to play, but managed to shape it like this:

$http = eZHTTPTool::instance();

$currentUser = eZUser::instance();
if( !$currentUser->isLoggedIn() )
{
    $http->setSessionVariable( '$_POST_BeforeLogin', $http->attribute( 'post' ) );
    return $Module->handleError( eZError::KERNEL_ACCESS_DENIED, 'kernel' );
}

// Merge post variables and variables that were used before login
if ( $http->hasSessionVariable( 'LastPostVars' ) )
{
    $post = $http->attribute( 'post' );
    $currentPostVarNames = array_keys( $post );
    foreach ( $http->sessionVariable( 'LastPostVars' ) as $var => $value )
    {
        if ( !in_array( $var, $currentPostVarNames ) )
        {
            $http->setPostVariable( $var, $value );
        }
    }
    $http->removeSessionVariable( 'LastPostVars' );
}


$hasValidCreateAction = false;
$canCreate = false;
if( $http->hasPostVariable( 'NewButton' ) )
{
    if( $http->hasPostVariable( 'ClassIdentifier' ) )
    {
        $hasValidCreateAction = true;
        $newObjectClassIdentifier = $http->postVariable( 'ClassIdentifier' );
        $newObjectClass = eZContentClass::fetchByIdentifier( $newObjectClassIdentifier );
        $newObjectClassID = $newObjectClass->ID;

        $canCreate = true;
        if( !eZUserCreateLimitTools::canCurrentUserCreate( $newObjectClassID ) )
        {
            $canCreate = false;
        }
    }
    elseif( $http->hasPostVariable( 'ClassID' ) )
    {
        $hasValidCreateAction = true;
        $newObjectClassID = $http->hasPostVariable( 'ClassID' );
        $newObjectClass = eZContentClass::fetch( $newObjectClassID );

        $canCreate = true;
        if( !eZUserCreateLimitTools::canCurrentUserCreate( $newObjectClassID ) )
        {
            $canCreate = false;
        }
    }
}

if( $hasValidCreateAction )
{
    if( $canCreate )
    {
        $post = $http->attribute( 'post' );
        $lastPostVars = array();
        foreach ( array_keys( $post ) as $postKey )
        {
            $lastPostVars[ $postKey ] = $post[ $postKey ];
        }
        if ( count( $lastPostVars ) > 0 )
        {
            $postData = $lastPostVars;
            $http->setSessionVariable( 'LastPostVars', $lastPostVars );
        }
        $Module->redirectTo( 'content/action' );
    }
    else
    {
        $Result['content'] = $tpl->fetch( "design:createlimit/cannot_create.tpl" );
    }
}
else
{
    $Result['content'] = $tpl->fetch( "design:createlimit/lost_info.tpl" );
}

;)

--
Company: mediaSELF Sp. z o.o., http://www.mediaself.pl
eZ references: http://ez.no/partners/worldwide_partners/mediaself
eZ certified developer: http://ez.no/certification/verify/272585
eZ blog: http://ez.ryba.eu

Saturday 23 February 2008 5:17:31 am

Hello Maxime,

Yes, that's a good idea, even though I try to avoid putting most of POST/SESSION values in the URL, unless they are ids or identifiers. I also didn't make that clear enough, but it was a user-dedicated operation that I was after, so sessions served me just fine and secure enough.

Thanks anyways!

--
Company: mediaSELF Sp. z o.o., http://www.mediaself.pl
eZ references: http://ez.no/partners/worldwide_partners/mediaself
eZ certified developer: http://ez.no/certification/verify/272585
eZ blog: http://ez.ryba.eu