SlideShare a Scribd company logo

IPCSE12: Getting into FLOW3

Robert Lemke, profile picture
Robert Lemke

Robert Lemke, chief architect of Flow3 and co-founder of TYPO3, presents an overview of Flow3, a PHP-based web application platform designed to enhance PHP development. The document covers installation, domain-driven design, object management, and validation processes, emphasizing its modularity and backing by a large open-source community. Flow3 underpins the new enterprise CMS TYPO3 'Phoenix', allowing for content management and feature integration seamlessly.

Technology
1 of 84
Downloaded 16 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
Robert Lemke Getting into FLOW3
Robert Lemke chief architect of FLOW3 and TYPO3 “Phoenix” co-founder of the TYPO3 Association coach, coder, consultant 36 years old lives in Lübeck, Germany 1 wife, 2 daughters, 1 espresso machine likes drumming
Starters Installation Kickstart & Hello World! Controller, Actions, Arguments & HTTP Domain-Driven Design Doctrine Forms, Validation
Main Dishes Resources, Image Upload Session Handling User, Account, Authentication Authorization
Deserts Caching Testing Logging Deployment Signal-Slot I18n Routing Espresso
?
IPCSE12: Getting into FLOW3
At a Glance FLOW3 is a web application platform • brings PHP development to a new level • made for PHP 5.3, full namespaces support • modular, extensible, package based • free & Open Source (LGPL v3) • backed by one of the largest Open Source projects with 6000+ contributors
Foundation for the Next Generation CMS TYPO3 “Phoenix” is the all-new Enterprise CMS • content repository, workspaces, versions, i18n, modular UI ... • powered by FLOW3 • compatible code base • use TYPO3 features in FLOW3 standalone apps as you like
FLOW3 Website and Download #
Git Clone $ git clone --recursive git://git.typo3.org/FLOW3/Distributions/Base.git . Cloning into .... remote: Counting objects: 3837, done. remote: Compressing objects: 100% (2023/2023), done. remote: Total 3837 (delta 2007), reused 2721 (delta 1465) Receiving objects: 100% (3837/3837), 3.49 MiB | 28 KiB/s, done. Resolving deltas: 100% (2007/2007), done.
Set File Permissions $ sudo ./flow3 core:setfilepermissions robert _www _www FLOW3 File Permission Script Checking permissions from here upwards. Making sure Data and Web/_Resources exist. Setting file permissions, trying to set ACLs via chmod ... Done. Linux: $ sudo usermod -a -G www-data robert Mac OS X: $ sudo dscl . -append /Groups/_www GroupMembership robert
Set Up Database Connection Configuration/Settings.yaml # # # Global Settings # # # TYPO3: FLOW3: persistence: backendOptions: dbname: 'demo' user: 'demo' password: 'password' host: '127.0.0.1' # only on Windows: core: phpBinaryPathAndFilename: 'C:/path/to/php.exe'
Set Up Virtual Host Apache Virtual Host <VirtualHost *:80> DocumentRoot /opt/local/apache2/htdocs/Talks/FLOW3/Web/ ServerName dev.flow3.rob SetEnv FLOW3_CONTEXT Development </VirtualHost> <VirtualHost *:80> DocumentRoot /opt/local/apache2/htdocs/Talks/FLOW3/Web/ ServerName flow3.rob SetEnv FLOW3_CONTEXT Production </VirtualHost>
Final Check
C lo ne t h e Be a s t 5 1 1 1 Ro bert Lem ke D.P. F l u x t r time ();
Biggest Book Store: Amazon
Biggest River: Amazon River © Google
Smallest River: Roe River © Google
Smallest River: Roe River © Google
Smallest River: Roe River © Google
Smallest Book Store: Roe Books
Sketchy Model
Jus t C o de a Sh o p 5 2 1 1 Ro bert Lem ke D.P. F l u x t r time ();
Tackling the Heart of Software Development /** Domain-Driven Design * A Book * * @FLOW3Scope(“protot ype”) * @FLOW3Entity A methodology which ... */ class Book { • results in rich domain models /** * @var string */ • provides a common language protected $title; across the project team /** * @var string */ • simplify the design of complex protected $isbn; applications /** * @var string */ protected $description ; FLOW3 is the first PHP framework /** tailored to Domain-Driven Design * @var integer */ protected $price;
Domain-Driven Design Domain activity or business of the user Domain-Driven Design is about • focussing on the domain and domain logic • accurately mapping the concepts to software • forming a ubiquitous language among the project members
Domain-Driven Design Ubiquitous Language • important prerequisite for successful collaboration • use the same words for • discussion • modeling • development • documentation
Domain-Driven Design Building Blocks • Entity: An object that is not defined by its attributes, but rather by a thread of continuity and its identity. • Value Object: An object that contains attributes but has no conceptual identity. They should be treated as immutable. • Aggregate: A collection of objects that are bound together by a root entity, otherwise known as an aggregate root. The aggregate root guarantees the consistency of changes being made within the aggregate by forbidding external objects from holding references to its members.
Domain-Driven Design Building Blocks • Service: When an operation does not conceptually belong to any object. Following the natural contours of the problem, you can implement these operations in services. • Repository: methods for retrieving domain objects should delegate to a specialized Repository object such that alternative storage implementations may be easily interchanged.
Domain-Driven Design
Object Management FLOW3's take on Dependency Injection • one of the first PHP implementations (started in 2006, improved ever since) • object management for the whole lifecycle of all objects • no unnecessary configuration if information can be gatered automatically (autowiring) • intuitive use and no bad magical surprises • fast! (like hardcoded or faster)
Constructor Injection namespace AcmeDemoController; use TYPO3FLOW3MvcControllerActionController; use AcmeDemoServiceGreeterService; class DemoController extends ActionController { /** * @var AcmeDemoServiceGreeterService */ protected $greeterService; /** * @param AcmeDemoServiceGreeterService */ public function __construct(GreeterService $greeterService) { $this->greeterService = $greeterService; } /** * @param string $name */ public function helloAction($name) { return $this->greeterService->greet($name); } }
Setter Injection namespace AcmeDemoController; use TYPO3FLOW3MVCControllerActionController; use AcmeDemoServiceGreeterService; class DemoController extends ActionController { /** * @var AcmeDemoServiceGreeterService */ protected $greeterService; /** * @param AcmeDemoServiceGreeterService */ public function injectGreeterService(GreeterService $greeterService) { $this->greeterService = $greeterService; } /** * @param string $name */ public function helloAction($name) { return $this->greeterService->greet($name); } }
Property Injection namespace TYPO3DemoController; use TYPO3FLOW3Annotations as FLOW3; use TYPO3FLOW3MVCControllerActionController; use AcmeDemoServiceGreeterService; class DemoController extends ActionController { /** * @var TYPO3DemoServiceGreeterService * @FLOW3Inject */ protected $greeterService; /** * @param string $name */ public function helloAction($name) { return $this->greeterService->greet($name); } }
Objects.yaml TYPO3FLOW3SecurityCryptographyRsaWalletServiceInterface: className: TYPO3FLOW3SecurityCryptographyRsaWalletServicePhp scope: singleton properties: keystoreCache: object: factoryObjectName: TYPO3FLOW3CacheCacheManager factoryMethodName: getCache arguments: 1: value: FLOW3_Security_Cryptography_RSAWallet
Object Management class Customer { /** * @FLOW3Inject * @var AcmeCustomerNumberGenerator */ protected $customerNumberGenerator; ... } $customer = new Customer(); $customer->getCustomerNumber();
Object Management <?php declare(ENCODING = 'u tf-8'); namespace TYPO3Conf erenceDomainModel use TYPO3FLOW3Anno Conference; tations as FLOW3; FLOW3 creates proxy classes /** * Autogenerated Prox y Class for realizing DI and AOP magic * @FLOW3Scope(“prot otype”) * @FLOW3Entity */ • new operator is supported class Paper extends TYPO3FLOW3Persist Paper_Original implem ents TYPO3FLOW3Obj ect enceAspectPersiste nceMagicInterface { /** • proxy classes are created * @var string on the fly * @ORMId * @ORMColumn(length ="40") * introduced by TYPO 3FLOW3Persistence */ AspectPersistenceMa • in production context all protected $FLOW3_Per sistence_Identifier = NULL; code is static private $FLOW3_AOP_P roxy_targetMethodsAn dGroupedAdvices = ar ra private $FLOW3_AOP_P roxy_groupedAdviceCh ains = array(); private $FLOW3_AOP_P roxy_methodIsInAdvic eMode = array(); /** * Autogenerated Prox y Method */ public function __co nstruct()
Persistence Object Persistence in the Flow • based on Doctrine 2 • seamless integration into FLOW3 • provides all the great Doctrine 2 features • uses UUIDs • low level persistence API • allows for own, custom persistence backends (instead of Doctrine 2) • e.g. CouchDB, Solr
Basic Object Persistence // Create a new customer and persist it: $customer = new Customer("Robert"); $this->customerRepository->add($customer); // Find an existing customer: $otherCustomer = $this->customerRepository->findByFirstName("Karsten"); // and delete it: $this->customerRepository->remove($otherCustomer);
Validation and Doctrine Annotations namespace TYPO3BlogDomainModel; /** * A Blog object * * @Entity */ class Blog { /** * @var string * @validate Text, StringLength(minimum = 1, maximum = 80) * @Column(length="80") */ protected $title; /** * @var DoctrineCommonCollectionsCollection<TYPO3BlogDomainModelPost> * @OneToMany(mappedBy="blog") * @OrderBy({"date" = "DESC"}) */ protected $posts; ... }
Persistence-related Annotations @Entity Declares a class as "entity" @Column Controls the database column related to the class property. Very useful for longer text content (type="text" !) @ManyToOne Defines relations to other entities. Unlike with @OneToMany vanilla Doctrine targetEntity does not have to be @ManyToMany given but will be reused from the @var @OneToOne annotation. cascade can be used to cascade operation to related objects.
Persistence-related Annotations @var Defines the type of a property, collections can be typed using angle brackets: DoctrineCommonCollectionsCollection<TYPO3ConferenceDomainModelComment> @transient The property will be ignored, it will neither be persisted nor reconstituted @identity Marks the property as part of an objects identity
Custom Queries using the Query Object Model /** * A PostRepository */ class PostRepository extends TYPO3FLOW3PersistenceRepository { /** * Finds posts by the specified tag and blog * * @param TYPO3BlogDomainModelTag $tag * @param TYPO3BlogDomainModelBlog $blog The blog the post must refer to * @return TYPO3FLOW3PersistenceQueryResultInterface The posts */ public function findByTagAndBlog(TYPO3BlogDomainModelTag $tag, TYPO3BlogDomainModelBlog $blog) { $query = $this->createQuery(); return $query->matching( $query->logicalAnd( $query->equals('blog', $blog), $query->contains('tags', $tag) ) ) ->setOrderings(array( 'date' => TYPO3FLOW3PersistenceQueryInterface::ORDER_DESCENDING) ) ->execute(); } }
Schema Management Doctrine 2 Migrations • Migrations allow schema versioning and change deployment • Migrations are the recommended way for DB updates • Tools to create and deploy migrations are integrated with FLOW3
Schema Management Running Migrations • needed after installation or upgrade: $ ./flow3 doctrine:migrate
Schema Management Manual database updates • for simple situations this can be good enough: $ ./flow3 doctrine:create $ ./flow3 doctrine:update • useful when • you are just starting a project and have never released
Schema Management Generating migrations $ ./flow3 doctrine:migrationgenerate Generated new migration class to "…/Version20110608074324.php" from schema differences. $ • Generated migrations can contain errors and should be checked and adjusted as needed • Migrations need to be moved to their “owning” package manually
Validation Validation is about various … • incoming data needs to be validated for security reasons • no evil markup in submitted content • domain model integrity needs to be ensured • an email needs to be (syntactically) valid • credit card numbers should consist only of digits
Validation Validation in FLOW3 • you do not want to code checks into your controllers • FLOW3 separates validation from your controller’s concerns • no PHP code needed for validation • declared through annotations
Validation Validation Models • BaseProperties rules defining the minimum requirements on individual properties of a model • BaseModel rules or custom validators enforcing the minimum requirements on the combination of properties of a model • Supplemental rules defining additional requirements on a model for a specific situation (e.g. a certain action method)
Validation Base Properties • Validation rules defined directly at the properties /** * @var string * @validate StringLength(minimum = 10, maximum = 100) */ protected $title; /** * @var string * @validate StringLength(minimum = 1, maximum = 50) */ protected $author;
Validation Validators • validators provided by FLOW3 can be used through their short name • Count, Float, NotEmpty, RegularExpression, Uuid, DateTime, NumberRange, StringLength, Alphanumeric, Integer, Number, String, EmailAddress, Label, Raw, Text • custom validators need to implement the ValidatorInterface • use them by specifying the fully qualified class name /** * @var DambekalnsStuffDomainModelStuff * @validate DambekalnsStuffDomainValidatorStuffValidator */ protected $stuff;
Property Mapper Transfer properties from A to B • Allows for complete or partial copying of objects and object graphs • Is used by the MVC framework for the mapping of raw GET and POST data to Argument objects
Property Mapper $articleArray = array( 'headline' => 'Hello World!', 'story' => 'Just a demo ...' ); $article = $mapper->convert($sourceArray, 'Acme.DemoDomainModelArticle');
Resource Management Image Upload Resources are handled like other properties in a form: <f:form method="blog" action="update" object="{blog}" name="blog" enctype="multipart/form-data"> <f:if condition="{blog.authorPicture}"> <img src="{f:uri.resource(resource: blog.authorPicture)}" /> </f:if> <label for="authorPicture">Author picture</label> <f:form.upload property="authorPicture" id="authorPicture" /> <f:form.submit value="Update"/> </f:form>
Property Mapper Allow nested object structures For security reasons the creation of nested structure through the property mapper is disabled by default /** * @return void */ public function initializeUpdateAction() { $this->arguments['article']->getPropertyMappingConfiguration() ->allowCreationForSubProperty('picture'); $this->arguments['article']->getPropertyMappingConfiguration() ->allowModificationForSubProperty('picture'); }
The Zen of Templating FLOW3 comes with an elegant, flexible and secure templating engine: Fluid • templates are valid HTML • templates contain no PHP code • object access, control structures, loops ... • designer-friendly • extensible (view helpers, widgets)
Fluid Example for assigning a string to a Fluid variable: // in the action controller: $this->view->assign('title', 'Welcome to Fluid'); <!-- in the Fluid template: --> <head> <title>{title}</title> </head>
Fluid Variables can also be objects: // in the action controller: $this->view->assign('conference', $conference); <!-- in the Fluid template: --> <div class="venue"> <p>Venue Street: {conference.venue.street}</p> </div>
Fluid if-then-else: // in the action controller: $this->view->assign('post', $blogPost); <!-- in the Fluid template: --> <f:if condition="{post.comments}"> <f:then>There are some comments.</f:then> <f:else>There are no comments.</f:else> </f:if>
Fluid for-each: // in the action controller: $this->view->assign('ages', array("Karsten" => 34, "Robert" => 35)); <!-- in the Fluid template: --> <ul> <f:for each="{ages}" as="age" key="name"> <li>{name} is {age} year old.</li> </f:for> </ul>
Fluid for-each: // in the action controller: $this->view->assign('post', $blogPost); <!-- in the Fluid template: --> <f:if condition="{post.comments}"> <ul> <f:for each="{post.comments}" as="comment" > <li>{post.title}</li> </f:for> </ul> </f:if>
Fluid View helpers – in this case the link.action view helper: <!-- in the Fluid template: --> {namespace f=TYPO3FluidViewHelpers} <f:link.action action="delete" arguments="{post: post, really: 'yes'}"> Delete this post </f:link.action>
Security Touchless Security, Flow-Style • security is handled at a central place (through AOP) • third-party code is as secure as possible by default • modeled after our experiences in the TYPO3 project and Spring Security (Java framework) • provides authentication, authorization, validation, filtering ... • can intercept arbitrary method calls • transparently filters content through query-rewriting • extensible for new authentication or authorization mechanisms
Security Policy
Security Cross-Site Request Forgery • enables an attacker to execute privileged operations without being authenticated • the risk lies in using malicious links or forms while still being authenticated • imagine a link coming in through an URL shortener...
Security Avoiding Cross-Site Request Forgery • add a (truly!) random string token to each link or form • make sure this token is correct before executing anything • change the token as often as possible to make it impossible to send you a working malicious link while you’re logged in • in most cases, we can assume that it should be enough to generate one token when you log in – that’s the default
Security CSRF Protection in FLOW3 • you must not forget to add that token to any link • FLOW3 automatically adds the CSRF token to each • link you generate • each form you create with Fluid • and checks it for every call to a protected action • the protection can be disabled using @skipCsrfProtection on an action
AOP Aspect-Oriented Programming • programming paradigm • separates concerns to improve modularization • OOP modularizes concerns into objects • AOP modularizes cross-cutting concerns into aspects • FLOW3 makes it easy (and possible at all) to use AOP in PHP
AOP /** * @aspect FLOW3 uses AOP for ... * @introduce */ TYPO3FLOW3P ersistenceAs pectPersiste class Persist nceMagicInter enceMagicAspe face, TYP ct { • persistence magic /** * @pointcut c lassTaggedWit */ h(entity) || classTaggedWi th(valueobjec • logging public functi on isEntityOr ValueObject() {} t) /** * @var string • debugging * @Id * @Column(len gth="40") * @introduce TYPO3FLOW3P */ ersistenceAs pectPersiste • security protected $FL OW3_Persisten ce_Identifier ; nceMagicAspec t->isE /** * After retur ning advice, * making sure w e have an UUI * @param TYP D for each an O3FLOW3AOP d every * @return voi JoinPointInte d rface $joinPo * @before cla int The curre ssTaggedWith( nt join */ entity) && me thod(.*->__co public functi nstruct()) on generateUU $proxy = $joi ID(TYPO3FLO nPoint->getPr W3AOPJoinPo oxy(); intInterface TYPO3FLOW3 $joinPoin ReflectionOb } jectAccess::s etProperty($p r o x y , 'FLOW3_ Persi
Signal-Slot Event Handling Signal • can be fired on any event • can be freely defined by the developer Slot • is invoked when a signal is emitted • any method can be used as a slot any signal can be wired to any slot
Signal-Slot Event Handling /** * @param TYPO3BlogDomainModelPost $post * @param TYPO3BlogDomainModelComment $newComment * @return void */ public function createAction(TYPO3BlogDomainModelPost $post, TYPO3BlogDomainModelComment $newComment) { $post->addComment($newComment); $this->emitCommentCreated($newComment, $post); … } /** * @param TYPO3BlogDomainModelComment $comment * @param TYPO3BlogDomainModelPost $post * @return void * @signal */ protected function emitCommentCreated(TYPO3BlogDomainModelComment $comment, TYPO3BlogDomainModelPost $post) {}
Signal-Slot Event Handling Signals are wired to Slots in a package’s bootstrap: /** * Invokes custom PHP code directly after the package manager has been * initialized. * * @param TYPO3FLOW3CoreBootstrap $bootstrap The current bootstrap * @return void */ public function boot(TYPO3FLOW3CoreBootstrap $bootstrap) { $dispatcher = $bootstrap->getSignalSlotDispatcher(); $dispatcher->connect( 'TYPO3BlogControllerCommentController', 'commentCreated', 'TYPO3BlogServiceNotification', 'sendNewCommentNotification' ); }
Signal-Slot Event Handling Any method can be a slot: /** * @param TYPO3BlogDomainModelComment $comment * @param TYPO3BlogDomainModelPost $post * @return void */ public function sendNewCommentNotification(TYPO3BlogDomainModelComment $comment, TYPO3BlogDomainModelPost $post) { $mail = new TYPO3SwiftMailerMessage(); $mail ->setFrom(array('john@doe.org ' => 'John Doe')) ->setTo(array('karsten@typo3.org ' => 'Karsten Dambekalns')) ->setSubject('New comment on blog post "' . $post->getTitle() . '"') ->setBody($comment->getContent()) ->send(); }
Roadmap http://forge.typo3.org/projects/flow3-distribution-base/roadmap
Conference App git://git.typo3.org/TYPO3v5/Distributions/Conference.git
Blog App git://git.typo3.org/FLOW3/Applications/Blog.git
Rossmann • second biggest drug store in Germany • 5,13 billion € turnover • 31,000 employees
Customer Database • custom persistence with CouchDB • SOAP support • continuous delivery • cluster setup by networkteam, Kiel
Amadeus • world’s biggest e-ticket provider • 217 markets • 948 million billable transactions / year • 2,7 billion € revenue
Social Media Suite • central hub for social media activities for potentially thousands of travel agencies • advanced form engine • various detail improvements by AKOM360, Munich • uses an early version of TYPO3 Phoenix
“Our senior developers are extremely happy with FLOW3 – it is definitely the most capable PHP framework we Fabian Pfütze Project Lead have come across so far.”
?
Thanks for having me! • FLOW3: http://flow3.typo3.org • Blog: http://robertlemke.com • Twitter: @robertlemke • Feedback: robert@typo3.org

More Related Content

PDF
Getting Into FLOW3 (DPC12)
Robert Lemke
 
PDF
2012 08-11-flow3-northeast-php
Jochen Rau
 
PDF
Fluent Development with FLOW3 1.0
Robert Lemke
 
PDF
Unit VI
Bhavsingh Maloth
 
PDF
PHP 良好實踐 (Best Practice)
Win Yu
 
PDF
Hands on FLOW3 (DPC12)
Robert Lemke
 
PDF
MidwestPHP Symfony2 Internals
Raul Fraile
 
PDF
PECL Picks - Extensions to make your life better
ZendCon
 
Getting Into FLOW3 (DPC12)
Robert Lemke
 
2012 08-11-flow3-northeast-php
Jochen Rau
 
Fluent Development with FLOW3 1.0
Robert Lemke
 
Unit VI
Bhavsingh Maloth
 
PHP 良好實踐 (Best Practice)
Win Yu
 
Hands on FLOW3 (DPC12)
Robert Lemke
 
MidwestPHP Symfony2 Internals
Raul Fraile
 
PECL Picks - Extensions to make your life better
ZendCon
 

What's hot (20)

PDF
Debugging on rails
Mykhaylo Sorochan
 
ODP
Mastering Namespaces in PHP
Nick Belhomme
 
PDF
Spl in the wild
Elizabeth Smith
 
PDF
IPCSE12: Hands on FLOW3
Robert Lemke
 
PDF
PHP traits, treat or threat?
Nick Belhomme
 
PPTX
Streams, sockets and filters oh my!
Elizabeth Smith
 
PDF
Rails vs Web2py
jonromero
 
PDF
You suck at Memory Analysis
Francisco Ribeiro
 
PDF
170517 damien gérard framework facebook
Geeks Anonymes
 
PPTX
Php on the Web and Desktop
Elizabeth Smith
 
PDF
HHVM and Hack: A quick introduction
Kuan Yen Heng
 
PPTX
HipHop Virtual Machine
Radu Murzea
 
PDF
Cross platform php
Elizabeth Smith
 
PDF
Writing and using php streams and sockets tek11
Elizabeth Smith
 
PPT
Migrating PriceChirp to Rails 3.0: The Pain Points
Steven Evatt
 
PDF
SPL to the Rescue - Tek 09
Elizabeth Smith
 
PDF
Perl Programming - 01 Basic Perl
Danairat Thanabodithammachari
 
PPTX
Why choose Hack/HHVM over PHP7
Yuji Otani
 
PDF
WEB PROGRAMMING UNIT VI BY BHAVSINGH MALOTH
Bhavsingh Maloth
 
PDF
System Programming and Administration
Krasimir Berov (Красимир Беров)
 
Debugging on rails
Mykhaylo Sorochan
 
Mastering Namespaces in PHP
Nick Belhomme
 
Spl in the wild
Elizabeth Smith
 
IPCSE12: Hands on FLOW3
Robert Lemke
 
PHP traits, treat or threat?
Nick Belhomme
 
Streams, sockets and filters oh my!
Elizabeth Smith
 
Rails vs Web2py
jonromero
 
You suck at Memory Analysis
Francisco Ribeiro
 
170517 damien gérard framework facebook
Geeks Anonymes
 
Php on the Web and Desktop
Elizabeth Smith
 
HHVM and Hack: A quick introduction
Kuan Yen Heng
 
HipHop Virtual Machine
Radu Murzea
 
Cross platform php
Elizabeth Smith
 
Writing and using php streams and sockets tek11
Elizabeth Smith
 
Migrating PriceChirp to Rails 3.0: The Pain Points
Steven Evatt
 
SPL to the Rescue - Tek 09
Elizabeth Smith
 
Perl Programming - 01 Basic Perl
Danairat Thanabodithammachari
 
Why choose Hack/HHVM over PHP7
Yuji Otani
 
WEB PROGRAMMING UNIT VI BY BHAVSINGH MALOTH
Bhavsingh Maloth
 
System Programming and Administration
Krasimir Berov (Красимир Беров)
 
Ad

Similar to IPCSE12: Getting into FLOW3 (20)

PDF
Getting Into FLOW3 (TYPO312CA)
Robert Lemke
 
PDF
FLOW3 Tutorial - T3CON11 Frankfurt
Robert Lemke
 
PDF
TYPO3 Flow 2.0 Workshop T3BOARD13
Robert Lemke
 
PDF
Fluent Development with FLOW3 1.0
Robert Lemke
 
PDF
Applications for the Enterprise with PHP (CPEurope)
Robert Lemke
 
PDF
Fluent Development with FLOW3
Robert Lemke
 
PDF
TYPO3 Flow 2.0 (International PHP Conference 2013)
Robert Lemke
 
PDF
TYPO3 Flow and the Joy of Development (FOSDEM 2013)
Robert Lemke
 
PDF
TYPO3 Flow 2.0 in the field - webtech Conference 2013
die.agilen GmbH
 
PDF
Creating Clean Code with AOP (WebExpo 2010)
Robert Lemke
 
PDF
TYPO3 Flow 2.0 (T3CON13 San Francisco)
Robert Lemke
 
PDF
TYPO3 Flow: Beyond the Blog Example (Inspiring Flow 2013)
Robert Lemke
 
PDF
Object Oriented Programming for WordPress Plugin Development
mtoppa
 
PDF
IPC07 Talk - Beautiful Code with AOP and DI
Robert Lemke
 
PDF
Design patterns illustrated-2015-03
Herman Peeren
 
PDF
Beyond MVC: from Model to Domain
Jeremy Cook
 
PDF
Domain Driven Design
Pascal Larocque
 
PPT
PHP MVC
Reggie Niccolo Santos
 
PDF
Lithium: The Framework for People Who Hate Frameworks
Nate Abele
 
PDF
From framework coupled code to #microservices through #DDD /by @codelytv
CodelyTV
 
Getting Into FLOW3 (TYPO312CA)
Robert Lemke
 
FLOW3 Tutorial - T3CON11 Frankfurt
Robert Lemke
 
TYPO3 Flow 2.0 Workshop T3BOARD13
Robert Lemke
 
Fluent Development with FLOW3 1.0
Robert Lemke
 
Applications for the Enterprise with PHP (CPEurope)
Robert Lemke
 
Fluent Development with FLOW3
Robert Lemke
 
TYPO3 Flow 2.0 (International PHP Conference 2013)
Robert Lemke
 
TYPO3 Flow and the Joy of Development (FOSDEM 2013)
Robert Lemke
 
TYPO3 Flow 2.0 in the field - webtech Conference 2013
die.agilen GmbH
 
Creating Clean Code with AOP (WebExpo 2010)
Robert Lemke
 
TYPO3 Flow 2.0 (T3CON13 San Francisco)
Robert Lemke
 
TYPO3 Flow: Beyond the Blog Example (Inspiring Flow 2013)
Robert Lemke
 
Object Oriented Programming for WordPress Plugin Development
mtoppa
 
IPC07 Talk - Beautiful Code with AOP and DI
Robert Lemke
 
Design patterns illustrated-2015-03
Herman Peeren
 
Beyond MVC: from Model to Domain
Jeremy Cook
 
Domain Driven Design
Pascal Larocque
 
PHP MVC
Reggie Niccolo Santos
 
Lithium: The Framework for People Who Hate Frameworks
Nate Abele
 
From framework coupled code to #microservices through #DDD /by @codelytv
CodelyTV
 
Ad

More from Robert Lemke (20)

PDF
Neos Content Repository – Git for content
Robert Lemke
 
PDF
A General Purpose Docker Image for PHP
Robert Lemke
 
PDF
Scaleable PHP Applications in Kubernetes
Robert Lemke
 
PDF
Flownative Beach - Neos Meetup Hamburg 2022
Robert Lemke
 
PDF
GitOps with Flux - IPC Munich 2022
Robert Lemke
 
PDF
OpenID Connect with Neos and Flow
Robert Lemke
 
PDF
Neos Conference 2019 Keynote
Robert Lemke
 
PDF
A practical introduction to Kubernetes (IPC 2018)
Robert Lemke
 
PDF
Neos Conference 2018 Welcome Keynote
Robert Lemke
 
PDF
A practical introduction to Event Sourcing and CQRS
Robert Lemke
 
PDF
Neos Conference 2017 Welcome Keynote
Robert Lemke
 
PDF
IPC16: A Practical Introduction to Kubernetes
Robert Lemke
 
PDF
IPC 2016: Content Strategy for Developers
Robert Lemke
 
PDF
Docker in Production - IPC 2016
Robert Lemke
 
PDF
Is this Open Source Thing Really Worth it? (IPC 2016 Berlin)
Robert Lemke
 
PDF
The Neos Brand (Inspiring Conference 2016)
Robert Lemke
 
PDF
Neos - past, present, future (Inspiring Conference 2016)
Robert Lemke
 
PDF
Meet Neos Nürnberg 2016: Ja ich will!
Robert Lemke
 
PDF
Meet Neos Nürnberg 2016: Hallo Neos!
Robert Lemke
 
PDF
Turning Neos inside out / React.js HH
Robert Lemke
 
Neos Content Repository – Git for content
Robert Lemke
 
A General Purpose Docker Image for PHP
Robert Lemke
 
Scaleable PHP Applications in Kubernetes
Robert Lemke
 
Flownative Beach - Neos Meetup Hamburg 2022
Robert Lemke
 
GitOps with Flux - IPC Munich 2022
Robert Lemke
 
OpenID Connect with Neos and Flow
Robert Lemke
 
Neos Conference 2019 Keynote
Robert Lemke
 
A practical introduction to Kubernetes (IPC 2018)
Robert Lemke
 
Neos Conference 2018 Welcome Keynote
Robert Lemke
 
A practical introduction to Event Sourcing and CQRS
Robert Lemke
 
Neos Conference 2017 Welcome Keynote
Robert Lemke
 
IPC16: A Practical Introduction to Kubernetes
Robert Lemke
 
IPC 2016: Content Strategy for Developers
Robert Lemke
 
Docker in Production - IPC 2016
Robert Lemke
 
Is this Open Source Thing Really Worth it? (IPC 2016 Berlin)
Robert Lemke
 
The Neos Brand (Inspiring Conference 2016)
Robert Lemke
 
Neos - past, present, future (Inspiring Conference 2016)
Robert Lemke
 
Meet Neos Nürnberg 2016: Ja ich will!
Robert Lemke
 
Meet Neos Nürnberg 2016: Hallo Neos!
Robert Lemke
 
Turning Neos inside out / React.js HH
Robert Lemke
 

Recently uploaded (20)

PDF
Encapsulation theory and applications.pdf
gurumoop
 
PDF
NewMind AI Weekly Chronicles - August'25-Week II
NewMind AI
 
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
ZubinRadhakrishnan
 
PPTX
Cloud computing and distributed systems.
kkkkkhan
 
PDF
Chapter 3 Spatial Domain Image Processing.pdf
Getnet Tigabie Askale -(GM)
 
PPTX
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
23bcla24
 
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
David Malick Dieng
 
PDF
Unlocking AI with Model Context Protocol (MCP)
Brian McKeiver
 
PDF
Optimiser vos workloads AI/ML sur Amazon EC2 et AWS Graviton
Julien SIMON
 
PPTX
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
muhammadmuneebnaeem7
 
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Jian-Hong Pan
 
PDF
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Safe Software
 
PDF
Approach and Philosophy of On baking technology
30anthuong17
 
PDF
Encapsulation_ Review paper, used for researhc scholars
gurumoop
 
PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
blackmambaettijean
 
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
Mark Billinghurst
 
PDF
Dropbox Q2 2025 Financial Results & Investor Presentation
Dropbox
 
PPTX
Big Data Technologies - Introduction.pptx
kuthubussaman1
 
PDF
Spectral efficient network and resource selection model in 5G networks
IAESIJAI
 
PDF
Per capita expenditure prediction using model stacking based on satellite ima...
IAESIJAI
 
Encapsulation theory and applications.pdf
gurumoop
 
NewMind AI Weekly Chronicles - August'25-Week II
NewMind AI
 
“AI and Expert System Decision Support & Business Intelligence Systems”
ZubinRadhakrishnan
 
Cloud computing and distributed systems.
kkkkkhan
 
Chapter 3 Spatial Domain Image Processing.pdf
Getnet Tigabie Askale -(GM)
 
ACSFv1EN-58255 AWS Academy Cloud Security Foundations.pptx
23bcla24
 
Digital-Transformation-Roadmap-for-Companies.pptx
David Malick Dieng
 
Unlocking AI with Model Context Protocol (MCP)
Brian McKeiver
 
Optimiser vos workloads AI/ML sur Amazon EC2 et AWS Graviton
Julien SIMON
 
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
muhammadmuneebnaeem7
 
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Jian-Hong Pan
 
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Safe Software
 
Approach and Philosophy of On baking technology
30anthuong17
 
Encapsulation_ Review paper, used for researhc scholars
gurumoop
 
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
blackmambaettijean
 
Reach Out and Touch Someone: Haptics and Empathic Computing
Mark Billinghurst
 
Dropbox Q2 2025 Financial Results & Investor Presentation
Dropbox
 
Big Data Technologies - Introduction.pptx
kuthubussaman1
 
Spectral efficient network and resource selection model in 5G networks
IAESIJAI
 
Per capita expenditure prediction using model stacking based on satellite ima...
IAESIJAI
 

IPCSE12: Getting into FLOW3

  • 2. Robert Lemke chief architect of FLOW3 and TYPO3 “Phoenix” co-founder of the TYPO3 Association coach, coder, consultant 36 years old lives in Lübeck, Germany 1 wife, 2 daughters, 1 espresso machine likes drumming
  • 3. Starters Installation Kickstart & Hello World! Controller, Actions, Arguments & HTTP Domain-Driven Design Doctrine Forms, Validation
  • 4. Main Dishes Resources, Image Upload Session Handling User, Account, Authentication Authorization
  • 5. Deserts Caching Testing Logging Deployment Signal-Slot I18n Routing Espresso
  • 6. ?
  • 8. At a Glance FLOW3 is a web application platform • brings PHP development to a new level • made for PHP 5.3, full namespaces support • modular, extensible, package based • free & Open Source (LGPL v3) • backed by one of the largest Open Source projects with 6000+ contributors
  • 9. Foundation for the Next Generation CMS TYPO3 “Phoenix” is the all-new Enterprise CMS • content repository, workspaces, versions, i18n, modular UI ... • powered by FLOW3 • compatible code base • use TYPO3 features in FLOW3 standalone apps as you like
  • 10. FLOW3 Website and Download #
  • 11. Git Clone $ git clone --recursive git://git.typo3.org/FLOW3/Distributions/Base.git . Cloning into .... remote: Counting objects: 3837, done. remote: Compressing objects: 100% (2023/2023), done. remote: Total 3837 (delta 2007), reused 2721 (delta 1465) Receiving objects: 100% (3837/3837), 3.49 MiB | 28 KiB/s, done. Resolving deltas: 100% (2007/2007), done.
  • 12. Set File Permissions $ sudo ./flow3 core:setfilepermissions robert _www _www FLOW3 File Permission Script Checking permissions from here upwards. Making sure Data and Web/_Resources exist. Setting file permissions, trying to set ACLs via chmod ... Done. Linux: $ sudo usermod -a -G www-data robert Mac OS X: $ sudo dscl . -append /Groups/_www GroupMembership robert
  • 13. Set Up Database Connection Configuration/Settings.yaml # # # Global Settings # # # TYPO3: FLOW3: persistence: backendOptions: dbname: 'demo' user: 'demo' password: 'password' host: '127.0.0.1' # only on Windows: core: phpBinaryPathAndFilename: 'C:/path/to/php.exe'
  • 14. Set Up Virtual Host Apache Virtual Host <VirtualHost *:80> DocumentRoot /opt/local/apache2/htdocs/Talks/FLOW3/Web/ ServerName dev.flow3.rob SetEnv FLOW3_CONTEXT Development </VirtualHost> <VirtualHost *:80> DocumentRoot /opt/local/apache2/htdocs/Talks/FLOW3/Web/ ServerName flow3.rob SetEnv FLOW3_CONTEXT Production </VirtualHost>
  • 16. C lo ne t h e Be a s t 5 1 1 1 Ro bert Lem ke D.P. F l u x t r time ();
  • 18. Biggest River: Amazon River © Google
  • 19. Smallest River: Roe River © Google
  • 20. Smallest River: Roe River © Google
  • 21. Smallest River: Roe River © Google
  • 22. Smallest Book Store: Roe Books
  • 24. Jus t C o de a Sh o p 5 2 1 1 Ro bert Lem ke D.P. F l u x t r time ();
  • 25. Tackling the Heart of Software Development /** Domain-Driven Design * A Book * * @FLOW3Scope(“protot ype”) * @FLOW3Entity A methodology which ... */ class Book { • results in rich domain models /** * @var string */ • provides a common language protected $title; across the project team /** * @var string */ • simplify the design of complex protected $isbn; applications /** * @var string */ protected $description ; FLOW3 is the first PHP framework /** tailored to Domain-Driven Design * @var integer */ protected $price;
  • 26. Domain-Driven Design Domain activity or business of the user Domain-Driven Design is about • focussing on the domain and domain logic • accurately mapping the concepts to software • forming a ubiquitous language among the project members
  • 27. Domain-Driven Design Ubiquitous Language • important prerequisite for successful collaboration • use the same words for • discussion • modeling • development • documentation
  • 28. Domain-Driven Design Building Blocks • Entity: An object that is not defined by its attributes, but rather by a thread of continuity and its identity. • Value Object: An object that contains attributes but has no conceptual identity. They should be treated as immutable. • Aggregate: A collection of objects that are bound together by a root entity, otherwise known as an aggregate root. The aggregate root guarantees the consistency of changes being made within the aggregate by forbidding external objects from holding references to its members.
  • 29. Domain-Driven Design Building Blocks • Service: When an operation does not conceptually belong to any object. Following the natural contours of the problem, you can implement these operations in services. • Repository: methods for retrieving domain objects should delegate to a specialized Repository object such that alternative storage implementations may be easily interchanged.
  • 31. Object Management FLOW3's take on Dependency Injection • one of the first PHP implementations (started in 2006, improved ever since) • object management for the whole lifecycle of all objects • no unnecessary configuration if information can be gatered automatically (autowiring) • intuitive use and no bad magical surprises • fast! (like hardcoded or faster)
  • 32. Constructor Injection namespace AcmeDemoController; use TYPO3FLOW3MvcControllerActionController; use AcmeDemoServiceGreeterService; class DemoController extends ActionController { /** * @var AcmeDemoServiceGreeterService */ protected $greeterService; /** * @param AcmeDemoServiceGreeterService */ public function __construct(GreeterService $greeterService) { $this->greeterService = $greeterService; } /** * @param string $name */ public function helloAction($name) { return $this->greeterService->greet($name); } }
  • 33. Setter Injection namespace AcmeDemoController; use TYPO3FLOW3MVCControllerActionController; use AcmeDemoServiceGreeterService; class DemoController extends ActionController { /** * @var AcmeDemoServiceGreeterService */ protected $greeterService; /** * @param AcmeDemoServiceGreeterService */ public function injectGreeterService(GreeterService $greeterService) { $this->greeterService = $greeterService; } /** * @param string $name */ public function helloAction($name) { return $this->greeterService->greet($name); } }
  • 34. Property Injection namespace TYPO3DemoController; use TYPO3FLOW3Annotations as FLOW3; use TYPO3FLOW3MVCControllerActionController; use AcmeDemoServiceGreeterService; class DemoController extends ActionController { /** * @var TYPO3DemoServiceGreeterService * @FLOW3Inject */ protected $greeterService; /** * @param string $name */ public function helloAction($name) { return $this->greeterService->greet($name); } }
  • 35. Objects.yaml TYPO3FLOW3SecurityCryptographyRsaWalletServiceInterface: className: TYPO3FLOW3SecurityCryptographyRsaWalletServicePhp scope: singleton properties: keystoreCache: object: factoryObjectName: TYPO3FLOW3CacheCacheManager factoryMethodName: getCache arguments: 1: value: FLOW3_Security_Cryptography_RSAWallet
  • 36. Object Management class Customer { /** * @FLOW3Inject * @var AcmeCustomerNumberGenerator */ protected $customerNumberGenerator; ... } $customer = new Customer(); $customer->getCustomerNumber();
  • 37. Object Management <?php declare(ENCODING = 'u tf-8'); namespace TYPO3Conf erenceDomainModel use TYPO3FLOW3Anno Conference; tations as FLOW3; FLOW3 creates proxy classes /** * Autogenerated Prox y Class for realizing DI and AOP magic * @FLOW3Scope(“prot otype”) * @FLOW3Entity */ • new operator is supported class Paper extends TYPO3FLOW3Persist Paper_Original implem ents TYPO3FLOW3Obj ect enceAspectPersiste nceMagicInterface { /** • proxy classes are created * @var string on the fly * @ORMId * @ORMColumn(length ="40") * introduced by TYPO 3FLOW3Persistence */ AspectPersistenceMa • in production context all protected $FLOW3_Per sistence_Identifier = NULL; code is static private $FLOW3_AOP_P roxy_targetMethodsAn dGroupedAdvices = ar ra private $FLOW3_AOP_P roxy_groupedAdviceCh ains = array(); private $FLOW3_AOP_P roxy_methodIsInAdvic eMode = array(); /** * Autogenerated Prox y Method */ public function __co nstruct()
  • 38. Persistence Object Persistence in the Flow • based on Doctrine 2 • seamless integration into FLOW3 • provides all the great Doctrine 2 features • uses UUIDs • low level persistence API • allows for own, custom persistence backends (instead of Doctrine 2) • e.g. CouchDB, Solr
  • 39. Basic Object Persistence // Create a new customer and persist it: $customer = new Customer("Robert"); $this->customerRepository->add($customer); // Find an existing customer: $otherCustomer = $this->customerRepository->findByFirstName("Karsten"); // and delete it: $this->customerRepository->remove($otherCustomer);
  • 40. Validation and Doctrine Annotations namespace TYPO3BlogDomainModel; /** * A Blog object * * @Entity */ class Blog { /** * @var string * @validate Text, StringLength(minimum = 1, maximum = 80) * @Column(length="80") */ protected $title; /** * @var DoctrineCommonCollectionsCollection<TYPO3BlogDomainModelPost> * @OneToMany(mappedBy="blog") * @OrderBy({"date" = "DESC"}) */ protected $posts; ... }
  • 41. Persistence-related Annotations @Entity Declares a class as "entity" @Column Controls the database column related to the class property. Very useful for longer text content (type="text" !) @ManyToOne Defines relations to other entities. Unlike with @OneToMany vanilla Doctrine targetEntity does not have to be @ManyToMany given but will be reused from the @var @OneToOne annotation. cascade can be used to cascade operation to related objects.
  • 42. Persistence-related Annotations @var Defines the type of a property, collections can be typed using angle brackets: DoctrineCommonCollectionsCollection<TYPO3ConferenceDomainModelComment> @transient The property will be ignored, it will neither be persisted nor reconstituted @identity Marks the property as part of an objects identity
  • 43. Custom Queries using the Query Object Model /** * A PostRepository */ class PostRepository extends TYPO3FLOW3PersistenceRepository { /** * Finds posts by the specified tag and blog * * @param TYPO3BlogDomainModelTag $tag * @param TYPO3BlogDomainModelBlog $blog The blog the post must refer to * @return TYPO3FLOW3PersistenceQueryResultInterface The posts */ public function findByTagAndBlog(TYPO3BlogDomainModelTag $tag, TYPO3BlogDomainModelBlog $blog) { $query = $this->createQuery(); return $query->matching( $query->logicalAnd( $query->equals('blog', $blog), $query->contains('tags', $tag) ) ) ->setOrderings(array( 'date' => TYPO3FLOW3PersistenceQueryInterface::ORDER_DESCENDING) ) ->execute(); } }
  • 44. Schema Management Doctrine 2 Migrations • Migrations allow schema versioning and change deployment • Migrations are the recommended way for DB updates • Tools to create and deploy migrations are integrated with FLOW3
  • 45. Schema Management Running Migrations • needed after installation or upgrade: $ ./flow3 doctrine:migrate
  • 46. Schema Management Manual database updates • for simple situations this can be good enough: $ ./flow3 doctrine:create $ ./flow3 doctrine:update • useful when • you are just starting a project and have never released
  • 47. Schema Management Generating migrations $ ./flow3 doctrine:migrationgenerate Generated new migration class to "…/Version20110608074324.php" from schema differences. $ • Generated migrations can contain errors and should be checked and adjusted as needed • Migrations need to be moved to their “owning” package manually
  • 48. Validation Validation is about various … • incoming data needs to be validated for security reasons • no evil markup in submitted content • domain model integrity needs to be ensured • an email needs to be (syntactically) valid • credit card numbers should consist only of digits
  • 49. Validation Validation in FLOW3 • you do not want to code checks into your controllers • FLOW3 separates validation from your controller’s concerns • no PHP code needed for validation • declared through annotations
  • 50. Validation Validation Models • BaseProperties rules defining the minimum requirements on individual properties of a model • BaseModel rules or custom validators enforcing the minimum requirements on the combination of properties of a model • Supplemental rules defining additional requirements on a model for a specific situation (e.g. a certain action method)
  • 51. Validation Base Properties • Validation rules defined directly at the properties /** * @var string * @validate StringLength(minimum = 10, maximum = 100) */ protected $title; /** * @var string * @validate StringLength(minimum = 1, maximum = 50) */ protected $author;
  • 52. Validation Validators • validators provided by FLOW3 can be used through their short name • Count, Float, NotEmpty, RegularExpression, Uuid, DateTime, NumberRange, StringLength, Alphanumeric, Integer, Number, String, EmailAddress, Label, Raw, Text • custom validators need to implement the ValidatorInterface • use them by specifying the fully qualified class name /** * @var DambekalnsStuffDomainModelStuff * @validate DambekalnsStuffDomainValidatorStuffValidator */ protected $stuff;
  • 53. Property Mapper Transfer properties from A to B • Allows for complete or partial copying of objects and object graphs • Is used by the MVC framework for the mapping of raw GET and POST data to Argument objects
  • 54. Property Mapper $articleArray = array( 'headline' => 'Hello World!', 'story' => 'Just a demo ...' ); $article = $mapper->convert($sourceArray, 'Acme.DemoDomainModelArticle');
  • 55. Resource Management Image Upload Resources are handled like other properties in a form: <f:form method="blog" action="update" object="{blog}" name="blog" enctype="multipart/form-data"> <f:if condition="{blog.authorPicture}"> <img src="{f:uri.resource(resource: blog.authorPicture)}" /> </f:if> <label for="authorPicture">Author picture</label> <f:form.upload property="authorPicture" id="authorPicture" /> <f:form.submit value="Update"/> </f:form>
  • 56. Property Mapper Allow nested object structures For security reasons the creation of nested structure through the property mapper is disabled by default /** * @return void */ public function initializeUpdateAction() { $this->arguments['article']->getPropertyMappingConfiguration() ->allowCreationForSubProperty('picture'); $this->arguments['article']->getPropertyMappingConfiguration() ->allowModificationForSubProperty('picture'); }
  • 57. The Zen of Templating FLOW3 comes with an elegant, flexible and secure templating engine: Fluid • templates are valid HTML • templates contain no PHP code • object access, control structures, loops ... • designer-friendly • extensible (view helpers, widgets)
  • 58. Fluid Example for assigning a string to a Fluid variable: // in the action controller: $this->view->assign('title', 'Welcome to Fluid'); <!-- in the Fluid template: --> <head> <title>{title}</title> </head>
  • 59. Fluid Variables can also be objects: // in the action controller: $this->view->assign('conference', $conference); <!-- in the Fluid template: --> <div class="venue"> <p>Venue Street: {conference.venue.street}</p> </div>
  • 60. Fluid if-then-else: // in the action controller: $this->view->assign('post', $blogPost); <!-- in the Fluid template: --> <f:if condition="{post.comments}"> <f:then>There are some comments.</f:then> <f:else>There are no comments.</f:else> </f:if>
  • 61. Fluid for-each: // in the action controller: $this->view->assign('ages', array("Karsten" => 34, "Robert" => 35)); <!-- in the Fluid template: --> <ul> <f:for each="{ages}" as="age" key="name"> <li>{name} is {age} year old.</li> </f:for> </ul>
  • 62. Fluid for-each: // in the action controller: $this->view->assign('post', $blogPost); <!-- in the Fluid template: --> <f:if condition="{post.comments}"> <ul> <f:for each="{post.comments}" as="comment" > <li>{post.title}</li> </f:for> </ul> </f:if>
  • 63. Fluid View helpers – in this case the link.action view helper: <!-- in the Fluid template: --> {namespace f=TYPO3FluidViewHelpers} <f:link.action action="delete" arguments="{post: post, really: 'yes'}"> Delete this post </f:link.action>
  • 64. Security Touchless Security, Flow-Style • security is handled at a central place (through AOP) • third-party code is as secure as possible by default • modeled after our experiences in the TYPO3 project and Spring Security (Java framework) • provides authentication, authorization, validation, filtering ... • can intercept arbitrary method calls • transparently filters content through query-rewriting • extensible for new authentication or authorization mechanisms
  • 66. Security Cross-Site Request Forgery • enables an attacker to execute privileged operations without being authenticated • the risk lies in using malicious links or forms while still being authenticated • imagine a link coming in through an URL shortener...
  • 67. Security Avoiding Cross-Site Request Forgery • add a (truly!) random string token to each link or form • make sure this token is correct before executing anything • change the token as often as possible to make it impossible to send you a working malicious link while you’re logged in • in most cases, we can assume that it should be enough to generate one token when you log in – that’s the default
  • 68. Security CSRF Protection in FLOW3 • you must not forget to add that token to any link • FLOW3 automatically adds the CSRF token to each • link you generate • each form you create with Fluid • and checks it for every call to a protected action • the protection can be disabled using @skipCsrfProtection on an action
  • 69. AOP Aspect-Oriented Programming • programming paradigm • separates concerns to improve modularization • OOP modularizes concerns into objects • AOP modularizes cross-cutting concerns into aspects • FLOW3 makes it easy (and possible at all) to use AOP in PHP
  • 70. AOP /** * @aspect FLOW3 uses AOP for ... * @introduce */ TYPO3FLOW3P ersistenceAs pectPersiste class Persist nceMagicInter enceMagicAspe face, TYP ct { • persistence magic /** * @pointcut c lassTaggedWit */ h(entity) || classTaggedWi th(valueobjec • logging public functi on isEntityOr ValueObject() {} t) /** * @var string • debugging * @Id * @Column(len gth="40") * @introduce TYPO3FLOW3P */ ersistenceAs pectPersiste • security protected $FL OW3_Persisten ce_Identifier ; nceMagicAspec t->isE /** * After retur ning advice, * making sure w e have an UUI * @param TYP D for each an O3FLOW3AOP d every * @return voi JoinPointInte d rface $joinPo * @before cla int The curre ssTaggedWith( nt join */ entity) && me thod(.*->__co public functi nstruct()) on generateUU $proxy = $joi ID(TYPO3FLO nPoint->getPr W3AOPJoinPo oxy(); intInterface TYPO3FLOW3 $joinPoin ReflectionOb } jectAccess::s etProperty($p r o x y , 'FLOW3_ Persi
  • 71. Signal-Slot Event Handling Signal • can be fired on any event • can be freely defined by the developer Slot • is invoked when a signal is emitted • any method can be used as a slot any signal can be wired to any slot
  • 72. Signal-Slot Event Handling /** * @param TYPO3BlogDomainModelPost $post * @param TYPO3BlogDomainModelComment $newComment * @return void */ public function createAction(TYPO3BlogDomainModelPost $post, TYPO3BlogDomainModelComment $newComment) { $post->addComment($newComment); $this->emitCommentCreated($newComment, $post); … } /** * @param TYPO3BlogDomainModelComment $comment * @param TYPO3BlogDomainModelPost $post * @return void * @signal */ protected function emitCommentCreated(TYPO3BlogDomainModelComment $comment, TYPO3BlogDomainModelPost $post) {}
  • 73. Signal-Slot Event Handling Signals are wired to Slots in a package’s bootstrap: /** * Invokes custom PHP code directly after the package manager has been * initialized. * * @param TYPO3FLOW3CoreBootstrap $bootstrap The current bootstrap * @return void */ public function boot(TYPO3FLOW3CoreBootstrap $bootstrap) { $dispatcher = $bootstrap->getSignalSlotDispatcher(); $dispatcher->connect( 'TYPO3BlogControllerCommentController', 'commentCreated', 'TYPO3BlogServiceNotification', 'sendNewCommentNotification' ); }
  • 74. Signal-Slot Event Handling Any method can be a slot: /** * @param TYPO3BlogDomainModelComment $comment * @param TYPO3BlogDomainModelPost $post * @return void */ public function sendNewCommentNotification(TYPO3BlogDomainModelComment $comment, TYPO3BlogDomainModelPost $post) { $mail = new TYPO3SwiftMailerMessage(); $mail ->setFrom(array('john@doe.org ' => 'John Doe')) ->setTo(array('karsten@typo3.org ' => 'Karsten Dambekalns')) ->setSubject('New comment on blog post "' . $post->getTitle() . '"') ->setBody($comment->getContent()) ->send(); }
  • 78. Rossmann • second biggest drug store in Germany • 5,13 billion € turnover • 31,000 employees
  • 79. Customer Database • custom persistence with CouchDB • SOAP support • continuous delivery • cluster setup by networkteam, Kiel
  • 80. Amadeus • world’s biggest e-ticket provider • 217 markets • 948 million billable transactions / year • 2,7 billion € revenue
  • 81. Social Media Suite • central hub for social media activities for potentially thousands of travel agencies • advanced form engine • various detail improvements by AKOM360, Munich • uses an early version of TYPO3 Phoenix
  • 82. “Our senior developers are extremely happy with FLOW3 – it is definitely the most capable PHP framework we Fabian Pfütze Project Lead have come across so far.”
  • 83. ?
  • 84. Thanks for having me! • FLOW3: http://flow3.typo3.org • Blog: http://robertlemke.com • Twitter: @robertlemke • Feedback: robert@typo3.org