My Collections

Building last application i needed SSL protection for some of my modules and actions. What I wanted to achieve was to choose some actions and redirect non-https requests to https (and https to non-https).
I found a plugin: sfSslRequirementPlugin, it's for sf 1.0/1.1 and it does not really meet my needs. Yes, i know that i can fix it to work with sf 1.4 but that's not a point.

Then in the documentation i found simple ssl filter example:

<?php 
 
class sfSecureFilter extends sfFilter 
{ 
  public function execute($filterChain) 
  { 
    $context = $this->getContext(); 
    $request = $context->getRequest(); 
 
    if (!$request->isSecure()) 
    { 
      $secure_url = str_replace('http', 'https', $request->getUri()); 
 
      return $context->getController()->redirect($secure_url); 
      // We don't continue the filter chain 
    } 
    else 
    { 
      // The request is already secure, so we can continue 
      $filterChain->execute(); 
    } 
  } 
} 

I really like the idea of describing the authentication and authorization rules in security.yml file (is_secure option) and filters. So i decided to add another option: „is_ssl" for module-action restrictio. It shoud works on the same rules as sfBasicSecurityFilter.

The default application configuration can be overridden for a module by creating a security.yml file in the config/ directory of the module. The main keys are action names without the execute prefix (index for the executeIndex method for instance).

To determine if an action is secure or not, symfony looks for the information in the following order:
* a configuration for the specific action in the module configuration file if it exists;
* a configuration for the whole module in the module configuration file if it exists (under the all key);
* the default application configuration (under the default key).

<?php 
 
class MySecureFilter extends sfFilter 
{ 
  public function execute($filterChain) { 
 
    $context = $this->getContext(); 
    $request = $context->getRequest(); 
 
    $moduleName = $request->getParameter('module'); 
    $actionName = $request->getParameter('action'); 
 
    if ($context->getController()->actionExists($moduleName,$actionName)) { 
 
        $action = $context->getController()->getAction( 
            $moduleName, 
            $actionName 
        ); 
 
        if ($action->getSecurityValue('is_ssl', false) && !$request->isSecure()) { 
 
            $secure_url = str_replace('http', 'https', $request->getUri()); 
 
            return $context->getController()->redirect($secure_url); 
 
        } else if (!$action->getSecurityValue('is_ssl', false) &&$request->isSecure()) { 
 
            $not_secure_url = str_replace('https', 'http', $request->getUri()); 
 
            return $context->getController()->redirect($not_secure_url); 
        } 
    } 
 
    $filterChain->execute(); 
  } 
} 

This simple filter redirects all actions that has option 'is_ssl' = true to https requests and https requests (with is_ssl = false) to non-https.

To enable this filter for example for our frontend application we need to set this filter in filters.yml – apps/frontend/config/filters.yml:

rendering: ~ 
security:  ~ 
 
secure: 
  class: MySecureFilter 
 
cache:     ~ 
execution: ~ 

Enable ssl for module/action (default module) – apps/frontend/modules/default/config/security.yml:

# for the whole module 
all: 
  is_ssl: true 
 
# just one action 
login: 
  is_ssl: true 

My Collections

Monday, October 10, 2011

Notepad++ removing duplicate rows

怎样用正则表达式去掉方括号内[ ]的内容？

Friday, October 07, 2011

Symfony 1.4 and SSL – playing with symfony filters