发布于 2015-08-21 15:16:12 | 304 次阅读 | 评论: 0 | 来源: 网络整理
PhalconLoader is a component that allows you to load project classes automatically, based on some predefined rules. Since this component is written in C, it provides the lowest overhead in reading and interpreting external PHP files.
The behavior of this component is based on the PHP’s capability of autoloading classes. If a class that does not exist is used in any part of the code, a special handler will try to load it. PhalconLoader serves as the special handler for this operation. By loading classes on a need to load basis, the overall performance is increased since the only file reads that occur are for the files needed. This technique is called lazy initialization.
With this component you can load files from other projects or vendors, this autoloader is PSR-0 and PSR-4 compliant.
PhalconLoader offers four options to autoload classes. You can use them one at a time or combine them.
If you’re organizing your code using namespaces, or external libraries do so, the registerNamespaces() provides the autoloading mechanism. It takes an associative array, which keys are namespace prefixes and their values are directories where the classes are located in. The namespace separator will be replaced by the directory separator when the loader try to find the classes. Remember always to add a trailing slash at the end of the paths.
<?php
use PhalconLoader;
// Creates the autoloader
$loader = new Loader();
// Register some namespaces
$loader->registerNamespaces(
array(
"ExampleBase" => "vendor/example/base/",
"ExampleAdapter" => "vendor/example/adapter/",
"Example" => "vendor/example/"
)
);
// Register autoloader
$loader->register();
// The required class will automatically include the
// file vendor/example/adapter/Some.php
$some = new ExampleAdapterSome();
This strategy is similar to the namespaces strategy. It takes an associative array, which keys are prefixes and their values are directories where the classes are located in. The namespace separator and the “_” underscore character will be replaced by the directory separator when the loader try to find the classes. Remember always to add a trailing slash at the end of the paths.
<?php
use PhalconLoader;
// Creates the autoloader
$loader = new Loader();
// Register some prefixes
$loader->registerPrefixes(
array(
"Example_Base" => "vendor/example/base/",
"Example_Adapter" => "vendor/example/adapter/",
"Example_" => "vendor/example/"
)
);
// Register autoloader
$loader->register();
// The required class will automatically include the
// file vendor/example/adapter/Some.php
$some = new Example_Adapter_Some();
The third option is to register directories, in which classes could be found. This option is not recommended in terms of performance, since Phalcon will need to perform a significant number of file stats on each folder, looking for the file with the same name as the class. It’s important to register the directories in relevance order. Remember always add a trailing slash at the end of the paths.
<?php
use PhalconLoader;
// Creates the autoloader
$loader = new Loader();
// Register some directories
$loader->registerDirs(
array(
"library/MyComponent/",
"library/OtherComponent/Other/",
"vendor/example/adapters/",
"vendor/example/"
)
);
// Register autoloader
$loader->register();
// The required class will automatically include the file from
// the first directory where it has been located
// i.e. library/OtherComponent/Other/Some.php
$some = new Some();
The last option is to register the class name and its path. This autoloader can be very useful when the folder convention of the project does not allow for easy retrieval of the file using the path and the class name. This is the fastest method of autoloading. However the more your application grows, the more classes/files need to be added to this autoloader, which will effectively make maintenance of the class list very cumbersome and it is not recommended.
<?php
use PhalconLoader;
// Creates the autoloader
$loader = new Loader();
// Register some classes
$loader->registerClasses(
array(
"Some" => "library/OtherComponent/Other/Some.php",
"ExampleBase" => "vendor/example/adapters/Example/BaseClass.php"
)
);
// Register autoloader
$loader->register();
// Requiring a class will automatically include the file it references
// in the associative array
// i.e. library/OtherComponent/Other/Some.php
$some = new Some();
Some autoloading strategies such as “prefixes”, “namespaces” or “directories” automatically append the “php” extension at the end of the checked file. If you are using additional extensions you could set it with the method “setExtensions”. Files are checked in the order as it were defined:
<?php
// Creates the autoloader
$loader = new PhalconLoader();
// Set file extensions to check
$loader->setExtensions(array("php", "inc", "phb"));
Additional auto-loading data can be added to existing values in the following way:
<?php
// Adding more directories
$loader->registerDirs(
array(
"../app/library/",
"../app/plugins/"
),
true
);
Passing “true” as second parameter will merge the current values with new ones in any strategy.
PhalconLoader offers a security layer sanitizing by default class names avoiding possible inclusion of unauthorized files. Consider the following example:
<?php
// Basic autoloader
spl_autoload_register(function ($className) {
if (file_exists($className . '.php')) {
require $className . '.php';
}
});
The above auto-loader lacks of any security check, if by mistake in a function that launch the auto-loader, a malicious prepared string is used as parameter this would allow to execute any file accessible by the application:
<?php
// This variable is not filtered and comes from an insecure source
$className = '../processes/important-process';
// Check if the class exists triggering the auto-loader
if (class_exists($className)) {
// ...
}
If ‘../processes/important-process.php’ is a valid file, an external user could execute the file without authorization.
To avoid these or most sophisticated attacks, PhalconLoader removes any invalid character from the class name reducing the possibility of being attacked.
In the following example, the EventsManager is working with the class loader, allowing us to obtain debugging information regarding the flow of operation:
<?php
$eventsManager = new PhalconEventsManager();
$loader = new PhalconLoader();
$loader->registerNamespaces(
array(
'ExampleBase' => 'vendor/example/base/',
'ExampleAdapter' => 'vendor/example/adapter/',
'Example' => 'vendor/example/'
)
);
// Listen all the loader events
$eventsManager->attach('loader', function ($event, $loader) {
if ($event->getType() == 'beforeCheckPath') {
echo $loader->getCheckedPath();
}
});
$loader->setEventsManager($eventsManager);
$loader->register();
Some events when returning boolean false could stop the active operation. The following events are supported:
Event Name | Triggered | Can stop operation? | |
---|---|---|---|
beforeCheckClass | Triggered before starting the autoloading process | Yes | |
pathFound | Triggered when the loader locate a class | No | |
afterCheckClass | Triggered after finish the autoloading process. If this event is launched the autoloader didn’t find the class file | No |
Some things to keep in mind when using the universal autoloader: