Drupal Development (Part 2)

Drupal Code: Day 2
the good, the bad, and the nerdy

we join our cms,
already in progress

drupal core
coordinates

http://www.ﬂickr.com/photos/35104960@N00/509525572/

...and change
behavior

http://www.ﬂickr.com/photos/spiicytuna/188111824

$form[‘foo’] = array(
‘#type’ => ‘textarea’,
‘#required’ => TRUE,
‘#title’ => t(‘Your foo’),
‘#default_value’ => “Some text…”,
‘#resizable’ => TRUE,
);

$form[‘bar’] = array(
‘#type’ => ‘fieldset’,
‘#title’ => t(‘Several bars’),
‘#collapsible’ => TRUE,
‘#collapsed’ => FALSE,
);

$form[‘bar’][‘baz’] = array(
‘#type’ => ‘select’,
‘#title’ => t(‘Baz in a bar’),
‘#options’ => array(
1 => t(‘Option one’),
2 => t(‘Option two’),
3 => t(‘Option three’),
),
‘#multiple’ => TRUE,
‘#default_value’ => 2,
‘#weight’ => -10
);

function mymodule_settings_page() {
return drupal_get_form(‘mymodule_form’);
}

function mymodule_form() {
$form[‘foo’] = array(
‘#title’ => t(‘Your foo’),
‘#default_value’ => t(‘Enter your text here…’),
);
$form[‘submit’] = array(
‘#type’ => ‘submit’,
‘#value’ => t(‘Pity the foo’),
);
return $form;
}

function mymodule_form_alter($form, &$state, $id) {
if ($id == ‘yourmodule_form’) {
unset($form[‘your_field’]);

$form[‘my_extra_field’] = array(
‘#title’ => t(‘THIS field is mine.’,
‘#weight’ => -10,
);

$form[‘#validate’][] = ‘my_validation_code’;
$form[‘#submit’][] = ‘my_submit_code’;
}
}

function mymodule_form_validate($form, &$state) {
if ($state[‘values’][‘foo’] == ‘Yo Momma’) {
form_set_error(‘foo’, t(‘Show some respect.’));
}
}

function mymodule_form_submit($form, &$state) {
variable_set(‘my_foo’, $state[‘values’][‘foo’]);
}

Key Pieces

• Form ID
• Form Builder function
• Validation functions
• Submission functions
• “Form State”

function build_my_page() {
$output = ‘<h3>My stuff</h3>'
$records = get_records();
$output .= ‘<ul>’;
foreach ($records as $record) {
$output .= “<li>”. $record->name .”</li>”;
}
$output .= ‘</ul>’;
return $output;
}

$output = ‘<h3>My stuff</h3>'
$output .= ‘<ul>’;
$output .= “<li>”. $record->name .”</li>”;
}
$output .= ‘</ul>’;
return $output;
}
$items[] = $records->name;
}
return theme(‘item_list’,
$items, t(‘My stuff’));
}

function get_my_data($username) {
$sql = “SELECT * FROM users “;
$sql .= “WHERE name = ‘$username’”;
$results = mysql_query($sql);
return $results;
}

$sql = “SELECT * FROM users “;
$sql .= “WHERE name = ‘$username’”;
$results = mysql_query($sql);
return $results;
}

$sql = “SELECT * FROM {users} u “;
$sql .= “WHERE u.name = ‘%s’”;
$results = db_query($sql, $username);
return $results;
}

use db_query() for
all queries

$link = “<a href=‘/about-us’>About!</a>”;


http://www.mysite.com/node/1
http://www.mysite.com/seo-friendly-name
http://www.mysite.com/subdirectory/node/1
http://www.mysite.com/index.php?q=node/1
http://www.mysite.com/fr/node/1


http://www.mysite.com/node/1
http://www.mysite.com/seo-friendly-name
http://www.mysite.com/subdirectory/node/1
http://www.mysite.com/index.php?q=node/1
http://www.mysite.com/fr/node/1

$link = l($title, $url);

function my_message($name) {
return “This is your message, $name!”;
}

return “This is your message, $name!”;
}

$values = array(‘%name’ => $name);
$message = ‘This is your message, %name!’;
return t($message, $values);
}

/**
* Prepares a structured form array by adding required elements,
* executing any hook_form_alter functions, and optionally
* inserting a validation token to prevent tampering.
*
* @param $form_id
* A unique string identifying the form for validation,
* submission, theming, and hook_form_alter functions.
* @param $form
* An associative array containing the structure of the form.
* @param $form_state
* A keyed array containing the current state of the form.
* Passed in here so that hook_form_alter() calls can use it,
* as well.
*/
function drupal_prepare_form($form_id, &$form, &$form_state) {
// Actual codes goes here…
}

drupal core

1%

Code
37%
Comments
Jokes
62%

use PHPDoc to
explain your code

function get_my_data($name, $date) {
$sql .= “WHERE u.name = ‘%s’ ”;
$sql .= “AND u.created > %d ”;

$results = db_query($sql, $name, $date);
return $results;
}

function get_my_data($name, $date) {
$sql .= “WHERE u.name = ‘%s’ ”;
$sql .= “AND u.created > %d ”;

$results = db_query($sql, $name, $date);
return $results;
}

%s, %d, %f, and %b are your friends

XSS
(use output ﬁltering)
Use ﬁlter_xss($text)

http://drupal.org/
writing-secure-code

Performance
(It’s always the db)

• Always use FormAPI
• Follow best practices (Coder helps!)
• It’s always the DB’s fault (cache)
• Don’t trust anyone (sanitize output)
• Participate!

Drupal Development (Part 2)

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Destaque

Destaque (10)

Semelhante a Drupal Development (Part 2)

Semelhante a Drupal Development (Part 2) (20)

Mais de Jeff Eaton

Mais de Jeff Eaton (19)

Último

Último (20)

Drupal Development (Part 2)

Notas do Editor