This is an old revision of the document!
Every template is an instance of the <php>Template</php> class defined in include/utils.php
. Rack templates are parsed and executed as PHP and therefore can execute arbitrary PHP code. However, it is advised to keep it simple in order to maintain separation between rendering and internal logic. This page covers the documentation of functionality that is specific to templates.
<HTML>
<strong>WARNING!</strong> No data is escaped by default. Always explicitly escape your template variables and be careful which data you access in templates.
</HTML>
Templates are intitialized with a context object, which is an associative array. The individual elements of this array are made available in the templates as regular variables (see extract). Consider the context
<PHP> $context = [
'title' => 'Home', 'page_id' => 'index'
]; </PHP>
and the template
<PHP> <html>
<head> <title><?= $title ?></title> </head> <body> <h1><?= $title ?></h1> page_id: <?= $page_id ?> </body>
</html> </PHP>
which renders as
<HTML>
<h1>Home</h1> page_id: index
</HTML>
All global functions are available in templates. The template class provides the following additional functions for escaping data to prevent XSS attacks.
<p>
elements.Remember! No data is escaped by default. Always explicitly escape your template variables and be careful which data you access in templates.
The following snippet shows how these functions should be used.
<PHP> <section>
<h1><?= $this->html($title) ?></h1> <?= $this->format_plain_text($some_text) ?> Author: <a href="<?= $this->attr($url_to_author_page) ?>"><?= $this->html($author_name) ?></a>
</section> </PHP>
Rack templates support basic template inheritance, provided by the following functions:
Note that nested blocks are not supported and that blocks are only allowed in templates that extend a parent template.
The following snippets demonstrate the use of blocks and template inheritance.
<?php $this->extends('layout.phtml') ?> <?php $this->begin('content') ?> Hello world! <?php $this->end() ?>
<html> <head> <title><?= $title ?></title> </head> <body> <?= $content ?> </body> </html>
Rack templates are parsed and executed as PHP and therefore can execute arbitrary PHP code. However, it is advised to keep it simple in order to maintain separation between rendering and internal logic.
By convention, templates use the Alternative syntax for PHP control structures. Definitions of non-anonymous functions in templates are forbidden (by design) and anonymous functions should only be used in templates in exceptional situations.