93 lines
2.9 KiB
PHP
93 lines
2.9 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/*
|
|
* This file is part of the TYPO3 CMS project.
|
|
*
|
|
* It is free software; you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License, either version 2
|
|
* of the License, or any later version.
|
|
*
|
|
* For the full copyright and license information, please read the
|
|
* LICENSE.txt file that was distributed with this source code.
|
|
*
|
|
* The TYPO3 project - inspiring people to share!
|
|
*/
|
|
|
|
/*
|
|
* Inspired by and partially taken from the Neos.Form package (www.neos.io)
|
|
*/
|
|
|
|
namespace TYPO3\CMS\Form\ViewHelpers;
|
|
|
|
use TYPO3\CMS\Core\Crypto\HashAlgo;
|
|
use TYPO3\CMS\Core\Utility\GeneralUtility;
|
|
use TYPO3\CMS\Fluid\ViewHelpers\FormViewHelper as FluidFormViewHelper;
|
|
use TYPO3\CMS\Form\Domain\Runtime\FormRuntime;
|
|
use TYPO3\CMS\Form\Security\HashScope;
|
|
use TYPO3Fluid\Fluid\Core\ViewHelper\TagBuilder;
|
|
|
|
/**
|
|
* Custom form ViewHelper that renders the form state instead of referrer fields
|
|
*
|
|
* Scope: frontend
|
|
*
|
|
* @see https://docs.typo3.org/permalink/t3viewhelper:typo3-form-form
|
|
*/
|
|
final class FormViewHelper extends FluidFormViewHelper
|
|
{
|
|
/**
|
|
* Renders hidden form fields for referrer information about
|
|
* the current request.
|
|
*
|
|
* @return string Hidden fields with referrer information
|
|
*/
|
|
protected function renderHiddenReferrerFields(): string
|
|
{
|
|
$formRuntime = $this->getFormRuntime();
|
|
$prefix = $this->prefixFieldName($this->getFormObjectName());
|
|
|
|
$markup = $this->createHiddenInputElement(
|
|
$prefix . '[__state]',
|
|
$this->hashService->appendHmac(
|
|
base64_encode(serialize($formRuntime->getFormState())),
|
|
HashScope::FormState->prefix(),
|
|
HashAlgo::SHA3_256
|
|
)
|
|
);
|
|
|
|
// ONLY assign `__session` if form is performing (uncached)
|
|
if ($formRuntime->canProcessFormSubmission() && $formRuntime->getFormSession() !== null) {
|
|
$markup .= $this->createHiddenInputElement(
|
|
$prefix . '[__session]',
|
|
$formRuntime->getFormSession()->getAuthenticatedIdentifier()
|
|
);
|
|
}
|
|
return $markup;
|
|
}
|
|
|
|
private function createHiddenInputElement(string $name, string $value): string
|
|
{
|
|
$tagBuilder = GeneralUtility::makeInstance(TagBuilder::class, 'input');
|
|
$tagBuilder->addAttribute('type', 'hidden');
|
|
$tagBuilder->addAttribute('name', $name);
|
|
$tagBuilder->addAttribute('value', $value);
|
|
return $tagBuilder->render();
|
|
}
|
|
|
|
/**
|
|
* We do NOT return NULL as in this case, the Form ViewHelpers do not enter $objectAccessorMode.
|
|
* However, we return the form identifier.
|
|
*/
|
|
protected function getFormObjectName(): string
|
|
{
|
|
return $this->getFormRuntime()->getFormDefinition()->getIdentifier();
|
|
}
|
|
|
|
private function getFormRuntime(): FormRuntime
|
|
{
|
|
return $this->arguments['object'];
|
|
}
|
|
}
|