class Request
Request represents an HTTP request.
The methods dealing with URL accept / return a raw path (% encoded): * getBasePath * getBaseUrl * getPathInfo * getRequestUri * getUri * getUriForPath
HEADER_FORWARDED | |
HEADER_CLIENT_IP | |
HEADER_CLIENT_HOST | |
HEADER_CLIENT_PROTO | |
HEADER_CLIENT_PORT | |
METHOD_HEAD | |
METHOD_GET | |
METHOD_POST | |
METHOD_PUT | |
METHOD_PATCH | |
METHOD_DELETE | |
METHOD_PURGE | |
METHOD_OPTIONS | |
METHOD_TRACE | |
METHOD_CONNECT |
ParameterBag | $attributes | Custom parameters. | |
ParameterBag | $request | Request body parameters ($_POST). | |
ParameterBag | $query | Query string parameters ($_GET). | |
ServerBag | $server | Server and execution environment parameters ($_SERVER). | |
FileBag | $files | Uploaded files ($_FILES). | |
ParameterBag | $cookies | Cookies ($_COOKIE). | |
HeaderBag | $headers | Headers (taken from the $_SERVER). |
__construct(array $query = array(), array $request = array(), array $attributes = array(), array $cookies = array(), array $files = array(), array $server = array(), string|resource $content = null) Constructor. | ||
initialize(array $query = array(), array $request = array(), array $attributes = array(), array $cookies = array(), array $files = array(), array $server = array(), string|resource $content = null) Sets the parameters for this request. | ||
static Request | createFromGlobals() Creates a new request with values from PHP's super globals. | |
static Request | create(string $uri, string $method = 'GET', array $parameters = array(), array $cookies = array(), array $files = array(), array $server = array(), string $content = null) Creates a Request based on a given URI and configuration. | |
static | setFactory(callable|null $callable) Sets a callable able to create a Request instance. | |
Request | duplicate(array $query = null, array $request = null, array $attributes = null, array $cookies = null, array $files = null, array $server = null) Clones a request and overrides some of its parameters. | |
__clone() Clones the current request. | ||
string | __toString() Returns the request as a string. | |
overrideGlobals() Overrides the PHP global variables according to this request instance. | ||
static | setTrustedProxies(array $proxies) Sets a list of trusted proxies. | |
static array | getTrustedProxies() Gets the list of trusted proxies. | |
static | setTrustedHosts(array $hostPatterns) Sets a list of trusted host patterns. | |
static array | getTrustedHosts() Gets the list of trusted host patterns. | |
static | setTrustedHeaderName(string $key, string $value) Sets the name for trusted headers. | |
static string | getTrustedHeaderName(string $key) Gets the trusted proxy header name. | |
static string | normalizeQueryString(string $qs) Normalizes a query string. | |
static | enableHttpMethodParameterOverride() Enables support for the _method request parameter to determine the intended HTTP method. | |
static bool | getHttpMethodParameterOverride() Checks whether support for the _method request parameter is enabled. | |
mixed | get(string $key, mixed $default = null) Gets a "parameter" value from any bag. | |
SessionInterface|null | getSession() Gets the Session. | |
bool | hasPreviousSession() Whether the request contains a Session which was started in one of the previous requests. | |
bool | hasSession() Whether the request contains a Session object. | |
setSession(SessionInterface $session) Sets the Session. | ||
array | getClientIps() Returns the client IP addresses. | |
string | getClientIp() Returns the client IP address. | |
string | getScriptName() Returns current script name. | |
string | getPathInfo() Returns the path being requested relative to the executed script. | |
string | getBasePath() Returns the root path from which this request is executed. | |
string | getBaseUrl() Returns the root URL from which this request is executed. | |
string | getScheme() Gets the request's scheme. | |
string | getPort() Returns the port on which the request is made. | |
string|null | getUser() Returns the user. | |
string|null | getPassword() Returns the password. | |
string | getUserInfo() Gets the user info. | |
string | getHttpHost() Returns the HTTP host being requested. | |
string | getRequestUri() Returns the requested URI (path and query string). | |
string | getSchemeAndHttpHost() Gets the scheme and HTTP host. | |
string | getUri() Generates a normalized URI (URL) for the Request. | |
string | getUriForPath(string $path) Generates a normalized URI for the given path. | |
string | getRelativeUriForPath(string $path) Returns the path as relative reference from the current Request path. | |
string|null | getQueryString() Generates the normalized query string for the Request. | |
bool | isSecure() Checks whether the request is secure or not. | |
string | getHost() Returns the host name. | |
setMethod(string $method) Sets the request method. | ||
string | getMethod() Gets the request "intended" method. | |
string | getRealMethod() Gets the "real" request method. | |
string | getMimeType(string $format) Gets the mime type associated with the format. | |
static array | getMimeTypes(string $format) Gets the mime types associated with the format. | |
string|null | getFormat(string $mimeType) Gets the format associated with the mime type. | |
setFormat(string $format, string|array $mimeTypes) Associates a format with mime types. | ||
string | getRequestFormat(string $default = 'html') Gets the request format. | |
setRequestFormat(string $format) Sets the request format. | ||
string|null | getContentType() Gets the format associated with the request. | |
setDefaultLocale(string $locale) Sets the default locale. | ||
string | getDefaultLocale() Get the default locale. | |
setLocale(string $locale) Sets the locale. | ||
string | getLocale() Get the locale. | |
bool | isMethod(string $method) Checks if the request method is of specified type. | |
bool | isMethodSafe() Checks whether or not the method is safe. | |
bool | isMethodIdempotent() Checks whether or not the method is idempotent. | |
bool | isMethodCacheable() Checks whether the method is cacheable or not. | |
string|resource | getContent(bool $asResource = false) Returns the request body content. | |
array | getETags() Gets the Etags. | |
bool | isNoCache() | |
string|null | getPreferredLanguage(array $locales = null) Returns the preferred language. | |
array | getLanguages() Gets a list of languages acceptable by the client browser. | |
array | getCharsets() Gets a list of charsets acceptable by the client browser. | |
array | getEncodings() Gets a list of encodings acceptable by the client browser. | |
array | getAcceptableContentTypes() Gets a list of content types acceptable by the client browser. | |
bool | isXmlHttpRequest() Returns true if the request is a XMLHttpRequest. | |
bool | isFromTrustedProxy() Indicates whether this request originated from a trusted proxy. |
Constructor.
Sets the parameters for this request.
This method also re-initializes all properties.
Creates a new request with values from PHP's super globals.
Creates a Request based on a given URI and configuration.
The information contained in the URI always take precedence over the other information (server and parameters).
Sets a callable able to create a Request instance.
This is mainly useful when you need to override the Request class to keep BC with an existing system. It should not be used for any other purpose.
Clones a request and overrides some of its parameters.
Clones the current request.
Note that the session is not cloned as duplicated requests are most of the time sub-requests of the main one.
Returns the request as a string.
Overrides the PHP global variables according to this request instance.
It overrides $GET, $POST, $REQUEST, $SERVER, $COOKIE. $FILES is never overridden, see rfc1867
Sets a list of trusted proxies.
You should only list the reverse proxies that you manage directly.
Gets the list of trusted proxies.
Sets a list of trusted host patterns.
You should only list the hosts you manage using regexs.
Gets the list of trusted host patterns.
Sets the name for trusted headers.
The following header keys are supported:
Setting an empty value allows to disable the trusted header for the given key.
Gets the trusted proxy header name.
Normalizes a query string.
It builds a normalized query string, where keys/value pairs are alphabetized, have consistent escaping and unneeded delimiters are removed.
Enables support for the _method request parameter to determine the intended HTTP method.
Be warned that enabling this feature might lead to CSRF issues in your code. Check that you are using CSRF tokens when required. If the HTTP method parameter override is enabled, an html-form with method "POST" can be altered and used to send a "PUT" or "DELETE" request via the _method request parameter. If these methods are not protected against CSRF, this presents a possible vulnerability.
The HTTP method can only be overridden when the real HTTP method is POST.
Checks whether support for the _method request parameter is enabled.
Gets a "parameter" value from any bag.
This method is mainly useful for libraries that want to provide some flexibility. If you don't need the flexibility in controllers, it is better to explicitly get request parameters from the appropriate public property instead (attributes, query, request).
Order of precedence: PATH (routing placeholders or custom attributes), GET, BODY
Gets the Session.
Whether the request contains a Session which was started in one of the previous requests.
Whether the request contains a Session object.
This method does not give any information about the state of the session object, like whether the session is started or not. It is just a way to check if this Request is associated with a Session instance.
Sets the Session.
Returns the client IP addresses.
In the returned array the most trusted IP address is first, and the least trusted one last. The "real" client IP address is the last one, but this is also the least trusted one. Trusted proxies are stripped.
Use this method carefully; you should use getClientIp() instead.
Returns the client IP address.
This method can read the client IP address from the "X-Forwarded-For" header when trusted proxies were set via "setTrustedProxies()". The "X-Forwarded-For" header value is a comma+space separated list of IP addresses, the left-most being the original client, and each successive proxy that passed the request adding the IP address where it received the request from.
If your reverse proxy uses a different header name than "X-Forwarded-For", ("Client-Ip" for instance), configure it via "setTrustedHeaderName()" with the "client-ip" key.
Returns current script name.
Returns the path being requested relative to the executed script.
The path info always starts with a /.
Suppose this request is instantiated from /mysite on localhost:
Returns the root path from which this request is executed.
Suppose that an index.php file instantiates this request object:
Returns the root URL from which this request is executed.
The base URL never ends with a /.
This is similar to getBasePath(), except that it also includes the script filename (e.g. index.php) if one exists.
Gets the request's scheme.
Returns the port on which the request is made.
This method can read the client port from the "X-Forwarded-Port" header when trusted proxies were set via "setTrustedProxies()".
The "X-Forwarded-Port" header must contain the client port.
If your reverse proxy uses a different header name than "X-Forwarded-Port", configure it via "setTrustedHeaderName()" with the "client-port" key.
Returns the user.
Returns the password.
Gets the user info.
Returns the HTTP host being requested.
The port name will be appended to the host if it's non-standard.
Returns the requested URI (path and query string).
Gets the scheme and HTTP host.
If the URL was called with basic authentication, the user and the password are not added to the generated string.
Generates a normalized URI (URL) for the Request.
Generates a normalized URI for the given path.
Returns the path as relative reference from the current Request path.
Only the URIs path component (no schema, host etc.) is relevant and must be given. Both paths must be absolute and not contain relative parts. Relative URLs from one resource to another are useful when generating self-contained downloadable document archives. Furthermore, they can be used to reduce the link size in documents.
Example target paths, given a base path of "/a/b/c/d": - "/a/b/c/d" -> "" - "/a/b/c/" -> "./" - "/a/b/" -> "../" - "/a/b/c/other" -> "other" - "/a/x/y" -> "../../x/y"
Generates the normalized query string for the Request.
It builds a normalized query string, where keys/value pairs are alphabetized and have consistent escaping.
Checks whether the request is secure or not.
This method can read the client protocol from the "X-Forwarded-Proto" header when trusted proxies were set via "setTrustedProxies()".
The "X-Forwarded-Proto" header must contain the protocol: "https" or "http".
If your reverse proxy uses a different header name than "X-Forwarded-Proto" ("SSL_HTTPS" for instance), configure it via "setTrustedHeaderName()" with the "client-proto" key.
Returns the host name.
This method can read the client host name from the "X-Forwarded-Host" header when trusted proxies were set via "setTrustedProxies()".
The "X-Forwarded-Host" header must contain the client host name.
If your reverse proxy uses a different header name than "X-Forwarded-Host", configure it via "setTrustedHeaderName()" with the "client-host" key.
Sets the request method.
Gets the request "intended" method.
If the X-HTTP-Method-Override header is set, and if the method is a POST, then it is used to determine the "real" intended HTTP method.
The _method request parameter can also be used to determine the HTTP method, but only if enableHttpMethodParameterOverride() has been called.
The method is always an uppercased string.
Gets the "real" request method.
Gets the mime type associated with the format.
Gets the mime types associated with the format.
Gets the format associated with the mime type.
Associates a format with mime types.
Gets the request format.
Here is the process to determine the format:
Sets the request format.
Gets the format associated with the request.
Sets the default locale.
Get the default locale.
Sets the locale.
Get the locale.
Checks if the request method is of specified type.
Checks whether or not the method is safe.
Checks whether or not the method is idempotent.
Checks whether the method is cacheable or not.
Returns the request body content.
Gets the Etags.
Returns the preferred language.
Gets a list of languages acceptable by the client browser.
Gets a list of charsets acceptable by the client browser.
Gets a list of encodings acceptable by the client browser.
Gets a list of content types acceptable by the client browser.
Returns true if the request is a XMLHttpRequest.
It works if your JavaScript library sets an X-Requested-With HTTP header. It is known to work with common JavaScript frameworks:
Indicates whether this request originated from a trusted proxy.
This can be useful to determine whether or not to trust the contents of a proxy-specific header.
© 2004–2016 Fabien Potencier
Licensed under the MIT License.
http://api.symfony.com/3.2/Symfony/Component/HttpFoundation/Request.html