Zend Auth

Zend_Auth
Zend_Auth is concerned only with authentication and not with authorization. Authentication is loosely defined as determining whether an entity actually is allowed or not.

Zend Interview Questions and Answers

Is Zend Framework a component library or a framework?

ZF is both. Zend Framework provides all the components required for most web applications in a single distribution. But Zend Framework components are also loosely coupled, making it easy to use just a few components in a web application- even alongside other frameworks! Using this use-at-will architecture, we are implementing features commonly found in more monolithic frameworks. In fact, we are currently working on a tooling component for the 1.8 release that will make it simpler to build applications using ZF components, yet will not sacrifice the use-at-will nature of existing ZF components.

What is autoloader?
Autoloader is function that load all the object on start up.

What is use of Zend front controller?
Routing and dispatching is managed in the front controller. It collects all the request from the server and handles it.

What is the use of Bootstrap?
Apart from index if we want to do any extra configuration regarding database and other things that is done within bootstrap.

How you can set Module name, Controller name, and Action name in Zend framework?

•  $request->setModuleName(‘front’);
•  $request->setControllerName(‘address’);
•  $request->setActionName(‘addresslist’); 

Configuration in Zend Framework, application.ini file?
Configuration can be done in application.ini file in Zend framework. This file in the path application/configs/application.ini.

Checking whether form posted or not in Zend framework?
$request = $this->getRequest();
$getData = $request->getParams();
$postData = $request->getPost(); 

$isPost = $request->isPost();


Fetch last inserted id, fetch all record,find and fetch a single record.
$this->_db->lastInsertId();
$this->_db->fetchAll($sql);

$this->_db->find($id);
$this->_db->fetchRow($sql);

Difference between Zend_Registry and Zend_Session?

Zend_Registry is used to store objects/values for the current request. In short, anything that you commit to Registry in index.php can be accessed from other controllers/actions (because EVERY request is first routed to the index.php bootstrapper via the .htaccess file). Config parameters and db parameters are generally prepped for global use using the Zend_Registry object.

Zend_Session actually uses PHP sessions. Data stored using Zend_Session can be accessed in different/all pages. So, if you want to create a variable named ‘UserRole’ in the /auth/login script and want it to be accessible in /auth/redirect, you would use Zend_Session.

When do we need to disable layout?
At the time of calling AJAX to fetch we need to disable layout.
$this->_helper->layout()->disableLayout();
$this->_helper->viewRenderer->setNoRender(true);


How to call two different views from same action?
Example1:
Public function indexAction() {
If(condition)
$this->render(‘yourview.phtml’);
Else
Index.phtml;

Example2:
Public function indexAction() {
}
Now in your index.phtml you can have this statement to call other view
$this->action(‘action name’,’controller name’,’module name’,array(‘parameter name’=>’parameter value’));

Can we call a model in view?
Yes, you can call a model in view. Simple create the object and call the method. 

$modelObj = new Application_Model_User();

Can we rename the application folder ?
yes, we can

Can we move the index.php file outside the public folder?
yes, we can

How to include js from controller and view in zend?

From within a view file: $this->headScript()->appendFile(‘filename.js’);
From within a controller: $this->view->headScript()->appendFile(‘filename.js’);
And then somewhere in your layout you need to echo out your headScript object:
<?=$this->headScript();?>


How to include css from controller and view in zend? 
From within a view file: $this->headLink()->appendStylesheet(‘filename.css’);
From within a controller: $this->view->headLink()->appendStylesheet(‘filename.css’);
And then somewhere in your layout you need to echo out your headLink object:
<?=$this->headLink();?>

How do you protect your site from sql injection in zend when using select query?

We have to quote the strings,
$this->getAdapter ()->quote ( <variable name> );
$select->where ( ” <field name> = “, <variable name> );
OR (If you are using the question mark after equal to sign)
$select->where ( ” <field name> = ? “, <variable name> );

What is zend framework?
Answer: It is opensource framework created by zend.com (PHP company). It is object oriented and follow the MVC. Zend Framework is focused on building more secure, reliable and fast development.

How to add extra HTML (i.e link) in Zend_Form?
Answer: use Desciption decorator with (escape =false in second parameter).

How can I detect if an optional file has been uploaded?
Answer:  Zend_File_Transfer_Adapter_Http's receive()  return true.

What is Zend registry?
Answer: It is container for object and values  in applications, when you set an object in zend_registry you can access in whole site.

What is Zend_Form?
Answer: It is mainly used to display the form. but along with this we use for filter, validation and formating our form. It have following elements
Element filter
Element validation
Element ordering.
Decorator
Grouping
Sub form
Rendering form elments in single call or one by one for elements.

What is zend helpers?
It can be divided in two parts,
a) Action Helper: the helper is created for controller
b) View Helper: the helper is created for view files (.phtml).


What do you know about zend layout.
Answer: It work as a site template and have following features.
                Automatic selection and rendering layout
                Provide separate scope for calling element i.e parital, render, partialLoop

What is Inflection?
Answer: It is class in zend used to modify the string like convert to lowercase, change to url by removing special chars and convert underscore to hyphen.

What is Front Controller?
Answer:  It used Front Controller pattern.  zend also use singleton pattern.
routeStartup: This function is called before Zend_Controller_Front calls on the router to evaluate the request.
routeShutdown: This function  is called after the router finishes routing the request.
dispatchLoopStartup: This is called before Zend_Controller_Front enters its dispatch loop.
preDispatch: called before an action is dispatched by the dispatcher.
postDispatch: is called after an action is dispatched by the dispatcher.

What is Zend_filter?
Zend_filter is used to filter the data as remove the tags, trailing the spaces, remove all except digits.

Create Form & Form Elements

//create a form object
$form = new Zend_Form
$form->setAction('/resource/process')
     ->setMethod('post');

$form->setAttrib('id', 'login');
?>

//Form support Following elements

button,

checkbox (one/many),

hidden,

image,

password,

radio,

reset,

select (single select/many select),

submit,

text,

textarea

Zend Framework Central Authentication

Zend Framework Central Authentication

• Zend Framework  follow MVC Design with Dispatcher.
• Auth / ACL Implement
• Validate & Filter the URL with using dispatcher

class FilterPlugin extends Zend_Controller_Plugin_Abstract
{ 
public function preDispatch(Zend_Controller_Request_Abstract $request) 
{ 
    $params     = $request->getParams(); 
    $controller = $request->getControllerName(); 
    $action     = $request->getActionName(); 
    $filter = $GLOBALS['filters'][$controller][$action]; 
    $validator = $GLOBALS['validators'][$controller][$action]; 
    $inputdata = new Zend_Filter_Input($filter, $validator, $params); 
    if (!$inputdata ->isValid()) { 
        $request->setModuleName('default') 
                ->setControllerName('error') 
                ->setActionName('illegalparam') 
                ->setDispatched(false); 
        return; 
    } 
}

Sitemap

• Zend Interview Questions And Answers (1)
• Zend Interview Questions And Answers
  Is Zend Framework a component library or a framework? ZF is both. Zend Framework provides all the components required for most web applications in a single distribution. But Zend Framework components are also loosely coupled, making it easy to use just a few components in a web application- even alo...
   
  
• Zend Dom Query (1)
• Zend Dom Query Examples
      $htmlData ='    <h3>      <img src="wow/img.jpg" /><a href="http://wow.com">wow link</a>     </h3>    <h3>      <img src="wow/img.jpg" ><a href="http://wow.com">wow link2<...
   
  
• Zend Acl (1)
• Zend_ACL
  Zend_Acl provides lightweight and flexible access control list (ACL) functionality and privileges management. In general, an application may utilize such functionality to control access to certain protected objects by other requesting objects.Resource creating a Resource is very simple. Zend_Ac...
   
  
• Zend_Form (2)
• Create Form & Form Elements
  //create a form object$form = new Zend_Form$form->setAction('/resource/process')     ->setMethod('post');$form->setAttrib('id', 'login');?>//Form support Following elementsbutton,checkbox (one/many),hidden,image,password,radio,reset,select (single select/many select),submi...
   
  
• What Is Zend_Form
  It uses to create a form in zend framework. In this each input/select/radio/checkbox known as element.Following are the zend form features.·         Filtering and validation·         Ordering·    &...
   
  
• Zend Framework Security (2)
• ZF Security Escaping For Output
  $this->escape($foo) in view files...
   
  
• Zend Framework Central Authentication
  Zend Framework Central AuthenticationZend Framework  follow MVC Design with Dispatcher.Auth / ACL ImplementValidate & Filter the URL with using dispatcherclass FilterPlugin extends Zend_Controller_Plugin_Abstract{ public function preDispatch(Zend_Controller_Request_Abstract $request)&n...
   
  
• MVC (7)
• Zend Layout
  A website have different pages but have a page where all the footer/header/left/right section is included know as template/layout. Each page is called from that layout. A site may have one or more layout depend on website.Automate selection and rendering of layouts. Provide different scope for layo...
   
  
• Zend_Controller
  Zend_Controller is the heart of Zend Framework's MVC system. Zend_Controller_Front implements a "Front Controller" pattern, in which all requests are intercepted by the front controller and dispatched to individual Action Controllers based on the URL requested.Zend_Controller_Front also implements t...
   
  
• Zend-action-helper
  A helper can be initialized in several different ways, based on your needs as well as the functionality of that helper. The helper broker is stored as the $_helper member of Zend_Controller_Action; use the broker to retrieve or call on helpers. Some methods for doing so include: Following are the 3 ...
   
  
• Bootstrap
  Bootstrap: In bootstrap you can setting up the database, configuring your view and view helpers, configuring your layouts, registering plugins, registering action helpers, cron job & service srcipt./** Include Bootstrap file in public/index.php */require_once 'Zend/Application.ph...
   
  
• Design Patern
  Design Patern: It a formal way of documenting a solution to a problem.Zend Famework mainly use following Patterns.Singleton Pattern: It is a design pattern that restricts the instantiation of a class to one object.  Example: class Database { private static $_singleton; private $_connect...
   
  
• Components
  Zend_AclProvides lightweight and flexible access control list (ACL) functionality and privileges management.Role: It is an object that may request to access the Resource.Resource: Object which access is controller.e.g. Driver request to access the car. Here driver is Role & Car is resource. ...
   
  
• Model View Controller Architecture
  MVC Diagram In MVC pattern, we differentiate our logic(controller), Mysql(model) and html(view).View: It have all the Html parts of the page. Here we use the variables which we have set in controllers.Model: MYSQL queries parts of the page, we make an object of the model in controller & cal...
   
  
• Zend Authentication And Authorization (1)
• Zend Auth
  Zend_AuthZend_Auth is concerned only with authentication and not with authorization. Authentication is loosely defined as determining whether an entity actually is allowed or not....
   
  
• Site Map (1)
• Sitemap
  Loading... @import url("http://www.google.com/uds/solutions/dynamicfeed/gfdynamicfeedcontrol.css"); function LoadDynamicFeedControl() { var feeds = [ {title: 'Zend Framework Certification', url: 'http://zend-framework-certification.blogspot.com/rss.xml?redirect=false&start-index=1&max-results=999'...
   
  

What is Zend_Form

It uses to create a form in zend framework. In this each input/select/radio/checkbox known as element.

Following are the zend form features.

·         Filtering and validation

·         Ordering

·         Element and Form rendering, including escaping

·         Element aSnd form grouping

·         Element and form-level configuration

Zend_ACL

Zend_Acl provides lightweight and flexible access control list (ACL) functionality and privileges management. In general, an application may utilize such functionality to control access to certain protected objects by other requesting objects.


Resource
 creating a Resource is very simple. Zend_Acl provides Zend_Acl_Resource_Interfaceto facilitate developers' creating Resources. A class need only implement this interface, which consists of a single method, getResourceId();


Role
Zend_Acl providesZend_Acl_Role_Interface to facilitate developers' creating Roles. A class need only implement this interface, which consists of a single method, getRoleId(), in order for Zend_Acl to consider the object to be a Role.  In Zend_Acl, a Role may inherit from one or more Roles. This is to support inheritance of rules among Role.

Example of ACL

<?php
require_once 'Zend/Acl.php';
$acl = new Zend_Acl();

require_once 'Zend/Acl/Role.php';
$acl->addRole(new Zend_Acl_Role('guest'))
    ->addRole(new Zend_Acl_Role('member'))
    ->addRole(new Zend_Acl_Role('admin'));

$parents = array('guest', 'member', 'admin');
$acl->addRole(new Zend_Acl_Role('someUser'), $parents);

require_once 'Zend/Acl/Resource.php';
$acl->add(new Zend_Acl_Resource('someResource'));

$acl->deny('guest', 'someResource');
$acl->allow('member', 'someResource');

echo $acl->isAllowed('someUser', 'someResource') ? 'allowed' : 'denied';//allowed

?>

// Guest may only view content of all controller, Here 'view' can be an array having all the function which guest may access. null can be a string or an array, Here Null means all controller

$acl->allow($roleGuest, null, 'view');

// Here no controller or action is given, it means Administrator is allowed all privileges
$acl->allow('administrator');

// Remove the denial of revising latest news to staff 
$acl->removeDeny('staff', 'latest', 'revise');

Assertions

Sometimes a rule for allowing or denying a Role access to a Resource should not be absolute but dependent upon various criteria. For example, suppose that certain access should be allowed, but only between the hours of 8:00am and 5:00pm. Another example would be denying access because a request comes from an IP address that has been flagged as a source of abuse.

<?php
require_once 'Zend/Acl/Assert/Interface.php';

class CleanIpaddressAssertion implements Zend_Acl_Assert_Interface
{
    public function assert(Zend_Acl $acl, Zend_Acl_Role_Interface $role = null,
                           Zend_Acl_Resource_Interface $resource = null, $privilege = null)
    {
        return $this->_isCleanIP($_SERVER['REMOTE_ADDR']);
    }

    protected function _isCleanIP($ip)
    {
        // ...
    }
}

$acl->allow(null, null, null, new CleanIpaddressAssertion());

zend layout

A website have different pages but have a page where all the footer/header/left/right section is included know as template/layout. Each page is called from that layout. A site may have one or more layout depend on website.

• Automate selection and rendering of layouts.
• Provide different scope for layout related variables and content.eg render(), partial().
• Allow configuration, including layout name, layout script resolution (inflection), and layout.
• You can disable layouts, changing layout scripts, and other states; allow these actions from within action controllers and view scripts.
• Follow same script resolution rules (inflection) as the ViewRenderer. 

There are different options to set the options for layout.

//static method
Zend_Layout::startMvc($optionArray)
Zend_Layout::startMvc($optionIniObject)

//constructor
$layout = Zend_Layout($optionArray);
$layout = Zend_Layout($optionIniObject);

//methods
$layout = Zend_Layout();
$layout->setOptions($optionArray);
$layout->setOptions($optionIniObject);

//using accessors
$ayout->setLayout('layout)
->setLayoutPath('/views/layouts/mylayout.phtml');


You can use Zend_Layout as an standalone component but in that case all full features will not available. following are available.
Scoping of layout.
isolation of layout view scripts from another view scripts.

Zend_Controller

Zend_Controller is the heart of Zend Framework's MVC system. Zend_Controller_Front implements a "Front Controller" pattern, in which all requests are intercepted by the front controller and dispatched to individual Action Controllers based on the URL requested.Zend_Controller_Front also implements the Singleton pattern, meaning only a single instance of it may be available at any given time. The Zend_Controller system is designed to be lightweight, modular, and extensible

 The Zend_Controller workflow is implemented by several components.

zend-action-helper

A helper can be initialized in several different ways, based on your needs as well as the functionality of that helper. The helper broker is stored as the $_helper member of Zend_Controller_Action; use the broker to retrieve or call on helpers. Some methods for doing so include:

Following are the 3 different but equal method to set the message

$flashMessenger = $this->_helper->getHelper('FlashMessenger'); $flashMessenger->addMessage('We did something in the last request');

 OR

$flashMessenger = $this->_helper->FlashMessenger; $flashMessenger->addMessage('We did something in the last request');

 OR

$this->_helper->FlashMessenger('We did something in the last request');

bootstrap

Bootstrap: In bootstrap you can setting up the database, configuring your view and view helpers, configuring your layouts, registering plugins, registering action helpers, cron job & service srcipt.

/** Include Bootstrap file in public/index.php */

require_once 'Zend/Application.php';

// Create application, bootstrap, and run
$application = new Zend_Application(
    APPLICATION_ENV,
    APPLICATION_PATH . '/configs/application.ini'
);
$application->bootstrap()
            ->run();

/** Include Bootstrap file in public/index.php */

 /*in application/bootstrap.php */
class Bootstrap extends Zend_Application_Bootstrap_Bootstrap{}

class Zend_Application_Bootstrap_Bootstrap
    extends Zend_Application_Bootstrap_BootstrapAbstract{}

abstract class Zend_Application_Bootstrap_BootstrapAbstract
    implements Zend_Application_Bootstrap_Bootstrapper,
               Zend_Application_Bootstrap_ResourceBootstrapper

How to call a function from bootstrap

$bootstrap->bootstrap(array('foo'));

In bootstrap class there should be function with name of _initFoo()

Design Patern

Design Patern:  It a formal way of documenting a solution to a problem.

Zend Famework mainly use following Patterns.

Singleton Pattern: It is a design pattern that restricts the instantiation of a class to one object.

 Example: 
class Database {
  private static $_singleton;
  private $_connection;
  
  private function __construct($host,$user,$pass){
    $this->_connection = mysql_connect($host,$user,$pass);
  }

  public static function getInstance(){
   if (is_null (self::$_singleton)) {
   self::$_singleton = new Database();
   }
  return self::$_singleton;
  }
}

$db = Database::getInstance();

Factory Pattern: In this Pattern we can create an instance of any of one class in-directly from an static function of another class.

example 

$db = Zend_Db::factory( ...options... ); 

Implement of factory pattern example

components

Zend_Acl

Provides lightweight and flexible access control list (ACL) functionality and privileges management.
Role: It is an object that may request to access the Resource.
Resource: Object which access is controller.
e.g. Driver request to access the car. Here driver is Role & Car is resource.

Zend_Auth

Zend_Auth provides an API for authentication and includes concrete authentication adapters for common use case scenarios, as well as "Identity 2.0" adapters such as OpenID and Microsoft InfoCard.

Zend_Cache

Zend_Cache provides a flexible approach toward caching data, including support for tagging, manipulating, iterating, and removing subsets.

Zend_Config

Zend_Config simplifies the use of configuration data for web applications.

Zend_Console_Getopt

Command-line PHP applications benefit from this convenient object-oriented interface for declaring, parsing, and reporting command-line arguments and options.

Zend_Controller and Zend_View

Controller is for logical part and view is for Html Part.

Zend_Date

Zend_Date offers a detailed but simple API for manipulating dates and times.

Zend_Db

This is a lightweight database access layer, providing an interface to PDO and other database extensions in PHP. It includes adapters for each database driver, a query profiler, and an API to construct most SELECT statements.

Zend_Db_Table

The Zend_Db_Table component is a lightweight solution for object-oriented programming with databases.

Zend_Feed

This component provides a very simple way to work with live syndicated feeds.

Zend_Filter and Zend_Validate

These components encourage the development of secure websites by providing the basic tools necessary for input filtering and validation.

Zend_Filter_Input

This is a configurable solution for declaring and enforcing filtering and validation rules. This component serves as a "cage" for input data, so they are available to your application only after being validated.

Zend_Form

This component provides an object-oriented interface for building forms, complete with input filtering and rendering capabilities.

Zend_Gdata (Zend Google Data Client)

The Google Data APIs provide read/write access to such services hosted at google.com as Spreadsheets, Calendar, Blogger, and CodeSearch.

Zend_Http_Client

This component provides a client for the HTTP protocol, without requiring any PHP extensions. It drives our web services components.

Zend_Json

Easily convert PHP structures into JSON and vice-versa for use in AJAX-enabled applications.

Zend_Layout

Easily provide sitewide layouts for your MVC applications.

Zend_Loader

Load files, classes, and resources dynamically in your PHP application.

Zend_Locale

Zend_Locale is the Framework's answer to the question, "How can the same application be used around the whole world?" This component is the foundation of Zend_Date, Zend_Translate, and others.

Zend_Log

Log data to the console, flat files, or a database. Its no-frills, simple, procedural API reduces the hassle of logging to one line of code and is perfect for cron jobs and error logs.

Zend_Mail and Zend_Mime

Almost every Internet application needs to send email. Zend_Mail, assisted by Zend_Mime, creates email messages and sends them.

Zend_Measure

Using Zend_Measure, you can convert measurements into different units of the same type. They can be added, subtracted, and compared against each other.

• supports localized handling of measurements and numbers
• supports converting of measurements and numbers

Zend_Memory

Zend_Memory offers an API for managing data in a limited memory mode. A PHP developer can create a Zend_Memory object to store and access large amounts of data, which would exceed the memory usage limits imposed by some PHP environments.

Zend_Registry

The registry is a container for storing objects and values in the application space. By storing an object or value in the registry, the same object or value is always available throughout your application for the lifetime of the request. This mechanism is often an acceptable alternative to using global variables.

Zend_Rest_Client and Zend_Rest_Server

REST Web Services use service-specific XML formats. These ad-hoc standards mean that the manner for accessing a REST web service is different for each service. REST web services typically use URL parameters (GET data) or path information for requesting data and POST data for sending data.

Zend_Search_Lucene

The Apache Lucene engine is a powerful, feature-rich Java search engine that is flexible about document storage and supports many complex query types. Zend_Search_Lucene is a port of this engine written entirely in PHP 5.

Zend_Service: Akismet, Amazon, Audioscrobbler, Delicious, Flickr, Nirvanix, Simpy, StrikeIron and Yahoo!

Web services are important to the PHP developer creating the next generation of mashups and composite applications. Zend Framework provides wrappers for service APIs from major providers to make it as simple as possible to use those web services from your PHP application.

Zend_Session

Zend_Session helps manage and preserve session data across multiple page requests by the same client.

Zend_Translate

The Zend_Translate component provides Zend Framework with message translation functionality.

Zend_Uri

Zend_Uri is a component that aids in manipulating and validating Uniform Resource Identifiers (URIs). Zend_Uri exists primarily to service other components such as Zend_Http_Client but is also useful as a standalone utility.

Zend_XmlRpc

Zend_XmlRpc makes it easy to communicate with and create XML-RPC services from PHP.

• mimics PHP's SOAP extension
• flexible request and response implementation allows for use with non-HTTP services
• server implementation allows attaching existing classes to quickly expose APIs as XML-RPC services
•  

More Info..

Model View Controller Architecture

MVC Diagram

 In MVC pattern, we differentiate our logic(controller), Mysql(model) and html(view).

View: It have all the Html parts of the page. Here we use the variables which we have set in controllers.

Model: MYSQL queries parts of the page, we make an object of the model in controller & call the functions of the model. after fetching the data, we set it in controller & use in view.

Controller: It have all the logic part of the site.

Zend Framework Certification Topics

MVC

• Components
• Pattern Basics
• Bootstrap
• Zend_Controller
• Zend_Layout

Infrastructure

• Zend_Config
• Zend_Session
• Zend_Registry
• Zend_Loader

Internationalization

• Zend_Date
• Zend_Translate
• Zend_Locale
• Zend_Currency
• Zend_View_Helper_ Translate
• Internationalization Performance

Authentication and Access

• Zend_Acl
• Zend_Auth
• Zend_Auth Adapters

Performance

• Zend_Cache
• Script inclusion
• Optimization
• Zend_Memory

Forms

• Zend_Form
• Validation/Filtering
• Decorators
• Elements
• Forms
• Display Groups & Sub Forms
• Configuration
• Internationalization

Security

• Cross Site Request Forgery
• Secure Authentication
• Escaping for output
• Cross Site Scripting
• Security Best Practices

Diagnosis and Maintainability

• Zend_Debug
• Zend_Log

Filtering and Validation

• Filtering Chains
• Custom Filters
• Standard Validation Classes
• Validator Chains
• Custom Validators

search

• Zend_Search_Lucene
• Indexing
• Querying
• Performance

Database

• Zend_Db
• Zend_Db_Statement
• Zend_Db_Table
• Zend_Db_Profiler
• Zend_Db_Select
• Table Data Gateway Pattern
• Row Data Gateway Pattern

Mail

• Constructing
• Storage
• Message retrieval
• Storage providers
• Message sending

Coding Standards

• Coding conventions
• Zend_Loader

Web Services

• XML-RPC Client
• XML-RPC Server
• REST Client
• REST Server
• Zend_Service Web Services

 

Above topics are for Zend Framework Certification 1.5, that may be  change in future by Zend. Click  to see Latest syllabus.