|
|
xslt_process (PHP 4 >= 4.0.3, PECL) xslt_process -- Perform an XSLT transformation Descriptionmixed xslt_process ( resource xh, string xmlcontainer, string xslcontainer [, string resultcontainer [, array arguments [, array parameters]]] )
The xslt_process() function is the crux of the new
XSLT extension. It allows you to perform an XSLT transformation using
almost any type of input source - the containers. This is accomplished
through the use of argument buffers -- a concept taken from the Sablotron
XSLT processor (currently the only XSLT processor this extension supports).
The input containers default to a filename 'containing' the document to be
processed. The result container defaults to a filename for the transformed
document. If the result container is not specified - i.e.
NULL - than the result is returned.
| Внимание |
As of PHP 4.0.6, this function no longer takes XML strings in
xmlcontainer or
xslcontainer. Passing a string containing XML
to either of these parameters will result in a segmentation fault in
Sablotron versions up to and including version 0.95.
|
Containers can also be set via the arguments
array (see below).
The simplest type of transformation with the
xslt_process() function is the transformation of an
XML file with an XSLT file, placing the result in a third file containing
the new XML (or HTML) document. Doing this with sablotron is really
quite easy...
Пример 1. Using the xslt_process() to transform an XML
file and a XSL file to a new XML file |
<?php
$xh = xslt_create();
if (xslt_process($xh, 'sample.xml', 'sample.xsl', 'result.xml')) {
echo "SUCCESS, sample.xml was transformed by sample.xsl into result.xml";
echo ", result.xml has the following contents\n<br />\n";
echo "<pre>\n";
readfile('result.xml');
echo "</pre>\n";
} else {
echo "Sorry, sample.xml could not be transformed by sample.xsl into";
echo " result.xml the reason is that " . xslt_error($xh) . " and the ";
echo "error code is " . xslt_errno($xh);
}
xslt_free($xh);
?>
|
|
While this functionality is great, many times, especially in a web environment, you want to
be able to print out your results directly. Therefore, if you omit the third argument to
the xslt_process() function (or provide a NULL value for the argument), it
will automatically return the value of the XSLT transformation, instead of writing it to a
file...
Пример 2. Using the xslt_process() to transform an XML file and a XSL file
to a variable containing the resulting XML data |
<?php
$xh = xslt_create();
$result = xslt_process($xh, 'sample.xml', 'sample.xsl');
if ($result) {
echo "SUCCESS, sample.xml was transformed by sample.xsl into the \$result";
echo " variable, the \$result variable has the following contents\n<br />\n";
echo "<pre>\n";
echo $result;
echo "</pre>\n";
} else {
echo "Sorry, sample.xml could not be transformed by sample.xsl into";
echo " the \$result variable the reason is that " . xslt_error($xh);
echo " and the error code is " . xslt_errno($xh);
}
xslt_free($xh);
?>
|
|
The above two cases are the two simplest cases there are when it comes to XSLT transformation
and I'd dare say that they are the most common cases, however, sometimes you get your XML and
XSLT code from external sources, such as a database or a socket. In these cases you'll have
the XML and/or XSLT data in a variable -- and in production applications the overhead of dumping
these to file may be too much. This is where XSLT's "argument" syntax, comes to the
rescue. Instead of files as the XML and XSLT arguments to the xslt_process()
function, you can specify "argument place holders" which are then substituted by values
given in the arguments array (5th parameter to the xslt_process() function).
The following is an example of processing XML and XSLT into a result variable without the use
of files at all.
Пример 3. Using the xslt_process() to transform a variable containing XML data
and a variable containing XSL data into a variable containing the resulting XML data |
<?php
$arguments = array(
'/_xml' => $xml,
'/_xsl' => $xsl
);
$xh = xslt_create();
$result = xslt_process($xh, 'arg:/_xml', 'arg:/_xsl', NULL, $arguments);
if ($result) {
echo "SUCCESS, sample.xml was transformed by sample.xsl into the \$result";
echo " variable, the \$result variable has the following contents\n<br />\n";
echo "<pre>\n";
echo $result;
echo "</pre>\n";
} else {
echo "Sorry, sample.xml could not be transformed by sample.xsl into";
echo " the \$result variable the reason is that " . xslt_error($xh);
echo " and the error code is " . xslt_errno($xh);
}
xslt_free($xh);
?>
|
|
Finally, the last argument to the xslt_process()
function represents an array for any top-level parameters that you want to
pass to the XSLT document. These parameters can then be accessed within
your XSL files using the <xsl:param name="parameter_name">
instruction. The parameters must be UTF-8 encoded and their values will be
interpreted as strings by the Sablotron processor.
In other words - you cannot pass node-sets as parameters to the XSLT document.
Пример 4. Passing PHP variables to XSL files |
<?php
$xml = '<?xml version="1.0"?>
<para>
change me
</para>';
$xsl = '
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:output method="html" encoding="ISO-8859-1" indent="no"
omit-xml-declaration="yes" media-type="text/html"/>
<xsl:param name="myvar"/>
<xsl:param name="mynode"/>
<xsl:template match="/">
My PHP variable : <xsl:value-of select="$myvar"/><br />
My node set : <xsl:value-of select="$mynode"/>
</xsl:template>
</xsl:stylesheet>';
$xh = xslt_create();
$parameters = array (
'myvar' => 'test',
'mynode' => '<foo>bar</foo>'
);
$arguments = array (
'/_xml' => $xml,
'/_xsl' => $xsl
);
echo xslt_process($xh, 'arg:/_xml', 'arg:/_xsl', NULL, $arguments, $parameters);
?>
|
Результат выполнения данного примера: My PHP variable : test<br>
My node set : <foo>bar</foo> |
|
Замечание: Учтите, что в случае использования Windows,
вам нужно указать file:// в начале пути.
anonymous
28-Jun-2007 08:05
It is possible that the xslt_process call can expose information about Apache's installation location if null values are passed to the signature.
for example:
<?php
$xslt = xslt_create();
$result = xslt_process($xslt, null, null);
echo $result;
?>
The error you will recieve is:
Warning: Sablotron error on line none: cannot open file 'C:\Program Files\Apache Group\Apache2/' in C:\webroot\htdocs\projects\www\sales\test.php on line 4
Although trying to read a 'null' XML file and 'null' XSL stylesheet are rather silly, consider an attacker tries to upload an arbitrary file and execute it with similar code.
the user may then gain enough information to attack your site.
16-Aug-2006 04:30
To let xslt_process() work correctly, you have to set xslt_set_base()
Here is my example code (Tested on: Windows 2000/XAMPP 1.4.15/PHP 4.4.0/Sablotron 1.0.2):
<?php
$xh = xslt_create();
$filebase = 'file://' . getcwd () . '/test/';
xslt_set_base($xh,$filebase);
$xml = 'document.xml';
$xsl = 'document.xsl';
$resultdoc = 'result.html';
$parameters = array('mynode' => '<foo>bar</foo>','sample' => 'A sample value');
$result = xslt_process($xh,$xml,$xsl,$resultdoc,NULL,$parameters);
if (!$result)
{
die(sprintf("Cannot process XSLT document [%d]: %s",xslt_errno($xh), xslt_error($xh)));
}
echo "Result: ".$result."<br />";
xslt_free($xh);
?><a href="test/<?=$resultdoc?>">The result document</a><?
?>
ken at guest dot ie
04-Apr-2006 04:46
After experiencing an ”xml declaration not at start of external entity” error with XML recieved from a remote server. The server now sends response headers back and these were getting in the way.
This fixed it:
$fp = fsockopen($queryhost, 80);
if($fp) {
fputs($fp, $header);
while(!feof($fp)) {
$xml .= fgets($fp, 128);
}
}
fclose($fp);
//ensure string starts with the XML declaration.
$xml = substr($xml, strpos($xml, “<?xml”) );
$xsltproc = xslt_create();
$result = xslt_process($xsltproc,‘arg:/_xml’, $xsltfile, NULL, array(‘/_xml’ => $xml));
|