I developed a very quick and simple PHP application for reading classified ads from an XML file and allowing the user to perform CRUD operations on it (this was a homework assignment). I'm now tasked with developing this application to a RESTful service. The professor actually doesn't seem to have any experience with RESTful services, because he said my application was find to hand in for the next assignment, when my research indicates it doesn't really fulfil all the RESTful requirements. Regardless, I want to do this correctly for learning purposes, even if I can hand in my old assignment and get a good grade. I'm having trouble learning where to begin though; I'm not sure exactly what a RESTful service really is. I think the best way to get advice is to post sample code from my previous assignment to see how I handled things and how I need to handle things instead. For instance, here is how I create new classifieds. Create.php <pre class="prettyprint"><code>//Basically just a list of <INPUT TYPE = "text" NAME = "something"> in the <body> fields </code></pre> CreateSuccess.php <pre class="prettyprint"><code><html><head><?php $simplerXML = simplexml_load_file('file.xml'); //Generate the basic ad information $newAd = $simplerXML->addChild('advertisement',''); $newAd->addAttribute('category', $_POST["category"]); $title = $newAd->addChild('title', $_POST["title"]); $title->addAttribute('ID', $_POST["ID"]); $pageTitle = $newAd->addChild('pagetitle', $_POST["pagetitle"]); //etc, for all the SUBMIT boxes //save the XML $simplerXML->asXML('file.xml'); echo "<script type='text/javascript'> //redirect back to ad listing page window.onload = function () { top.location.href = 'ads.php'; }; </script>"; ?></head> <body></body></html> </code></pre> I'm also using URL parameters for the RUD actions. I've heard URL parameters are not allowed as well? Thanks. EDIT: So the SWITCH statement, does it go in the index.php file? And then each case will call a function, ie CreateXML for the POST method? Then the parameters it needs will be the object type, object id, and content type? How do I get the values to update the XML with, do I just send it to the Create.php file containing the list of input boxes?

If your service supports all CRUD operations, it's always advisable to implement a RESTful interface. It's not super-hard to do so. I've outlined some of the basics below. A RESTful service simply does a few things: <ol> <li>It uses HTTP request method for communication of the CRUD action</li> <li>It uses HTTP status code to communicate response status, and</li> <li>It uses the URI to define your resource (file, database item you're accessing, etc). </li> <li>It is stateless</li> </ol> The idea is to minimize the development of custom communications for these things that are already defined in the HTTP spec. <hr> 1 - REQUEST METHOD The 4 HTTP request methods you're required to support for a RESTful service are: <ol> <li>POST</li> <li>GET</li> <li>PUT</li> <li>DELETE</li> </ol> and you may optionally support <ol> <li>PATCH</li> <li>HEAD</li> </ol> You can map these directly to your CRUD actions as follows: <ul> <li>POST = Create</li> <li>GET = Retrieve</li> <li>PUT = Update</li> <li>DELETE = Delete</li> <li>PATCH = Edit (a partial update, e.g. "change password". PUT becomes "replace")</li> <li>HEAD = Header only (metadata about the resource)</li> </ul> To do this, route requests properly with a simple request method router as follows: <pre class="prettyprint"><code>switch ($_SERVER["REQUEST_METHOD"]) { case "POST": // Create action break; case "GET": // Retrieve action break; case "PUT": // Update action break; case "DELETE": // Delete action break; } </code></pre> <hr> 2 - STATUS CODE You should further implement HTTP status codes from your service to communicate status back to the client, e.g.: <ul> <li>20x = success</li> <li>30x = redirection</li> <li>40x = communication issues</li> <li>50x = server error</li> </ul> To do this, simply prepend your response with the proper HTTP header output, e.g.: <pre class="prettyprint"><code>header("Status: 500 Internal Server Error"); </code></pre> You can reference the full list of implemented HTTP status codes here: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html <hr> 3 - URIs For URIs, RESTful services usually follow a top-down approach to categorized naming, e.g. <pre class="prettyprint"><code>/object_type/id.content_type </code></pre> Examples: <pre class="prettyprint"><code>POST /user PUT /user/1 GET /user/1.json GET /user/1.html </code></pre> You can implement a very rudimentary RESTful router for the above convention using Apache with <code>mod_rewrite</code> in an <code>.htaccess</code> file, as follows: <pre class="prettyprint"><code>RewriteEngine On RewriteRule ^([^\/]+)\/([^\.]+)\.(\w+)$ index.php?object_type=$1&object_id=$2&content_type=$3 </code></pre> You would then have <code>index.php</code> Look for the appropriate object_type and id to route appropriately, e.g.: <pre class="prettyprint"><code>$object = $_GET["object_type"]; $id = (int) $_GET["object_id"]; $content_type = $_GET["content_type"]; // Route from here to a class with the name of the object (e.g. UserController) via __autoload // or to a file (e.g. user.php) via include, and pass id and content_type as params </code></pre> <hr> 4 - STATELESSNESS Simply stated, the server maintains no "state" for the client. No requirements for storing session or status. Each request represents a complete transaction. I.e. if I GET user/1, the server won't remember that I did that, and future requests won't be dependent upon or affected by previous ones. If you implement these standards, congrats, you've built a RESTful service!

"RESTful" is a broad concept and there are degrees of "RESTfulness". Wikipedia is a good guide here Here are some higher-level characteristics not addressed in the other answer (which is also good): <ol> <li>Resources are available at URLs, preferably with only one canonical url per resource. <ul> <li>You can indicate that a resource is available at other urls or representations using the <code>Content-Location</code> header.</li> <li>You can provide different representations of a resource (html, json, xml, etc) by using content negotiation with the <code>Accept</code> and <code>content-type</code> headers.</li> </ul> </li> <li>Changes in the state of the resource are entirely represented by a single HTTP request. The server does not need to maintain state to service a client request. Consequently, requests can be easily proxied and cached. <ul> <li>An example of a common violation of this principle is a url like "http://example.org/profile" which serves a different user profile depending on who is logged in.</li> <li>Better would be to separate the resource from authorization: "http://example.org/profile/{USERID}" would always serve a particular user's userid, but return 401 (Not authorized) if the client does not have permission. (Also, authorization information should be sent with every request, so that the server does not require a session token or similar server-side state. As a consequence, most websites with a cookie-based login system are not purely restful.)</li> <li>GET to retrieve a resource. This should not change the state of the resource and should be safely repeatable. This property is often called "Idempotency".</li> <li>PUT to update a resource. Using techniques such as conditional updating requests (PUT or DELETE with an <code>if-*</code> header) you can even implement optimistic concurrency control.</li> <li>DELETE to remove a resource.</li> <li>POST as a catchall "do something" resource. POST is used when you have to do something that doesn't fit cleanly into the http methods or when you need to perform an action with side-effects (for example, create a new resource without knowing its name or implement an RPC protocol.) However, you are expected to use http headers and response codes to show what resource side-effects there were, e.g. a "201 Created" with <code>Location</code> and <code>Content-Location</code> headers and a list of urls affected by the change.</li> </ul> </li> <li>Resource representations are self-describing "hypertext" with links to other resources. <ul> <li>An example of a violation of this principle: Suppose "http://example.com/articles" is a list of articles and the json representation of it looks like <code>[1,2,3,4,5,6]</code>. This is a list of article ids, but it's not self-describing or hypertext--the client needs to know this is a list of article ids, and it needs to know that to get an article resource it has to construct a url like "http://example.org/articles/1".</li> <li>Better would be a response like <code>{"articles":[{"id":1,"url":"http://example.org/articles/1"},...]}</code>. Like html, a client using a rest service should only have to follow links (not make links) to get at other related resources. You can even document the available methods you can use to manipulate a resource--create, update, delete, etc.</li> </ul> </li> </ol>

Create a RESTful API in PHP?

Tags:

rest

php

xml

I developed a very quick and simple PHP application for reading classified ads from an XML file and allowing the user to perform CRUD operations on it (this was a homework assignment).

I'm now tasked with developing this application to a RESTful service. The professor actually doesn't seem to have any experience with RESTful services, because he said my application was find to hand in for the next assignment, when my research indicates it doesn't really fulfil all the RESTful requirements.

Regardless, I want to do this correctly for learning purposes, even if I can hand in my old assignment and get a good grade. I'm having trouble learning where to begin though; I'm not sure exactly what a RESTful service really is.

I think the best way to get advice is to post sample code from my previous assignment to see how I handled things and how I need to handle things instead.

For instance, here is how I create new classifieds.

Create.php

//Basically just a list of <INPUT TYPE = "text" NAME = "something"> in the <body> fields

CreateSuccess.php

<html><head><?php $simplerXML = simplexml_load_file('file.xml'); 
//Generate the basic ad information
$newAd = $simplerXML->addChild('advertisement','');
$newAd->addAttribute('category', $_POST["category"]);
$title = $newAd->addChild('title', $_POST["title"]);
$title->addAttribute('ID', $_POST["ID"]);
$pageTitle = $newAd->addChild('pagetitle', $_POST["pagetitle"]);
//etc, for all the SUBMIT boxes

//save the XML
$simplerXML->asXML('file.xml');
echo "<script type='text/javascript'>
//redirect back to ad listing page
window.onload = function () { top.location.href = 'ads.php'; };
</script>";
?></head>
<body></body></html>

I'm also using URL parameters for the RUD actions. I've heard URL parameters are not allowed as well?

Thanks.

EDIT: So the SWITCH statement, does it go in the index.php file? And then each case will call a function, ie CreateXML for the POST method? Then the parameters it needs will be the object type, object id, and content type? How do I get the values to update the XML with, do I just send it to the Create.php file containing the list of input boxes?

220

asked Dec 01 '12 18:12

user1287523

2 Answers

If your service supports all CRUD operations, it's always advisable to implement a RESTful interface. It's not super-hard to do so. I've outlined some of the basics below.

A RESTful service simply does a few things:

It uses HTTP request method for communication of the CRUD action
It uses HTTP status code to communicate response status, and
It uses the URI to define your resource (file, database item you're accessing, etc).
It is stateless

The idea is to minimize the development of custom communications for these things that are already defined in the HTTP spec.

1 - REQUEST METHOD

The 4 HTTP request methods you're required to support for a RESTful service are:

POST
GET
PUT
DELETE

and you may optionally support

PATCH
HEAD

You can map these directly to your CRUD actions as follows:

POST = Create
GET = Retrieve
PUT = Update
DELETE = Delete
PATCH = Edit (a partial update, e.g. "change password". PUT becomes "replace")
HEAD = Header only (metadata about the resource)

To do this, route requests properly with a simple request method router as follows:

switch ($_SERVER["REQUEST_METHOD"]) {
    case "POST":
        // Create action
        break;
    case "GET":
        // Retrieve action
        break;
    case "PUT":
        // Update action
        break;
    case "DELETE":
        // Delete action
        break;
}

2 - STATUS CODE You should further implement HTTP status codes from your service to communicate status back to the client, e.g.:

20x = success
30x = redirection
40x = communication issues
50x = server error

To do this, simply prepend your response with the proper HTTP header output, e.g.:

header("Status: 500 Internal Server Error");

You can reference the full list of implemented HTTP status codes here: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html

3 - URIs For URIs, RESTful services usually follow a top-down approach to categorized naming, e.g.

/object_type/id.content_type

Examples:

POST /user
PUT /user/1
GET /user/1.json
GET /user/1.html

You can implement a very rudimentary RESTful router for the above convention using Apache with mod_rewrite in an .htaccess file, as follows:

RewriteEngine On
RewriteRule ^([^\/]+)\/([^\.]+)\.(\w+)$  index.php?object_type=$1&object_id=$2&content_type=$3

You would then have index.php Look for the appropriate object_type and id to route appropriately, e.g.:

$object = $_GET["object_type"];
$id = (int) $_GET["object_id"];
$content_type = $_GET["content_type"];

// Route from here to a class with the name of the object (e.g. UserController) via __autoload
// or to a file (e.g. user.php) via include, and pass id and content_type as params

4 - STATELESSNESS Simply stated, the server maintains no "state" for the client. No requirements for storing session or status. Each request represents a complete transaction. I.e. if I GET user/1, the server won't remember that I did that, and future requests won't be dependent upon or affected by previous ones.

If you implement these standards, congrats, you've built a RESTful service!

answered Oct 06 '22 21:10

Steven Moseley

"RESTful" is a broad concept and there are degrees of "RESTfulness". Wikipedia is a good guide here

Here are some higher-level characteristics not addressed in the other answer (which is also good):

Resources are available at URLs, preferably with only one canonical url per resource.
- You can indicate that a resource is available at other urls or representations using the Content-Location header.
- You can provide different representations of a resource (html, json, xml, etc) by using content negotiation with the Accept and content-type headers.
Changes in the state of the resource are entirely represented by a single HTTP request. The server does not need to maintain state to service a client request. Consequently, requests can be easily proxied and cached.
- An example of a common violation of this principle is a url like "http://example.org/profile" which serves a different user profile depending on who is logged in.
- Better would be to separate the resource from authorization: "http://example.org/profile/{USERID}" would always serve a particular user's userid, but return 401 (Not authorized) if the client does not have permission. (Also, authorization information should be sent with every request, so that the server does not require a session token or similar server-side state. As a consequence, most websites with a cookie-based login system are not purely restful.)
- GET to retrieve a resource. This should not change the state of the resource and should be safely repeatable. This property is often called "Idempotency".
- PUT to update a resource. Using techniques such as conditional updating requests (PUT or DELETE with an if-* header) you can even implement optimistic concurrency control.
- DELETE to remove a resource.
- POST as a catchall "do something" resource. POST is used when you have to do something that doesn't fit cleanly into the http methods or when you need to perform an action with side-effects (for example, create a new resource without knowing its name or implement an RPC protocol.) However, you are expected to use http headers and response codes to show what resource side-effects there were, e.g. a "201 Created" with Location and Content-Location headers and a list of urls affected by the change.
Resource representations are self-describing "hypertext" with links to other resources.
- An example of a violation of this principle: Suppose "http://example.com/articles" is a list of articles and the json representation of it looks like [1,2,3,4,5,6]. This is a list of article ids, but it's not self-describing or hypertext--the client needs to know this is a list of article ids, and it needs to know that to get an article resource it has to construct a url like "http://example.org/articles/1".
- Better would be a response like {"articles":[{"id":1,"url":"http://example.org/articles/1"},...]}. Like html, a client using a rest service should only have to follow links (not make links) to get at other related resources. You can even document the available methods you can use to manipulate a resource--create, update, delete, etc.

answered Oct 06 '22 22:10

Francis Avila

Related questions
                            
                                Show mysql random result
                            
                                How to use Regex look behind?
                            
                                Catch a fatal exception and continue
                            
                                How to assign a variable to one of two strings if one is blank?
                            
                                is it acceptable to recycle or reuse variables?
                            
                                in Zend, Why do We use DB Model class and Mapper class as two separate?
                            
                                returning true outputs 1 but returning false outputs nothing
                            
                                Detect Browsers older than two years
                            
                                Match IPv4 address given IP range/mask?
                            
                                MySQLi prepared update statement in PHP
                            
                                Is it possible to record audio from client to server in PHP- or JAVA-based online web application?
                            
                                Add custom attribute in order email templates - Magento
                            
                                PHP redis error
                            
                                Is it possible to insert php variables into your js code? [duplicate]
                            
                                Yii Bootstrap does not work if not preloaded
                            
                                Zend Framework - 500 Internal Server Error
                            
                                php imagick - read image from base64
                            
                                How to convert byte array to integer in php?
                            
                                PHP log file color
                            
                                PHP base64 encoding custom alphabet

Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!

Donate Us With