Allegro Webactions
v1.7
copyright(c) 2003-2004. Franz Inc
This is the Webactions documentation as of the release of Allegro CL 8.0. It is provided for convenience but the Webactions documentation is
regularly updated. We recommend that users use the latest version, available at http://opensource.franz.com/aserve/aserve-dist/webactions/doc/webactions.html.
That version is always the most up-to-date. AllegroServe, including Webactions, is
available from http://opensource.franz.com/.
The Webactions tutorial is using-webactions.html. See
also the AllegroServe documentation aserve/aserve.html.
Table of Contents
Introduction
Loading Webactions
Common Lisp Server Pages
Processing a clp file
clp elements with bodies
parsing clp files
clp tag and function names
The Lisp side of clp
Webactions
Webaction project
classes used in
Webactions
Storing Values
Lisp functions
for Webactions
Library of clp
functions
Introduction
Most of the web sites people visit again and again are dynamic.
These pages range from pages containing static data and a dynamically
selected banner ad to pages full of personalized content, such as a
search page returned by Google. AllegroServe offers two different
ways of creating dynamic pages. The most general is the publish
function which allows the programmer to completely generate the
response
to an http request. Also the publish-multi function
creates
pages that are a mixture of static data and data generated by a lisp
function. It's possible to build a large dynamic web site using just
these functions but it does require that you have a lot of programming
talent at your disposal. It's far easier to find html designers than
Lisp programmers and so we designed a method of building large dynamic
web sites in AllegroServe that uses mainly html designers with some
support from Lisp programmers. This is the purpose of Common Lisp Server Pages (or clp) and Webactions.
Webactions is the framework used to describe the whole site and to
control access to pages in the site. clp files provide a
way of mixing static and dynamic html that works well with the
webaction
framework. We'll describe clp pages first and then the webaction
framework.
Please see the document Using
Webactions for further background information on webactions.
Loading Webactions
In order to load in Webactions you should (require
:webactions).
This will load in AllegroServe if it isn't already loaded. The
functions in Webactions are exported from the net.aserve package.
Common Lisp Server Pages
Common Lisp Server Pages is modeled after similar designs for
other
languages: Java Server Pages, Active Server Pages, Personal Home Pages
(PHP) and others.
A Common Lisp Server Page file looks just like an html file.
In fact the format is the same as html. We've extended html by
allowing new tags which cause extended functionality to be invoked.
The key features of clp are:
- A clp file can be edited with an html editor (such as FrontPage
or Mozilla's built-in html editor named Composer).
- clp files can contain javascript or other scripting code.
- a clp file can contain illegal html. The clp file processor does
not attempt to verify that the file contains valid html syntax.
While we don't recommend that you use illegal html we do know
that
some people do and that won't prevent you from using clp files.
- A clp file does not contain any lisp code. A clp file may
contain tags that cause Lisp code to be run to render html, but it does
not contain Lisp code. The html designers editing the clp files
will likely not know Lisp. The presence of code in the file that they
don't understand would confuse them and they may inadvertently modify
the Lisp code and cause it to fail.
- The clp file processor, when used with the webactions framework,
supports the notion of sessions which are automatically maintained by
cookies (preferably) and by url rewriting otherwise.
Processing a clp file
This is a sample clp file:
<html>
<body>
You are using this browser: <http_header-value name="User-Agent"/>
<br>
How do you like it?
</body>
</html>
You'll notice two unusual things in the file. One is the tag http_header-value, which you've
never seen before. The other is that tag ends in "/>", which is the xml and xhtml
way of specifying that this html element has no body. It's
equivalent to writing the pure html:
<http_header-value name="User-Agent"></http_header-value>
The tag http_header-value
names
a clp function. A clp function is
written in Lisp and is run during the time this page is sent back to
the
browser. Thus when this page is retrieved by a browser, the
result is that all the text in the file up to the
http_header-value tag would be sent directly to the browser. Next
the http_header-value function would be run and it will emit html which
will be sent back to the browser. Finally the text after the
http_header-value tag will be sent to the browser.
The clp function http_header-value is supplied with AllegroServe.
As its name suggests it retrieves the value from an http header
in
the request and then emits the value as html. In our sample file
we're retrieving the value of the User-Agent header which describes
which http client is making the request.
A user accessing this page would see something like this in his browser:
You are using this browser: Netscape 4.01
How do you like it?
clp elements with bodies
The example above uses a clp element with no body. This is what
you'll typically find in use. However there are situations
where you want to give the element a body, the most notable one being
when you want a clp function to determine which parts of a clp file are
sent back to the browser. For example
<clp_ifdef name="winner" session> You are the Winner! </clp_ifdef>
<clp_ifndef name="winner" session > Sorry, you lost </clp_ifndef>
This clp file fragment checks to see if the session state has a
variable
named winner defined and if it does it includes the appropriate text.
If winner is not defined then
it includes the loser message. The clp_ifdef and
clp_ifndef
functions are supplied with AllegroServe.
One problem with using conditional inclusion of text is that an html
editor's view of the clp file will include both versions of the text
since it ignores unknown tags like clp_ifdef. Thus you'll have
to
balance the power of using conditional text inclusion against the
problems it creates in that your html editor can't display the
final product.
parsing clp files
Before a clp file can be used to generate a response to an http request
it must be parsed. The parsing function is very simple and
is in fact more like pattern matching than traditional parsing.
The parser
simply locates all calls to clp functions in the file and
separates them from the text that is sent back verbatim as part of the
response. A clp file is parsed when it's first referenced
in an http request and the results of the parse are cached
The clp file is not parsed again unless the file is updated on disk.
clp tag and function names
The clp parser has to be able to distinguish clp tags from html
tags and from tags that are neither clp tags nor valid html tags.
The parser may encounter a clp tag referencing a clp function that's
not
yet defined (in Lisp we don't require that a function be defined before
we'll recognize a call to that function). The problem then is
determining whether a given tag in the file is a call to a clp function
or
a name that could be used as a clp function in the future. The
strategy employed is the following: A clp function name has two
parts: a module name and the name of the function within the module.
These names are separated by an underscore. Thus http_header-value is the header-value function in the http module. The clp parser
only has to look closely at tags with an underscore in them. In
order to tell if such a tag is a clp function name the parser looks
only
at the module name. If the module name is of a currently known
module then that name is considered to be a clp function name.
Thus before you start running your web site you should define at least
one clp function in each module you intend to use. You can
define the other functions later (and you likely will if you are
building your site and testing it incrementally).
The Lisp side of clp
(def-clp-function
name (req ent args body) &rest function-body)
This macro defines a clp function with the given name. Name can be a string or a symbol (in
which case the downcased version of the symbol-name is used). The
name must include an underscore between two of the characters (this
separates the module name from the function-with-the-module name).
When called the function takes four arguments and we've
shown above the names we suggest be used for those four arguments.
req and ent are the familiar request
and
entity values passed to all http response functions. Args
is an alist of attribute names and values found in the start tag that
invoked this function. For example given the tag
<mod_sample name="foo" value="24">
the value of args would be
(("name" . "foo") ("value" . "24"))
The fourth argument, body, is
passed the parsed version of the of the body of the element, that is
the
text that appears between the start and end tags in the clp file.
A clp function is not supposed to examine the value of body. It should do one of two
things with body. It can
just ignore the value in which case the text and calls to clp
functions between the start and end tags are ignored and not sent
as part of the response to the web browser. Alternatively it can
cause the body to be sent back
as part of the response by calling (emit-clp-entity
req ent body).
The function-body is the code
that's run when the clp function is called. It should emit html
just like the code in a normal http response function. Often this
is done with the html macro.
The value returned by this function is unimportant.
(emit-clp-entity
req ent body)
This is used inside a clp function to cause the contents of body to be processed as a parsed clp
file. This will result in strings being sent to the html
stream (and thus back to the browser) and it will cause clp functions
to
be run. The only place this function should be used is
inside a clp function.
Webactions
Webactions is a framework for building dynamic web sites.
Dynamic webs sites are difficult to build as they require more than
html
can provide, such as
- sessions - the web site must follow each user as they move around
the site, perhaps picking up products and placing them in their virtual
shopping cart. This is accomplished by associating a session
object in the web server with each distinct user.
- database backed - the dynamic web site is often just a user
interface to a database. Shopping sites display products
found in the store's database and add orders to the store's database.
It's useful to separate out the code that operates on the
database
and the code that displays the current state of the database.
- complex linking - there are many paths through an online store as
goods are selected and finally an order is made. Keeping track
of
these links is very hard as the site gets large. You need some way of
keeping track of the layout of the whole site.
The webactions framework supports a programming methodology called
Model View Controller (or MVC). In a dynamic web application the
pieces are these:
- Model - this is the code that implements the data objects
being manipulated by users of the web site. In an online store the
model includes the notions of a shopping cart and orders and so on.
This is the code that must be written specifically for the
objects being modeled.
- View - the html pages that show the user a view of the model.
These pages are usually clp pages in the webaction framework.
There will be some clp functions to implement the dynamic parts
of the pages.
- Controller - the code that accepts user input and passes control
to the model to process the input and finally selects a view to
send back to the user. This code is supplied with the webaction
framework.
A designer of a webactions-based web site will write or reuse Lisp code
to implement the Model. For the View he'll write clp functions
in
Lisp to support the clp pages written in html. He'll
use the the Controller code supplied with Webactions.
Webaction project
A Webaction based web site is defined by a call to the
webaction-project macro.
(webaction-project name &key project-prefix clp-suffixes map
destination index
sessions session-lifetime reap-interval reap-hook-function server
authorizer
host access-file clp-content-type external-format)
webaction-project creates
project data structures and executes calls to publish to make the project exist on
the server.
The arguments are
name - a string naming the
project. The name is used to ensure that if webaction-project is called again
with the same name, the project by that name is redefined rather
than
creating a new project. Also the name is used as the name of the
cookie that's used to track sessions in this project. Since this
is a cookie name too the name should use just alphabetic and numeric
characters.
project-prefix - a string which
specifies the prefix of all urls in the project. The
prefix
should be a string beginning and ending in the forward-slash
character, such as "/myproject/" . It's legal to use the
one
character string "/". What this means is that all url's
beginning with this prefix are assumed to be part of this project and
are treated specially.
clp-suffixes - a list of
strings naming the suffixes of files, which if found inside the
project,
are assumed to be clp files. By default the value of clp-suffixes
is a list of the string "clp". You may wish to add "htm" or
"html" to this list if you want those files to be parsed as clp files
when referenced inside this project.
map - an assoc list of the
symbolic page name and how that page is generated. This will be
described in detail below.
destination - the location on
the filesystem where the files that make up this project are to be
found. This can be the empty string "" or the name of
a directory on the machine. If you name a directory be sure
that the name ends in "/".
index - the symbolic page
name of the main page of this project (also known as the index or root
page). webaction-project will redirect to this page if a request
comes in for a url which is just the project-prefix. If
the
project-prefix is "/foo/" and the index is "home" then a request
for "/foo" or "/foo/" will be redirected to "/foo/home"
sessions - if true (which is
the
default value) then track access to the pages of the project so that
all
accesses from a given web browser are assigned a unique websession
object.
session-lifetime - if the
session hasn't been accessed in this many seconds, remove the session
object from the internal table of sessions, allowing it to be garbage
collected. The default session lifetime is 18000 seconds (i.e.
five hours).
reap-interval - the number of
seconds between checks to see if any sessions have expired and should
be
removed. Specifying this variable sets a global variable (since
all webaction projects share the same session reaping process).
The default value is 300 seconds (i.e. five minutes).
reap-hook-function - a function
of one argument, a websession object. This is called when a
session is about to be destroyed due to no reference to this session
for the session-lifetime. If this function returns a
non-nil value then the session will not
be reaped and instead the session will be treated as if it was just
reference and thus it will be kept alive for another
session-lifetime. One common use for this function is to
deallocate objects associated with the session that won't be recovered
by the Lisp garbage collector when the session is garbage collected.
server - this is the wserver
object into which this project will be published. It defaults to
the value of *wserver*.
authorizer - an authorizer
object that will be associated with all entities created in this
project.
host - the value for the host
argument to the publish function used to establish the project
access-file - the filename of
the access file(s) found in the project's directory. See
the documentation for AllegroServe's publish-directory for details on
access-files.
clp-content-type - a string
holding the content type for all clp files published in this
project. The default is "text/html".
external-format - the external
format used when sending data back to the browser. The
default is the value of *default-aserve-external-format*
A web site is a collection of pages and images, each page
with references to images and with links to other pages. The
pages may be static or may be generated by programs. The links
and image references may be within the web site or to other web
sites. In a webaction web site we further distinguish managed pages
from unmanaged pages.
Session information is maintained as long as the user visits a
sequence of managed pages. If a user visits an unmanaged page and
then follows a link to a managed page, the user may end up in a new
session. Thus when designing a webaction web site it's
important to keep the user on managed pages until the session
information is no longer important.
A clp file is a managed page. An html file that's not a clp
file is an unmanaged page. A page generated by a Lisp function
is a managed page if it uses the locate-action-path
function to
compute the url's for href and action attributes in the page it
generates. Otherwise it's an unmanaged page.
The reason that there's a distinction between managed and unmanaged
pages is that if the browser doesn't accept cookies then the only way
that session information can be maintained is through url rewriting,
and
only managed pages have the support for url rewriting.
Every managed page is named by a distinct Lisp string we call the symbolic name of the page.
All references to pages in clp files and in clp functions is to
the symbolic name of the page rather than the url of the page.
The map argument to
webaction-project
associates the symbolic name of a page with the steps needed to render
the page.
A symbolic page name can refer to a managed page, an unmanaged page or
an action. An action is a Lisp function which performs some
operation and returns a symbolic page name. Earlier we talked
about the Model View Controller methodology. In MVC terms, the
action functions are operations on the Model. An action
function should not generate any html, that's the responsibility of the
View code.
Maps
The map argument
specifies
what steps are taken to process a request for a symbolic
page. In this section we'll describe the complete syntax of
the map value. If you're just learning Webactions you'll probably
want to skip to the Simple Maps section and then come back to
this section when you're done reading the rest of the
document.
The value of the map argument is a list of map entries:
( map-entry1
map-entry2 map-entry3 ....)
Each map entry is a list beginning with a symbolic page name and
followed by items which specify which actions to run, which view to
render and a set of flag values that apply to this entry.
In pseudo-bnf the form of a map entry is:
("symbolic page
name" item* [ (:flag1 value1 ... ...)
] )
In our psuedo-bnf, the '*' means zero or more occurrances. The
square brackets mean
zero or one occurrance.
An item can be a symbol or a string. If an item is a symbol
it names a lisp function which is either an action function or a view
function. If the item is a string then it either names a file to
send back to the browser or a symbolic page name.
An action function may modify the Model behind the website and then it
returns either a string naming a symbolic page name, a string
naming a file to send back to the browser, or the keyword symbol :continue meaning go on to the next
item in the map entry.
A view function will generate a response to the http request (which
usually means sending html to the browser). A view function
returns nil meaning that this
request has been processed and there's nothing more for webactions to
do.
These are some typical map entries
("home"
"homepage.clp")
("login" action-do-login "home")
("letter"
action-check-login get-named-letter (:prefix t))
As noted above a string can represent either a file to send back to the
browser or a symbolic page name. If a given string is
equal to the first value in a map entry then it is symblic page
name, otherwise it's a file to send back to the browser. There is
one exception: if a map entry doesn't have any items in it then the
string that's the first value of that map entry is the name of a
file to return. This special form is used when you wish to
add flags to the processing of a file. This is an example:
("myletter.clp"
(:content-type "text/plain"))
You need not understand the complete map entry syntax in order to use
Webactions. In fact you can build useful web sites
using only a fraction of the features of map entries. Next
we'll gradually introduce you to maps and show when you would want to
use the advanced features.
Simple Maps
In its simplest form, the
map is a list of two element
lists. Each two element list begins with the symbolic name of the
page. This is followed by either the location of the page or a
function name. A function name can either name a function that
will generate a managed or unmanaged page, or it will be the name
of an action function. Usually a function name will
not
name a page generating function, instead clp files will be used for
each page, however in some situations it may prove useful to have
totally dynamic pages generated by a lisp function.
Here's an example of a map argument value
(("home" "home.clp")
("signin" "signin.clp")
("newuser" action-new-user)
("existinguser" action-existing-user)
("failedlogin" user-failed-login)
("storefront" "storefront.clp"))
In the example we have three symbolic pages that refer to clp files.
These are thus managed pages. Two symbolic pages refer to
functions whose names suggest they are action functions. One
symbolic
page refers to a function user-failed-login which is a function to
dynamically create a page describing the failed login attempt.
You can't distinguish an action function from a dynamic page generation
function based on what's in the map argument. If you're wise
you'll use a naming convention such as used above to make the
distinction clear. The way that webactions determines
which
is which when running the function is that an action function will
return a string and a dynamic html generation function will return nil.
In a clp file relative urls that follow "href=" or "action=" are
considered to be the logical names of pages. Thus you can write
<a href="home"> blah blah </a>
and that href will be transformed into the appropriate url such that
the link will be directed to the page associated with the page with the
logical name "home".
It's still possible to reference pages outside the project using
absolute paths in url, such as
<a href="/othersite/index.html>check this out too</a>
or <a href="http://www.cnn.com"> read the latest
news</a>
Now we have the background to describe exactly what webaction-project
does. webaction-project does a publish-prefix for the path
that's the value of project-prefix. This means that any url in
that url-space will be processed as a reference to an object in this
project.
Let's create an example of a simple site that asks you to sign in and
once that's successful it lets you vote for your favorite food.
The sign in process ensures that at most one vote is recorded for each
user.
(webaction-project "sample" :project-prefix "/mysamp/" :destination "/usr/proj/sample/" :index "main"
:map '(("main" "main.clp")
("signin" action-sign-in)
("choice" "choice.clp")
("vote" action-vote)
("thanks" "thanks.clp")))
The first page of the site has the logical name "main" and that causes
the file "main.clp" to be returned to the browser. Here is
main.clp:
<html>
<body>
<h1>Sign In Please</h1>
<mysamp_showerrors/>
<form action="signin" method="POST">
name: <input type="text"
name="name" value="<clp_value name=name session/>"><br>
password <input type="password" name="password"><br>
<input type="submit">
</form>
</body>
</html>
There are just a few items to note in this page, and we've shown them
in bold. The first is the element <mysamp_showerrors/>.
This will cause a clp function to be invoked, which we'll
describe below. The next item to note is that the value of action= is a symbolic page
named
"signin". The clp processor will transform "signin" to the
appropriate value that depends on whether your browser is accepting
cookies.
The final item to note is that the default value of the text
field for "name" is given by a clp_value
tag. This clp_value retrieves the value of the session variable
"name", if
it has a value. We'll see later how this session variable is
set.
The idea is that if the user typed in his name but failed to type
in the correct password, we'll prompt him again for his password and
will fill in the name field for him. Note how the clp_value
element can be placed inside an html string value. This is
because the clp file parser doesn't parse the html, it just looks for
clp element tags.
The clp function mysamp_showerrors is this:
(def-clp-function mysamp_showerrors (req ent args body)
(declare (ignore ent args body))
(let ((error (request-variable-value req "error")))
(if* error
then (html :br
((:font :color "red")
(:princ-safe error))
:br :br))))
This function looks on the request object for a variable named "error"
and if found prints that value of that variable in red. This is
used to communicate to the users problems found by the code that checks
the name and password for validity. We'll next see how that
"error" variable is set.
When the user enters his name and password and clicks on the submit
button control is passed to the logical page "signin". Looking
at
the map above you'll see that this causes the function action-sign-in to be called.
Here is that function:
(defun action-sign-in (req ent)
(declare (ignore ent))
(let ((name (request-query-value "name" req))
(password (request-query-value "password" req))
(websession (websession-from-req req))
)
(setf (websession-variable websession "name") name)
(if* (equal password
(cdr (assoc name '(("joe" . "eoj")
("fred" . "derf"))
:test #'equal)))
then ; success!
(setf (websession-variable websession "signed-in") t)
"choice" ; show choice
else ; failure
(setf (request-variable-value req "error")
"name and password are invalid")
"main" ; go back and try again
)))
This function retrieves the values of the "name" and "password" values
from the set of form values. It retrieves the current session
object which is stored on the request object by the webaction framework
code. Next it stores the name given as the value of session
variable "name". This means that the clp_value form shown
in main.clp will be able to retrieve it should we get to that page
again. Next it checks if the password is valid. We
have a very simple test in our example, a real web site would use some
kind of database to store the password information. If the
password matches we set the session variable "signed-in" to true
and return the string "choice". The webaction framework
then
consults the map for a page named "choice" and finds that choice.clp
should be returned. If the name and password are not valid then
action-sign-in returns the string "main" causing main.clp to be
returned and the user prompted again for a name and password.
Before returning "main" this function sets the request variable
"error" to a string to print when main.clp is sent back to the browser.
This is choice.clp:
<html>
<body>
<h1>Vote</h1>
Ok <clp_value name="name" session/>, what do you like?
<br>
<form action="vote" method="POST">
favorite food: <input type="text" name="food"><br>
</form>
</body>
</html>
Here we ask the user for their favorite food. We personalize the
page by displaying the user's name on the page using clp_value.
When the user types in the food and presses enter the logical page
"vote" is invoked. From the map we see that that causes the
function action-vote to be invoked.
(defvar *votes* nil)
(defun action-vote (req ent)
(declare (ignore ent))
(let* ((food (request-query-value "food" req))
(websession (websession-from-req req))
(name (websession-variable websession "name")))
(if* (websession-variable websession "signed-in")
then (let ((ent (assoc name *votes* :test #'equal)))
(if* ent
then (setf (cdr ent) food)
else (push (cons name food) *votes*)))
"thanks"
else ; not signed in, can't vote
"main")))
The vote action checks to see if the user is logged in in which case it
stores the last value the user voted for in an assoc list in the
variable
*votes*. The logged in test is important since a user may
try to bypass the signing-in process by just directing his web browser
to /mysamp/vote which would run this action function as well.
If the vote was recorded this function returns "thanks" which the map
causes thanks.clp to be returned:
<html>
<body>
<h2>Thanks for voting</h2>
</body>
</html
Extended Maps
When designing a web application you usually want to force the user to
login first and then you open up the site to him. When a
user enters the correct name and password you modify the current
session object to include an object that identifies the user so that
subsequent visits to this site during the same session will be
associated with the user who just logged in. What if a new user
doesn't
come to the 'front door' of the web site but instead jumps right into
the middle of it? How can you protect the site so that a
non-logged-in user is forced to start at the login page before visiting
any other page of the site? The answer is using extended maps. Let's
look at the map from the project mentioned above:
(("main" "main.clp")
("signin" action-sign-in)
("choice" "choice.clp")
("vote" action-vote)
("thanks" "thanks.clp")))
In this map we would like the symbolic pages "choice", "vote" and
"thanks" to be reachable only
if the current session has a logged in
user.
We can accomplish this with
(("main" "main.clp")
("signin" action-sign-in)
("choice" action-check-login choice.clp")
("vote" action-check-login action-vote)
("thanks" action-check-login "thanks.clp")))
Where we define action-check-login as:
(defun action-check-login (req ent)
(declare (ignore ent))
(if* (websession-variable (websession-from-req req) "signed-in")
then ; logged in
:continue
else ; not logged in
"main"))
As you can see, a symbolic page name has a sequence of function names
or strings associated with it. The rule for
processing a symbolic page name is to process the list of items after
the symbolic page name in this way:
- if the first item is a string then consider it to be a symbolic
page name and start processing from the top.
- if
the first item is a symbol then run the function value of that
symbol. The return value from that function will be either
- string - consider this to be a symbolic page name to render
and start the processing from the beginning with this symbolic name
- nil - assume that the function called has already done the
html response for this request so do nothing further.
- :continue - if this particular keyword is returned then pop
the list of items specified to process this symbolic page and go back
to step 1.
If the map doesn't contain an entry for the symbolic page name then
assume that the symbolic page name is the actual name of a page on the
site and return that.
In our example the function action-check-login tests to see if the user
is logged in and if he is returns :continue so that the next item in
the list will be used to process the symbolic page request.
If the user is not logged in then the string "main" is returned which
causes the login page to be displayed (and subsequent items in the list
to handle the symbolic page request are ignored).
Prefix Maps
It is possible to have one map entry specify how to handle a whole set
of symbolic page names. The syntax is this
("name" action-or-view ....
(:prefix t))
What distinguishes this syntax is that the last item is a list.
That list contain a sequence of flag names and values, in a property
list format. .
The meaning of :prefix t is
that this map entry applies to all symbolic pages name beginning with
the string "name". For example if the project has a
prefix of "/foo/" then the following urls will be handled by this map
entry:
http://localhost/foo/name
http://www.foo.com/foo/named
http://www.bar.com/foo/namexxx/yyyy/zzz
Prefix map entries are the last ones considered when Webactions looks
for a map entry to handle a symbolic page name. Webactions first
looks for a specific symbolic page name entry. Then
Webactions sees if the symbolic page name names an actual file in the
project directory. And finally if those first two searches fail
to find a map entry, Webactions looks for a prefix entry.
The precedence of the prefix entries search is "last mentioned
first". That is the last prefix map value in the map argument to
webaction-project is tested first, and then the second to last, and so
on.
To continue our example above if there were also a map entry
("name" action-do-name)
then this url
http://localhost/foo/name
would be handled by the single symbolic name map entry rather than the
prefix entry.
Also if there were a file "name.clp" in the directory of files for this
project then the url
http://localhost/foo/name.clp
would return this file rather than invoke the "name" as a prefix map
entry.
We'll show two important uses for prefix map entries. The first
is that you can catch references to non-existent symbolic page names
and return a nicer error message than the standard one AllegroServe
returns. The map entry
("" handle-undefined-page
(:prefix t))
will catch all symbolic page references that don't have a
handler. You'll want to list this entry before any other prefix
entry in the map since you want this entry to be checked last.
The second important use for prefix map entries arises when you wish to
send a file to the browser and you would like to suggest the filename
for the file. Browers usually use the name that appears after the
last "/" in a url as the default name of the file to store.
Thus if this url
http://www.foo.com/myproj/sendfile/mypic.jpg
resulted in an "image/jpeg" being returned then the browser would
prompt to store this as "mypic.jpg". In a
webaction project (with the project prefix of "/myproj/") you
would have a map entry such as this
("sendfile/" return-filecontents (:prefix t))
Redirection Maps
Suppose you click on the submit button in a form, and the method for
that form is "POST". The webserver will respond with
another page. Now you click on a link on that page to go to a new
page. Now suppose you click on the Back button on the web
browser, which should take you to the page that was the result of
submitting the form. The browser should just show you
the previous page from its cache. Most browsers will do
this except that Internet Explorer will often tell you that the page
has expired and it refuses to show you the page.
This is counterintuitive and user-unfriendly behavior on IE's part but
still you must handle it in some way.
One way to handle this is that whenever a POST is done the webserver
processes the posted data and then returns a Redirect response to the
browser which then does a GET of the page that's the target of the
redirect. Thus the user ends up looking at a page that was
fetched with a GET, and thus IE will have no problem returning to this
page if the Back button is clicked.
You can specify this behavior in a map entry in this way
("getdata" action-do-getdata "showresult.clp" (:redirect t))
The redirect flag say that rather than simply return the contents of
showresult.clp to the browser, Webactions will return a
Redirect response to the browser which will then fetch "showresult.clp".
The consequence of this redirect is that clp functions invoked by
showresult.clp will not have access to the query values from the first
request to "getdata" and they will not have access to the
request-variables that may have been set by
action-do-getdata. This
feature is still under development -- we may change this in the future
to allow query and request variables to survive the redirect.
If you're concerned about making your site work in IE you'll likely
want to do this redirect for all symbolic pages that are reached by a
POST to a form.
Content-Type maps
You can specify the content type of a file return by Webactions by
adding a map entry of the following form
("myfile.clp" (:content-type
"text/plain"))
By default clp files are given the "text/html"
content-type. You can override this for all clp files using
the clp-content-type argument
to webaction-project.
Specifying the content type in a map entry overrides all other
specifications.
Specifying the content-type in this way only works in this case where
there are no actions or views following the name of the file.
Classes used in webactions
These classes are used by the webaction framework. Except as
noted the classes should be considered opaque. Use only the
documented functions to operate on instances of these classes.
clp-entity - when clp files are
"discovered" in a webaction by being referenced from a request
url, a clp-entity instance is created to describe the page.
This entity is then published so that the discovery process
doesn't have to happen again. When the clp-entity is created a
pointer to the webaction object is placed in the entity so that clp
functions run during the processing of the clp file can find the
webaction project they are running inside.
webaction-entity - there is one
entity of this class for each webaction project. This entity is
published to capture all urls that begin with the project prefix (if no
other more specific entity captures them). The webaction entity
holds a pointer to a webaction object.
webaction - An instance of this
class contains the information on a webaction project. It
contains
the information passed as arguments to webaction-project as well as a
websession-master instance if sessions are to be maintained.
websession-master - An
instance of this object is associated with a webaction object if that
project wants session support. The webaction-master object
contains the information for creating session ids and for automatically
deleting unused sessions. It also contains a map from cookie
value
to websession object.
websession - An instance of
this
class denotes a single session for a site denoted by a webaction.
The websession contains a "last used" time and will be automatically
removed after a certain amount of time without being used.
Storing Values
A webaction project consists of cooperating independent objects:
action functions, clp functions and clp files. These objects
often have a need to pass data from one to another.
Webactions offers three places to store data but of course application
specific code can also use other data repositories (such as
databases).
Session
|
Request Variable
|
Request Query
|
(websession-variable session "name")
|
(request-variable-value req "name")
|
(request-query-value "name" req)
|
<clp_value name="name" session/>
|
<clp_value name="name" request/>
|
<clp_value name="name" query/>
|
Lasts for the lifetime of a session.
You can obtain the session object using
(websession-from-req req)
|
Lasts for the lifetime of a request
|
Lasts for the lifetime of a request.
Initialized from the query string of the url of the request and from form data.
|
The values can be set using setf of the corresponding accessor.
Lisp functions for
webactions
These functions are useful inside clp functions and webactions action
functions.
(locate-action-path
webaction action-name websession)
Returns a url path to the action named action-name
in the given webaction
and websession.
This is used in a
clp function when you wish to provide a value for a href or action attribute that should be
directed to an action in the current project.
(html "go to " ((:a href (locate-action-path wa "signup" session)) "here") " to sign up.")
You can find the current webaction object using webaction-from-ent and the current
session object using websession-from-req.
(webaction-from-ent
ent)
Returns the webaction object associated with this entity. This
function will return the webaction object for clp-entity and
webaction-entity objects. This function is rarely used
since there is little that can be done by user code with a webaction
object.
(websession-from-req req)
Returns the websession object associated with this request (which is an
http-request object).
(websession-data
websession)
Returns whatever data was stored in the session object by the user.
Use (setf (websession-data websession) xxxxx) to store data in
the
websession object. See websession-variable for a way of
storing data using a name as a key.
(websession-key websession)
returns the key for this session. This key is used in cookies and
in the url itself if cookies are not supported.
(websession-variable websession name)
returns the value of the session variable with the given name.
The name can be a string or symbol. It's compared against
existing keys using the equal
function. Use setf to
store the value of variables.
Library of clp functions
The following clp functions are supplied with AllegroServe.
<clp_include
name="filename"/>
insert the contents of the given file at this point. A relative
filename will be relative to the location of the file containing this
clp_include element.
<clp_base/>
This emits a <base href="xxx"> tag into the html stream.
xxx is the location of the clp page being emitted. Due to
the automatic internal redirecting done by the webaction processor the
initial url can be much different than the url which describes the page
being sent to the browser. If the page contains relative
references to images then the base tag will allow the browser to turn
those relative references into the correct absolute references.
This tag must be within the <head> .... </head> part of the
page.
<clp_value
name="xxx" [safe] [query | request | session]/>
Retrieve the value of the variable named xxx from the location
specified and emit it to the html stream. If location is query
then the value is retrieved from the query string of a GET or the
body and query string of the POST. If the location is
request then the value is retrieved from the request variables.
If
the location is session then the values are retrieved from the session
variables. If safe
is given then the value will be printed in such a way to escape any
characters that would be interpreted as html (e.g., as (html (:princ-safe xxx)) would
print the value).
Example:
The value of query variable foo is <clp_value name="foo" safe query/>.
<clp_set
name="xxx" value="yyy" [query | request | session]/>
Sets the value of variable xxx to yyy in the given location.
If you want to pass values from one clp function to another
storing them in the request location is best as the value will be
isolated to this one http request.
<clp_ifgt
name="xxx" value="yyy" [query | request | session]>body</clp_ifgt>
If the value of the variable xxx found at the given location is
greater than the value yyy then the body will be emitted to the html
stream. The value yyy should be an integer value.
<clp_iflt
name="xxx" value="yyy" [query | request | session]>body</clp_iflt>
If the value of the variable xxx found at the given location is
less than the value yyy then the body will be emitted to the html
stream. The value yyy should be an integer value.
<clp_ifeq name="xxx" value="yyy" [query | request | session]>body</clp_ifeq>
If the value of the variable xxx found at the given location is
eql to the value yyy then the body will be emitted to the html
stream.
The value yyy should be an integer value.
<clp_ifneq name="xxx" value="yyy" [query | request | session]>body</clp_ifneq>
If the value of the variable xxx found at the given location is
not eql to the value yyy then the body will be emitted to the html
stream.
The value yyy should be an integer value.
<clp_ifdef name="xxx" [query | request | session]>body</clp_ifdef>
If the value of the variable xxx found at the given location is
not nil then the body will be emitted to the html stream.
<clp_ifndef
name="xxx" [query | request | session]>body</clp_ifdef>
If the value of the variable xxx found at the given location
is nil then the body will be emitted to the html stream.
If
the variable xxx has never been set then this is the same as it having
a
value of nil.
<clp_ifequal name="xxx" value="yyy" [query | request | session]>body</clp_ifequal>
If the value of the variable xxx found at the given location is
equal to the value yyy then the body will be emitted to the html
stream.
The value yyy can be any value, but is likely to be a
string.
<clp_ifnequal name="xxx" value="yyy" [query | request | session]>body</clp_ifnequal>
If the value of the variable xxx found at the given location is
not equal to the value yyy then the body will be emitted to the html
stream.
The value yyy can be any value, but is likely to be a
string.
<clp_options
name="xxx" [query | request | session]>
"opt1" "opt2"
..."optn"</clp_options>
This function helps build a dynamically defaulted option list for the
html <select> element.
Inside a <select> element are a sequence of
<option> elements with the default value denoted <option
selected>. When generating an option list the default value
may not be known when the author writes the page. The default
can
be based on some other value entered in the session. Thus this
form allows the default to be computed where the default value is found
at runtime from the value of the variable whose name is given as the
value of the name attribute.
In the form shown above the variable name is xxx.
Between <clp_options> and </clp_options> are a sequence of
lisp strings. When this is processed the lisp strings are read
with the lisp reader in order to create a list of option values.
If a name= attribute isn't present then the first lisp string is made
the default
Example:
<select name="color">
<clp_options name="defcolor" session>
"blue" "green" "yellow"
"red" "purple" "gold"
</clp_options>
</select>
<clp_select
args>body</clp_select>
This function simply emits a select form: <select args>body</select>.
The reason for using clp_select
instead of select is that some
html editors get confused by items inside the body of a select that aren't option elements In a clp file
you might want to put clp_options
or clp_include inside a select tag. If you use clp_select you can put whatever you
want in the body and most html editors will not object.
<http_header-value name="xxx"/>
print the value of the given http header to the html stream. The
name (here xxx) is treated
case-insensitively.
Example:
You are using browser <http_header-value name="User-Agent"/>.
<wa_link name="xxx" extra="yyy"/>
This function is rarely if ever explicitly found in a clp file however
this function is implicitly called whenever the clp parser encounters
an
href= or action= in a clp file. The result of a call to wa_link
is to take a url (here xxx) and transform it into the appropriate url
given whether the url is relative or absolute and whether cookies are
being accepted in the current session. Extra is optional and if
given specifies what string should be added to the end of the resulting
url. This is where a query string is usually placed
Example:
<wa_link href="main" extra="?user=joe&password=123"/>
<wa_showerrors
name="xxx" [query | request | session] [clear]/>
If the the variable named xxx
in the location specified (query,
request or session) has a value then display
that value in red in the html being returned as part of the
request. If clear
is
given then set the value of variable xxx
to nil. This is commonly used to display error messages on a
page, such as when a form wasn't filled out correctly and you're
redisplaying the page and asking the user to try again. The
default location is request.