@@ -610,7 +613,8 @@ To get the name and current period: ::
Typically, it's necessary to offer a 'previous' / 'next' link. In this example, the STORE SIP holds the new periodId: ::
SELECT CONCAT('p:{{pageAlias:T}}&periodId=', {{periodId:SY0}}-1, '|Next') AS _page, ' ', name, ' ', CONCAT('p:{{pageAlias:T}}&periodId=', {{periodId:SY0}}+1, '|Next') AS _page FROM Period AS s WHERE s.id={{periodId:SY0}}
sql=SELECTCONCAT('p:{{pageAlias:T}}&form=cron') AS _pagen, 'id', 'Nextrun','Frequency','Comment','Lastrun','Inprogress', 'Status' FROM (SELECT 1) AS fake WHERE '{{form:SE}}'=''
sql=SELECTCONCAT('p:{{pageAlias:T}}&form=cron') AS _pagen, 'id', 'Nextrun','Frequency','Comment',
'Lastrun','Inprogress', 'Status' FROM (SELECT 1) AS fake WHERE '{{form:SE}}'=''
A form will require a 'tokenbasedauthorization', as soon as there is a 'form.parameter.restToken' defined.
Therefore the HTTP Header 'Authorization' has to be set with 'token=<secrettoken>'. The 'secrettoken' will
A form will require a 'tokenbasedauthorization', as soon as there is a `form.parameter.restToken` defined.
Therefore the HTTP Header 'Authorization'hastobesetwith`token=<secrettoken>`.The'secret token'will
becheckedagainsttheserver.UsingHTTPS,suchtokencan't be sniffed and will typically not be logged in
any server logs.
...
...
@@ -7709,17 +7720,19 @@ Example: ::
Test via commandline: curl -X GET -H 'Authorization:Tokentoken=myCrypticString0123456789' "http://localhost/qfq/typo3conf/ext/qfq/Source/api/rest.php/person/123/address/"
To restrict access to a subset of data, just save the limitations inside the Auth record and update the query
to check it: ::
to check it:
.. code-block:: pmysql
form.parameter.restToken={{SELECT a.token FROM Auth AS a WHERE a.token='{{Authorization:C:alnumx}}'}}
form.parameter.restSqlList={{!SELECT p.id, p.name, p.email FROM Person AS p, Auth AS a WHERE a.token='{{Authorization:C:alnumx}}' AND a.attribute=p.attribute}}
...
...
@@ -7748,7 +7761,9 @@ Report
------
Any HTML output can be extended by a tag - that'sdonebythewebmaster.ForQFQgeneratedlinks,anattributelike