16 KiB
Upgrading Instructions for Yii Framework v2
!!!IMPORTANT!!!
The following upgrading instructions are cumulative. That is, if you want to upgrade from version A to version C and there is version B between A and C, you need to following the instructions for both A and B.
Upgrade from Yii 2.0.0
-
Upgraded Twitter Bootstrap to version 3.3.x. If you need to use an older version (i.e. stick with 3.2.x) you can specify that in your
composer.jsonby adding the following line in therequiresection:"bower-asset/bootstrap": "3.2.*",
Upgrade from Yii 2.0 RC
-
If you've implemented
yii\rbac\ManagerInterfaceyou need to add implementation for new methodremoveChildren(). -
The input dates for datetime formatting are now assumed to be in UTC unless a timezone is explicitly given. Before, the timezone assumed for input dates was the default timezone set by PHP which is the same as
Yii::$app->timeZone. This causes trouble because the formatter usesYii::$app->timeZoneas the default values for output so no timezone conversion was possible. If your timestamps are stored in the database without a timezone identifier you have to ensure they are in UTC or add a timezone identifier explicitly. -
yii\bootstrap\Collapseis now encoding labels by default.encodeitem option and globalencodeLabelsproperty were introduced to disable it. Keys are no longer used as labels. You need to remove keys and uselabelitem option instead. -
The
yii\base\View::beforeRender()andyii\base\View::afterRender()methods have two extra parameters$viewFileand$params. If you are overriding these methods, you should adjust the method signature accordingly. -
If you've used
asImageformatter i.e.Yii::$app->formatter->asImage($value, $alt);you should change it toYii::$app->formatter->asImage($value, ['alt' => $alt]);. -
Yii now requires
cebe/markdown1.0.0 or higher, which includes breaking changes in its internal API. If you extend the markdown class you need to update your implementation. See https://github.com/cebe/markdown/releases/tag/1.0.0-rc for details. If you just used the markdown helper class there is no need to change anything. -
If you are using CUBRID DBMS, make sure to use at least version 9.3.0 as the server and also as the PDO extension. Quoting of values is broken in prior versions and Yii has no reliable way to work around this issue. A workaround that may have worked before has been removed in this release because it was not reliable.
Upgrade from Yii 2.0 Beta
-
If you are using Composer to upgrade Yii, you should run the following command first (once for all) to install the composer-asset-plugin, before you update your project:
php composer.phar global require "fxp/composer-asset-plugin:1.0.0"You also need to add the following code to your project's
composer.jsonfile:"extra": { "asset-installer-paths": { "npm-asset-library": "vendor/npm", "bower-asset-library": "vendor/bower" } }It is also a good idea to upgrade composer itself to the latest version if you see any problems:
php composer.phar self-update -
If you used
clearAll()orclearAllAssignments()ofyii\rbac\DbManager, you should replace them withremoveAll()andremoveAllAssignments()respectively. -
If you created RBAC rule classes, you should modify their
execute()method by adding$useras the first parameter:execute($user, $item, $params). The$userparameter represents the ID of the user currently being access checked. Previously, this is passed via$params['user']. -
If you override
yii\grid\DataColumn::getDataCellValue()with visibilityprotectedyou have to change visibility topublicas visibility of the base method has changed. -
If you have classes implementing
yii\web\IdentityInterface(very common), you should modify the signature offindIdentityByAccessToken()aspublic static function findIdentityByAccessToken($token, $type = null). The new$typeparameter will contain the type information about the access token. For example, if you useyii\filters\auth\HttpBearerAuthauthentication method, the value of this parameter will beyii\filters\auth\HttpBearerAuth. This allows you to differentiate access tokens taken by different authentication methods. -
If you are sharing the same cache across different applications, you should configure the
keyPrefixproperty of the cache component to use some unique string. Previously, this property was automatically assigned with a unique string. -
If you are using
dropDownList(),listBox(),activeDropDownList(), oractiveListBox()ofyii\helpers\Html, and your list options use multiple blank spaces to format and align option label texts, you need to specify the optionencodeSpacesto be true. -
If you are using
yii\grid\GridViewand have configured a data column to use a PHP callable to return cell values (viayii\grid\DataColumn::value), you may need to adjust the signature of the callable to befunction ($model, $key, $index, $widget). The$keyparameter was newly added in this release. -
yii\console\controllers\AssetControlleris now using hashes instead of timestamps. Replace all{ts}with{hash}. -
The database table of the
yii\log\DbTargetnow needs aprefixcolumn to store context information. You can add it withALTER TABLE log ADD COLUMN prefix TEXT AFTER log_time;. -
The
fileinfoPHP extension is now required by Yii. If you useyii\helpers\FileHelper::getMimeType(), make sure you have enabled this extension. This extension is builtin in php above5.3. -
Please update your main layout file by adding this line in the
<head>section:<?= Html::csrfMetaTags() ?>. This change is needed becauseyii\web\Viewno longer automatically generates CSRF meta tags due to issue #3358. -
If your model code is using the
filevalidation rule, you should rename itstypesoption toextensions. -
MailEventclass has been moved to theyii\mailnamespace. You have to adjust all references that may exist in your code. -
The behavior and signature of
ActiveRecord::afterSave()has changed.ActiveRecord::$isNewRecordwill now always be false in afterSave and also dirty attributes are not available. This change has been made to have a more consistent and expected behavior. The changed attributes are now available in the new parameter of afterSave()$changedAttributes.$changedAttributescontains the old values of attributes that had changed and were saved. -
ActiveRecord::updateAttributes()has been changed to not trigger events and not respect optimistic locking anymore to differentiate it more from callingupdate(false)and to ensure it can be used inafterSave()without triggering infinite loops. -
If you are developing RESTful APIs and using an authentication method such as
yii\filters\auth\HttpBasicAuth, you should explicitly configureyii\web\User::enableSessionin the application configuration to be false to avoid starting a session when authentication is performed. Previously this was done automatically by authentication method. -
mailcomponent was renamed tomailer,yii\log\EmailTarget::$mailwas renamed toyii\log\EmailTarget::$mailer. Please update all references in the code and config files. -
yii\caching\GroupDependencywas renamed toTagDependency. You should create such a dependency using the codenew \yii\caching\TagDependency(['tags' => 'TagName']), whereTagNameis similar to the group name that you previously used. -
If you are using the constant
YII_PATHin your code, you should rename it toYII2_PATHnow. -
You must explicitly configure
yii\web\Request::cookieValidationKeywith a secret key. Previously this is done automatically. To do so, modify your application configuration like the following:return [ // ... 'components' => [ 'request' => [ 'cookieValidationKey' => 'your secret key here', ], ], ];Note: If you are using the
Advanced Application Templateyou should not add this configuration tocommon/configorconsole/configbecause the console application doesn't have to deal with CSRF and uses its own request that doesn't havecookieValidationKeyproperty. -
yii\rbac\PhpManagernow stores data in three separate files instead of one. In order to convert old file to new ones save the following code asconvert.phpthat should be placed in the same directory yourrbac.phpis in:<?php $oldFile = 'rbac.php'; $itemsFile = 'items.php'; $assignmentsFile = 'assignments.php'; $rulesFile = 'rules.php'; $oldData = include $oldFile; function saveToFile($data, $fileName) { $out = var_export($data, true); $out = "<?php\nreturn " . $out . ";"; $out = str_replace(['array (', ')'], ['[', ']'], $out); file_put_contents($fileName, $out); } $items = []; $assignments = []; if (isset($oldData['items'])) { foreach ($oldData['items'] as $name => $data) { if (isset($data['assignments'])) { foreach ($data['assignments'] as $userId => $assignmentData) { $assignments[$userId][] = $assignmentData['roleName']; } unset($data['assignments']); } $items[$name] = $data; } } $rules = []; if (isset($oldData['rules'])) { $rules = $oldData['rules']; } saveToFile($items, $itemsFile); saveToFile($assignments, $assignmentsFile); saveToFile($rules, $rulesFile); echo "Done!\n";Run it once, delete
rbac.php. If you've configuredauthFileproperty, remove the line from config and instead configureitemFile,assignmentFileandruleFile. -
Static helper
yii\helpers\Securityhas been converted into an application component. You should change all usage of its methods to a new syntax, for example: instead ofyii\helpers\Security::hashData()useYii::$app->getSecurity()->hashData(). ThegenerateRandomKey()method now produces not an ASCII compatible output. UsegenerateRandomString()instead. Default encryption and hash parameters has been upgraded. If you need to decrypt/validate data that was encrypted/hashed before, use the following configuration of the 'security' component:return [ 'components' => [ 'security' => [ 'derivationIterations' => 1000, ], // ... ], // ... ]; -
If you are using query caching, you should modify your relevant code as follows, as
beginCache()andendCache()are replaced bycache():$db->cache(function ($db) { // ... SQL queries that need to use query caching }, $duration, $dependency); -
Due to significant changes to security you need to upgrade your code to use
\yii\base\Securitycomponent instead of helper. If you have any data encrypted it should be re-encrypted. In order to do so you can use old security helper as explained by @docsolver at github. -
yii\helpers\Url::to() will no longer prefix base URL to relative URLs. For example,
Url::to('images/logo.png')will returnimages/logo.pngdirectly. If you want a relative URL to be prefix with base URL, you should make use of the alias@web. For example,Url::to('@web/images/logo.png')will return/BaseUrl/images/logo.png. -
The following properties are now taking
falseinstead ofnullfor "don't use" case:yii\bootstrap\NavBar::$brandLabel.yii\bootstrap\NavBar::$brandUrl.yii\bootstrap\Modal::$closeButton.yii\bootstrap\Modal::$toggleButton.yii\bootstrap\Alert::$closeButton.yii\widgets\LinkPager::$nextPageLabel.yii\widgets\LinkPager::$prevPageLabel.yii\widgets\LinkPager::$firstPageLabel.yii\widgets\LinkPager::$lastPageLabel.
-
The format of the Faker fixture template is changed. For an example, please refer to the file
apps/advanced/common/tests/templates/fixtures/user.php. -
The signature of all file downloading methods in
yii\web\Responseis changed, as summarized below:sendFile($filePath, $attachmentName = null, $options = [])sendContentAsFile($content, $attachmentName, $options = [])sendStreamAsFile($handle, $attachmentName, $options = [])xSendFile($filePath, $attachmentName = null, $options = [])
-
The signature of callbacks used in
yii\base\ArrayableTrait::fields()is changed fromfunction ($field, $model) {tofunction ($model, $field) {. -
Html::radio(),Html::checkbox(),Html::radioList(),Html::checkboxList()no longer generate the container tag around each radio/checkbox when you specify labels for them. You should manually render such container tags, or set theitemoption forHtml::radioList(),Html::checkboxList()to generate the container tags. -
The formatter class has been refactored to have only one class regardless whether PHP intl extension is installed or not. Functionality of
yii\base\Formatterhas been merged intoyii\i18n\Formatterandyii\base\Formatterhas been removed so you have to replace all usage ofyii\base\Formatterwithyii\i18n\Formatterin your code. Also the API of the Formatter class has changed in many ways. The signature of the following Methods has changed:asDateasTimeasDateTimeasSizehas been split up intoasSizeandasShortSizeasCurrencyasDecimalasPercentasScientific
The following methods have been removed, this also means that the corresponding format which may be used by a GridView or DetailView is not available anymore:
asNumberasDouble
Also due to these changes some formatting defaults have changes so you have to check all your GridView and DetailView configuration and make sure the formatting is displayed correctly.
The configuration for
asSize()has changed. It now uses the configuration for the number formatting from intl and only the base is configured using$sizeFormatBase.The specification of the date and time formats is now using the ICU pattern format even if PHP intl extension is not installed. You can prefix a date format with
php:to use the old format of the PHPdate()-function. -
The DateValidator has been refactored to use the same format as the Formatter class now (see previous change). When you use the DateValidator and did not specify a format it will now be what is configured in the formatter class instead of 'Y-m-d'. To get the old behavior of the DateValidator you have to set the format explicitly in your validation rule:
['attributeName', 'date', 'format' => 'php:Y-m-d'], -
beforeValidate(),beforeValidateAll(),afterValidate(),afterValidateAll(),ajaxBeforeSend()andajaxComplete()are removed fromActiveForm. The same functionality is now achieved via JavaScript event mechanism like the following:$('#myform').on('beforeValidate', function (event, messages, deferreds) { // called when the validation is triggered by submitting the form // return false if you want to cancel the validation for the whole form }).on('beforeValidateAttribute', function (event, attribute, messages, deferreds) { // before validating an attribute // return false if you want to cancel the validation for the attribute }).on('afterValidateAttribute', function (event, attribute, messages) { // ... }).on('afterValidate', function (event, messages) { // ... }).on('beforeSubmit', function () { // after all validations have passed // you can do ajax form submission here // return false if you want to stop form submission }); -
The signature of
View::registerJsFile()andView::registerCssFile()has changed. The$dependsand$positionparamaters have been merged into$options. The new signatures are as follows:registerJsFile($url, $options = [], $key = null)registerCssFile($url, $options = [], $key = null)