v4.5.0.rst

Version 4.5.0

Release Date: Unreleased

4.5.0 release of CodeIgniter4

• Highlights
• BREAKING
  • Behavior Changes
    • Lowercase HTTP Method Name
    • Filter Execution Order
    • Nested Route Groups and Options
    • Factories class
    • Others
  • Interface Changes
  • Method Signature Changes
    • Setting Cookies
    • FileLocatorInterface
    • Return Type Changes
    • Traditional Validation Rules
    • Others
  • Removed Deprecated Items
    • Request
    • Filters
    • Database
    • Model
    • Response
    • CodeIgniter
    • Test
    • Spark Commands
    • Others
• Enhancements
  • Commands
  • Testing
  • Database
    • Query Builder
    • Forge
    • Others
  • Model
  • Libraries
  • Helpers and Functions
  • Required Filters
  • Others
• Message Changes
• Changes
• Deprecations
• Bugs Fixed

Highlights

• Update minimal PHP requirement to 8.1.
• TBD

BREAKING

Behavior Changes

Lowercase HTTP Method Name

For historical reasons, the framework used HTTP method names in lower case like "get", "post". But the method token is case-sensitive because it might be used as a gateway to object-based systems with case-sensitive method names. By convention, standardized methods are defined in all-uppercase US-ASCII letters. See https://www.rfc-editor.org/rfc/rfc9110#name-overview.

Now the framework uses the correct HTTP method names like "GET", "POST".

• Request::getMethod() returns uppercase HTTP methods.
• CURLRequest::request() does not change the accepted HTTP methods to uppercase.

See :ref:`upgrade-450-lowercase-http-method-name` for details.

Filter Execution Order

The order in which Controller Filters are executed has changed. See :ref:`Upgrading Guide <upgrade-450-filter-execution-order>` for details.

Nested Route Groups and Options

Due to a bug fix, the behavior has changed so that options passed to the outer group() are merged with the options of the inner group(). See :ref:`Upgrading Guide <upgrade-450-nested-route-groups-and-options>` for details.

Factories class

:doc:`../concepts/factories` has been changed to a final class. It is a static class, and even if it were extended, there is no way to replace it.

Others

• AutoRouting Legacy: Changed so that a PageNotFoundException is thrown if the controller corresponding to the request URI does not exist.
• Logger: The :php:func:`log_message()` function and the logger methods in CodeIgniter\Log\Logger now do not return bool values. The return types have been fixed to void to follow the PSR-3 interface.
• Autoloader: The prefix \ in the fully qualified classname returned by FileLocator::findQualifiedNameFromPath() has been removed.
• BaseModel: The getIdValue() method has been changed to abstract.

Interface Changes

Note

As long as you have not extended the relevant CodeIgniter core classes or implemented these interfaces, all these changes are backward compatible and require no intervention.

• ResponseInterface: The default value of the third parameter $expire of the ResponseInterface::setCookie() has been fixed from '' to 0.
• Logger: The psr/log package has been upgraded to v2.0.0.

Method Signature Changes

Setting Cookies

The third parameter $expire in :php:func:`set_cookie()` and :php:meth:`CodeIgniter\\HTTP\\Response::setCookie()` has been fixed.

The type has been changed from string to int, and the default value has been changed from '' to 0.

FileLocatorInterface

• Router: The first parameter of the RouteCollection constructor has been changed from FileLocator to FileLocatorInterface.
• View: The third parameter of the View constructor has been changed from FileLocator to FileLocatorInterface.

Return Type Changes

• Model: The return type of the objectToRawArray() method in the Model and BaseModel classes has been changed from ?array to array.

Traditional Validation Rules

To add declare(strict_types=1) to the framework codebase, the method parameter type ?string for a value to validate in the all Traditional Validation rule classes CodeIgniter\Validation\FormatRules and CodeIgniter\Validation\Rules are removed.

For example, the method signature changed as follows:

Before: public function integer(?string $str = null): bool
After:  public function integer($str = null): bool

Others

• Logger: The method signatures of the methods in CodeIgniter\Log\Logger that implements the PSR-3 interface have been fixed. The bool return types are changed to void. The $message parameters now have string|Stringable types.

Removed Deprecated Items

Request

• The $upper parameter in getMethod() in RequestInterface and Request has been removed. See :ref:`upgrade-450-lowercase-http-method-name`.
• The deprecated isValidIP() method in RequestInterface and Request has been removed.
• The visibility of the deprecated properties $uri and $config in IncomingRequest has been changed to protected.

Filters

• The following deprecated items have been removed, because now :ref:`multiple-filters` are always enabled.

  • Filters::enableFilter()
  • RouteCollection::getFilterForRoute()
  • Router::$filterInfo
  • Router::getFilter()

Database

• ModelFactory

Model

• BaseModel::idValue()
• BaseModel::fillPlaceholders()
• Model::idValue()
• Model::classToArray()

Response

• The visibility of the deprecated property ResponseTrait::$CSP has been changed to protected.

• The following deprecated properties have been removed.

  • ResponseTrait::$CSPEnabled
  • ResponseTrait::$cookiePrefix
  • ResponseTrait::$cookieDomain
  • ResponseTrait::$cookiePath
  • ResponseTrait::$cookieSecure
  • ResponseTrait::$cookieHTTPOnly
  • ResponseTrait::$cookieSameSite
  • ResponseTrait::$cookies

CodeIgniter

• $path
• $useSafeOutput
• useSafeOutput()
• setPath()

Test

• CIDatabaseTestCase
• ControllerResponse
• ControllerTester
• FeatureResponse
• FeatureTestCase

Spark Commands

• migrate:create
• session:migration

Others

• Config: The deprecated CodeIgniter\Config\Config class has been removed.

Enhancements

Commands

• Added spark config:check command to check Config values. See :ref:`confirming-config-values` for the details.
• Added spark lang:find command to update translations keys. See :ref:`generating-translation-files-via-command` for the details.

Testing

• DomParser: The new methods were added seeXPath() and dontSeeXPath() which allows users to work directly with DOMXPath object, using complex expressions.
• CLI: The new InputOutput class was added and now you can write tests for commands more easily if you use MockInputOutput. See :ref:`using-mock-input-output`.

Database

Query Builder

Forge

Others

Model

Libraries

• Validation: Added the new rule field_exists that checks the filed exists in the data to be validated.

Helpers and Functions

Required Filters

New :ref:`Required Filters <filters-required>` have been introduced. They are special filters that are applied before and after other kinds of filters, and always applied even if a route does not exist.

The following existing functionalities have been reimplemented as Required Filters.

• :ref:`Force Global Secure Requests <forcehttps>`
• :doc:`../general/caching`
• :ref:`performancemetrics`
• :ref:`the-debug-toolbar`

The Benchmark Timers used by Debug Toolbar now collect Required Before Filters and Required After Filters data.

The benchmark points have been changed:

• Before

  • bootstrap: Creating Request and Response objects, Event pre_system, Instantiating RouteCollection object, Loading Routes files, Instantiating Router object,
  • routing: Routing,

• After

  • bootstrap: Creating Request and Response objects, Event pre_system.
  • required_before_filters: Instantiating Filters object, Running Required Before Filters.
  • routing: Instantiating RouteCollection object, Loading Routes files, Instantiating Router object, Routing,

Others

• Autoloader:

  • Autoloading performance when using Composer has been improved. Adding the App namespace in the autoload.psr4 setting in composer.json may also improve the performance of your app. See :ref:`autoloader-application-namespace`.
  • FileLocator Caching implemented. See :ref:`file-locator-caching` for details.
  • FileLocatorInterface has been added.

• CodeIgniter: Added a pseudo-variable {memory_usage} to show your memory usage in your view files, which was supported by CodeIgniter 3.
• CSP: Added ContentSecurityPolicy::clearDirective() method to clear existing CSP directives. See :ref:`csp-clear-directives`.
• HTTP: Added Message::addHeader() method to add another header with the same name. See :php:meth:`CodeIgniter\\HTTP\\Message::addHeader()`.

Message Changes

• Added Validation.field_exists error message.

Changes

• Config:

  • Config\Feature::$multipleFilters has been removed, because now :ref:`multiple-filters` are always enabled.

Deprecations

• CodeIgniter: The determinePath() method has been deprecated. No longer used.
• Response: The constructor parameter $config has been deprecated. No longer used.
• Filters:: The feature that Filters accept the lowercase HTTP method keys of Config\Filters::$methods has been deprecated. Use correct uppercase HTTP method keys instead.
• RouteCollection: The feature that the match() method accepts the lowercase HTTP methods has been deprecated. Use correct uppercase HTTP methods instead.
• FeatureTestTrait: The feature that the withRoutes() method accepts the lowercase HTTP methods has been deprecated. Use correct uppercase HTTP methods instead.

Bugs Fixed

See the repo's CHANGELOG.md for a complete list of bugs fixed.