Module: ActionView::Helpers::FormHelper
- Extended by:
- ActiveSupport::Concern
- Includes:
- FormTagHelper, UrlHelper, ModelNaming, RecordIdentifier
- Included in:
- ActionView::Helpers
- Defined in:
- actionview/lib/action_view/helpers/form_helper.rb,
actiontext/app/helpers/action_text/tag_helper.rb
Overview
Action View Form Helpers
Form helpers are designed to make working with resources much easier compared to using vanilla HTML.
Typically, a form designed to create or update a resource reflects the
identity of the resource in several ways: (i) the URL that the form is
sent to (the form element's action attribute) should result in a request
being routed to the appropriate controller action (with the appropriate :id
parameter in the case of an existing resource), (ii) input fields should
be named in such a way that in the controller their values appear in the
appropriate places within the params hash, and (iii) for an existing record,
when the form is initially displayed, input fields corresponding to attributes
of the resource should show the current values of those attributes.
In Rails, this is usually achieved by creating the form using either
form_with or form_for and a number of related helper methods. These
methods generate an appropriate form tag and yield a form
builder object that knows the model the form is about. Input fields are
created by calling methods defined on the form builder, which means they
are able to generate the appropriate names and default values
corresponding to the model attributes, as well as convenient IDs, etc.
Conventions in the generated field names allow controllers to receive form
data nicely structured in params with no effort on your side.
For example, to create a new person you typically set up a new instance of
Person in the PeopleController#new action, @person, and
in the view template pass that object to form_with or form_for:
<%= form_with model: @person do |f| %>
<%= f.label :first_name %>:
<%= f.text_field :first_name %><br />
<%= f.label :last_name %>:
<%= f.text_field :last_name %><br />
<%= f.submit %>
<% end %>
The HTML generated for this would be (modulus formatting):
Constant Summary
Constants included from RecordIdentifier
RecordIdentifier::JOIN, RecordIdentifier::NEW
Constants included from UrlHelper
UrlHelper::BUTTON_TAG_METHOD_VERBS
Constants included from ContentExfiltrationPreventionHelper
ContentExfiltrationPreventionHelper::CLOSE_CDATA_COMMENT, ContentExfiltrationPreventionHelper::CLOSE_FORM_TAG, ContentExfiltrationPreventionHelper::CLOSE_OPTION_TAG, ContentExfiltrationPreventionHelper::CLOSE_QUOTES_COMMENT, ContentExfiltrationPreventionHelper::CONTENT_EXFILTRATION_PREVENTION_MARKUP
Constants included from TagHelper
TagHelper::ARIA_PREFIXES, TagHelper::BOOLEAN_ATTRIBUTES, TagHelper::DATA_PREFIXES, TagHelper::PRE_CONTENT_STRINGS, TagHelper::TAG_TYPES
Instance Method Summary collapse
-
#_object_for_form_builder(object) ⇒ Object
:nodoc:.
-
#checkbox(object_name, method, options = {}, checked_value = "1", unchecked_value = "0") ⇒ Object
(also: #check_box)
Returns a checkbox tag tailored for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#color_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "color".
-
#date_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "date".
-
#datetime_field(object_name, method, options = {}) ⇒ Object
(also: #datetime_local_field)
Returns a text_field of type "datetime-local".
-
#email_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "email".
-
#fields(scope = nil, model: nil, **options, &block) ⇒ Object
Scopes input fields with either an explicit scope or model.
-
#fields_for(record_name, record_object = nil, options = {}, &block) ⇒ Object
Creates a scope around a specific model object like
form_with, but doesn't create the form tags themselves. -
#file_field(object_name, method, options = {}) ⇒ Object
Returns a file upload input tag tailored for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#form_for(record, options = {}, &block) ⇒ Object
Creates a form that allows the user to create or update the attributes of a specific model object.
-
#form_with(model: false, scope: nil, url: nil, format: nil, **options, &block) ⇒ Object
Creates a form tag based on mixing URLs, scopes, or models.
-
#hidden_field(object_name, method, options = {}) ⇒ Object
Returns a hidden input tag tailored for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#label(object_name, method, content_or_options = nil, options = nil, &block) ⇒ Object
Returns a label tag tailored for labelling an input field for a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#month_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "month".
-
#number_field(object_name, method, options = {}) ⇒ Object
Returns an input tag of type "number".
-
#password_field(object_name, method, options = {}) ⇒ Object
Returns an input tag of the "password" type tailored for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#radio_button(object_name, method, tag_value, options = {}) ⇒ Object
Returns a radio button tag for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#range_field(object_name, method, options = {}) ⇒ Object
Returns an input tag of type "range".
-
#rich_textarea(object_name, method, options = {}) ⇒ Object
(also: #rich_text_area)
Returns a
trix-editortag that instantiates the Trix JavaScript editor as well as a hidden field that Trix will write to on changes, so the content will be sent on form submissions. -
#search_field(object_name, method, options = {}) ⇒ Object
Returns an input of type "search" for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject_name). -
#telephone_field(object_name, method, options = {}) ⇒ Object
(also: #phone_field)
Returns a text_field of type "tel".
-
#text_field(object_name, method, options = {}) ⇒ Object
Returns an input tag of the "text" type tailored for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#textarea(object_name, method, options = {}) ⇒ Object
(also: #text_area)
Returns a textarea opening and closing tag set tailored for accessing a specified attribute (identified by
method) on an object assigned to the template (identified byobject). -
#time_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "time".
-
#url_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "url".
-
#week_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "week".
Methods included from ActiveSupport::Concern
append_features, class_methods, extended, included, prepend_features, prepended
Methods included from RecordIdentifier
Methods included from ModelNaming
#convert_to_model, #model_name_from_record_or_class
Methods included from UrlHelper
#button_to, #current_page?, #link_to, #link_to_if, #link_to_unless, #link_to_unless_current, #mail_to, #phone_to, #sms_to, #url_for
Methods included from ContentExfiltrationPreventionHelper
Methods included from TagHelper
build_tag_values, #cdata_section, #content_tag, ensure_valid_html5_tag_name, #escape_once, #tag, #token_list
Methods included from OutputSafetyHelper
#raw, #safe_join, #to_sentence
Methods included from CaptureHelper
#capture, #content_for, #content_for?, #provide, #with_output_buffer
Methods included from FormTagHelper
#button_tag, #checkbox_tag, #color_field_tag, #date_field_tag, #datetime_field_tag, #email_field_tag, #field_id, #field_name, #field_set_tag, #file_field_tag, #form_tag, #hidden_field_tag, #image_submit_tag, #label_tag, #month_field_tag, #number_field_tag, #password_field_tag, #radio_button_tag, #range_field_tag, #search_field_tag, #select_tag, #submit_tag, #telephone_field_tag, #text_field_tag, #textarea_tag, #time_field_tag, #url_field_tag, #utf8_enforcer_tag, #week_field_tag
Methods included from TextHelper
#concat, #current_cycle, #cycle, #excerpt, #highlight, #pluralize, #reset_cycle, #safe_concat, #simple_format, #truncate, #word_wrap
Methods included from SanitizeHelper
#sanitize, #sanitize_css, #strip_links, #strip_tags
Instance Method Details
#_object_for_form_builder(object) ⇒ Object
:nodoc:
1591 1592 1593 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1591 def _object_for_form_builder(object) # :nodoc: object.is_a?(Array) ? object.last : object end |
#checkbox(object_name, method, options = {}, checked_value = "1", unchecked_value = "0") ⇒ Object Also known as: check_box
Returns a checkbox tag tailored for accessing a specified attribute (identified by method) on an object
assigned to the template (identified by object). This object must be an instance object (@object) and not a local object.
It's intended that method returns an integer and if that integer is above zero, then the checkbox is checked.
Additional options on the input tag can be passed as a hash with options. The checked_value defaults to 1
while the default unchecked_value is set to 0 which is convenient for boolean values.
Options
- Any standard HTML attributes for the tag can be passed in, for example
:class. - :checked -
trueorfalseforces the state of the checkbox to be checked or not. - :include_hidden - If set to false, the auxiliary hidden field described below will not be generated.
Gotcha
The HTML specification says unchecked check boxes are not successful, and
thus web browsers do not send them. Unfortunately this introduces a gotcha:
if an Invoice model has a paid flag, and in the form that edits a paid
invoice the user unchecks its check box, no paid parameter is sent. So,
any mass-assignment idiom like
@invoice.update(params[:invoice])
wouldn't update the flag.
To prevent this the helper generates an auxiliary hidden field before every check box. The hidden field has the same name and its attributes mimic an unchecked check box.
This way, the client either sends only the hidden field (representing the check box is unchecked), or both fields. Since the HTML specification says key/value pairs have to be sent in the same order they appear in the form, and parameters extraction gets the last occurrence of any repeated key in the query string, that works for ordinary forms.
Unfortunately that workaround does not work when the check box goes within an array-like parameter, as in
<%= fields_for "project[invoice_attributes][]", invoice, index: nil do |form| %>
<%= form.checkbox :paid %>
...
<% end %>
because parameter name repetition is precisely what Rails seeks to distinguish the elements of the array. For each item with a checked check box you get an extra ghost item with only that attribute, assigned to "0".
In that case it is preferable to either use checkbox_tag or to use
hashes instead of arrays.
Examples
Let's say that @article.validated? is 1:
checkbox("article", "validated")
=>
Let's say that @puppy.gooddog is "no":
checkbox("puppy", "gooddog", {}, "yes", "no")
=>
checkbox("eula", "accepted", { class: 'eula_check' }, "yes", "no")
# => <input name="eula[accepted]" type="hidden" value="no" />
# <input type="checkbox" class="eula_check" id="eula_accepted" name="eula[accepted]" value="yes" />
1347 1348 1349 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1347 def checkbox(object_name, method, = {}, checked_value = "1", unchecked_value = "0") Tags::CheckBox.new(object_name, method, self, checked_value, unchecked_value, ).render end |
#color_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "color".
color_field("car", "color")
# => <input id="car_color" name="car[color]" type="color" value="#000000" />
1378 1379 1380 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1378 def color_field(object_name, method, = {}) Tags::ColorField.new(object_name, method, self, ).render end |
#date_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "date".
date_field("user", "born_on")
# => <input id="user_born_on" name="user[born_on]" type="date" />
The default value is generated by trying to call strftime with "%Y-%m-%d"
on the object's value, which makes it behave as expected for instances
of DateTime and ActiveSupport::TimeWithZone. You can still override that
by passing the "value" option explicitly, e.g.
@user.born_on = Date.new(1984, 1, 27)
date_field("user", "born_on", value: "1984-05-12")
# => <input id="user_born_on" name="user[born_on]" type="date" value="1984-05-12" />
You can create values for the "min" and "max" attributes by passing instances of Date or Time to the options hash.
date_field("user", "born_on", min: Date.today)
# => <input id="user_born_on" name="user[born_on]" type="date" min="2014-05-20" />
Alternatively, you can pass a String formatted as an ISO8601 date as the values for "min" and "max."
date_field("user", "born_on", min: "2014-05-20")
# => <input id="user_born_on" name="user[born_on]" type="date" min="2014-05-20" />
1442 1443 1444 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1442 def date_field(object_name, method, = {}) Tags::DateField.new(object_name, method, self, ).render end |
#datetime_field(object_name, method, options = {}) ⇒ Object Also known as: datetime_local_field
Returns a text_field of type "datetime-local".
datetime_field("user", "born_on")
# => <input id="user_born_on" name="user[born_on]" type="datetime-local" />
The default value is generated by trying to call strftime with "%Y-%m-%dT%T"
on the object's value, which makes it behave as expected for instances
of DateTime and ActiveSupport::TimeWithZone.
@user.born_on = Date.new(1984, 1, 12)
datetime_field("user", "born_on")
# => <input id="user_born_on" name="user[born_on]" type="datetime-local" value="1984-01-12T00:00:00" />
You can create values for the "min" and "max" attributes by passing instances of Date or Time to the options hash.
datetime_field("user", "born_on", min: Date.today)
# => <input id="user_born_on" name="user[born_on]" type="datetime-local" min="2014-05-20T00:00:00.000" />
Alternatively, you can pass a String formatted as an ISO8601 datetime as the values for "min" and "max."
datetime_field("user", "born_on", min: "2014-05-20T00:00:00")
# => <input id="user_born_on" name="user[born_on]" type="datetime-local" min="2014-05-20T00:00:00.000" />
By default, provided datetimes will be formatted including seconds. You can render just the date, hour, and minute by passing include_seconds: false.
@user.born_on = Time.current
datetime_field("user", "born_on", include_seconds: false)
# => <input id="user_born_on" name="user[born_on]" type="datetime-local" value="2014-05-20T14:35" />
1515 1516 1517 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1515 def datetime_field(object_name, method, = {}) Tags::DatetimeLocalField.new(object_name, method, self, ).render end |
#email_field(object_name, method, options = {}) ⇒ Object
Returns a text_field of type "email".
email_field("user", "address")
# => <input id="user_address" name="user[address]" type="email" />
1569 1570 1571 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1569 def email_field(object_name, method, = {}) Tags::EmailField.new(object_name, method, self, ).render end |
#fields(scope = nil, model: nil, **options, &block) ⇒ Object
Scopes input fields with either an explicit scope or model.
Like form_with does with :scope or :model,
except it doesn't output the form tags.
Using a scope prefixes the input field names:
<%= fields :comment do |fields| %> <%= fields.text_field :body %> <% end %>
=>
Using a model infers the scope and assigns field values:
<%= fields model: Comment.new(body: "full bodied") do |fields| %> <%= fields.text_field :body %> <% end %>
=>
Using fields with form_with:
<%= form_with model: @article do |form| %> <%= form.text_field :title %>
<%= form.fields :comment do |fields| %>
<%= fields.text_field :body %>
<% end %>
<% end %>
Much like form_with a FormBuilder instance associated with the scope
or model is yielded, so any generated field names are prefixed with
either the passed scope or the scope inferred from the :model.
Mixing with other form helpers
While form_with uses a FormBuilder object it's possible to mix and
match the stand-alone FormHelper methods and methods
from FormTagHelper:
<%= fields model: @comment do |fields| %>
<%= fields.text_field :body %>
<%= textarea :commenter, :biography %>
<%= checkbox_tag "comment[all_caps]", "1", @comment.commenter.hulk_mode? %>
<% end %>
Same goes for the methods in FormOptionsHelper and DateHelper designed to work with an object as a base, like FormOptionsHelper#collection_select and DateHelper#datetime_select.
1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1080 def fields(scope = nil, model: nil, **, &block) = { allow_method_names_outside_object: true, skip_default_ids: !form_with_generates_ids }.merge!() if model model = _object_for_form_builder(model) scope ||= model_name_from_record_or_class(model).param_key end builder = instantiate_builder(scope, model, ) capture(builder, &block) end |
#fields_for(record_name, record_object = nil, options = {}, &block) ⇒ Object
Creates a scope around a specific model object like form_with, but
doesn't create the form tags themselves. This makes fields_for
suitable for specifying additional model objects in the same form.
Although the usage and purpose of fields_for is similar to +form_with+'s,
its method signature is slightly different. Like form_with, it yields
a FormBuilder object associated with a particular model object to a block,
and within the block allows methods to be called on the builder to
generate fields associated with the model object. Fields may reflect
a model object in two ways - how they are named (hence how submitted
values appear within the params hash in the controller) and what
default values are shown when the form fields are first displayed.
In order for both of these features to be specified independently,
both an object name (represented by either a symbol or string) and the
object itself can be passed to the method separately -
<%= form_with model: @person do |person_form| %>
First name: <%= person_form.text_field :first_name %>
Last name : <%= person_form.text_field :last_name %>
<%= fields_for :permission, @person.permission do |permission_fields| %>
Admin? : <%= permission_fields.checkbox :admin %>
<% end %>
<%= person_form.submit %>
<% end %>
In this case, the checkbox field will be represented by an HTML input
tag with the name attribute permission, and the submitted
value will appear in the controller as params[:admin].
If @person.permission is an existing record with an attribute
admin, the initial state of the checkbox when first displayed will
reflect the value of @person.permission.admin.
Often this can be simplified by passing just the name of the model
object to fields_for -
<%= fields_for :permission do |permission_fields| %>
Admin?: <%= permission_fields.checkbox :admin %>
<% end %>
...in which case, if :permission also happens to be the name of an instance variable @permission, the initial state of the input field will reflect the value of that variable's attribute @permission.admin.
Alternatively, you can pass just the model object itself (if the first
argument isn't a string or symbol fields_for will realize that the
name has been omitted) -
<%= fields_for @person.permission do |permission_fields| %>
Admin?: <%= permission_fields.checkbox :admin %>
<% end %>
and fields_for will derive the required name of the field from the
class of the model object, e.g. if @person.permission, is
of class Permission, the field will still be named permission.
Note: This also works for the methods in FormOptionsHelper and DateHelper that are designed to work with an object as base, like FormOptionsHelper#collection_select and DateHelper#datetime_select.
Nested Attributes Examples
When the object belonging to the current scope has a nested attribute writer for a certain attribute, fields_for will yield a new scope for that attribute. This allows you to create forms that set or change the attributes of a parent object and its associations in one go.
Nested attribute writers are normal setter methods named after an
association. The most common way of defining these writers is either
with accepts_nested_attributes_for in a model definition or by
defining a method with the proper name. For example: the attribute
writer for the association :address is called
address_attributes=.
Whether a one-to-one or one-to-many style form builder will be yielded depends on whether the normal reader method returns a single object or an array of objects.
One-to-one
Consider a Person class which returns a single Address from the address reader method and responds to the address_attributes= writer method:
class Person
def address
@address
end
def address_attributes=(attributes)
# Process the attributes hash
end
end
This model can now be used with a nested fields_for, like so:
<%= form_with model: @person do |person_form| %>
...
<%= person_form.fields_for :address do |address_fields| %>
Street : <%= address_fields.text_field :street %>
Zip code: <%= address_fields.text_field :zip_code %>
<% end %>
...
<% end %>
When address is already an association on a Person you can use
accepts_nested_attributes_for to define the writer method for you:
class Person < ActiveRecord::Base
has_one :address
accepts_nested_attributes_for :address
end
If you want to destroy the associated model through the form, you have
to enable it first using the :allow_destroy option for
accepts_nested_attributes_for:
class Person < ActiveRecord::Base
has_one :address
accepts_nested_attributes_for :address, allow_destroy: true
end
Now, when you use a form element with the _destroy parameter,
with a value that evaluates to true, you will destroy the associated
model (e.g. 1, '1', true, or 'true'):
<%= form_with model: @person do |person_form| %>
...
<%= person_form.fields_for :address do |address_fields| %>
...
Delete: <%= address_fields.checkbox :_destroy %>
<% end %>
...
<% end %>
One-to-many
Consider a Person class which returns an array of Project instances from the projects reader method and responds to the projects_attributes= writer method:
class Person
def projects
[@project1, @project2]
end
def projects_attributes=(attributes)
# Process the attributes hash
end
end
Note that the projects_attributes= writer method is in fact required for fields_for to correctly identify :projects as a collection, and the correct indices to be set in the form markup.
When projects is already an association on Person you can use
accepts_nested_attributes_for to define the writer method for you:
class Person < ActiveRecord::Base
has_many :projects
accepts_nested_attributes_for :projects
end
This model can now be used with a nested fields_for. The block given to the nested fields_for call will be repeated for each instance in the collection:
<%= form_with model: @person do |person_form| %>
...
<%= person_form.fields_for :projects do |project_fields| %>
<% if project_fields.object.active? %>
Name: <%= project_fields.text_field :name %>
<% end %>
<% end %>
...
<% end %>
It's also possible to specify the instance to be used:
<%= form_with model: @person do |person_form| %>
...
<% @person.projects.each do |project| %>
<% if project.active? %>
<%= person_form.fields_for :projects, project do |project_fields| %>
Name: <%= project_fields.text_field :name %>
<% end %>
<% end %>
<% end %>
...
<% end %>
Or a collection to be used:
<%= form_with model: @person do |person_form| %>
...
<%= person_form.fields_for :projects, @active_projects do |project_fields| %>
Name: <%= project_fields.text_field :name %>
<% end %>
...
<% end %>
If you want to destroy any of the associated models through the
form, you have to enable it first using the :allow_destroy
option for accepts_nested_attributes_for:
class Person < ActiveRecord::Base
has_many :projects
accepts_nested_attributes_for :projects, allow_destroy: true
end
This will allow you to specify which models to destroy in the
attributes hash by adding a form element for the _destroy
parameter with a value that evaluates to true
(e.g. 1, '1', true, or 'true'):
<%= form_with model: @person do |person_form| %>
...
<%= person_form.fields_for :projects do |project_fields| %>
Delete: <%= project_fields.checkbox :_destroy %>
<% end %>
...
<% end %>
When a collection is used you might want to know the index of each object in the array. For this purpose, the index method is available in the FormBuilder object.
<%= form_with model: @person do |person_form| %>
...
<%= person_form.fields_for :projects do |project_fields| %>
Project #<%= project_fields.index %>
...
<% end %>
...
<% end %>
Note that fields_for will automatically generate a hidden field to store the ID of the record if it responds to persisted?. There are circumstances where this hidden field is not needed and you can pass include_id: false to prevent fields_for from rendering it automatically.
1029 1030 1031 1032 1033 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1029 def fields_for(record_name, record_object = nil, = {}, &block) = { model: record_object, allow_method_names_outside_object: false, skip_default_ids: false }.merge!() fields(record_name, **, &block) end |
#file_field(object_name, method, options = {}) ⇒ Object
Returns a file upload input tag tailored for accessing a specified attribute (identified by method) on an object
assigned to the template (identified by object). Additional options on the input tag can be passed as a
hash with options. These options will be tagged onto the HTML as an HTML element attribute as in the example
shown.
Using this method inside a form_with block will set the enclosing form's encoding to multipart/form-data.
Options
- Creates standard HTML attributes for the tag.
- :disabled - If set to true, the user will not be able to use this input.
- :multiple - If set to true, in most updated browsers the user will be allowed to select multiple files.
- :include_hidden - When multiple: true and include_hidden: true, the field will be prefixed with an field with an empty value to support submitting an empty collection of files.
- :accept - If set to one or multiple mime-types, the user will be suggested a filter when choosing a file. You still need to set up model validations.
Examples
file_field(:user, :avatar)
=>
file_field(:article, :image, multiple: true)
# => <input type="file" id="article_image" name="article[image][]" multiple="multiple" />
file_field(:article, :attached, accept: 'text/html')
# => <input accept="text/html" type="file" id="article_attached" name="article[attached]" />
file_field(:article, :image, accept: 'image/png,image/gif,image/jpeg')
# => <input type="file" id="article_image" name="article[image]" accept="image/png,image/gif,image/jpeg" />
file_field(:attachment, :file, class: 'file_input')
# => <input type="file" id="attachment_file" name="attachment[file]" class="file_input" />
1248 1249 1250 1251 1252 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 1248 def file_field(object_name, method, = {}) = { include_hidden: multiple_file_field_include_hidden }.merge!() Tags::FileField.new(object_name, method, self, convert_direct_upload_option_to_url(.dup)).render end |
#form_for(record, options = {}, &block) ⇒ Object
Creates a form that allows the user to create or update the attributes of a specific model object.
The method can be used in several slightly different ways, depending on
how much you wish to rely on Rails to infer automatically from the model
how the form should be constructed. For a generic model object, a form
can be created by passing form_for a string or symbol representing
the object we are concerned with:
<%= form_for :person do |f| %>
First name: <%= f.text_field :first_name %><br />
Last name : <%= f.text_field :last_name %><br />
Biography : <%= f.textarea :biography %><br />
Admin? : <%= f.checkbox :admin %><br />
<%= f.submit %>
<% end %>
The variable f yielded to the block is a FormBuilder object that
incorporates the knowledge about the model object represented by
:person passed to form_for. Methods defined on the FormBuilder
are used to generate fields bound to this model. Thus, for example,
<%= f.text_field :first_name %>
will get expanded to
<%= text_field :person, :first_name %>
which results in an HTML tag whose name attribute is
person. This means that when the form is submitted,
the value entered by the user will be available in the controller as
params[:first_name].
For fields generated in this way using the FormBuilder, if :person also happens to be the name of an instance variable @person, the default value of the field shown when the form is initially displayed (e.g. in the situation where you are editing an existing record) will be the value of the corresponding attribute of @person.
The rightmost argument to form_for is an
optional hash of options -
- :url - The URL the form is to be submitted to. This may be
represented in the same way as values passed to
url_fororlink_to. So for example you may use a named route directly. When the model is represented by a string or symbol, as in the example above, if the :url option is not specified, by default the form will be sent back to the current URL (We will describe below an alternative resource-oriented usage ofform_forin which the URL does not need to be specified explicitly). - :namespace - A namespace for your form to ensure uniqueness of id attributes on form elements. The namespace attribute will be prefixed with underscore on the generated HTML id.
- :method - The method to use when submitting the form, usually either "get" or "post". If "patch", "put", "delete", or another verb is used, a hidden input with name _method is added to simulate the verb over post.
- :authenticity_token - Authenticity token to use in the form. Use only if you need to pass custom authenticity token string, or to not add authenticity_token field at all (by passing false). Remote forms may omit the embedded authenticity token by setting config.action_view.embed_authenticity_token_in_remote_forms = false. This is helpful when you're fragment-caching the form. Remote forms get the authenticity token from the meta tag, so embedding is unnecessary unless you support browsers without JavaScript.
- :remote - If set to true, will allow the Unobtrusive JavaScript drivers to control the submit behavior.
- :enforce_utf8 - If set to false, a hidden input with name utf8 is not output.
- :html - Optional HTML attributes for the form tag.
Also note that form_for doesn't create an exclusive scope. It's still
possible to use both the stand-alone FormHelper methods and methods
from FormTagHelper. For example:
<%= form_for :person do |f| %>
First name: <%= f.text_field :first_name %>
Last name : <%= f.text_field :last_name %>
Biography : <%= textarea :person, :biography %>
Admin? : <%= checkbox_tag "person[admin]", "1", @person.company.admin? %>
<%= f.submit %>
<% end %>
This also works for the methods in FormOptionsHelper and DateHelper that are designed to work with an object as base, like FormOptionsHelper#collection_select and DateHelper#datetime_select.
#form_for with a model object
In the examples above, the object to be created or edited was
represented by a symbol passed to form_for, and we noted that
a string can also be used equivalently. It is also possible, however,
to pass a model object itself to form_for. For example, if @article
is an existing record you wish to edit, you can create the form using
<%= form_for @article do |f| %>
...
<% end %>
This behaves in almost the same way as outlined previously, with a
couple of small exceptions. First, the prefix used to name the input
elements within the form (hence the key that denotes them in the params
hash) is actually derived from the object's class, e.g. params
if the object's class is Article. However, this can be overwritten using
the :as option, e.g. -
<%= form_for(@person, as: :client) do |f| %>
...
<% end %>
would result in params.
Secondly, the field values shown when the form is initially displayed
are taken from the attributes of the object passed to form_for,
regardless of whether the object is an instance
variable. So, for example, if we had a local variable article
representing an existing record,
<%= form_for article do |f| %>
...
<% end %>
would produce a form with fields whose initial state reflect the current
values of the attributes of article.
Resource-oriented style
In the examples just shown, although not indicated explicitly, we still
need to use the :url option in order to specify where the
form is going to be sent. However, further simplification is possible
if the record passed to form_for is a resource, i.e. it corresponds
to a set of RESTful routes, e.g. defined using the resources method
in config/routes.rb. In this case Rails will simply infer the
appropriate URL from the record itself. For example,
<%= form_for @article do |f| %>
...
<% end %>
is then equivalent to something like:
<%= form_for @article, as: :article, url: article_path(@article), method: :patch, html: { class: "edit_article", id: "edit_article_45" } do |f| %>
...
<% end %>
And for a new record
<%= form_for(Article.new) do |f| %>
...
<% end %>
is equivalent to something like:
<%= form_for @article, as: :article, url: articles_path, html: { class: "new_article", id: "new_article" } do |f| %>
...
<% end %>
However you can still overwrite individual conventions, such as:
<%= form_for(@article, url: super_articles_path) do |f| %>
...
<% end %>
You can omit the action attribute by passing url: false:
<%= form_for(@article, url: false) do |f| %>
...
<% end %>
You can also set the answer format, like this:
<%= form_for(@article, format: :json) do |f| %>
...
<% end %>
For namespaced routes, like admin_article_url:
<%= form_for([:admin, @article]) do |f| %>
...
<% end %>
If your resource has associations defined, for example, you want to add comments to the document given that the routes are set correctly:
<%= form_for([@document, @comment]) do |f| %>
...
<% end %>
Where @document = Document.find(params) and @comment = Comment.new.
Setting the method
You can force the form to use the full array of HTTP verbs by setting
method: (:get|:post|:patch|:put|:delete)
in the options hash. If the verb is not GET or POST, which are natively supported by HTML forms, the form will be set to POST and a hidden input called _method will carry the intended verb for the server to interpret.
Unobtrusive JavaScript
Specifying:
remote: true
in the options hash creates a form that will allow the unobtrusive JavaScript drivers to modify its behavior. The form submission will work just like a regular submission as viewed by the receiving side (all elements available in params).
Example:
<%= form_for(@article, remote: true) do |f| %>
...
<% end %>
The HTML generated for this would be:
Setting HTML options
You can set data attributes directly by passing in a data hash, but all other HTML options must be wrapped in the HTML key. Example:
<%= form_for(@article, data: { behavior: "autosave" }, html: { name: "go" }) do |f| %>
...
<% end %>
The HTML generated for this would be:
Removing hidden model id's
The form_for method automatically includes the model id as a hidden field in the form. This is used to maintain the correlation between the form data and its associated model. Some ORM systems do not use IDs on nested models so in this case you want to be able to disable the hidden id.
In the following example the Article model has many Comments stored within it in a NoSQL database, thus there is no primary key for comments.
Example:
<%= form_for(@article) do |f| %>
<%= f.fields_for(:comments, include_id: false) do |cf| %>
...
<% end %>
<% end %>
Customized form builders
You can also build forms using a customized FormBuilder class. Subclass FormBuilder and override or define some more helpers, then use your custom builder. For example, let's say you made a helper to automatically add labels to form inputs.
<%= form_for @person, url: { action: "create" }, builder: LabellingFormBuilder do |f| %>
<%= f.text_field :first_name %>
<%= f.text_field :last_name %>
<%= f.textarea :biography %>
<%= f.checkbox :admin %>
<%= f.submit %>
<% end %>
In this case, if you use this:
<%= render f %>
The rendered template is people/_labelling_form and the local variable referencing the form builder is called labelling_form.
The custom FormBuilder class is automatically merged with the options of a nested fields_for call, unless it's explicitly set.
In many cases you will want to wrap the above in another helper, so you could do something like the following:
def labelled_form_for(record_or_name_or_array, *args, &block)
= args.
form_for(record_or_name_or_array, *(args << .merge(builder: LabellingFormBuilder)), &block)
end
If you don't need to attach a form to a model instance, then check out FormTagHelper#form_tag.
Form to external resources
When you build forms to external resources sometimes you need to set an authenticity token or just render a form without it, for example when you submit data to a payment gateway number and types of fields could be limited.
To set an authenticity token you need to pass an :authenticity_token parameter
<%= form_for @invoice, url: external_url, authenticity_token: 'external_token' do |f| %>
...
<% end %>
If you don't want to an authenticity token field be rendered at all just pass false:
<%= form_for @invoice, url: external_url, authenticity_token: false do |f| %>
...
<% end %>
436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 436 def form_for(record, = {}, &block) raise ArgumentError, "Missing block" unless block_given? case record when String, Symbol model = false object_name = record else model = record object = _object_for_form_builder(record) raise ArgumentError, "First argument in form cannot contain nil or be empty" unless object object_name = [:as] || model_name_from_record_or_class(object).param_key (object, ) end remote = .delete(:remote) if remote && ! && [:authenticity_token].blank? [:authenticity_token] = false end [:model] = model [:scope] = object_name [:local] = !remote [:skip_default_ids] = false [:allow_method_names_outside_object] = .fetch(:allow_method_names_outside_object, false) form_with(**, &block) end |
#form_with(model: false, scope: nil, url: nil, format: nil, **options, &block) ⇒ Object
Creates a form tag based on mixing URLs, scopes, or models.
Using just a URL:
<%= form_with url: articles_path do |form| %> <%= form.text_field :title %> <% end %>
=>
With an intentionally empty URL:
<%= form_with url: false do |form| %> <%= form.text_field :title %> <% end %>
=>
Adding a scope prefixes the input field names:
<%= form_with scope: :article, url: articles_path do |form| %> <%= form.text_field :title %> <% end %>
=>
Using a model infers both the URL and scope:
<%= form_with model: Article.new do |form| %> <%= form.text_field :title %> <% end %>
=>
An existing model makes an update form and fills out field values:
<%= form_with model: Article.first do |form| %> <%= form.text_field :title %> <% end %>
=>
# Though the fields don't have to correspond to model attributes: <%= form_with model: Cat.new do |form| %> <%= form.text_field :cats_dont_have_gills %> <%= form.text_field :but_in_forms_they_can %> <% end %> # =>The parameters in the forms are accessible in controllers according to
their name nesting. So inputs named title and article are
accessible as params and params[:title]
respectively.
For ease of comparison the examples above left out the submit button, as well as the auto generated hidden fields that enable UTF-8 support and adds an authenticity token needed for cross site request forgery protection.
Resource-oriented style
In many of the examples just shown, the :model passed to form_with
is a resource. It corresponds to a set of RESTful routes, most likely
defined via resources in config/routes.rb.
So when passing such a model record, Rails infers the URL and method.
<%= form_with model: @article do |form| %>
...
<% end %>
is then equivalent to something like:
<%= form_with scope: :article, url: article_path(@article), method: :patch do |form| %>
...
<% end %>
And for a new record
<%= form_with model: Article.new do |form| %>
...
<% end %>
is equivalent to something like:
<%= form_with scope: :article, url: articles_path do |form| %>
...
<% end %>
form_with options
- :url - The URL the form submits to. Akin to values passed to
url_fororlink_to. For example, you may use a named route directly. When a :scope is passed without a :url the form just submits to the current URL. - :method - The method to use when submitting the form, usually either "get" or "post". If "patch", "put", "delete", or another verb is used, a hidden input named _method is added to simulate the verb over post.
- :format - The format of the route the form submits to. Useful when submitting to another resource type, like :json. Skipped if a :url is passed.
- :scope - The scope to prefix input field names with and thereby how the submitted parameters are grouped in controllers.
- :namespace - A namespace for your form to ensure uniqueness of id attributes on form elements. The namespace attribute will be prefixed with underscore on the generated HTML id.
- :model - A model object to infer the :url and
:scope by, plus fill out input field values.
So if a
titleattribute is set to "Ahoy!" then atitleinput field's value would be "Ahoy!". If the model is a new record a create form is generated, if an existing record, however, an update form is generated. Pass :scope or :url to override the defaults. E.g. turn params into params. - :authenticity_token - Authenticity token to use in the form. Override with a custom authenticity token or pass false to skip the authenticity token field altogether. Useful when submitting to an external resource like a payment gateway that might limit the valid fields. Remote forms may omit the embedded authenticity token by setting config.action_view.embed_authenticity_token_in_remote_forms = false. This is helpful when fragment-caching the form. Remote forms get the authenticity token from the meta tag, so embedding is unnecessary unless you support browsers without JavaScript.
- :local - Whether to use standard HTTP form submission. When set to true, the form is submitted via standard HTTP. When set to false, the form is submitted as a "remote form", which is handled by Rails UJS as an XHR. When unspecified, the behavior is derived from config.action_view.form_with_generates_remote_forms where the config's value is actually the inverse of what local's value would be. As of Rails 6.1, that configuration option defaults to false (which has the equivalent effect of passing local: true). In previous versions of Rails, that configuration option defaults to true (the equivalent of passing local: false).
- :skip_enforcing_utf8 - If set to true, a hidden input with name utf8 is not output.
- :builder - Override the object used to build the form.
- :id - Optional HTML id attribute.
- :class - Optional HTML class attribute.
- :data - Optional HTML data attributes.
- :html - Other optional HTML attributes for the form tag.
Examples
When not passing a block, form_with just generates an opening form tag.
<%= form_with(model: @article, url: super_articles_path) %>
<%= form_with(model: @article, scope: :blog) %>
<%= form_with(model: @article, format: :json) %>
<%= form_with(model: @article, authenticity_token: false) %> # Disables the token.
For namespaced routes, like admin_article_url:
<%= form_with(model: [ :admin, @article ]) do |form| %>
...
<% end %>
If your resource has associations defined, for example, you want to add comments to the document given that the routes are set correctly:
<%= form_with(model: [ @document, Comment.new ]) do |form| %>
...
<% end %>
Where @document = Document.find(params).
Mixing with other form helpers
While form_with uses a FormBuilder object it's possible to mix and
match the stand-alone FormHelper methods and methods
from FormTagHelper:
<%= form_with scope: :person do |form| %>
<%= form.text_field :first_name %>
<%= form.text_field :last_name %>
<%= textarea :person, :biography %>
<%= checkbox_tag "person[admin]", "1", @person.company.admin? %>
<%= form.submit %>
<% end %>
Same goes for the methods in FormOptionsHelper and DateHelper designed to work with an object as a base, like FormOptionsHelper#collection_select and DateHelper#datetime_select.
Setting the method
You can force the form to use the full array of HTTP verbs by setting
method: (:get|:post|:patch|:put|:delete)
in the options hash. If the verb is not GET or POST, which are natively supported by HTML forms, the form will be set to POST and a hidden input called _method will carry the intended verb for the server to interpret.
Setting HTML options
You can set data attributes directly in a data hash, but HTML options besides id and class must be wrapped in an HTML key:
<%= form_with(model: @article, data: { behavior: "autosave" }, html: { name: "go" }) do |form| %>
...
<% end %>
generates
Removing hidden model id's
The form_with method automatically includes the model id as a hidden field in the form.
This is used to maintain the correlation between the form data and its associated model.
Some ORM systems do not use IDs on nested models so in this case you want to be able
to disable the hidden id.
In the following example the Article model has many Comments stored within it in a NoSQL database, thus there is no primary key for comments.
<%= form_with(model: @article) do |form| %>
<%= form.fields(:comments, skip_id: true) do |fields| %>
...
<% end %>
<% end %>
Customized form builders
You can also build forms using a customized FormBuilder class. Subclass FormBuilder and override or define some more helpers, then use your custom builder. For example, let's say you made a helper to automatically add labels to form inputs.
<%= form_with model: @person, url: { action: "create" }, builder: LabellingFormBuilder do |form| %>
<%= form.text_field :first_name %>
<%= form.text_field :last_name %>
<%= form.textarea :biography %>
<%= form.checkbox :admin %>
<%= form.submit %>
<% end %>
In this case, if you use:
<%= render form %>
The rendered template is people/_labelling_form and the local variable referencing the form builder is called labelling_form.
The custom FormBuilder class is automatically merged with the options
of a nested fields call, unless it's explicitly set.
In many cases you will want to wrap the above in another helper, so you could do something like the following:
def labelled_form_with(**, &block)
form_with(**.merge(builder: LabellingFormBuilder), &block)
end
756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 |
# File 'actionview/lib/action_view/helpers/form_helper.rb', line 756 def form_with(model: false, scope: nil, url: nil, format: nil, **, &block) raise ArgumentError, "Passed nil to the :model argument, expect an object or false" if model.nil? = { allow_method_names_outside_object: true, skip_default_ids: !form_with_generates_ids }.merge!() if model if url != false url ||= if format.nil? polymorphic_path(model, {}) else polymorphic_path(model, format: format) end end model = convert_to_model(_object_for_form_builder(model)) scope ||= model_name_from_record_or_class(model).param_key end if block_given? builder = instantiate_builder(scope, model, ) output = capture(builder, &block) [:multipart] ||= builder.multipart? = (url, model, **) form_tag_with_body(, output) else = (url, model, **) form_tag_html() end end |
#hidden_field(object_name, method, options = {}) ⇒ Object
Returns a hidden input tag tailored for accessing a specified attribute (identified by method) on an object
assigned to the template (identified by object). Additional options on the input tag can be passed as a
hash with options. These options will be tagged onto the HTML as an HTML element attribute as in the example
shown.
Examples
hidden_field(:signup, :pass_confirm)