> For the complete documentation index, see [llms.txt](https://docs.prestashop-project.org/1-5-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prestashop-project.org/1-5-documentation/english-documentation/developer-guide/coding-standards.md).

# Coding Standards

**Table of content**

/\*\<!\[CDATA\[\*/\
div.rbtoc1597308499481 {padding: 0px;}\
div.rbtoc1597308499481 ul {list-style: disc;margin-left: 0px;}\
div.rbtoc1597308499481 li {margin-left: 0px;padding-left: 0px;}\
\
/\*]]>\*/

* [Coding Standards](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-CodingStandards)
  * [PHP](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-PHP)
    * [Variable names](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Variablenames)
    * [Assignments](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Assignments)
    * [Operators](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Operators)
    * [Statements](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Statements)
    * [Visibility](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Visibility)
    * [Method / Function names](https://docs.prestashop-project.org/1-5-documentation/english-documentation/developer-guide/pages/-MEb-h1M2hpjgY4JwKru#CodingStandards-Method/Functionnames)
    * [Enumeration](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Enumeration)
    * [Objects / Classes](https://docs.prestashop-project.org/1-5-documentation/english-documentation/developer-guide/pages/-MEb-h1M2hpjgY4JwKru#CodingStandards-Objects/Classes)
    * [Constants](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Constants)
    * [Keywords](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Keywords)
    * [Configuration variables](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Configurationvariables)
    * [Strings](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Strings)
    * [Comments](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Comments)
    * [Return values](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Returnvalues)
    * [Call](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Call)
    * [Tags](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Tags)
    * [Indentation](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Indentation)
    * [Array](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Array)
    * [Block](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Block)
    * [Security](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Security)
    * [Limitations](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Limitations)
    * [Other](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Other)
  * [SQL](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-SQL)
    * [Table names](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Tablenames)
    * [SQL query](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-SQLquery)
  * [Installing the code validator (PHP CodeSniffer)](https://docs.prestashop-project.org/1-5-documentation/english-documentation/developer-guide/pages/-MEb-h1M2hpjgY4JwKru#CodingStandards-Installingthecodevalidator\(PHPCodeSniffer\))
    * [PhpStorm integration](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-PhpStormintegration)
    * [Integration to vim](/1-5-documentation/english-documentation/developer-guide/coding-standards.md#CodingStandards-Integrationtovim)
    * [Command line (Linux)](https://docs.prestashop-project.org/1-5-documentation/english-documentation/developer-guide/pages/-MEb-h1M2hpjgY4JwKru#CodingStandards-Commandline\(Linux\))

## Coding Standards <a href="#codingstandards-codingstandards" id="codingstandards-codingstandards"></a>

Consistency is important, even more so when writing open-source code, since the code belongs to millions of eyeballs, and bug-fixing relies on these teeming millions to actually locate bugs and understand how to solve it.

This is why, when writing anything for PrestaShop, be it a theme, a module or a core patch, you should strive to follow the following guidelines. They are the ones that the PrestaShop developers adhere to, and following them is the surest way to have your code be elegantly integrated in PrestaShop.

In short, having code consistency helps keeping the code readable and maintainable.

If use an IDE, you can use the CodeSniffer code validator to help you write better code.

### PHP <a href="#codingstandards-php" id="codingstandards-php"></a>

#### Variable names <a href="#codingstandards-variablenames" id="codingstandards-variablenames"></a>

Just like class, method and function names, variable names should be written in English so as to be readable to as many people as possible.

Use lowercase letters, and separate words using underscores. Do not ever use CamelCase.

1. Corresponding to data from databases: `$my_var`.
2. Corresponding to algorithm: `$my_var`.
3. The visibility of a member variable does not affect its name: `private $my_var`.

#### Assignments <a href="#codingstandards-assignments" id="codingstandards-assignments"></a>

1. There should be a space between variable and operators:

```
$my_var = 17;
$a = $b;
```

#### Operators <a href="#codingstandards-operators" id="codingstandards-operators"></a>

1. "`+`", "`-`", "`*`", "`/`", "`=`" and any combination of them (e.g. "`/=`") need a space between their left and right members.

   ```
   $a + 17;
   $result = $b / 2;
   $i += 34;
   ```
2. "`.`" does not have a space between its left and right members.

   ```
   echo $a.$b;
   $c = $d.$this->foo();
   ```

   Recommendation

   For performance reasons, please do not overuse concatenation.
3. "`.=`" needs a space between its left and right members.

   ```
   $a .= 'Debug';
   ```
4. When testing a boolean variable, do not use a comparison operator, but directly use the value itself, or the value prefixed with an exclamation mark:

   ```
   // do not use this
   if ($var == true)
   // ...nor this
   if ($var == false)

   // use this
   if ($var)
   // ...or this
   if (!$var)
   ```

#### Statements <a href="#codingstandards-statements" id="codingstandards-statements"></a>

1. `if`, `elseif`, `while`, `for`: need a space between the `if` keyword and the parentheses `()`.

   ```
   if (<condition>)

   while (<condition>)
   ```
2. When a combination of `if` and `else` is used and both can return a value, the `else` statement has to be omitted.

   ```
   if (<condition>)
   	return false;
   return true;
   ```

   Recommendation

   We recommend to use only one `return` statement per method/function.
3. When a method/function returns a boolean and the current method/function's returned value depends on it, the `if` statement has to be avoided.

   ```
   public aFirstMethod()
   {
   	return $this->aSecondMethod();
   }
   ```
4. Tests must be grouped by entity.

   ```
   if ($price && !empty($price))
   	...
   if (!Validate::$myObject || $myObject->id === NULL)
   	...
   ```

#### Visibility <a href="#codingstandards-visibility" id="codingstandards-visibility"></a>

1. The visibility must be defined every time, even when it is a public method.
2. The order of the method properties should be: `visibility static function functionName()`.

   ```
   private static function foo()
   ```

#### Method / Function names <a href="#codingstandards-method-functionnames" id="codingstandards-method-functionnames"></a>

1. Method and function names always use CamelCase: begin with a lowercase character and each following words must begin with an uppercase character.

   ```
   public function myExampleMethodWithALotOfWordsInItsName()
   ```
2. Braces introducing method code have to be preceded by a carriage return.

   ```
   public function myMethod($arg1, $arg2)
   {
   	...
   }
   ```
3. Method and function names must be explicit, so function names such as `b()` or `ef()`are completely forbidden.

   Exceptions

   The only exceptions are the translation function (called `l()`) and the debug functions (named `p()` and `d()`).

#### Enumeration <a href="#codingstandards-enumeration" id="codingstandards-enumeration"></a>

Commas have to be followed (and not preceded) by a space.

```
protected function myProtectedMethod($arg1, $arg2, $arg3 = null)
```

#### Objects / Classes <a href="#codingstandards-objects-classes" id="codingstandards-objects-classes"></a>

1. Object name must be singular.

   ```
   class Customer
   ```
2. Class name must follow the CamelCase practice, except that the first letter is uppercase.

   ```
   class MyBeautifulClass
   ```

#### Constants <a href="#codingstandards-constants" id="codingstandards-constants"></a>

1. Constant names must be written in uppercase, except for "true", "false" and "null" which must be lowercase: `ENT_NOQUOTE`, `true`.
2. Constant names have to be prefixed with "`PS_`" inside the core and module.

   ```
   define('PS_DEBUG', 1);
   define('PS_MODULE_NAME_DEBUG', 1);
   ```
3. Constant names should only use alphabetical characters and "\_".

#### Keywords <a href="#codingstandards-keywords" id="codingstandards-keywords"></a>

All keywords have to be lowercase: `as, case, if, echo, null`.

#### Configuration variables <a href="#codingstandards-configurationvariables" id="codingstandards-configurationvariables"></a>

Configuration variables follow the same rules as defined above.

#### Strings <a href="#codingstandards-strings" id="codingstandards-strings"></a>

Strings have to be surrounded by simple quotes, never double ones.

```
echo 'Debug';
$myObj->name = 'Hello '.$name;
```

#### Comments <a href="#codingstandards-comments" id="codingstandards-comments"></a>

1. Inside functions and methods, only the "`//`" comment tag is allowed.
2. After the "`//`" comment marker, a space is required:

   ```
   // My great comment
   ```
3. The "`//`" comment marker is tolerated at the end of a code line.

   ```
   $a = 17 + 23; // A comment inside my example function
   ```
4. Outside of functions and methods, only the "`/*`" and "`*/`" comment markers are allowed.

   ```
   /* This method is required for compatibility issues */
   public function foo()
   {
   	// Some code explanation right here
   	...
   }
   ```
5. A phpDoc comment block is required before the declaration of the method.

   ```
   /**
    * Return field value if possible (both classical and multilingual fields)
    *
    * Case 1: Return value if present in $_POST / $_GET
    * Case 2: Return object value
    *
    * @param object $obj Object
    * @param string $key Field name
    * @param integer $id_lang Language id (optional)
    * @return string
    */
   protected function getFieldValue($obj, $key, $id_lang = NULL)
   ```

   For more informations

   For more information about the PHP Doc syntax: <http://manual.phpdoc.org/HTMLSmartyConverter/HandS/phpDocumentor/tutorial_tags.pkg.html>.

#### Return values <a href="#codingstandards-returnvalues" id="codingstandards-returnvalues"></a>

1. The `return` statement does not need brackets, except when it deals with a composed expression.

   ```
   return $result;
   return ($a + $b);
   return (a() - b());
   return true;
   ```
2. The `return` statement can be used to break out of a function.

   ```
   return;
   ```

#### Call <a href="#codingstandards-call" id="codingstandards-call"></a>

Performing a function call preceded by a "`@`" is forbidden, but beware of function/method call with login/password or path arguments.

```
myfunction();

// In the following example, we put a @ for security reasons
@mysql_connect(...);
```

#### Tags <a href="#codingstandards-tags" id="codingstandards-tags"></a>

1. There must be an empty line after the PHP opening tag.

   ```
   <?php

   require_once('my_file.inc.php');
   ```
2. The PHP closing tag is forbidden at the end of a file.

#### Indentation <a href="#codingstandards-indentation" id="codingstandards-indentation"></a>

1. The tabulation character ("`\t`") is the only indentation character allowed.
2. Each indentation level must be represented by a single tabulation character.

   ```
   function foo($a)
   {
   	if ($a == null)
   		return false;
   	...
   }
   ```

#### Array <a href="#codingstandards-array" id="codingstandards-array"></a>

1. The `array` keyword must not be followed by a space.

   ```
   array(17, 23, 42);
   ```
2. When too much data is inside an array, the indentation has to be as follows:

   ```
   $a = array(
   	36 => $b,
   	$c => 'foo',
   	$d => array(17, 23, 42),
   	$e => array(
   		0 => 'zero',
   		1 => $one
   	)
   );
   ```

#### Block <a href="#codingstandards-block" id="codingstandards-block"></a>

Braces are prohibited when they only define one instruction or a combination of statements.

```
if (!$result)
    return false;
 
for ($i = 0; $i < 17; $i++)
    if ($myArray[$i] == $value)
    {
        $result[] = $myArray[$i];
        return $result;
    }
    else
        $failed++;
```

#### Security <a href="#codingstandards-security" id="codingstandards-security"></a>

1. All users' data (data entered by users) has to be cast.

   ```
   $data = Tools::getValue('name');

   $myObject->street_number = (int)Tools::getValue('street_number');
   ```

   `getValue()` does not protect your code from hacking attempts (SQL injections, XSS flaws and CRSF breaches). You still have to secure your data yourself.\
   One PrestaShop-specific securization method is `pSQL($value)`: it helps protect your database against SQL injections.
2. All method/function's parameters must be typed (when `Array` or `Object`) when received.

   ```
   public myMethod(Array $var1, $var2, Object $var3)
   ```
3. For all other parameters, they have to be cast each time they are used, except when they are sent to other methods/functions.

   ```
   protected myProtectedMethod($id, $text, $price)
   {
   	$this->id = (int)$id;
   	$this->price = (float)$price;
   	$this->callMethod($id, $price);
   }
   ```

#### Limitations <a href="#codingstandards-limitations" id="codingstandards-limitations"></a>

1. Source code lines are limited to 150 characters wide.
2. Functions and methods lines are limited to 80 characters. Functions must have a good reason to have an overly long name: keep it to the essential!

#### Other <a href="#codingstandards-other" id="codingstandards-other"></a>

1. It is forbidden to use a ternary into another ternary, such as `echo ((true ? 'true' : false) ? 't' : 'f');`.
2. We recommend the use of `&&` and `||` into your conditions instead of `AND` and `OR`: `echo ('X' == 0 && 'X' == true)`.
3. Please refrain from using reference parameters, such as:

   ```
   function is_ref_to(&$a, &$b) { ... }
   ```

### SQL <a href="#codingstandards-sql" id="codingstandards-sql"></a>

#### Table names <a href="#codingstandards-tablenames" id="codingstandards-tablenames"></a>

1. Table names must begin with the PrestaShop "`_DB_PREFIX_`" prefix.

   ```
   ... FROM `'. _DB_PREFIX_.'customer` ...
   ```
2. Table names must have the same name as the object they reflect: "`ps_cart`".
3. Table names have to stay singular: "`ps_order`".
4. Language data have to be stored in a table named exactly like the object's table, and with the "`_lang`" suffix: "`ps_product_lang`".

#### SQL query <a href="#codingstandards-sqlquery" id="codingstandards-sqlquery"></a>

1. Keywords must be written in uppercase.

   ```
   SELECT `firstname`
   FROM `'._DB_PREFIX_.'customer`
   ```
2. Back quotes ("`` ` ``") must be used around SQL field names and table names.

   ```
   SELECT p.`foo`, c.`bar`
   FROM `'._DB_PREFIX_.'product` p, `'._DB_PREFIX_.'customer` c
   ```
3. Table aliases have to be named by taking the first letter of each word, and must be lowercase.

   ```
   SELECT p.`id_product`, pl.`name`
   FROM `'._DB_PREFIX_.'product` p
   NATURAL JOIN `'._DB_PREFIX_.'product_lang` pl
   ```
4. When conflicts between table aliases occur, the second character has to be also used in the name.

   ```
   SELECT ca.`id_product`, cu.`firstname`
   FROM `'._DB_PREFIX_.'cart` ca, `'._DB_PREFIX_.'customer` cu
   ```
5. A new line has to be created for each clause.

   ```
   $query = 'SELECT pl.`name`
   FROM `'._DB_PREFIX_.'product_lang` pl
   WHERE pl.`id_product` = 17';
   ```
6. It is forbidden to make a `JOIN` in a `WHERE` clause.

### Installing the code validator (PHP CodeSniffer) <a href="#codingstandards-installingthecodevalidator-phpcodesniffer" id="codingstandards-installingthecodevalidator-phpcodesniffer"></a>

This is a brief tutorial on how to install a code validator on your PC and use it to validate your files. The code validator uses PHP CodeSniffer, which is a PEAR package (<http://pear.php.net/package/PHP_CodeSniffer/>). The PrestaShop code standard was created specifically for CodeSniffer, using many rules taken from existing standards, with added customized rules in order to better fit our project.

You can download the PrestaShop code standard using Git: <https://github.com/PrestaShop/PrestaShop-norm-validator> (you must perform this step before going any further with this tutorial).In order for it to be recognized as a basic standard, it must be placed in the CodeSniffer's  `/Standards` folder

#### PhpStorm integration <a href="#codingstandards-phpstormintegration" id="codingstandards-phpstormintegration"></a>

If you use PhpStorm (<http://www.jetbrains.com/phpstorm/>), follow these steps:

1. Go to Settings -> Inspection -> PHP -> PHP Code Sniffer.
2. Set the path to the `phpcs` executable.
3. Set the coding standard as "PrestaShop" (which is only available if you did put in CodeSniffer's `/Standards` folder).

#### Integration to vim <a href="#codingstandards-integrationtovim" id="codingstandards-integrationtovim"></a>

Several plugins are available online. For instance, you can use this one: <https://github.com/bpearson/vim-phpcs/blob/master/plugin/phpcs.vim>\
Put in your `~/.vim/plugin` folder.

You can add two shortcuts (for instance, F9 to display everything and Ctrl+F9 to hide warnings) in your `.vimrc` file in normal and insert mode :

```
nmap <C-F9>:CodeSniffErrorOnly<CR>
imap <C-F9> <Esc>:CodeSniffErrorOnly<CR>
nmap <F9>:CodeSniff<CR>
imap <F9> <Esc>:CodeSniff<CR>a		
```

#### Command line (Linux) <a href="#codingstandards-commandline-linux" id="codingstandards-commandline-linux"></a>

You do not have to use PhpStorm to use PHP CodeSniffer, you can also install it so that it can be called from the command line.

1. Install PEAR: <http://pear.php.net/>\
   &#x20;`$> apt-get install php-pear`
2. Install PHP CodeSniffer in PEAR: <http://pear.php.net/package/PHP_CodeSniffer>\
   &#x20;`$> pear install PHP_CodeSniffer`
3. Add the PrestaShop standard that you downloaded from SVN earlier, and place it in PHP CodeSniffer's "Standards" folder.\
   &#x20;`$> git clone` [`https://github.com/PrestaShop/PrestaShop-norm-validator`](https://github.com/PrestaShop/PrestaShop-norm-validator) `/usr/share/php/PHP/CodeSniffer/Standards/Prestashop`
4. Set the Prestashop standard as the default one\
   &#x20;`$> phpcs --config-set default_standard Prestashop`

The various options for this command are well explained in its documentation. For now, here is the easy way to launch it:

```
$> phpcs --standard=/path/to/norm/Prestashop /folder/or/fileToCheck
```

In order to only display errors, not warnings:

```
$> phpcs --standard=/path/to/norm/Prestashop --warning-severity=99 /folder/or/fileToCheck
```

If you have already manually installed PHP CodeSniffer, the program should be in PEAR's `/scripts` folder.

Windows users: although the `phpcs.bat` file should be in that `/scripts` folder, you might have to edit it in order for it to work properly (replace the paths with yours):

```
path/to/php.exe -d auto_apprend_file="" -d auto_prepend_file -d include_path="path/to/PEAR/" path/to/pear/scripts/phpcs
```


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.prestashop-project.org/1-5-documentation/english-documentation/developer-guide/coding-standards.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
