web-base/core/Api/ContactAPI.class.php

<?php

namespace Api {
  abstract class ContactAPI extends Request {

  }
}

namespace Api\Contact {

  use Api\ContactAPI;
  use Api\Parameter\Parameter;
  use Api\Parameter\StringType;
  use Api\VerifyCaptcha;
  use Objects\User;

  class Request extends ContactAPI {

    private int $notificationId;
    private int $contactRequestId;
    private ?string $messageId;

    public function __construct(User $user, bool $externalCall = false) {
      $parameters = array(
        'fromName' => new StringType('fromName', 32),
        'fromEmail' => new Parameter('fromEmail', Parameter::TYPE_EMAIL),
        'message' => new StringType('message', 512),
      );

      $settings = $user->getConfiguration()->getSettings();
      if ($settings->isRecaptchaEnabled()) {
        $parameters["captcha"] = new StringType("captcha");
      }

      $this->messageId = null;
      parent::__construct($user, $externalCall, $parameters);
    }

    public function execute($values = array()): bool {
      if (!parent::execute($values)) {
        return false;
      }

      $settings = $this->user->getConfiguration()->getSettings();
      if ($settings->isRecaptchaEnabled()) {
        $captcha = $this->getParam("captcha");
        $req = new VerifyCaptcha($this->user);
        if (!$req->execute(array("captcha" => $captcha, "action" => "contact"))) {
          return $this->createError($req->getLastError());
        }
      }

      $sendMail = $this->sendMail();
      $mailError = $this->getLastError();

      $insertDB = $this->insertContactRequest();
      $dbError  = $this->getLastError();

      // Create a log entry
      if (!$sendMail || $mailError) {
        $message = "Error processing contact request.";
        if (!$sendMail) {
          $message .= " Mail: $mailError";
        }

        if (!$insertDB) {
          $message .= " Mail: $dbError";
        }

        error_log($message);
      }

      if (!$sendMail && !$insertDB) {
        return $this->createError("The contact request could not be sent. The Administrator is already informed. Please try again later.");
      }

      return $this->success;
    }

    private function insertContactRequest() {
      $sql = $this->user->getSQL();
      $name = $this->getParam("fromName");
      $email = $this->getParam("fromEmail");
      $message = $this->getParam("message");
      $messageId = $this->messageId ?? null;

      $res = $sql->insert("ContactRequest", array("from_name", "from_email", "message", "messageId"))
        ->addRow($name, $email, $message, $messageId)
        ->returning("uid")
        ->execute();

      $this->success = ($res !== FALSE);
      $this->lastError = $sql->getLastError();

      if ($this->success) {
        $this->contactRequestId = $sql->getLastInsertId();
      }

      return $this->success;
    }

    private function createNotification() {
      $sql = $this->user->getSQL();
      $name = $this->getParam("fromName");
      $email = $this->getParam("fromEmail");
      $message = $this->getParam("message");

      $res = $sql->insert("Notification", array("title", "message", "type"))
        ->addRow("New Contact Request from: $name", "$name ($email) wrote:\n$message", "message")
        ->returning("uid")
        ->execute();

      $this->success = ($res !== FALSE);
      $this->lastError = $sql->getLastError();

      if ($this->success) {
        $this->notificationId = $sql->getLastInsertId();

        $res = $sql->insert("GroupNotification", array("group_id", "notification_id"))
          ->addRow(USER_GROUP_ADMIN, $this->notificationId)
          ->addRow(USER_GROUP_SUPPORT, $this->notificationId)
          ->execute();

        $this->success = ($res !== FALSE);
        $this->lastError = $sql->getLastError();
      }

      return $this->success;
    }

    private function sendMail(): bool {
      $name = $this->getParam("fromName");
      $email = $this->getParam("fromEmail");
      $message = $this->getParam("message");

      $request = new \Api\Mail\Send($this->user);
      $this->success = $request->execute(array(
        "subject" => "Contact Request",
        "body" => $message,
        "replyTo" => $email,
        "replyName" => $name
      ));

      if ($this->success) {
        $this->messageId = $request->getResult()["messageId"];
      }

      return $this->success;
    }
  }

}