first commit

modules/ets_cfultimate/classes/ETS_CFU_Submission.php

@@ -0,0 +1,394 @@
+<?php
+/**
+ * 2007-2021 ETS-Soft
+ *
+ * NOTICE OF LICENSE
+ *
+ * This file is not open source! Each license that you purchased is only available for 1 wesite only.
+ * If you want to use this file on more websites (or projects), you need to purchase additional licenses.
+ * You are not allowed to redistribute, resell, lease, license, sub-license or offer our resources to any third party.
+ *
+ * DISCLAIMER
+ *
+ * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
+ * versions in the future. If you wish to customize PrestaShop for your
+ * needs please contact us for extra customization service at an affordable price
+ *
+ * @author ETS-Soft <etssoft.jsc@gmail.com>
+ * @copyright  2007-2021 ETS-Soft
+ * @license    Valid for 1 website (or project) for each purchase of license
+ *  International Registered Trademark & Property of ETS-Soft
+ */
+
+class ETS_CFU_Submission
+{
+    private static $instance;
+    private $contact_form;
+    private $status = 'init';
+    private $posted_data = array();
+    private $uploaded_files = array();
+    private $skip_mail = false;
+    private $response = '';
+    private $invalid_fields = array();
+    private $meta = array();
+    private $consent = array();
+    private $attachments = array();
+
+    private function __construct()
+    {
+    }
+
+    public static function get_instance(ETS_CFU_Contact_Form $contact_form = null, $args = array())
+    {
+        $args = array_merge($args, array(
+            'skip_mail' => false,
+        ));
+        if (empty(self::$instance)) {
+            if (null == $contact_form) {
+                return null;
+            }
+            self::$instance = new self;
+            self::$instance->contact_form = $contact_form;
+            self::$instance->skip_mail = (bool)$args['skip_mail'];
+            self::$instance->setup_posted_data();
+            self::$instance->submit();
+        } elseif (null != $contact_form) {
+            return null;
+        }
+        return self::$instance;
+    }
+
+    private function setup_posted_data()
+    {
+        $posted_data = (array)$_POST;
+        $posted_data = array_diff_key($posted_data, array('_wpnonce' => ''));
+        $posted_data = $this->sanitize_posted_data($posted_data);
+        $tags = $this->contact_form->scan_form_tags();
+        foreach ((array)$tags as $tag) {
+            if (empty($tag->name)) {
+                continue;
+            }
+            //$type = $tag->type;
+            $name = $tag->name;
+            $pipes = $tag->pipes;
+            $value_orig = $value = '';
+
+            if (isset($posted_data[$name])) {
+                $value_orig = $value = $posted_data[$name];
+            }
+            if ($pipes instanceof ETS_CFU_Pipes && !$pipes->zero()) {
+                if (is_array($value_orig)) {
+                    $value = array();
+                    foreach ($value_orig as $v) {
+                        $value[] = $pipes->do_pipe(ets_cfu_unslash($v));
+                    }
+                } else {
+                    $value = $pipes->do_pipe(ets_cfu_unslash($value_orig));
+                }
+            }
+
+            $posted_data[$name] = $value;
+        }
+        $this->posted_data = $posted_data;
+        return $this->posted_data;
+    }
+
+    private function sanitize_posted_data($value)
+    {
+        if (is_array($value)) {
+            $value = array_map(array($this, 'sanitize_posted_data'), $value);
+        } elseif (is_string($value)) {
+            $value = ets_cfu_check_invalid_utf8($value);
+            $value = ets_cfu_kses_no_null($value);
+        }
+        return $value;
+    }
+    public function ipBlackList($ip_blacklist)
+    {
+        if (!$ip_blacklist)
+            return false;
+        $remote_addr = Tools::getRemoteAddr();
+        $ips = explode("\n", $ip_blacklist);
+        if ($ips) {
+            foreach ($ips as $ip) {
+                if (preg_match('/^' . $this->formatPattern($ip) . '$/', $remote_addr)) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+
+    public function formatPattern($pattern)
+    {
+        return str_replace('*', '(.*)', trim($pattern));
+    }
+    private function submit()
+    {
+        if (!$this->is('init')) {
+            return $this->status;
+        }
+        $this->meta = array(
+            'remote_ip' => $this->get_remote_ip_addr(),
+            'user_agent' => isset($_SERVER['HTTP_USER_AGENT'])
+                ? Tools::substr($_SERVER['HTTP_USER_AGENT'], 0, 254) : '',
+            'url' => $this->get_request_url(),
+            'timestamp' => ets_cfu_current_time('timestamp'),
+            'unit_tag' =>
+                Tools::isSubmit('_ets_cfu_unit_tag') ? Tools::getValue('_ets_cfu_unit_tag') : '',
+            'container_post_id' => Tools::isSubmit('_ets_cfu_container_post')
+                ? (int)Tools::getValue('_ets_cfu_container_post') : 0,
+            'current_user_id' => (int)Context::getContext()->customer->id,
+        );
+        $contact_form = $this->contact_form;
+
+        if ($this->ipBlackList(Configuration::get('ETS_CFU_IP_BLACK_LIST'))) {
+            $this->set_status('validation_failed');
+            $this->set_response($contact_form->message('ip_black_list'));
+        } elseif (!$this->validate()) { // Validation error occured
+            $this->set_status('validation_failed');
+            $this->set_response($contact_form->message('validation_error'));
+        } elseif (!$this->accepted()) { // Not accepted terms
+            $this->set_status('acceptance_missing');
+            $this->set_response($contact_form->message('accept_terms'));
+        } elseif ($this->spam()) { // Spam!
+            $this->set_status('spam');
+            $this->set_response($contact_form->message('spam'));
+        } elseif (($send_mail = $this->mail()) === true) {
+            if ($contact_form ->thank_you_active){
+                if ( trim($contact_form->thank_you_page) =='thank_page_url'){
+                    $this->set_status('mail_redirect');
+                    $this->set_response($contact_form->message('thank_you_url'));
+                }else{
+                    $this->set_status('load_thank_page');
+                    $base_url = Ets_CfUltimate::getLinkContactForm($contact_form->id,(int)Context::getContext()->language->id,'thank');
+                    $this->set_response($base_url);
+                }
+            }else{
+                $this->set_status('mail_sent');
+                $this->set_response($contact_form->message('mail_sent_ok'));
+            }
+        } else {
+            $this->set_status('mail_failed');
+            if ($send_mail === false)
+                $this->set_response($contact_form->message('mail_sent_ng'));
+            elseif ($send_mail == -1)
+                $this->set_response('Invalid mail to');
+            elseif ($send_mail == -2)
+                $this->set_response('Invalid e-mail subject');
+        }
+        if (!$contact_form->save_message)
+            $this->remove_uploaded_files();
+
+        return $this->status;
+    }
+
+    public function is($status)
+    {
+        return $this->status == $status;
+    }
+
+    private function get_remote_ip_addr()
+    {
+        $ip_addr = '';
+
+        if (isset($_SERVER['REMOTE_ADDR'])
+            && $_SERVER['REMOTE_ADDR']) {
+            $ip_addr = $_SERVER['REMOTE_ADDR'];
+        }
+        return $ip_addr;
+    }
+
+    private function get_request_url()
+    {
+        $home_url = ets_cfu_untrailingslashit(Context::getContext()->link->getPageLink('index'));
+        if (self::is_restful()) {
+            $referer = isset($_SERVER['HTTP_REFERER'])
+                ? trim($_SERVER['HTTP_REFERER']) : '';
+            if ($referer && 0 === strpos($referer, $home_url)) {
+                return ets_cfu_esc_url_raw($referer);
+            }
+        }
+        $url = preg_replace('%(?<!:|/)/.*$%', '', $home_url)
+            . ets_cfu_get_request_uri();
+        return $url;
+    }
+
+    public static function is_restful()
+    {
+        return defined('REST_REQUEST') && REST_REQUEST;
+    }
+
+    private function validate()
+    {
+        if ($this->invalid_fields) {
+            return false;
+        }
+        require_once(_PS_MODULE_DIR_ . 'ets_cfultimate/classes/ETS_CFU_Validation.php');
+        $result = new ETS_CFU_Validation();
+        $tags = $this->contact_form->scan_form_tags();
+        foreach ($tags as $tag) {
+            if ( $tag -> has_option('mod_referrence') && (! Context::getContext()->customer->logged || !getOrderReferrence())){
+                continue;
+            }
+            $type = str_replace('*', '', $tag->type);
+
+            if ($type == 'radio')
+                $type = 'checkbox';
+            if ($type == 'range')
+                $type = 'number';
+            $func = 'ets_cfu_' . $type . '_validation_filter';
+            if (function_exists($func))
+                $result = $func($result, $tag);
+            else
+                $result = ets_cfu_text_validation_filter($result, $tag);
+        }
+        $this->invalid_fields = $result->get_invalid_fields();
+        return $result->is_valid();
+    }
+
+    private function accepted()
+    {
+        return true;
+    }
+
+    private function spam()
+    {
+        return ets_cfu_recaptcha_check_with_google(false);
+    }
+
+    private function mail()
+    {
+        $contact_form = $this->contact_form;
+
+        $result = ETS_CFU_Mail::send($contact_form->prop('mail'), 'mail', true);
+        if ($result === true) {
+            $additional_mail = array();
+            if (($mail_2 = $contact_form->prop('mail_2')) && $mail_2['active']) {
+                $additional_mail['mail_2'] = $mail_2;
+            }
+            foreach ($additional_mail as $name => $template) {
+                ETS_CFU_Mail::send($template, $name, false);
+            }
+            ETS_CFU_Mail::deleteFileNotUse($contact_form->prop('mail'), 'mail');
+            return true;
+        }
+        ETS_CFU_Mail::deleteFileNotUse($contact_form->prop('mail'), 'mail');
+        return $result;
+    }
+
+    public function remove_uploaded_files()
+    {
+        foreach ((array)$this->uploaded_files as $path) {
+            ets_cfu_rmdir_p($path);
+            if (($dir = dirname($path))
+                && false !== ($files = scandir($dir))
+                && !array_diff($files, array('.', '..'))) {
+                // remove parent dir if it's empty.
+                rmdir($dir);
+            }
+        }
+    }
+
+    public function get_status()
+    {
+        return $this->status;
+    }
+
+    public function set_status($status)
+    {
+        if (preg_match('/^[a-z][0-9a-z_]+$/', $status)) {
+            $this->status = $status;
+            return true;
+        }
+        return false;
+    }
+
+    public function get_response()
+    {
+        return $this->response;
+    }
+
+    public function set_response($response)
+    {
+        $this->response = $response;
+        return true;
+    }
+
+    public function get_contact_form()
+    {
+        return $this->contact_form;
+    }
+
+    public function get_invalid_field($name)
+    {
+        if (isset($this->invalid_fields[$name])) {
+            return $this->invalid_fields[$name];
+        } else {
+            return false;
+        }
+    }
+
+    public function get_invalid_fields()
+    {
+        return $this->invalid_fields;
+    }
+
+    public function get_posted_data($name = '')
+    {
+        if (!empty($name)) {
+            if (isset($this->posted_data[$name])) {
+                return $this->posted_data[$name];
+            } else {
+                return null;
+            }
+        }
+        return $this->posted_data;
+    }
+
+    public function add_consent($name, $conditions)
+    {
+        $this->consent[$name] = $conditions;
+        return true;
+    }
+
+    public function collect_consent()
+    {
+        return (array)$this->consent;
+    }
+
+    public function uploaded_files()
+    {
+        return $this->uploaded_files;
+    }
+
+    public function attachments()
+    {
+        return $this->attachments;
+    }
+
+    public function add_uploaded_file($name, $file_path, $attachment)
+    {
+        $this->uploaded_files[$name] = $file_path;
+        $this->attachments[$name] = $attachment;
+        if (empty($this->posted_data[$name])) {
+            $this->posted_data[$name] = basename($file_path);
+        }
+    }
+
+    private function is_blacklisted()
+    {
+        $target = ets_cfu_array_flatten($this->posted_data);
+        $target[] = $this->get_meta('remote_ip');
+        $target[] = $this->get_meta('user_agent');
+        $target = implode("\n", $target);
+        return (bool)ets_cfu_blacklist_check($target);
+    }
+
+    public function get_meta($name)
+    {
+        if (isset($this->meta[$name])) {
+            return $this->meta[$name];
+        }
+    }
+}