504c7a0f2f
* Custom SMTP Settings * Fix lint * Custom SMTP add in Pricing plan * Allow reset email settings * improve custom SMTP using seprate abstract class * test case for custom SMTP * fix test case * UI improvement * add CASHIER_KEY in phpunit for testcase * Attempt to fix tests * Run pint and attempt to fix cache tests * Fix user management tests * Fix code linters * Merged main & fix linting --------- Co-authored-by: Julien Nahum <julien@nahum.net>
114 lines
3.4 KiB
PHP
114 lines
3.4 KiB
PHP
<?php
|
|
|
|
namespace App\Integrations\Handlers;
|
|
|
|
use App\Mail\Forms\SubmissionConfirmationMail;
|
|
use Illuminate\Support\Facades\Mail;
|
|
use Illuminate\Support\Facades\Log;
|
|
use Stevebauman\Purify\Facades\Purify;
|
|
|
|
/**
|
|
* Sends a confirmation to form respondant that form was submitted
|
|
*/
|
|
class SubmissionConfirmationIntegration extends AbstractEmailIntegrationHandler
|
|
{
|
|
public const RISKY_USERS_LIMIT = 120;
|
|
|
|
public static function getValidationRules(): array
|
|
{
|
|
return [
|
|
'respondent_email' => [
|
|
'required',
|
|
'boolean',
|
|
function ($attribute, $value, $fail) {
|
|
if ($value !== true) {
|
|
$fail('Need at least 1 email field.');
|
|
}
|
|
},
|
|
],
|
|
'confirmation_reply_to' => 'email|nullable',
|
|
'notification_sender' => 'required',
|
|
'notification_subject' => 'required',
|
|
'notification_body' => 'required',
|
|
'notifications_include_submission' => 'boolean'
|
|
];
|
|
}
|
|
|
|
protected function shouldRun(): bool
|
|
{
|
|
return !(!$this->form->is_pro) && parent::shouldRun() && !$this->riskLimitReached();
|
|
}
|
|
|
|
public function handle(): void
|
|
{
|
|
if (!$this->shouldRun()) {
|
|
return;
|
|
}
|
|
|
|
$email = $this->getRespondentEmail();
|
|
if (!$email) {
|
|
return;
|
|
}
|
|
|
|
Log::info('Sending submission confirmation', [
|
|
'recipient' => $email,
|
|
'form_id' => $this->form->id,
|
|
'form_slug' => $this->form->slug,
|
|
'mailer' => $this->mailer
|
|
]);
|
|
Mail::mailer($this->mailer)->to($email)->send(new SubmissionConfirmationMail($this->event, $this->integrationData));
|
|
}
|
|
|
|
private function getRespondentEmail()
|
|
{
|
|
// Make sure we only have one email field in the form
|
|
$emailFields = collect($this->form->properties)->filter(function ($field) {
|
|
$hidden = $field['hidden'] ?? false;
|
|
|
|
return !$hidden && $field['type'] == 'email';
|
|
});
|
|
if ($emailFields->count() != 1) {
|
|
return null;
|
|
}
|
|
|
|
if (isset($this->submissionData[$emailFields->first()['id']])) {
|
|
$email = $this->submissionData[$emailFields->first()['id']];
|
|
if ($this->validateEmail($email)) {
|
|
return $email;
|
|
}
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
// To avoid phishing abuse we limit this feature for risky users
|
|
private function riskLimitReached(): bool
|
|
{
|
|
// This is a per-workspace limit for risky workspaces
|
|
if ($this->form->workspace->is_risky) {
|
|
if ($this->form->workspace->submissions_count >= self::RISKY_USERS_LIMIT) {
|
|
Log::error('!!!DANGER!!! Dangerous user detected! Attempting many email sending.', [
|
|
'form_id' => $this->form->id,
|
|
'workspace_id' => $this->form->workspace->id,
|
|
]);
|
|
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public static function validateEmail($email): bool
|
|
{
|
|
return (bool)filter_var($email, FILTER_VALIDATE_EMAIL);
|
|
}
|
|
|
|
public static function formatData(array $data): array
|
|
{
|
|
return array_merge(parent::formatData($data), [
|
|
'notification_body' => Purify::clean($data['notification_body'] ?? ''),
|
|
]);
|
|
}
|
|
}
|