post_title, ENT_QUOTES ) ); $body = '

' . esc_html( sprintf( $single /* translators: %s: reference of the message. */ ? __( 'A new message was sent from your website, reference %s.', 'primiko' ) /* translators: %s: reference of the request. */ : __( 'A new quote request was sent from your website, reference %s.', 'primiko' ), self::reference( $request_id ) ) ) . '

'; $body .= Entries::html( (array) get_post_meta( $request_id, '_primiko_entries', true ) ); $body .= '

' . esc_html__( 'Open the request on the website', 'primiko' ) . '

'; $headers = array( 'Content-Type: text/html; charset=UTF-8' ); if ( is_email( $email ) ) { $headers[] = 'Reply-To: ' . self::address( $name, $email ); } $attachments = $this->attachments( $request_id ); if ( $attachments ) { $body .= '

' . esc_html__( 'The photos are attached to this email.', 'primiko' ) . '

'; } elseif ( get_post_meta( $request_id, '_primiko_photos', true ) ) { $body .= '

' . esc_html__( 'The photos are too large to be attached: open the request on the website to see them.', 'primiko' ) . '

'; } return $this->send( $this->recipients( (int) $request->post_parent ), $subject, $body, $headers, $attachments ); } /** * Sends the visitor a copy of the request. * * @param int $request_id Request post ID. * @return bool Whether wp_mail() accepted the email. */ public function acknowledge( $request_id ) { $email = (string) get_post_meta( $request_id, '_primiko_email', true ); /** * Filters how many copies the whole site can send per hour. * * @param int $limit Copies per hour, 0 for no limit. */ $site_limit = (int) apply_filters( 'primiko_hourly_copies', 20 ); $site_key = Limiter::key( 'copies', 'site' ); if ( ! is_email( $email ) || Limiter::reached( self::copy_key( $email ), self::daily_copies() ) || Limiter::reached( $site_key, $site_limit ) ) { return false; } $messages = $this->messages( $request_id ); $subject = self::fill( $messages['acknowledgement_subject'], $request_id ); $text = self::fill( $messages['acknowledgement_body'], $request_id ); $body = ''; foreach ( preg_split( "/\n\s*\n/", $text ) as $paragraph ) { $body .= '

' . nl2br( esc_html( trim( $paragraph ) ) ) . '

'; } $body .= Entries::html( (array) get_post_meta( $request_id, '_primiko_entries', true ), false ); $body .= '

' . esc_html( wp_specialchars_decode( get_bloginfo( 'name' ), ENT_QUOTES ) ) . '

'; $headers = array( 'Content-Type: text/html; charset=UTF-8' ); $recipients = $this->recipients( (int) get_post_field( 'post_parent', $request_id ) ); // Replies from the visitor go to the business, not to the sender address of the site. if ( ! empty( $recipients[0] ) && is_email( $recipients[0] ) ) { $headers[] = 'Reply-To: ' . self::address( wp_specialchars_decode( get_bloginfo( 'name' ), ENT_QUOTES ), $recipients[0] ); } $sent = $this->send( $email, $subject, $body, $headers ); // Only a copy that left counts against the daily limit. if ( $sent ) { Limiter::hit( self::copy_key( $email ), DAY_IN_SECONDS ); Limiter::hit( $site_key, HOUR_IN_SECONDS ); } return $sent; } /** * Counter of the copies sent to one address. The visitor types the * address of the copy: without a limit, a robot could use the form to * flood someone else's mailbox in the name of the site. Plus-tags and * dots in Gmail addresses reach the same mailbox, so they share one * counter. * * @param string $email Address of the copy. * @return string Transient key. */ private static function copy_key( $email ) { $email = strtolower( trim( $email ) ); $at = strrpos( $email, '@' ); $local = substr( $email, 0, $at ); $host = substr( $email, $at + 1 ); $local = preg_replace( '/\+.*$/', '', $local ); if ( in_array( $host, array( 'gmail.com', 'googlemail.com' ), true ) ) { $local = str_replace( '.', '', $local ); $host = 'gmail.com'; } return Limiter::key( 'copy', $local . '@' . $host ); } /** * How many copies one address can receive per day. * * @return int 0 for no limit. */ private static function daily_copies() { /** * Filters how many copies one address can receive per day. * * @param int $limit Copies per day, 0 for no limit. */ return (int) apply_filters( 'primiko_daily_copies', 3 ); } /** * Replaces the placeholders of a message: {name}, {email}, {site_name}, * {reference}. * * @param string $text Message. * @param int $request_id Request post ID. * @return string Plain text, not escaped. */ public static function fill( $text, $request_id ) { $answers = (array) get_post_meta( $request_id, '_primiko_answers', true ); return strtr( $text, array( '{name}' => isset( $answers['name'] ) ? $answers['name'] : '', '{email}' => isset( $answers['email'] ) ? $answers['email'] : '', '{site_name}' => wp_specialchars_decode( get_bloginfo( 'name' ), ENT_QUOTES ), '{reference}' => self::reference( $request_id ), ) ); } /** * Reference of a request, shown to the visitor and the business. * * @param int $request_id Request post ID. * @return string The random reference, or the ID for older requests. */ public static function reference( $request_id ) { $reference = (string) get_post_meta( $request_id, '_primiko_reference', true ); return '' !== $reference ? $reference : (string) $request_id; } /** * Default messages, used when a template leaves one out. * * @param string $key Message key. * @return string */ public static function default_message( $key ) { $messages = array( 'success' => __( 'Thank you {name}, your request has been sent. A copy has been sent to {email}.', 'primiko' ), 'success_no_copy' => __( 'Thank you {name}, your request has been sent.', 'primiko' ), 'acknowledgement_subject' => __( 'Your quote request to {site_name}', 'primiko' ), 'acknowledgement_body' => __( "Hello {name},\n\nThank you for your request. We have received it and will get back to you soon.\n\nHere is a copy of what you sent us.", 'primiko' ), 'privacy_notice' => self::privacy_notice(), 'fallback' => __( 'Please try again later, or call instead.', 'primiko' ), ); return isset( $messages[ $key ] ) ? $messages[ $key ] : ''; } /** * Short privacy notice shown under the consent box: what the answers are * used for, where they go, how long they are kept and the rights of the * visitor. {retention} is filled with the retention setting, so a * rewritten notice stays true when the setting changes. * * @return string Plain text, with {site_name} and {retention} left to fill. */ private static function privacy_notice() { return __( 'Your answers and photos are only used to answer your request and prepare a quote. They are saved on this website, sent to {site_name} by email and shared with no one else. They are kept {retention}. You can ask for a copy or for their deletion at any time.', 'primiko' ); } /** * How long requests are kept, from the retention setting, to complete a * sentence such as "They are kept {retention}." * * @return string */ public static function retention_phrase() { $months = (int) Settings::get( 'retention_months' ); return $months /* translators: %d: number of months, completes "They are kept ...". */ ? sprintf( _n( 'for %d month', 'for %d months', $months, 'primiko' ), $months ) : __( 'until the request is deleted', 'primiko' ); } /** * Recipients of the notifications of a form, or the site admin email. * * @param int $form_id Form post ID. * @return string[] */ public function recipients( $form_id ) { $recipients = array_values( array_filter( (array) get_post_meta( $form_id, '_primiko_recipients', true ), 'is_email' ) ); if ( ! $recipients ) { $recipients = array( get_option( 'admin_email' ) ); } /** * Filters who receives the new requests of a form. * * @param string[] $recipients Email addresses. * @param int $form_id Form post ID. */ return (array) apply_filters( 'primiko_recipients', $recipients, $form_id ); } /** * Messages of the template of a request, translated. * * @param int $request_id Request post ID. * @return array */ private function messages( $request_id ) { $schema = primiko()->templates->form_schema( (int) get_post_field( 'post_parent', $request_id ) ); $messages = array(); foreach ( array( 'acknowledgement_subject', 'acknowledgement_body' ) as $key ) { $messages[ $key ] = ! empty( $schema['messages'][ $key ] ) ? $schema['messages'][ $key ] : self::default_message( $key ); } return $messages; } /** * Absolute paths of the photos to attach, when they are small enough. * The keys name the attachments after the reference of the request * (ABC123-1.jpg) rather than the random names of the stored files. * * @param int $request_id Request post ID. * @return array Paths keyed by attachment name. */ private function attachments( $request_id ) { $paths = array(); $total = 0; $number = 0; $prefix = sanitize_file_name( self::reference( $request_id ) ); foreach ( (array) get_post_meta( $request_id, '_primiko_photos', true ) as $relative ) { $path = primiko()->uploads->path( (string) $relative ); if ( '' !== $path ) { ++$number; $paths[ $prefix . '-' . $number . '.' . strtolower( pathinfo( $path, PATHINFO_EXTENSION ) ) ] = $path; $total += (int) filesize( $path ); } } /** * Filters the largest total size of the photos attached to the * notification, in bytes. 0 never attaches them. * * @param int $bytes Largest total size. */ $limit = (int) apply_filters( 'primiko_max_attachments_bytes', self::MAX_ATTACHMENTS_BYTES ); return $total <= $limit ? $paths : array(); } /** * Name and address for an email header, without characters that could * break the header. The name stays without quotes: wp_mail() hands it * to PHPMailer, which adds them, and a quoted name would show them. * * @param string $name Display name. * @param string $email Email address. * @return string */ private static function address( $name, $email ) { $name = trim( preg_replace( '/[\r\n"<>,;]+/', ' ', $name ) ); return '' === $name ? $email : $name . ' <' . $email . '>'; } /** * Sends an HTML email with a plain text part (multipart/alternative): * spam filters trust it more, and some mail apps only show the text. * * @param string|string[] $to Recipients. * @param string $subject Subject. * @param string $body Escaped HTML body. * @param string[] $headers Headers. * @param array $attachments Attachments. * @return bool Whether wp_mail() accepted the email. */ private function send( $to, $subject, $body, $headers, $attachments = array() ) { $text = self::to_text( $body ); $alternative = static function ( $phpmailer ) use ( $text ) { $phpmailer->AltBody = $text; // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase -- PHPMailer property. }; add_action( 'phpmailer_init', $alternative ); $sent = wp_mail( $to, $subject, $this->wrap( $body ), $headers, $attachments ); remove_action( 'phpmailer_init', $alternative ); return $sent; } /** * Plain text version of an email body built by this class. * * @param string $html Escaped HTML body. * @return string */ private static function to_text( $html ) { // A web link keeps its address. Phone, email and map links are the text itself. $html = preg_replace_callback( '#]*href="([^"]+)"[^>]*>(.*?)#is', static function ( $link ) { $url = html_entity_decode( $link[1], ENT_QUOTES, 'UTF-8' ); return 0 === strpos( $url, 'http' ) && false === strpos( $url, 'google.com/maps' ) ? $link[2] . ': ' . $url : $link[2]; }, $html ); $html = preg_replace( '##i', "\n", $html ); // A label that already ends with "?" or ":" takes a plain space. The // separator follows the language: " : " with a no-break space in French. $html = preg_replace( '#([?:])\s*#i', '$1 ', $html ); $html = str_ireplace( '', _x( ': ', 'between a label and its value in the plain text part of an email', 'primiko' ), $html ); $html = preg_replace( '##i', "\n", $html ); $html = preg_replace( '##i', "\n\n", $html ); $text = html_entity_decode( wp_strip_all_tags( $html ), ENT_QUOTES, 'UTF-8' ); $text = preg_replace( "/[ \t]+\n/", "\n", $text ); return trim( preg_replace( "/\n{3,}/", "\n\n", $text ) ); } /** * Wraps the body in a plain HTML document. * * @param string $body Escaped HTML. * @return string */ private function wrap( $body ) { return '' . $body . ''; } }