src/Controller/HomeController.php line 142

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Dto\ContactFormData;
  6. use App\Form\ContactForm;
  7. use App\Security\ApiUser;
  8. use App\Service\Client\ActivityFeedService;
  9. use App\Service\Client\Content\VideoListingService;
  10. use App\Service\Client\MailService;
  11. use App\Service\Client\User\AccountService;
  12. use App\Service\Client\User\AmateurListingService;
  13. use App\Service\Client\User\MemberService;
  14. use App\Service\ReCaptchaService;
  15. use Sensio\Bundle\FrameworkExtraBundle\Configuration\Template;
  16. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  17. use Symfony\Component\HttpFoundation\RedirectResponse;
  18. use Symfony\Component\HttpFoundation\Request;
  19. use Symfony\Component\HttpFoundation\Response;
  20. use Symfony\Component\HttpFoundation\Session\Flash\FlashBagInterface;
  21. use Symfony\Component\Routing\Annotation\Route;
  22. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  24. class HomeController extends AbstractController
  25. {
  26.     protected VideoListingService $videoService;
  27.     protected AmateurListingService $amateurService;
  28.     protected ActivityFeedService $activityService;
  29.     protected AccountService $accountService;
  31.     public function __construct(VideoListingService $service, AmateurListingService $amateurService, ActivityFeedService $activityService, AccountService $accountService)
  32.     {
  33.         $this->videoService = $service;
  34.         $this->amateurService = $amateurService;
  35.         $this->activityService = $activityService;
  36.         $this->accountService = $accountService;
  37.     }
  39.     /**
  40.      * @Route("/")
  41.      * @Route("/infostream")
  42.      * @Template()
  43.      * @return array
  44.      */
  45.     public function index(\Redis $redis): array
  46.     {
  47.         /** @var ?ApiUser $user */
  48.         $user = $this->getUser();
  49.         $feedHtmls = ['initial' => [], 'delayed' => []];
  50.         if (null === $user) {
  51.             # gitlab #593
  52.             #$feedHtmls = $this->activityService->getPublicInfostream($redis);
  53.         }
  55.         return [
  56.             'videos' => $this->videoService->getBestOfTheMonthVideos(1, 6),
  57.             'onlineAmateurs' => $this->amateurService->getTopRatedAmateurs(1, 30, true, true),
  58.             'otherAmateurs' => $this->amateurService->getRandomAmateurs(6, true),
  59.             'feedHtmls' => $feedHtmls
  60.         ];
  61.     }
  63.     /**
  64.      * @Route("/contact/privacy")
  65.      * @Template()
  66.      * @return array
  67.      */
  68.     public function privacy(): array
  69.     {
  70.         return [];
  71.     }
  73.     /**
  74.      * @Route("/contact/terms")
  75.      * @Template()
  76.      * @return array
  77.      */
  78.     public function terms(): array
  79.     {
  80.         return [];
  81.     }
  83.     /**
  84.      * @Route("/contact/about")
  85.      * @Template()
  86.      * @return array
  87.      */
  88.     public function about(): array
  89.     {
  90.         return [];
  91.     }
  93.     /**
  94.      * @Route("/kontakt")
  95.      * @Template()
  96.      * @return array|Response
  97.      */
  98.     public function contact(Request $request, MemberService $memberService, MailService $mailService, ReCaptchaService $recaptchaService, FlashBagInterface $flashBag)
  99.     {
  100.         $user = $this->getUser();
  101.         $userDetails = [];
  103.         if ($user instanceof ApiUser && $user->getUsername() !== '') {
  104.             $userDetails = $memberService->getMemberDetailByUsername($user->getUsername());
  105.         }
  107.         $form = $this->createForm(ContactForm::class, (new ContactFormData($userDetails)));
  108.         $form->handleRequest($request);
  110.         if ($form->isSubmitted() && $form->isValid()) {
  111.             if (!$recaptchaService->isValidSubmission($request)) {
  112.                 $flashBag->add('info', 'Bitte lösen Sie das Captcha.');
  113.                 return new RedirectResponse($this->generateUrl('app_home_contact'));
  114.             }
  115.             $form->getData()->setIsUserLoggedIn(false);
  116.             try {
  117.                 $this->denyAccessUnlessGranted('IS_AUTHENTICATED_REMEMBERED');
  118.                 $form->getData()->setIsUserLoggedIn(true);
  119.             } catch (AccessDeniedException $a) {
  120.             }
  122.             // Some sanity checks to battle spam
  123.             $doSend = $this->doesContainSpam($form->getData()) === false;
  125.             if($doSend === true) {
  126.                 if ($mailService->sendContactInquiry($form->getData())) {
  127.                     $request->getSession()->set('emailSent', true);
  128.                     $request->getSession()->set('failure', false);
  129.                 } else {
  130.                     $request->getSession()->set('emailSent', false);
  131.                     $request->getSession()->set('failure', true);
  132.                 }
  133.             } else {
  134.                 // if spam is detacted we don't send an email but don't want to alarm anybody, so stay silent!
  135.                 $request->getSession()->set('emailSent', true);
  136.                 $request->getSession()->set('failure', false);
  137.             }
  139.             return new RedirectResponse($this->generateUrl('app_home_contact'));
  140.         }
  141.         $emailSent = $request->getSession()->remove('emailSent') ?? false;
  142.         $failure = $request->getSession()->remove('failure') ?? false;
  144.         return [
  145.             'form' => $form->createView(),
  146.             'emailSent' => $emailSent,
  147.             'failure' => $failure,
  148.         ];
  149.     }
  151.     /**
  152.      * @Route("/password-change/confirm/{confirmationToken}")
  153.      * @param string $confirmationToken
  154.      * @return RedirectResponse
  155.      * @throws \Psr\Cache\InvalidArgumentException
  156.      * @throws \ReflectionException
  157.      */
  158.     public function passwordChangeConfirm(string $confirmationToken): RedirectResponse
  159.     {
  160.         try {
  161.             if ($this->accountService->changePasswordConfirmation($confirmationToken)) {
  162.                 return $this->redirectToRoute('app_security_logout');
  163.             }
  164.             $this->addFlash('warning', 'Der verwendete Link ist evtl. nicht mehr gültig. Bitte versuche es erneut oder kontaktiere den Support.');
  165.         } catch (\DomainException $e) {
  166.             $this->addFlash('error', $e->getMessage());
  167.         }
  169.         if ($this->getUser() instanceof ApiUser) {
  170.             return $this->redirectToRoute('app_user_dashboard_index');
  171.         }
  172.         return $this->redirectToRoute('login');
  173.     }
  175.     /**
  176.      * @Route("/email-change/confirm/{confirmationToken}")
  177.      * @param string $confirmationToken
  178.      * @return RedirectResponse
  179.      */
  180.     public function emailChangeConfirm(string $confirmationToken): RedirectResponse
  181.     {
  182.         try {
  183.             if ($this->accountService->changeEmailConfirmation($confirmationToken)) {
  184.                 return $this->redirectToRoute('app_security_logout');
  185.             }
  186.             $this->addFlash('warning', 'Der verwendete Link ist evtl. nicht mehr gültig. Bitte versuche es erneut oder kontaktiere den Support.');
  187.         } catch (\DomainException $e) {
  188.             $this->addFlash('error', $e->getMessage());
  189.         }
  191.         if ($this->getUser() instanceof ApiUser) {
  192.             return $this->redirectToRoute('app_user_dashboard_index');
  193.         }
  194.         return $this->redirectToRoute('login');
  195.     }
  197.     /**
  198.      * Checks if the given $text contains any link
  199.      * 
  200.      * @param string $text text to search in
  201.      * @return bool
  202.      */
  203.     private function doesStringContainLink(string $text): bool {
  204.         return (bool)preg_match("/http[s]?:\/\//", $text);
  205.     }
  207.     /**
  208.      * Checks some values to determine if contact request is valid (length checks, link checks)
  209.      * 
  210.      * @param ContactFormData $data data to check
  211.      * @return bool is the request fishy and shall be processed as spam?
  212.      */
  213.     private function doesContainSpam(ContactFormData $data) {
  214.         $dataAsArr = $data->toArray();
  215.         foreach(array_keys($dataAsArr) as $key) {
  216.             if(in_array($key, ["message"]) === false && strlen($dataAsArr[$key]) > 0 && $this->doesStringContainLink($dataAsArr[$key]) === true) {
  217.                 // links are only allowed in the message field
  218.                 return true;
  219.             }
  220.         }
  221.         if(strlen($data->getFirstName()) > 50) {
  222.             // firstName exceeding 50 chars? Seams fishy -> bye bye
  223.             return true;
  224.         }
  225.         if(strlen($data->getLastName()) > 50) {
  226.             // lastName exceeding 50 chars? Seams fishy -> bye bye
  227.             return true;
  228.         }
  229.         if(strlen($data->getEmail()) > 100 || filter_var($data->getEmail(), FILTER_VALIDATE_EMAIL) === false) {
  230.             // mail exceeding 100 chars? Seams fishy -> bye bye
  231.             return true;
  232.         }
  234.         return false;
  235.     }
  236. }