Prettify upload form for RTL wikis
[lhc/web/wiklou.git] / includes / SpecialEmailuser.php
index 2d9645d..76add30 100644 (file)
 <?php
+/**
+ *
+ * @addtogroup SpecialPage
+ */
+
+/**
+ * @todo document
+ */
+function wfSpecialEmailuser( $par ) {
+       global $wgUser, $wgOut, $wgRequest, $wgEnableEmail, $wgEnableUserEmail;
+
+       if( !( $wgEnableEmail && $wgEnableUserEmail ) ) {
+               $wgOut->showErrorPage( "nosuchspecialpage", "nospecialpagetext" );
+               return;
+       }
 
-require_once('UserMailer.php');
-
-function wfSpecialEmailuser()
-{
-       global $wgUser, $wgOut, $wgRequest;
-
-       if ( 0 == $wgUser->getID() ||
-               ( false === strpos( $wgUser->getEmail(), "@" ) ) ) {
-               $wgOut->errorpage( "mailnologin", "mailnologintext" );
+       if( !$wgUser->canSendEmail() ) {
+               wfDebug( "User can't send.\n" );
+               $wgOut->showErrorPage( "mailnologin", "mailnologintext" );
                return;
        }
+
        $action = $wgRequest->getVal( 'action' );
-       $target = $wgRequest->getVal( 'target' );
+       $target = isset($par) ? $par : $wgRequest->getVal( 'target' );
        if ( "" == $target ) {
-               $wgOut->errorpage( "notargettitle", "notargettext" );
+               wfDebug( "Target is empty.\n" );
+               $wgOut->showErrorPage( "notargettitle", "notargettext" );
                return;
        }
+
        $nt = Title::newFromURL( $target );
-       $nu = User::newFromName( $nt->getText() );
-       $id = $nu->idForName();
+       if ( is_null( $nt ) ) {
+               wfDebug( "Target is invalid title.\n" );
+               $wgOut->showErrorPage( "notargettitle", "notargettext" );
+               return;
+       }
 
-       if ( 0 == $id ) {
-               $wgOut->errorpage( "noemailtitle", "noemailtext" );
+       $nu = User::newFromName( $nt->getText() );
+       if( is_null( $nu ) || !$nu->canReceiveEmail() ) {
+               wfDebug( "Target is invalid user or can't receive.\n" );
+               $wgOut->showErrorPage( "noemailtitle", "noemailtext" );
                return;
        }
-       $nu->setID( $id );
-       $address = $nu->getEmail();
 
-       if ( ( false === strpos( $address, "@" ) ) ||
-         ( 1 == $nu->getOption( "disablemail" ) ) ) {
-               $wgOut->errorpage( "noemailtitle", "noemailtext" );
+       if ( $wgUser->isBlockedFromEmailUser() ) {
+               // User has been blocked from sending e-mail. Show the std blocked form.
+               wfDebug( "User is blocked from sending e-mail.\n" );
+               $wgOut->blockedPage();
                return;
        }
 
-       $f = new EmailUserForm( $nu->getName() . " <{$address}>", $target );
+       $f = new EmailUserForm( $nu );
 
-       if ( "success" == $action ) { $f->showSuccess(); }
-       else if ( "submit" == $action && $wgRequest->wasPosted() ) { $f->doSubmit(); }
-       else { $f->showForm( "" ); }
+       if ( "success" == $action ) {
+               $f->showSuccess( $nu );
+       } else if ( "submit" == $action && $wgRequest->wasPosted() &&
+                               $wgUser->matchEditToken( $wgRequest->getVal( 'wpEditToken' ) ) ) 
+       {
+               # Check against the rate limiter
+               if( $wgUser->pingLimiter( 'emailuser' ) ) {
+                       $wgOut->rateLimited();
+                       return;
+               }
+
+               $f->doSubmit();
+       } else {
+               $f->showForm();
+       }
 }
 
+/**
+ * Implements the Special:Emailuser web interface, and invokes userMailer for sending the email message.
+ * @addtogroup SpecialPage
+ */
 class EmailUserForm {
 
-       var $mAddress;
        var $target;
        var $text, $subject;
+       var $cc_me;     // Whether user requested to be sent a separate copy of their email.
 
-       function EmailUserForm( $addr, $target )
-       {
+       /**
+        * @param User $target
+        */
+       function EmailUserForm( $target ) {
                global $wgRequest;
-               $this->mAddress = $addr;
                $this->target = $target;
                $this->text = $wgRequest->getText( 'wpText' );
                $this->subject = $wgRequest->getText( 'wpSubject' );
+               $this->cc_me = $wgRequest->getBool( 'wpCCMe' );
        }
 
-       function showForm( $err )
-       {
-               global $wgOut, $wgUser, $wgLang;
+       function showForm() {
+               global $wgOut, $wgUser;
 
                $wgOut->setPagetitle( wfMsg( "emailpage" ) );
                $wgOut->addWikiText( wfMsg( "emailpagetext" ) );
 
-               if ( $this->subject === "" ) { 
-                       $this->subject = wfMsg( "defemailsubject" ); 
+               if ( $this->subject === "" ) {
+                       $this->subject = wfMsg( "defemailsubject" );
                }
 
                $emf = wfMsg( "emailfrom" );
                $sender = $wgUser->getName();
                $emt = wfMsg( "emailto" );
-               $rcpt = str_replace( "_", " ", $this->target );
+               $rcpt = $this->target->getName();
                $emr = wfMsg( "emailsubject" );
                $emm = wfMsg( "emailmessage" );
                $ems = wfMsg( "emailsend" );
+               $emc = wfMsg( "emailccme" );
                $encSubject = htmlspecialchars( $this->subject );
-               
-               $titleObj = Title::makeTitle( NS_SPECIAL, "Emailuser" );
-               $action = $titleObj->escapeLocalURL( "target={$this->target}&action=submit" );
 
-               if ( "" != $err ) {
-                       $wgOut->setSubtitle( wfMsg( "formerror" ) );
-                       $wgOut->addHTML( "<p><font color='red' size='+1'>{$err}</font>\n" );
-               }
-               $wgOut->addHTML( "<p>
+               $titleObj = SpecialPage::getTitleFor( "Emailuser" );
+               $action = $titleObj->escapeLocalURL( "target=" .
+                       urlencode( $this->target->getName() ) . "&action=submit" );
+               $token = htmlspecialchars( $wgUser->editToken() );
+
+               $wgOut->addHTML( "
 <form id=\"emailuser\" method=\"post\" action=\"{$action}\">
-<table border=0><tr>
-<td align=right>{$emf}:</td>
-<td align=left><strong>{$sender}</strong></td>
+<table border='0' id='mailheader'><tr>
+<td align='right'>{$emf}:</td>
+<td align='left'><strong>" . htmlspecialchars( $sender ) . "</strong></td>
 </tr><tr>
-<td align=right>{$emt}:</td>
-<td align=left><strong>{$rcpt}</strong></td>
+<td align='right'>{$emt}:</td>
+<td align='left'><strong>" . htmlspecialchars( $rcpt ) . "</strong></td>
 </tr><tr>
-<td align=right>{$emr}:</td>
-<td align=left>
-<input type=text name=\"wpSubject\" value=\"{$encSubject}\">
+<td align='right'>{$emr}:</td>
+<td align='left'>
+<input type='text' size='60' maxlength='200' name=\"wpSubject\" value=\"{$encSubject}\" />
 </td>
-</tr><tr>
-<td align=right>{$emm}:</td>
-<td align=left>
-<textarea name=\"wpText\" rows=10 cols=60 wrap=virtual>
-{$this->text}
-</textarea>
-</td></tr><tr>
-<td>&nbsp;</td><td align=left>
-<input type=submit name=\"wpSend\" value=\"{$ems}\">
-</td></tr></table>
+</tr>
+</table>
+<span id='wpTextLabel'><label for=\"wpText\">{$emm}:</label><br /></span>
+<textarea id=\"wpText\" name=\"wpText\" rows='20' cols='80' style=\"width: 100%;\">" . htmlspecialchars( $this->text ) .
+"</textarea>
+" . wfCheckLabel( $emc, 'wpCCMe', 'wpCCMe', $wgUser->getBoolOption( 'ccmeonemails' ) ) . "<br />
+<input type='submit' name=\"wpSend\" value=\"{$ems}\" />
+<input type='hidden' name='wpEditToken' value=\"$token\" />
 </form>\n" );
 
        }
 
-       function doSubmit()
-       {
-               global $wgOut, $wgUser, $wgLang, $wgOutputEncoding;
-           
-               $from = wfQuotedPrintable( $wgUser->getName() ) . " <" . $wgUser->getEmail() . ">";
-               
-               $mailResult = userMailer( $this->mAddress, $from, wfQuotedPrintable( $this->subject ), $this->text );
-
-               if (! $mailResult)
-               {
-                       $titleObj = Title::makeTitle( NS_SPECIAL, "Emailuser" );
-                       $encTarget = wfUrlencode( $this->target );
-                       $wgOut->redirect( $titleObj->getFullURL( "target={$encTarget}&action=success" ) );
+       function doSubmit() {
+               global $wgOut, $wgUser, $wgUserEmailUseReplyTo;
+
+               $to = new MailAddress( $this->target );
+               $from = new MailAddress( $wgUser );
+               $subject = $this->subject;
+
+               if( wfRunHooks( 'EmailUser', array( &$to, &$from, &$subject, &$this->text ) ) ) {
+                       
+                       if( $wgUserEmailUseReplyTo ) {
+                               // Put the generic wiki autogenerated address in the From:
+                               // header and reserve the user for Reply-To.
+                               //
+                               // This is a bit ugly, but will serve to differentiate
+                               // wiki-borne mails from direct mails and protects against
+                               // SPF and bounce problems with some mailers (see below).
+                               global $wgPasswordSender;
+                               $mailFrom = new MailAddress( $wgPasswordSender );
+                               $replyTo = $from;
+                       } else {
+                               // Put the sending user's e-mail address in the From: header.
+                               //
+                               // This is clean-looking and convenient, but has issues.
+                               // One is that it doesn't as clearly differentiate the wiki mail
+                               // from "directly" sent mails.
+                               //
+                               // Another is that some mailers (like sSMTP) will use the From
+                               // address as the envelope sender as well. For open sites this
+                               // can cause mails to be flunked for SPF violations (since the
+                               // wiki server isn't an authorized sender for various users'
+                               // domains) as well as creating a privacy issue as bounces
+                               // containing the recipient's e-mail address may get sent to
+                               // the sending user.
+                               $mailFrom = $from;
+                               $replyTo = null;
+                       }
+
+                       $mailResult = UserMailer::send( $to, $mailFrom, $subject, $this->text, $replyTo );
+
+                       if( WikiError::isError( $mailResult ) ) {
+                               $wgOut->addHTML( wfMsg( "usermailererror" ) .
+                                       ' ' . htmlspecialchars( $mailResult->getMessage() ) );
+                       } else {
+                               
+                               // if the user requested a copy of this mail, do this now,
+                               // unless they are emailing themselves, in which case one copy of the message is sufficient.
+                               if ($this->cc_me && $to != $from) {
+                                       $cc_subject = wfMsg('emailccsubject', $this->target->getName(), $subject);
+                                       if( wfRunHooks( 'EmailUser', array( &$from, &$from, &$cc_subject, &$this->text ) ) ) {
+                                               $ccResult = UserMailer::send( $from, $from, $cc_subject, $this->text );
+                                               if( WikiError::isError( $ccResult ) ) {
+                                                       // At this stage, the user's CC mail has failed, but their 
+                                                       // original mail has succeeded. It's unlikely, but still, what to do?
+                                                       // We can either show them an error, or we can say everything was fine,
+                                                       // or we can say we sort of failed AND sort of succeeded. Of these options, 
+                                                       // simply saying there was an error is probably best.
+                                                       $wgOut->addHTML( wfMsg( "usermailererror" ) .
+                                                               ' ' . htmlspecialchars( $ccResult->getMessage() ) );
+                                                       return;
+                                               }
+                                       }
+                               }
+                               
+                               $titleObj = SpecialPage::getTitleFor( "Emailuser" );
+                               $encTarget = wfUrlencode( $this->target->getName() );
+                               $wgOut->redirect( $titleObj->getFullURL( "target={$encTarget}&action=success" ) );
+                               wfRunHooks( 'EmailUserComplete', array( $to, $from, $subject, $this->text ) );
+                       }
                }
-               else
-                       $wgOut->addHTML( wfMsg( "usermailererror" ) . $mailResult);
        }
 
-       function showSuccess()
-       {
-               global $wgOut, $wgUser;
+       function showSuccess( &$user ) {
+               global $wgOut;
 
                $wgOut->setPagetitle( wfMsg( "emailsent" ) );
                $wgOut->addHTML( wfMsg( "emailsenttext" ) );
 
-               $wgOut->returnToMain( false );
+               $wgOut->returnToMain( false, $user->getUserPage() );
        }
 }
-?>