SpecialEmailUser.php

Go to the documentation of this file.

<?php
namespace MediaWiki\Specials;
 
use ErrorPageError;
use HTMLForm;
use IContextSource;
use MediaWiki\Config\Config;
use MediaWiki\Mail\EmailUserFactory;
use MediaWiki\MainConfigNames;
use MediaWiki\MediaWikiServices;
use MediaWiki\SpecialPage\SpecialPage;
use MediaWiki\Status\Status;
use MediaWiki\User\User;
use MediaWiki\User\UserFactory;
use MediaWiki\User\UserNamePrefixSearch;
use MediaWiki\User\UserNameUtils;
use MediaWiki\User\UserOptionsLookup;
use Message;
use PermissionsError;
use StatusValue;
use ThrottledError;
use UserBlockedError;
 
class SpecialEmailUser extends SpecialPage {
    protected $mTarget;
 
    protected $mTargetObj;
 
    private UserNameUtils $userNameUtils;
    private UserNamePrefixSearch $userNamePrefixSearch;
    private UserOptionsLookup $userOptionsLookup;
    private EmailUserFactory $emailUserFactory;
    private UserFactory $userFactory;
 
    public function __construct(
        UserNameUtils $userNameUtils,
        UserNamePrefixSearch $userNamePrefixSearch,
        UserOptionsLookup $userOptionsLookup,
        EmailUserFactory $emailUserFactory,
        UserFactory $userFactory
    ) {
        parent::__construct( 'Emailuser' );
        $this->userNameUtils = $userNameUtils;
        $this->userNamePrefixSearch = $userNamePrefixSearch;
        $this->userOptionsLookup = $userOptionsLookup;
        $this->emailUserFactory = $emailUserFactory;
        $this->userFactory = $userFactory;
    }
 
    public function doesWrites() {
        return true;
    }
 
    public function getDescription() {
        $target = self::getTarget( $this->mTarget ?? '', $this->getUser() );
        if ( !$target instanceof User ) {
            return $this->msg( 'emailuser-title-notarget' );
        }
 
        return $this->msg( 'emailuser-title-target', $target->getName() );
    }
 
    protected function getFormFields() {
        $linkRenderer = $this->getLinkRenderer();
        $user = $this->getUser();
        return [
            'From' => [
                'type' => 'info',
                'raw' => 1,
                'default' => $linkRenderer->makeLink(
                    $user->getUserPage(),
                    $user->getName()
                ),
                'label-message' => 'emailfrom',
                'id' => 'mw-emailuser-sender',
            ],
            'To' => [
                'type' => 'info',
                'raw' => 1,
                'default' => $linkRenderer->makeLink(
                    $this->mTargetObj->getUserPage(),
                    $this->mTargetObj->getName()
                ),
                'label-message' => 'emailto',
                'id' => 'mw-emailuser-recipient',
            ],
            'Target' => [
                'type' => 'hidden',
                'default' => $this->mTargetObj->getName(),
            ],
            'Subject' => [
                'type' => 'text',
                'default' => $this->msg( 'defemailsubject', $user->getName() )->inContentLanguage()->text(),
                'label-message' => 'emailsubject',
                'maxlength' => 200,
                'size' => 60,
                'required' => true,
            ],
            'Text' => [
                'type' => 'textarea',
                'rows' => 20,
                'label-message' => 'emailmessage',
                'required' => true,
            ],
            'CCMe' => [
                'type' => 'check',
                'label-message' => 'emailccme',
                'default' => $this->userOptionsLookup->getBoolOption( $user, 'ccmeonemails' ),
            ],
        ];
    }
 
    public function execute( $par ) {
        $out = $this->getOutput();
        $request = $this->getRequest();
        $out->addModuleStyles( 'mediawiki.special' );
 
        $this->mTarget = $par ?? $request->getVal( 'wpTarget', $request->getVal( 'target', '' ) );
 
        // This needs to be below assignment of $this->mTarget because
        // getDescription() needs it to determine the correct page title.
        $this->setHeaders();
        $this->outputHeader();
 
        // Error out if sending user cannot do this. Don't authorize yet.
        $error = self::getPermissionsError(
            $this->getUser(),
            $this->getRequest()->getVal( 'wpEditToken' ),
            $this->getConfig()
        );
 
        switch ( $error ) {
            case null:
                # Wahey!
                break;
            case 'badaccess':
                throw new PermissionsError( 'sendemail' );
            case 'blockedemailuser':
                // @phan-suppress-next-line PhanTypeMismatchArgumentNullable Block is checked and not null
                throw new UserBlockedError( $this->getUser()->getBlock() );
            case 'actionthrottledtext':
                throw new ThrottledError;
            case 'mailnologin':
            case 'usermaildisabled':
                throw new ErrorPageError( $error, "{$error}text" );
            default:
                # It's a hook error
                [ $title, $msg, $params ] = $error;
                throw new ErrorPageError( $title, $msg, $params );
        }
 
        // A little hack: HTMLForm will check wpTarget only, if the form was posted, not
        // if the user opens Special:EmailUser/Florian (e.g.). So check, if the user did that
        // and show the "Send email to user" form directly, if so. Show the "enter username"
        // form, otherwise.
        // @phan-suppress-next-line PhanTypeMismatchArgumentNullable target is set
        $this->mTargetObj = self::getTarget( $this->mTarget, $this->getUser() );
        if ( !$this->mTargetObj instanceof User ) {
            // @phan-suppress-next-line PhanTypeMismatchArgumentNullable target is set
            $this->userForm( $this->mTarget );
        } else {
            $this->sendEmailForm();
        }
    }
 
    public static function getTarget( $target, User $sender ) {
        $targetObject = MediaWikiServices::getInstance()->getUserFactory()->newFromName( $target );
        if ( !$targetObject instanceof User ) {
            return 'notarget';
        }
 
        $status = MediaWikiServices::getInstance()->getEmailUserFactory()
            ->newEmailUser( $sender )
            ->validateTarget( $targetObject );
        if ( !$status->isGood() ) {
            $msg = $status->getErrors()[0]['message'];
            $ret = $msg === 'emailnotarget' ? 'notarget' : preg_replace( '/text$/', '', $msg );
        } else {
            $ret = $targetObject;
        }
        return $ret;
    }
 
    public static function validateTarget( $target, User $sender ) {
        if ( !$target instanceof User ) {
            return 'notarget';
        }
        $status = MediaWikiServices::getInstance()->getEmailUserFactory()
            ->newEmailUser( $sender )
            ->validateTarget( $target );
        if ( $status->isGood() ) {
            $ret = '';
        } else {
            $msg = $status->getErrors()[0]['message'];
            $ret = $msg === 'emailnotarget' ? 'notarget' : preg_replace( '/text$/', '', $msg );
        }
        return $ret;
    }
 
    public static function getPermissionsError( $user, $editToken, Config $config = null, $authorize = false ) {
        $emailUser = MediaWikiServices::getInstance()->getEmailUserFactory()->newEmailUserBC( $user, $config );
        $emailUser->setEditToken( (string)$editToken );
        $status = $authorize ? $emailUser->authorizeSend() : $emailUser->canSend();
 
        if ( $status->isGood() ) {
            return null;
        }
        foreach ( $status->getErrors() as $err ) {
            $errKey = $err['message'] instanceof Message ? $err['message']->getKey() : $err['message'];
            if ( strpos( $errKey, 'blockedtext' ) !== false ) {
                // BC for block messages
                return "blockedemailuser";
            }
        }
        $error = $status->getErrors()[0];
        if ( $status->getValue() !== null ) {
            // BC for hook errors intended to be used with ErrorPageError
            return [ $status->getValue(), $error['message'], $error['params'] ];
        }
        return $error['message'];
    }
 
    protected function userForm( $name ) {
        $htmlForm = HTMLForm::factory( 'ooui', [
            'Target' => [
                'type' => 'user',
                'exists' => true,
                'required' => true,
                'label-message' => 'emailusername',
                'id' => 'emailusertarget',
                'autofocus' => true,
                // Skip validation when visit directly without subpage (T347854)
                'default' => '',
                // Prefill for subpage syntax and old target param.
                'filter-callback' => static function ( $value ) use ( $name ) {
                    return str_replace( '_', ' ',
                        ( $value !== '' && $value !== false && $value !== null ) ? $value : $name );
                }
            ]
        ], $this->getContext() );
 
        $htmlForm
            ->setMethod( 'GET' )
            ->setTitle( $this->getPageTitle() ) // Remove subpage
            ->setSubmitCallback( [ $this, 'sendEmailForm' ] )
            ->setId( 'askusername' )
            ->setWrapperLegendMsg( 'emailtarget' )
            ->setSubmitTextMsg( 'emailusernamesubmit' )
            ->show();
    }
 
    public function sendEmailForm() {
        $out = $this->getOutput();
 
        if ( !$this->mTargetObj instanceof User ) {
            if ( $this->mTarget != '' ) {
                // Messages used here: noemailtext, nowikiemailtext
                $msg = ( $this->mTargetObj === 'notarget' ) ? 'emailnotarget' : ( $this->mTargetObj . 'text' );
                return Status::newFatal( $msg );
            }
            return false;
        }
 
        $htmlForm = HTMLForm::factory( 'ooui', $this->getFormFields(), $this->getContext() );
        // By now we are supposed to be sure that $this->mTarget is a user name
        $htmlForm
            ->setTitle( $this->getPageTitle() ) // Remove subpage
            ->addPreHtml( $this->msg( 'emailpagetext', $this->mTarget )->parse() )
            ->setSubmitTextMsg( 'emailsend' )
            ->setSubmitCallback( [ $this, 'onFormSubmit' ] )
            ->setWrapperLegendMsg( 'email-legend' )
            ->prepareForm();
 
        if ( !$this->getHookRunner()->onEmailUserForm( $htmlForm ) ) {
            return false;
        }
 
        $result = $htmlForm->show();
 
        if ( $result === true || ( $result instanceof Status && $result->isGood() ) ) {
            $out->setPageTitleMsg( $this->msg( 'emailsent' ) );
            $out->addWikiMsg( 'emailsenttext', $this->mTarget );
            $out->returnToMain( false, $this->mTargetObj->getUserPage() );
        }
        return true;
    }
 
    public function onFormSubmit( array $data ) {
        $target = $this->userFactory->newFromName( $data['Target'] );
        if ( !$target instanceof User ) {
            return StatusValue::newFatal( 'emailnotarget' );
        }
 
        $emailUser = $this->emailUserFactory->newEmailUser( $this->getAuthority() );
        $emailUser->setEditToken( $this->getRequest()->getVal( 'wpEditToken' ) );
 
        // Fully authorize on sending emails.
        $status = $emailUser->authorizeSend();
 
        if ( !$status->isOK() ) {
            return $status;
        }
 
        $res = $emailUser->sendEmailUnsafe(
            $target,
            $data['Subject'],
            $data['Text'],
            $data['CCMe'],
            $this->getLanguage()->getCode()
        );
        if ( $res->hasMessage( 'hookaborted' ) ) {
            // BC: The method could previously return false if the EmailUser hook set the error to false. Preserve
            // that behaviour until we replace the hook.
            $res = false;
        } else {
            $res = Status::wrap( $res );
        }
        return $res;
    }
 
    public static function submit( array $data, IContextSource $context ) {
        $target = MediaWikiServices::getInstance()->getUserFactory()->newFromName( (string)$data['Target'] );
        if ( !$target instanceof User ) {
            return Status::newFatal( 'emailnotarget' );
        }
 
        $emailUser = MediaWikiServices::getInstance()->getEmailUserFactory()
            ->newEmailUserBC( $context->getAuthority(), $context->getConfig() );
 
        $ret = $emailUser->sendEmailUnsafe(
            $target,
            (string)$data['Subject'],
            (string)$data['Text'],
            (bool)$data['CCMe'],
            $context->getLanguage()->getCode()
        );
        if ( $ret->hasMessage( 'hookaborted' ) ) {
            // BC: The method could previously return false if the EmailUser hook set the error to false.
            $ret = false;
        } elseif ( $ret->hasMessage( 'noemailtarget' ) ) {
            // BC: The previous implementation would use notargettext even if noemailtarget would be the right
            // message to use here.
            return Status::newFatal( 'notargettext' );
        } else {
            $ret = Status::wrap( $ret );
        }
        return $ret;
    }
 
    public function prefixSearchSubpages( $search, $limit, $offset ) {
        $search = $this->userNameUtils->getCanonical( $search );
        if ( !$search ) {
            // No prefix suggestion for invalid user
            return [];
        }
        // Autocomplete subpage as user list - public to allow caching
        return $this->userNamePrefixSearch
            ->search( UserNamePrefixSearch::AUDIENCE_PUBLIC, $search, $limit, $offset );
    }
 
    public function isListed() {
        return $this->getConfig()->get( MainConfigNames::EnableUserEmail );
    }
 
    protected function getGroupName() {
        return 'users';
    }
}
 
class_alias( SpecialEmailUser::class, 'SpecialEmailUser' );