Captcha.php
4 months ago
CronDaemon.php
3 years ago
ExportDownload.php
2 months ago
FormPreview.php
2 years ago
Subscription.php
1 week ago
TemplateImage.php
2 months ago
Track.php
2 months ago
ViewInBrowser.php
1 month ago
index.php
3 years ago
Track.php
131 lines
| 1 | <?php // phpcs:ignore SlevomatCodingStandard.TypeHints.DeclareStrictTypes.DeclareStrictTypesMissing |
| 2 | |
| 3 | namespace MailPoet\Router\Endpoints; |
| 4 | |
| 5 | if (!defined('ABSPATH')) exit; |
| 6 | |
| 7 | |
| 8 | use MailPoet\Config\AccessControl; |
| 9 | use MailPoet\Cron\Workers\StatsNotifications\NewsletterLinkRepository; |
| 10 | use MailPoet\Entities\SendingQueueEntity; |
| 11 | use MailPoet\Newsletter\Links\Links; |
| 12 | use MailPoet\Newsletter\NewslettersRepository; |
| 13 | use MailPoet\Newsletter\Sending\SendingQueuesRepository; |
| 14 | use MailPoet\Statistics\Track\Clicks; |
| 15 | use MailPoet\Statistics\Track\Opens; |
| 16 | use MailPoet\Subscribers\LinkTokens; |
| 17 | use MailPoet\Subscribers\SubscribersRepository; |
| 18 | use MailPoet\WP\Functions as WPFunctions; |
| 19 | |
| 20 | class Track { |
| 21 | const ENDPOINT = 'track'; |
| 22 | const ACTION_CLICK = 'click'; |
| 23 | const ACTION_OPEN = 'open'; |
| 24 | public $allowedActions = [ |
| 25 | self::ACTION_CLICK, |
| 26 | self::ACTION_OPEN, |
| 27 | ]; |
| 28 | public $permissions = [ |
| 29 | 'global' => AccessControl::NO_ACCESS_RESTRICTION, |
| 30 | ]; |
| 31 | |
| 32 | /** @var Clicks */ |
| 33 | private $clicks; |
| 34 | |
| 35 | /** @var Opens */ |
| 36 | private $opens; |
| 37 | |
| 38 | /** @var LinkTokens */ |
| 39 | private $linkTokens; |
| 40 | |
| 41 | /** @var SendingQueuesRepository */ |
| 42 | private $sendingQueuesRepository; |
| 43 | |
| 44 | /** @var SubscribersRepository */ |
| 45 | private $subscribersRepository; |
| 46 | |
| 47 | /** @var NewslettersRepository */ |
| 48 | private $newslettersRepository; |
| 49 | |
| 50 | /** @var NewsletterLinkRepository */ |
| 51 | private $newsletterLinkRepository; |
| 52 | |
| 53 | /** @var Links */ |
| 54 | private $links; |
| 55 | |
| 56 | public function __construct( |
| 57 | Clicks $clicks, |
| 58 | Opens $opens, |
| 59 | SendingQueuesRepository $sendingQueuesRepository, |
| 60 | SubscribersRepository $subscribersRepository, |
| 61 | NewslettersRepository $newslettersRepository, |
| 62 | NewsletterLinkRepository $newsletterLinkRepository, |
| 63 | LinkTokens $linkTokens, |
| 64 | Links $links |
| 65 | ) { |
| 66 | $this->clicks = $clicks; |
| 67 | $this->opens = $opens; |
| 68 | $this->linkTokens = $linkTokens; |
| 69 | $this->sendingQueuesRepository = $sendingQueuesRepository; |
| 70 | $this->subscribersRepository = $subscribersRepository; |
| 71 | $this->newslettersRepository = $newslettersRepository; |
| 72 | $this->newsletterLinkRepository = $newsletterLinkRepository; |
| 73 | $this->links = $links; |
| 74 | } |
| 75 | |
| 76 | public function click($data) { |
| 77 | return $this->clicks->track($this->_processTrackData($data)); |
| 78 | } |
| 79 | |
| 80 | public function open($data) { |
| 81 | return $this->opens->track($this->_processTrackData($data)); |
| 82 | } |
| 83 | |
| 84 | public function _processTrackData($data) { |
| 85 | $data = (object)$this->links->transformUrlDataObject($data); |
| 86 | if ( |
| 87 | empty($data->queue_id) || // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 88 | empty($data->subscriber_id) || // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 89 | empty($data->subscriber_token) // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 90 | ) { |
| 91 | return false; |
| 92 | } |
| 93 | $data->queue = $this->sendingQueuesRepository->findOneById($data->queue_id);// phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 94 | $data->subscriber = $this->subscribersRepository->findOneById($data->subscriber_id); // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 95 | $data->newsletter = (isset($data->newsletter_id)) ? $this->newslettersRepository->findOneById($data->newsletter_id) : null; // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 96 | if (!$data->newsletter && ($data->queue instanceof SendingQueueEntity)) { |
| 97 | $data->newsletter = $data->queue->getNewsletter(); |
| 98 | } |
| 99 | if (!empty($data->link_hash)) { // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 100 | $data->link = $this->newsletterLinkRepository->findOneBy([ |
| 101 | 'hash' => $data->link_hash, // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 102 | 'queue' => $data->queue_id, // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 103 | ]); |
| 104 | } |
| 105 | $data->userAgent = isset($_SERVER['HTTP_USER_AGENT']) && is_string($_SERVER['HTTP_USER_AGENT']) ? sanitize_text_field(wp_unslash($_SERVER['HTTP_USER_AGENT'])) : null; |
| 106 | return $this->_validateTrackData($data); |
| 107 | } |
| 108 | |
| 109 | public function _validateTrackData($data) { |
| 110 | if (!$data->subscriber || !$data->queue || !$data->newsletter) return false; |
| 111 | $subscriberTokenMatch = $this->linkTokens->verifyToken($data->subscriber, $data->subscriber_token); // phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps |
| 112 | if (!$subscriberTokenMatch) { |
| 113 | $this->terminate(403); |
| 114 | } |
| 115 | // return if this is a WP user previewing the newsletter |
| 116 | if ($data->subscriber->isWPUser() && $data->preview) { |
| 117 | return $data; |
| 118 | } |
| 119 | // check if the newsletter was sent to the subscriber |
| 120 | return ($this->sendingQueuesRepository->isSubscriberProcessed($data->queue, $data->subscriber)) ? |
| 121 | $data : |
| 122 | false; |
| 123 | } |
| 124 | |
| 125 | public function terminate($code) { |
| 126 | WPFunctions::get()->statusHeader($code); |
| 127 | WPFunctions::get()->getTemplatePart((string)$code); |
| 128 | exit; |
| 129 | } |
| 130 | } |
| 131 |