Emails
3 months ago
Integrations
3 months ago
MultichannelMarketing
2 years ago
TransactionalEmails
10 months ago
WooCommerceBookings
1 month ago
WooCommerceSubscriptions
3 months ago
CouponPreProcessor.php
3 months ago
Emails.php
9 months ago
Helper.php
2 months ago
MailPoetTask.php
2 years ago
NonPersistablePreviewData.php
1 month ago
OrderAttributionFields.php
1 month ago
OrderAttributionRevenueReader.php
1 month ago
OrderAttributionWriter.php
1 month ago
RandomCouponCodeGenerator.php
3 months ago
Settings.php
1 year ago
SubscriberEngagement.php
3 years ago
Subscription.php
21 hours ago
Tracker.php
2 years ago
TransactionalEmailHooks.php
1 year ago
TransactionalEmails.php
1 year ago
WooSystemInfo.php
2 months ago
WooSystemInfoController.php
1 year ago
index.php
3 years ago
Subscription.php
328 lines
| 1 | <?php // phpcs:ignore SlevomatCodingStandard.TypeHints.DeclareStrictTypes.DeclareStrictTypesMissing |
| 2 | |
| 3 | namespace MailPoet\WooCommerce; |
| 4 | |
| 5 | if (!defined('ABSPATH')) exit; |
| 6 | |
| 7 | |
| 8 | use MailPoet\Entities\SubscriberEntity; |
| 9 | use MailPoet\Segments\SegmentsRepository; |
| 10 | use MailPoet\Settings\SettingsController; |
| 11 | use MailPoet\Subscribers\ConfirmationEmailMailer; |
| 12 | use MailPoet\Subscribers\Source; |
| 13 | use MailPoet\Subscribers\SubscriberSegmentRepository; |
| 14 | use MailPoet\Subscribers\SubscribersRepository; |
| 15 | use MailPoet\Subscribers\TrackingConsentCapture; |
| 16 | use MailPoet\Util\Helpers; |
| 17 | use MailPoet\WP\Functions as WPFunctions; |
| 18 | use MailPoetVendor\Carbon\Carbon; |
| 19 | |
| 20 | class Subscription { |
| 21 | const CHECKOUT_OPTIN_INPUT_NAME = 'mailpoet_woocommerce_checkout_optin'; |
| 22 | const CHECKOUT_OPTIN_PRESENCE_CHECK_INPUT_NAME = 'mailpoet_woocommerce_checkout_optin_present'; |
| 23 | const CHECKOUT_TRACKING_CONSENT_INPUT_NAME = 'mailpoet_woocommerce_checkout_tracking_consent'; |
| 24 | const OPTIN_ENABLED_SETTING_NAME = 'woocommerce.optin_on_checkout.enabled'; |
| 25 | const OPTIN_SEGMENTS_SETTING_NAME = 'woocommerce.optin_on_checkout.segments'; |
| 26 | const OPTIN_MESSAGE_SETTING_NAME = 'woocommerce.optin_on_checkout.message'; |
| 27 | const OPTIN_POSITION_SETTING_NAME = 'woocommerce.optin_on_checkout.position'; |
| 28 | |
| 29 | private $allowedHtml = [ |
| 30 | 'input' => [ |
| 31 | 'type' => true, |
| 32 | 'name' => true, |
| 33 | 'id' => true, |
| 34 | 'class' => true, |
| 35 | 'value' => true, |
| 36 | 'checked' => true, |
| 37 | ], |
| 38 | 'span' => [ |
| 39 | 'class' => true, |
| 40 | ], |
| 41 | 'label' => [ |
| 42 | 'class' => true, |
| 43 | 'data-automation-id' => true, |
| 44 | 'for' => true, |
| 45 | ], |
| 46 | 'p' => [ |
| 47 | 'class' => true, |
| 48 | 'id' => true, |
| 49 | 'data-priority' => true, |
| 50 | ], |
| 51 | ]; |
| 52 | |
| 53 | /** @var SettingsController */ |
| 54 | private $settings; |
| 55 | |
| 56 | /** @var WPFunctions */ |
| 57 | private $wp; |
| 58 | |
| 59 | /** @var Helper */ |
| 60 | private $wcHelper; |
| 61 | |
| 62 | /** @var ConfirmationEmailMailer */ |
| 63 | private $confirmationEmailMailer; |
| 64 | |
| 65 | /** @var SubscribersRepository */ |
| 66 | private $subscribersRepository; |
| 67 | |
| 68 | /** @var SegmentsRepository */ |
| 69 | private $segmentsRepository; |
| 70 | |
| 71 | /** @var SubscriberSegmentRepository */ |
| 72 | private $subscriberSegmentRepository; |
| 73 | |
| 74 | /** @var TrackingConsentCapture */ |
| 75 | private $trackingConsentCapture; |
| 76 | |
| 77 | public function __construct( |
| 78 | SettingsController $settings, |
| 79 | ConfirmationEmailMailer $confirmationEmailMailer, |
| 80 | WPFunctions $wp, |
| 81 | Helper $wcHelper, |
| 82 | SubscribersRepository $subscribersRepository, |
| 83 | SegmentsRepository $segmentsRepository, |
| 84 | SubscriberSegmentRepository $subscriberSegmentRepository, |
| 85 | TrackingConsentCapture $trackingConsentCapture |
| 86 | ) { |
| 87 | $this->settings = $settings; |
| 88 | $this->wp = $wp; |
| 89 | $this->wcHelper = $wcHelper; |
| 90 | $this->confirmationEmailMailer = $confirmationEmailMailer; |
| 91 | $this->subscribersRepository = $subscribersRepository; |
| 92 | $this->segmentsRepository = $segmentsRepository; |
| 93 | $this->subscriberSegmentRepository = $subscriberSegmentRepository; |
| 94 | $this->trackingConsentCapture = $trackingConsentCapture; |
| 95 | } |
| 96 | |
| 97 | public function extendWooCommerceCheckoutForm() { |
| 98 | $inputName = self::CHECKOUT_OPTIN_INPUT_NAME; |
| 99 | $checked = false; |
| 100 | if (!empty($_POST[self::CHECKOUT_OPTIN_INPUT_NAME])) { |
| 101 | $checked = true; |
| 102 | } |
| 103 | $labelString = $this->settings->get(self::OPTIN_MESSAGE_SETTING_NAME); |
| 104 | $defaultTemplate = wp_kses( |
| 105 | $this->getSubscriptionField($inputName, $checked, $labelString), |
| 106 | $this->allowedHtml |
| 107 | ); |
| 108 | $filtered = $this->wp->applyFilters( |
| 109 | 'mailpoet_woocommerce_checkout_optin_template', |
| 110 | $defaultTemplate, |
| 111 | $inputName, |
| 112 | $checked, |
| 113 | $labelString |
| 114 | ); |
| 115 | $template = is_string($filtered) ? $filtered : $defaultTemplate; |
| 116 | // The template has been sanitized above and can be considered safe. |
| 117 | // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped |
| 118 | echo $template; |
| 119 | if ($template) { |
| 120 | $field = $this->getSubscriptionPresenceCheckField(); |
| 121 | echo wp_kses($field, $this->allowedHtml); |
| 122 | // A second, independent control. Consent to open and click tracking can |
| 123 | // never be bundled with the marketing opt-in above it. |
| 124 | echo wp_kses($this->getTrackingConsentField(), $this->allowedHtml); |
| 125 | } |
| 126 | } |
| 127 | |
| 128 | /** |
| 129 | * The tracking-consent checkbox, shown only on sites that chose to ask. It is |
| 130 | * never pre-ticked: a pre-ticked consent box is not valid consent (CJEU |
| 131 | * Planet49). |
| 132 | */ |
| 133 | private function getTrackingConsentField(): string { |
| 134 | if (!$this->trackingConsentCapture->isCaptureEnabled()) { |
| 135 | return ''; |
| 136 | } |
| 137 | $inputName = self::CHECKOUT_TRACKING_CONSENT_INPUT_NAME; |
| 138 | $copy = $this->trackingConsentCapture->getCopy( |
| 139 | SubscriberEntity::TRACKING_CONSENT_METHOD_WOOCOMMERCE_CHECKOUT |
| 140 | ); |
| 141 | |
| 142 | return '<label class="woocommerce-form__label woocommerce-form__label-for-checkbox checkbox" data-automation-id="woo-commerce-tracking-consent"> |
| 143 | <input id="' . $this->wp->escAttr($inputName) . '" class="woocommerce-form__input woocommerce-form__input-checkbox input-checkbox" type="checkbox" name="' . $this->wp->escAttr($inputName) . '" value="1" /> |
| 144 | <span>' . $this->wp->escHtml($copy) . '</span> |
| 145 | </label>'; |
| 146 | } |
| 147 | |
| 148 | private function getSubscriptionField($inputName, $checked, $labelString) { |
| 149 | $checked = checked($checked, true, false); |
| 150 | |
| 151 | return '<label class="woocommerce-form__label woocommerce-form__label-for-checkbox checkbox" data-automation-id="woo-commerce-subscription-opt-in"> |
| 152 | <input id="mailpoet_woocommerce_checkout_optin" class="woocommerce-form__input woocommerce-form__input-checkbox input-checkbox" ' . $checked . ' type="checkbox" name="' . $this->wp->escAttr($inputName) . '" value="1" /> |
| 153 | <span>' . $this->wp->escHtml($labelString) . '</span> |
| 154 | </label>'; |
| 155 | } |
| 156 | |
| 157 | private function getSubscriptionPresenceCheckField() { |
| 158 | $field = $this->wcHelper->woocommerceFormField( |
| 159 | self::CHECKOUT_OPTIN_PRESENCE_CHECK_INPUT_NAME, |
| 160 | [ |
| 161 | 'type' => 'hidden', |
| 162 | 'return' => true, |
| 163 | ], |
| 164 | 1 |
| 165 | ); |
| 166 | if ($field) { |
| 167 | return $field; |
| 168 | } |
| 169 | // Workaround for older WooCommerce versions (below 4.6.0) that don't support hidden fields |
| 170 | // We can remove it after we drop support of older WooCommerce |
| 171 | $field = $this->wcHelper->woocommerceFormField( |
| 172 | self::CHECKOUT_OPTIN_PRESENCE_CHECK_INPUT_NAME, |
| 173 | [ |
| 174 | 'type' => 'text', |
| 175 | 'return' => true, |
| 176 | ], |
| 177 | 1 |
| 178 | ); |
| 179 | return str_replace('type="text"', 'type="hidden"', $field); |
| 180 | } |
| 181 | |
| 182 | public function subscribeOnOrderPay($orderId) { |
| 183 | $wcOrder = $this->wcHelper->wcGetOrder($orderId); |
| 184 | if (!$wcOrder instanceof \WC_Order) { |
| 185 | return null; |
| 186 | } |
| 187 | |
| 188 | $data['billing_email'] = $wcOrder->get_billing_email(); |
| 189 | $this->subscribeOnCheckout($orderId, $data); |
| 190 | } |
| 191 | |
| 192 | public function subscribeOnCheckout($orderId, $data) { |
| 193 | $this->triggerAutomateWooOptin(); |
| 194 | if (empty($data['billing_email'])) { |
| 195 | // no email in posted order data |
| 196 | return null; |
| 197 | } |
| 198 | |
| 199 | $subscriber = $this->subscribersRepository->findOneBy( |
| 200 | ['email' => $data['billing_email'], 'isWoocommerceUser' => 1] |
| 201 | ); |
| 202 | |
| 203 | if (!$subscriber) { |
| 204 | // no subscriber: WooCommerce sync didn't work |
| 205 | return null; |
| 206 | } |
| 207 | |
| 208 | $checkoutOptin = !empty($_POST[self::CHECKOUT_OPTIN_INPUT_NAME]); |
| 209 | $trackingConsent = !empty($_POST[self::CHECKOUT_TRACKING_CONSENT_INPUT_NAME]); |
| 210 | |
| 211 | return $this->handleSubscriberOptin($subscriber, $checkoutOptin, $trackingConsent); |
| 212 | } |
| 213 | |
| 214 | /** |
| 215 | * Subscribe a subscriber. |
| 216 | * |
| 217 | * @param SubscriberEntity $subscriber Subscriber object |
| 218 | * @param bool $shouldSubscribe Whether the subscriber should be subscribed |
| 219 | * @param bool $trackingConsent Whether the separate tracking-consent box was ticked |
| 220 | */ |
| 221 | public function handleSubscriberOptin(SubscriberEntity $subscriber, bool $shouldSubscribe, bool $trackingConsent = false): bool { |
| 222 | // Recorded before the opt-in branch, and independently of it: consenting to |
| 223 | // tracking and subscribing are two separate decisions, so a customer who |
| 224 | // declines the newsletter can still allow tracking and vice versa. |
| 225 | $this->applyTrackingConsent($subscriber, $trackingConsent); |
| 226 | |
| 227 | $wcSegment = $this->segmentsRepository->getWooCommerceSegment(); |
| 228 | |
| 229 | $segmentIds = (array)$this->settings->get(self::OPTIN_SEGMENTS_SETTING_NAME, []); |
| 230 | $moreSegmentsToSubscribe = []; |
| 231 | if (!empty($segmentIds)) { |
| 232 | $moreSegmentsToSubscribe = $this->segmentsRepository->findByIds($segmentIds); |
| 233 | } |
| 234 | $signupConfirmation = $this->settings->get('signup_confirmation'); |
| 235 | |
| 236 | if ($shouldSubscribe) { |
| 237 | $subscriber->setSource(Source::WOOCOMMERCE_CHECKOUT); |
| 238 | |
| 239 | if ( |
| 240 | ($subscriber->getStatus() === SubscriberEntity::STATUS_SUBSCRIBED) |
| 241 | || ((bool)$signupConfirmation['enabled'] === false) |
| 242 | ) { |
| 243 | $this->subscribe($subscriber); |
| 244 | } else { |
| 245 | $this->requireSubscriptionConfirmation($subscriber); |
| 246 | } |
| 247 | |
| 248 | $this->subscriberSegmentRepository->subscribeToSegments($subscriber, array_merge([$wcSegment], $moreSegmentsToSubscribe)); |
| 249 | |
| 250 | return true; |
| 251 | } else { |
| 252 | return false; |
| 253 | } |
| 254 | } |
| 255 | |
| 256 | /** |
| 257 | * Checkout always acts on a subscriber row that already exists (the |
| 258 | * WooCommerce customer sync creates it), so an unticked box leaves an earlier |
| 259 | * choice alone rather than revoking it. Persisted here because this path |
| 260 | * writes the entity itself instead of going through SubscriberSaveController. |
| 261 | */ |
| 262 | private function applyTrackingConsent(SubscriberEntity $subscriber, bool $granted): void { |
| 263 | $method = SubscriberEntity::TRACKING_CONSENT_METHOD_WOOCOMMERCE_CHECKOUT; |
| 264 | $before = $subscriber->getTrackingConsent(); |
| 265 | |
| 266 | $this->trackingConsentCapture->applyToSubscriber( |
| 267 | $subscriber, |
| 268 | $granted, |
| 269 | $method, |
| 270 | $this->trackingConsentCapture->getCopy($method), |
| 271 | false |
| 272 | ); |
| 273 | |
| 274 | if ($subscriber->getTrackingConsent() !== $before) { |
| 275 | $this->subscribersRepository->persist($subscriber); |
| 276 | $this->subscribersRepository->flush(); |
| 277 | } |
| 278 | } |
| 279 | |
| 280 | public function hideAutomateWooOptinCheckbox(): void { |
| 281 | if (!$this->wp->isPluginActive('automatewoo/automatewoo.php')) { |
| 282 | return; |
| 283 | } |
| 284 | // Hide AutomateWoo checkout opt-in so we won't end up with two opt-ins |
| 285 | $this->wp->removeAction( |
| 286 | 'woocommerce_checkout_after_terms_and_conditions', |
| 287 | ['AutomateWoo\Frontend', 'output_checkout_optin_checkbox'] |
| 288 | ); |
| 289 | } |
| 290 | |
| 291 | private function triggerAutomateWooOptin(): void { |
| 292 | if ( |
| 293 | !$this->wp->isPluginActive('automatewoo/automatewoo.php') |
| 294 | || empty($_POST[self::CHECKOUT_OPTIN_INPUT_NAME]) |
| 295 | ) { |
| 296 | return; |
| 297 | } |
| 298 | // Emulate checkout opt-in triggering for AutomateWoo |
| 299 | $_POST['automatewoo_optin'] = 'On'; |
| 300 | } |
| 301 | |
| 302 | private function subscribe(SubscriberEntity $subscriber) { |
| 303 | $subscriber->setStatus(SubscriberEntity::STATUS_SUBSCRIBED); |
| 304 | if (empty($subscriber->getConfirmedIp()) && empty($subscriber->getConfirmedAt())) { |
| 305 | $subscriber->setConfirmedIp(Helpers::getIP()); |
| 306 | $subscriber->setConfirmedAt(new Carbon()); |
| 307 | } |
| 308 | |
| 309 | $this->subscribersRepository->persist($subscriber); |
| 310 | $this->subscribersRepository->flush(); |
| 311 | } |
| 312 | |
| 313 | private function requireSubscriptionConfirmation(SubscriberEntity $subscriber) { |
| 314 | $subscriber->setStatus(SubscriberEntity::STATUS_UNCONFIRMED); |
| 315 | $this->subscribersRepository->persist($subscriber); |
| 316 | $this->subscribersRepository->flush(); |
| 317 | |
| 318 | try { |
| 319 | // Per-list confirmation settings are not resolved here because this path |
| 320 | // subscribes to the WooCommerce Customers segment (TYPE_WC_USERS), |
| 321 | // which does not support custom confirmation overrides. |
| 322 | $this->confirmationEmailMailer->sendConfirmationEmailOnce($subscriber, null, null, true); |
| 323 | } catch (\Exception $e) { |
| 324 | // ignore errors |
| 325 | } |
| 326 | } |
| 327 | } |
| 328 |