support.php

<?php
session_start();

require_once("classes/_autoload.php");

$system = System::initialize();
$system->db->startTransaction();
$guest_support = true;
$self_link = $system->router->base_url . 'support.php';
$staff_level = 0;
$user_id = 0;

$player = null;

if(isset($_SESSION['user_id'])) {
    $guest_support = false;
    $player = User::loadFromId($system, $_SESSION['user_id']);
    $player->loadData();
    $system->setLayoutByName($player->layout);
    $staff_level = $player->staff_level;
    $user_id = $player->user_id;

    $supportSystem = new SupportManager($system, $player);
}
else {
    $system->setLayoutByName('shadow_ribbon');
    $supportSystem = new SupportManager($system);
}

$request_types = $supportSystem->getSupportTypes($staff_level);
$supportCreated = false;

$system->layout->renderBeforeContentHTML(
    system: $system,
    player: $player ?? null,
    page_title: "Support",
    render_header: !is_null($player),
    render_sidebar: !is_null($player),
    render_topbar: false
);

if($player != null) {
    //Form submitted // 11/6/21 SM{V2} supported
    if(isset($_POST['add_support']) || isset($_POST['add_support_prem']) || isset($_POST['confirm_prem_support'])) {
        try {
            $addSupport = true;
            $request_type = $system->db->clean($_POST['support_type']);
            $subject = $system->db->clean($_POST['subject']);
            $subjectLength = strlen($subject);
            $message = $system->db->clean($_POST['message']);
            $messageLength = strlen($message);
            $cost = ($supportSystem->requestPremiumCosts[$request_type] ?? 0);
            $premium = ($cost > 0 && isset($_POST['confirm_prem_support'])) ? 1 : 0;

            // Validate support
            if (!in_array($request_type, $request_types)) {
                throw new RuntimeException("Invalid support type!");
            }
            if ($subjectLength < SupportManager::$validationConstraints['subject']['min']) {
                throw new RuntimeException("Subject must be at least " .
                    SupportManager::$validationConstraints['subject']['min'] . " characters!");
            }
            if ($subjectLength > SupportManager::$validationConstraints['subject']['max']) {
                throw new RuntimeException("Subject must not exceed " .
                    SupportManager::$validationConstraints['subject']['max'] . " characters!");
            }
            if ($messageLength < SupportManager::$validationConstraints['message']['min']) {
                throw new RuntimeException("Content must be at least " .
                    SupportManager::$validationConstraints['message']['min'] . " characters!");
            }
            if ($messageLength > SupportManager::$validationConstraints['message']['max']) {
                throw new RuntimeException("Content must not exceed " .
                    SupportManager::$validationConstraints['message']['max'] . " characters!");
            }

            // Premium cost
            if (isset($_POST['confirm_prem_support'])) {
                if($player->getPremiumCredits() < $cost) {
                    throw new RuntimeException("You need {$cost}AK for this request.");
                }

                $player->subtractPremiumCredits($cost, "Submitted premium {$request_type} support");
                $player->updateData();
            }

            if(isset($_POST['add_support_prem']) && $cost != 0) {
                require('templates/premiumSupportConfirmation.php');
                $addSupport = false; //Confirmation required
            }

            // Add support
            if($addSupport) {
                if ($supportSystem->createSupport($player->user_name, $request_type, $subject, $message, $premium)) {
                    $system->message("Support Submitted!");
                }
                else {
                    $system->message("Error submitting support.");
                }
            }
        }catch (Exception $e) {
            $system->db->rollbackTransaction();
            error_log($e->getMessage());
            $system->message($e->getMessage());
        }
    }
    if(isset($_POST['add_guest_support'])){
        try {
            $support_key = $system->db->clean($_POST['support_key']);

            $support_id = $supportSystem->getSupportIdByKey($support_key);

            if(!$support_id) {
                throw new RuntimeException("Support not found!");
            }

            if($supportSystem->assignGuestSupportToUser($support_id)) {
                $system->message("Support assigned to account!");
            } else {
                $system->message("Error adding support to account or support already assigned!");
            }
        }catch (Exception $e) {
            $system->message($e->getMessage());
        }
    }

    if($system->message && !$system->message_displayed) {
        $system->printMessage();
    }

    if(!isset($_GET['support_id'])) {
        // New Ticket form
        require('templates/supportTicketForm.php');

        // Load user tickets
        $supports = $supportSystem->fetchUserSupports();
        if (!empty($supports)) {
            require('templates/userTickets.php');
        }
    }
    else {
        $support_id = (int) $_GET['support_id'];
        $support = $supportSystem->fetchSupportByID($support_id);

        if(!$support) {
            $system->message("Support not found!");
            $system->printMessage();
        } else {
            if(isset($_POST['add_response'])) {
                try {
                    $message = $system->db->clean($_POST['message']);
                    $messageLength = strlen($message);

                    // Validate
                    if ($messageLength < SupportManager::$validationConstraints['message']['min']) {
                        throw new RuntimeException("Content must be at least " .
                            SupportManager::$validationConstraints['message']['min'] . " characters!");
                    }
                    if ($messageLength > SupportManager::$validationConstraints['message']['max']) {
                        throw new RuntimeException("Content must not exceed " .
                            SupportManager::$validationConstraints['message']['max'] . " characters!");
                    }

                    if ($supportSystem->addSupportResponse($support_id, $player->user_name, $message)) {
                            $system->message("Response added!");
                    }
                    else {
                        throw new RuntimeException("Error adding response!");
                    }
                } catch (Exception $e) {
                    $system->db->rollbackTransaction();
                    error_log($e->getMessage());
                    $system->message($e->getMessage());
                }
            }
            if(isset($_POST['close_ticket'])) {
                try {
                    $message = $system->db->clean($_POST['message']);
                    $messageLength = strlen($message);

                    // Validate user owns support
                    if($support['user_id'] != $player->user_id) {
                        throw new RuntimeException("You can only close your supports!");
                    }

                    // Add resopnse
                    if($message != '') {
                        // Validate
                        if ($messageLength < SupportManager::$validationConstraints['message']['min']) {
                            throw new RuntimeException("Content must be at least " .
                                SupportManager::$validationConstraints['message']['min'] . " characters!");
                        }
                        if ($messageLength > SupportManager::$validationConstraints['message']['max']) {
                            throw new RuntimeException("Content must not exceed " .
                                SupportManager::$validationConstraints['message']['max'] . " characters!");
                        }

                        $supportSystem->addSupportResponse($support_id, $player->user_name, $message);
                        if(!$system->db->last_insert_id) {
                            throw new RuntimeException("Error adding response.");
                        }
                    }

                    if($supportSystem->closeSupport($support_id)) {
                        $support['open'] = 0;
                        $system->message("Support closed.");
                    }
                }catch (Exception $e) {
                    $system->db->rollbackTransaction();
                    error_log($e->getMessage());
                    $system->message($e->getMessage());
                }
            }

            $responses = $supportSystem->fetchSupportResponses($support_id);
            $self_link .= "?support_id=" . $support_id;
            if($system->message && !$system->message_displayed) {
                $system->printMessage();
            }
            require('templates/displayTicket.php');
        }
    }

    if ($system->layout->key != "new_geisha") {
        // Load side menu
        $system->layout->renderSideMenu($player, $player->system->router);
    }
}
else {
    // Get support data
    if(isset($_GET['support_key'])) {
        $support_key = $system->db->clean($_GET['support_key']);
        $email = $system->db->clean($_GET['email']);
        $supportData = $supportSystem->fetchSupportByKey($support_key, $email);

        if(!$supportData) {
            $system->message("Support not found!");
        }else {
            $responses = $supportSystem->fetchSupportResponses($supportData['support_id']);
        }
    }

    // Add guest support
    if(isset($_POST['add_support'])) {
        try {
            $subject = $system->db->clean($_POST['subject']);
            $subjectLength = strlen($subject);
            $email = $system->db->clean($_POST['email']);
            $support_type = $system->db->clean($_POST['support_type']);
            $name = $system->db->clean($_POST['name']);
            $message = $system->db->clean($_POST['message']);
            $messageLength = strlen($message);
            $support_key = sha1(mt_rand(0, 255384));

            // Name validation
            if($name == '') {
                throw new RuntimeException("You must enter your name or display name.");
            }
            if(strlen($name) < 3) {
                throw new RuntimeException("Your name must be at least 3 characters long.");
            }
            if(strlen($name) > 75) {
                throw new RuntimeException("Your name may not exceed 75 characters. Please shorten or use a nick name.");
            }
            // Email validation
            if(!filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) {
                throw new RuntimeException("You must provide a valid email!");
            }
            if(in_array(strtolower(explode('@', $email)[1]), System::UNSERVICEABLE_EMAIL_DOMAINS)) {
                throw new RuntimeException("We are currently unable to support " .
                    implode(' / ', System::UNSERVICEABLE_EMAIL_DOMAINS) . " email types.");
            }
            // Subject validation
            if($subjectLength < SupportManager::$validationConstraints['subject']['min']) {
                throw new RuntimeException("Subject must be at least " . SupportManager::$validationConstraints['subject']['min']
                 . " characters long.");
            }
            if($subjectLength > SupportManager::$validationConstraints['subject']['max']) {
                throw new RuntimeException("Subject may not exceed " . SupportManager::$validationConstraints['subject']['max']
                . " characters.");
            }
            // Message validation
            if($messageLength < SupportManager::$validationConstraints['message']['min']) {
                throw new RuntimeException("Details must be at least " . SupportManager::$validationConstraints['message']['min']
                    . " characters long.");
            }
            if($messageLength > SupportManager::$validationConstraints['message']['max']) {
                throw new RuntimeException("Details may not exceed " . SupportManager::$validationConstraints['message']['max']
                    . " characters.");
            }

            // Create support
            if($supportSystem->createSupport($name, $support_type, $subject, $message, 0, $email, $support_key)) {
                $supportCreated = true;
                // Send email to user
                $subject = "Shinobi-Chronicles support request";
                $message = "Thank you for submitting your support. Click the link below to access your support: \r\n" .
                    "{$system->router->base_url}support.php?support_key={$support_key} \r\n" .
                    "If the link does not work, your support key is: {$support_key}";
                $headers = "From: Shinobi-Chronicles<" . System::SC_ADMIN_EMAIL . ">" . "\r\n";
                $headers .= "Reply-To: " . System::SC_NO_REPLY_EMAIL . "\r\n";
                if(!mail($email, $subject, $message, $headers)) {
                    $system->message("Email failed to send! Make sure you save your support key somewhere!");
                }
            } else {
                $system->message("Error creating support.");
            }
        }catch(RuntimeException $e) {
            $system->db->rollbackTransaction();
            error_log($e->getMessage());
            $system->message($e->getMessage());
        }
    }
    // Add guest response
    if(isset($_POST['add_response'])) {
        try {
            $message = $system->db->clean($_POST['message']);

            // Message validation
            if(strlen($message) < SupportManager::$validationConstraints['message']['min']) {
                throw new RuntimeException("Response must be at least " . SupportManager::$validationConstraints['message']['min'] . " characters.");
            }
            if(strlen($message) > SupportManager::$validationConstraints['message']['max']) {
                throw new RuntimeException("Response may not exceed " . SupportManager::$validationConstraints['message']['max'] . " characters.");
            }

            if(!isset($supportData) || !$supportData) {
                throw new RuntimeException("Support not found!");
            }

            if($supportSystem->addSupportResponse($supportData['support_id'], $supportData['user_name'], $message)) {
                $system->message("Response added!");
                $responses = $supportSystem->fetchSupportResponses($supportData['support_id']);
            } else {
                throw new RuntimeException("Error adding response!");
            }
        }catch (Exception $e) {
            $system->db->rollbackTransaction();
            $system->message($e->getMessage());
        }
    }

    // Print system message
    if($system->message != '' && !$system->message_displayed) {
        $system->printMessage();
    }
    require('templates/guestSupport.php');
}

$system->layout->renderAfterContentHTML($system, $player);

$system->db->commitTransaction();