AVP-85 Active link when clicking of Parent's email address

2026-03-01 17:24:20 -05:00
parent a18198d547
commit 35b9cba882
9 changed files with 380 additions and 31 deletions
@@ -406,4 +406,82 @@ class FamilyAdminController extends BaseController

        return service('response')->setBody(view('family/card', ['f' => $family]));
    }
+
+    public function composeEmail()
+    {
+        $to = trim((string)$this->request->getGet('to'));
+        $name = trim((string)$this->request->getGet('name'));
+        $returnUrl = trim((string)$this->request->getGet('return_url'));
+        if ($returnUrl === '') {
+            $returnUrl = trim((string)$this->request->getServer('HTTP_REFERER'));
+        }
+        if ($returnUrl === '') {
+            $returnUrl = site_url('family');
+        }
+
+        return view('family/compose_email', [
+            'to' => $to,
+            'name' => $name,
+            'return_url' => $returnUrl,
+        ]);
+    }
+
+    public function sendComposeEmail()
+    {
+        if (!$this->request->is('post')) {
+            return redirect()->to(site_url('family'));
+        }
+
+        $to = trim((string)$this->request->getPost('to'));
+        $subject = trim((string)$this->request->getPost('subject'));
+        $html = (string)($this->request->getPost('html') ?? '');
+        $returnUrl = trim((string)$this->request->getPost('return_url'));
+
+        if ($returnUrl === '' || !$this->isLocalReturnUrl($returnUrl)) {
+            $returnUrl = site_url('family');
+        }
+
+        if ($to === '' || !filter_var($to, FILTER_VALIDATE_EMAIL)) {
+            return redirect()->back()->withInput()->with('error', 'Please enter a valid email address.');
+        }
+        if ($subject === '') {
+            return redirect()->back()->withInput()->with('error', 'Subject is required.');
+        }
+        if (trim($html) === '') {
+            return redirect()->back()->withInput()->with('error', 'Email body is required.');
+        }
+
+        $wrapped = view('emails/custom_html', [
+            'subject' => $subject,
+            'body_html' => $html,
+        ]);
+
+        $mailer = new \App\Controllers\View\EmailController();
+        $ok = $mailer->sendEmail($to, $subject, $wrapped, 'communication');
+
+        if ($ok) {
+            return redirect()->to($returnUrl)->with('status', 'Email sent.');
+        }
+
+        return redirect()->to($returnUrl)->with('error', 'Unable to send email.');
+    }
+
+    private function isLocalReturnUrl(string $url): bool
+    {
+        $url = trim($url);
+        if ($url === '') return false;
+
+        $parts = parse_url($url);
+        if ($parts === false) return false;
+
+        if (!empty($parts['scheme']) || !empty($parts['host'])) {
+            $base = parse_url(site_url('/'));
+            if (!$base || empty($base['host'])) return false;
+            $hostMatch = strcasecmp((string)($parts['host'] ?? ''), (string)$base['host']) === 0;
+            return $hostMatch;
+        }
+
+        // Relative URL (e.g., /family?x=1 or family?x=1)
+        return true;
+    }
 }