30836-vm/mail/MailService.php

<?php
// Minimal mail service for the workspace app (VM).
// Usage:
//   require_once __DIR__ . '/MailService.php';
//   MailService::sendContactMessage($name, $email, $message, $attachments, $subject);

class MailService
{
    private static function loadConfig(): array
    {
        $configPath = __DIR__ . '/config.php';
        if (!file_exists($configPath)) {
            throw new \RuntimeException('Mail config not found. Copy mail/config.sample.php to mail/config.php and fill in credentials.');
        }
        $cfg = require $configPath;
        if (!is_array($cfg)) {
            throw new \RuntimeException('Invalid mail config format: expected array');
        }
        return $cfg;
    }

    public static function sendContactMessage(string $name, string $email, string $message, array $attachments = [], string $subject = 'New contact form')
    {
        $cfg = self::loadConfig();

        // Try Composer autoload if available (for PHPMailer)
        $autoload = __DIR__ . '/../vendor/autoload.php';
        if (file_exists($autoload)) {
            require_once $autoload;
        }
        // Fallback to system-wide PHPMailer (installed via apt: libphp-phpmailer)
        if (!class_exists('PHPMailer\\PHPMailer\\PHPMailer')) {
            // Common Debian/Ubuntu paths
            @require_once 'PHPMailer/src/Exception.php';
            @require_once 'PHPMailer/src/SMTP.php';
            @require_once 'PHPMailer/src/PHPMailer.php';
            if (!class_exists('PHPMailer\\PHPMailer\\PHPMailer')) {
                // Older layout fallback
                @require_once 'PHPMailer/Exception.php';
                @require_once 'PHPMailer/SMTP.php';
                @require_once 'PHPMailer/PHPMailer.php';
            }
        }

        $transport = $cfg['transport'] ?? 'smtp';
        if ($transport === 'smtp' && class_exists('PHPMailer\\PHPMailer\\PHPMailer')) {
            return self::sendViaPHPMailer($cfg, $name, $email, $message, $attachments, $subject);
        }

        // Fallback: attempt native mail() — works only if MTA is configured on the VM
        return self::sendViaNativeMail($cfg, $name, $email, $message, $attachments, $subject);
    }

    private static function sendViaPHPMailer(array $cfg, string $name, string $email, string $body, array $attachments, string $subject)
    {
        $mail = new PHPMailer\PHPMailer\PHPMailer(true);
        try {
            $mail->isSMTP();
            $mail->Host       = $cfg['smtp_host'] ?? '';
            $mail->Port       = (int)($cfg['smtp_port'] ?? 587);
            $secure = $cfg['smtp_secure'] ?? 'tls';
            if ($secure === 'ssl') $mail->SMTPSecure = PHPMailer\PHPMailer\PHPMailer::ENCRYPTION_SMTPS;
            elseif ($secure === 'tls') $mail->SMTPSecure = PHPMailer\PHPMailer\PHPMailer::ENCRYPTION_STARTTLS;
            else $mail->SMTPSecure = false;
            $mail->SMTPAuth   = true;
            $mail->Username   = $cfg['smtp_user'] ?? '';
            $mail->Password   = $cfg['smtp_pass'] ?? '';

            $fromEmail = $cfg['from_email'] ?? 'no-reply@localhost';
            $fromName  = $cfg['from_name']  ?? 'App';
            $mail->setFrom($fromEmail, $fromName);

            // Use Reply-To for the user's email to avoid spoofing From
            if (filter_var($email, FILTER_VALIDATE_EMAIL)) {
                $mail->addReplyTo($email, $name ?: $email);
            }
            if (!empty($cfg['reply_to'])) {
                $mail->addReplyTo($cfg['reply_to']);
            }

            // Destination (adjust as needed)
            $mail->addAddress($fromEmail, $fromName);

            // DKIM (optional)
            if (!empty($cfg['dkim_domain']) && !empty($cfg['dkim_selector']) && !empty($cfg['dkim_private_key_path'])) {
                $mail->DKIM_domain = $cfg['dkim_domain'];
                $mail->DKIM_selector = $cfg['dkim_selector'];
                $mail->DKIM_private = $cfg['dkim_private_key_path'];
            }

            $mail->isHTML(true);
            $mail->Subject = $subject;
            $safeName  = htmlspecialchars($name, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
            $safeEmail = htmlspecialchars($email, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
            $safeBody  = nl2br(htmlspecialchars($body, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'));
            $mail->Body = "<p><strong>Name:</strong> {$safeName}</p><p><strong>Email:</strong> {$safeEmail}</p><hr>{$safeBody}";
            $mail->AltBody = "Name: {$name}\nEmail: {$email}\n\n{$body}";

            foreach ($attachments as $path) {
                if (is_string($path) && is_readable($path)) {
                    $mail->addAttachment($path);
                }
            }

            $ok = $mail->send();
            return [ 'success' => $ok ];
        } catch (\Throwable $e) {
            return [ 'success' => false, 'error' => 'PHPMailer error: ' . $e->getMessage() ];
        }
    }

    private static function sendViaNativeMail(array $cfg, string $name, string $email, string $body, array $attachments, string $subject)
    {
        // NOTE: Native mail() requires a local MTA; attachments are not handled here for simplicity.
        $to = $cfg['from_email'] ?? 'root@localhost';
        $headers = [];
        $fromEmail = $cfg['from_email'] ?? 'no-reply@localhost';
        $fromName  = $cfg['from_name']  ?? 'App';
        $headers[] = 'From: ' . sprintf('"%s" <%s>', $fromName, $fromEmail);
        if (filter_var($email, FILTER_VALIDATE_EMAIL)) {
            $headers[] = 'Reply-To: ' . $email;
        } elseif (!empty($cfg['reply_to'])) {
            $headers[] = 'Reply-To: ' . $cfg['reply_to'];
        }
        $headers[] = 'MIME-Version: 1.0';
        $headers[] = 'Content-Type: text/plain; charset=UTF-8';

        $content = "Name: {$name}\nEmail: {$email}\n\n{$body}";
        $ok = @mail($to, $subject, $content, implode("\r\n", $headers));
        if ($ok) return [ 'success' => true ];
        return [ 'success' => false, 'error' => 'mail() failed or MTA not configured' ];
    }
}