src/Form/RegistrationType.php line 18

Open in your IDE?
  1. <?php
  3. namespace App\Form;
  5. use App\Entity\User;
  6. use App\Service\TextResolverService;
  7. use Symfony\Component\Form\AbstractType;
  8. use Symfony\Component\Form\Extension\Core\Type\CheckboxType;
  9. use Symfony\Component\Form\Extension\Core\Type\PasswordType;
  10. use Symfony\Component\Form\Extension\Core\Type\SubmitType;
  11. use Symfony\Component\Form\Extension\Core\Type\TextType;
  12. use Symfony\Component\Form\FormBuilderInterface;
  13. use Symfony\Component\OptionsResolver\OptionsResolver;
  14. use Symfony\Component\Validator\Constraints\Length;
  15. use Symfony\Component\Validator\Constraints\NotBlank;
  16. use Symfony\Contracts\Translation\TranslatorInterface;
  18. class RegistrationType extends AbstractType {
  19. /** @var TranslatorInterface */
  20. private $translator;
  22. /** @var TextResolverService */
  23. private $textResolver;
  25. public function __construct(TranslatorInterface $translator, TextResolverService $textResolver) {
  26. $this->translator = $translator;
  27. $this->textResolver = $textResolver;
  28. }
  30. public function buildForm(FormBuilderInterface $builder, array $options): void {
  31. $builder
  32. ->add('email', TextType::class, [
  33. 'attr' => [
  34. 'required' => true,
  35. ],
  36. 'disabled' => $options['address_update'],
  37. ])
  38. ->add('firstname', TextType::class, [
  39. 'attr' => [
  40. 'required' => true,
  41. ],
  42. 'disabled' => $options['address_update'],
  43. ])
  44. ->add('lastname', TextType::class, [
  45. 'attr' => [
  46. 'required' => true,
  47. ],
  48. 'disabled' => $options['address_update'],
  49. ]);
  51. if (!$options['address_update']) {
  52. $builder->add('plainPassword', PasswordType::class, [
  53. // instead of being set onto the object directly,
  54. // this is read and encoded in the controller
  55. 'mapped' => false,
  56. 'attr' => ['autocomplete' => 'new-password'],
  57. 'constraints' => [
  58. new NotBlank([
  59. 'message' => $this->translator->trans('form.field.password.not_blank'),
  60. ]),
  61. new Length([
  62. 'min' => 6,
  63. 'minMessage' => $this->translator->trans('form.field.password.too_short'),
  64. // max length allowed by Symfony for security reasons
  65. 'max' => 4096,
  66. ]),
  67. ],
  68. ]);
  69. }
  71. $builder->add('addressBook', AddressBookType::class, [
  72. 'required' => false,
  73. 'enable_customer_number' => $options['enable_customer_number'],
  74. ]);
  76. $builder->add('agreeToTiInfos', CheckboxType::class, [
  77. 'label' => $this->resolveAndSanitizeLabel(),
  78. 'label_html' => true,
  79. 'required' => false,
  80. ]);
  82. $submitLabel = 'Registrieren';
  83. if ($options['address_update']) {
  84. $submitLabel = 'Speichern';
  85. }
  86. $builder->add('submit', SubmitType::class, [
  87. 'attr' => [
  88. 'class' => 'button accent w-100 mt-5',
  89. ],
  90. 'label' => $submitLabel,
  91. ]);
  92. }
  94. public function configureOptions(OptionsResolver $resolver): void {
  95. $resolver->setDefaults([
  96. 'data_class' => User::class,
  97. 'during_order' => false,
  98. 'address_update' => false,
  99. 'enable_customer_number' => false,
  100. ]);
  101. }
  103. private function resolveAndSanitizeLabel(): ?string {
  104. $text = strip_tags($this->textResolver->resolve('register.page.box.newsletter.consent'), '<a>');
  106. return preg_replace_callback(
  107. '/<a\s+[^>]*href=["\']([^"\']+)["\'][^>]*>/i',
  108. function ($matches) {
  109. $url = $matches[1];
  111. // Nur http und https erlauben
  112. if (!preg_match('#^https?://#i', $url)) {
  113. return ''; // Link entfernen, wenn unsicher
  114. }
  116. // Link sauber neu aufbauen (nur href)
  117. return '<a href="' . htmlspecialchars($url, ENT_QUOTES, 'UTF-8') . '" target="_blank" rel="noopener noreferrer">';
  118. },
  119. $text
  120. );
  121. }
  122. }