app/Plugin/NZRecaptcha42/Event/RecaptchaEventSubscriber.php line 47

Open in your IDE?
  1. <?php
  3. namespace Plugin\NZRecaptcha42\Event;
  5. use Plugin\NZRecaptcha42\Service\RecaptchaService;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpFoundation\RequestStack;
  8. use Symfony\Component\HttpKernel\Event\RequestEvent;
  9. use Symfony\Component\HttpKernel\KernelEvents;
  10. use Symfony\Component\HttpFoundation\RedirectResponse;
  11. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  13. class RecaptchaEventSubscriber implements EventSubscriberInterface
  14. {
  15.     /**
  16.      * @var RecaptchaService
  17.      */
  18.     private $recaptchaService;
  20.     /**
  21.      * @var RequestStack
  22.      */
  23.     private $requestStack;
  25.     /**
  26.      * @var UrlGeneratorInterface
  27.      */
  28.     private $urlGenerator;
  30.     public function __construct(
  31.         RecaptchaService $recaptchaService,
  32.         RequestStack $requestStack,
  33.         UrlGeneratorInterface $urlGenerator
  34.     ) {
  35.         $this->recaptchaService = $recaptchaService;
  36.         $this->requestStack = $requestStack;
  37.         $this->urlGenerator = $urlGenerator;
  38.     }
  40.     public static function getSubscribedEvents()
  41.     {
  42.         return [
  43.             KernelEvents::REQUEST => ['onKernelRequest', 9],
  44.         ];
  45.     }
  47.     public function onKernelRequest(RequestEvent $event)
  48.     {
  49.         if (!$event->isMainRequest()) {
  50.             return;
  51.         }
  53.         $request = $event->getRequest();
  54.         
  55.         // POSTリクエストのみ検証
  56.         if ($request->getMethod() !== 'POST') {
  57.             return;
  58.         }
  60.         $route = $request->attributes->get('_route');
  61.         $pathInfo = $request->getPathInfo();
  62.         
  63.         // 対象ルートとアクションの対応
  64.         $routeConfig = [
  65.             'entry' => ['action' => 'entry', 'check' => 'isEnabledForEntry', 'redirect' => 'entry'],
  66.             'mypage_login' => ['action' => 'login', 'check' => 'isEnabledForLogin', 'redirect' => 'mypage_login'],
  67.             'contact' => ['action' => 'contact', 'check' => 'isEnabledForContact', 'redirect' => 'contact'],
  68.         ];
  70.         // カスタムルート/URLをチェック
  71.         $isCustomTarget = $this->recaptchaService->isEnabledForCustomRoute($route, $pathInfo);
  73.         if (!isset($routeConfig[$route]) && !$isCustomTarget) {
  74.             return;
  75.         }
  77.         // カスタムルート/URLの場合
  78.         if ($isCustomTarget && !isset($routeConfig[$route])) {
  79.             $token = $request->request->get('g-recaptcha-response');
  80.             $action = $route ?: str_replace('/', '_', trim($pathInfo, '/'));
  81.             
  82.             if (!$this->recaptchaService->verify($token, $action)) {
  83.                 log_warning('[NZRecaptcha] Blocked custom request', [
  84.                     'route' => $route,
  85.                     'path' => $pathInfo,
  86.                     'ip' => $request->getClientIp(),
  87.                 ]);
  89.                 $session = $request->getSession();
  90.                 $session->getFlashBag()->add('eccube.front.error', 'セキュリティ検証に失敗しました。もう一度お試しください。');
  92.                 $redirectUrl = $request->getUri();
  93.                 $event->setResponse(new RedirectResponse($redirectUrl));
  94.             }
  95.             return;
  96.         }
  98.         $config = $routeConfig[$route];
  99.         $checkMethod = $config['check'];
  101.         // この機能が有効かチェック
  102.         if (!$this->recaptchaService->$checkMethod()) {
  103.             return;
  104.         }
  106.         // reCAPTCHAトークンを取得
  107.         $token = $request->request->get('g-recaptcha-response');
  109.         // トークン検証
  110.         if (!$this->recaptchaService->verify($token, $config['action'])) {
  111.             log_warning('[NZRecaptcha] Blocked request', [
  112.                 'route' => $route,
  113.                 'ip' => $request->getClientIp(),
  114.             ]);
  116.             $session = $request->getSession();
  117.             $session->getFlashBag()->add('eccube.front.error', 'セキュリティ検証に失敗しました。もう一度お試しください。');
  119.             $redirectUrl = $this->urlGenerator->generate($config['redirect']);
  120.             $event->setResponse(new RedirectResponse($redirectUrl));
  121.         }
  122.     }
  123. }