Skip to Content
Last modified by Agnease on 2026/06/16 17:18
From version 16.15
edited by Agnease
on 2026/05/28 08:23
Change comment: There is no comment for this version
To version 16.56
edited by Agnease
on 2026/06/16 17:09
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -5,18 +5,44 @@
5 5  
6 6   #set ($name = '')
7 7   #set ($email = '')
8 + #set ($scope = '')
9 + ## Fields to help preventing bots filled forms.
10 + #set ($contactWebsite = '')
11 + #set ($startedAtRaw = '')
8 8  
9 9   #foreach ($parameterName in $request.parameterNames)
10 - #set ($propertyName = $parameterName.split('_0_')[1])
11 - #if ($propertyName == 'name')
12 - #set ($name = $stringtool.trim($request.get($parameterName)))
13 - #elseif ($propertyName == 'email')
14 - #set ($email = $stringtool.trim($request.get($parameterName)))
14 + #set ($propertyParts = $parameterName.split('_0_'))
15 + #if ($propertyParts.size() > 1)
16 + #set ($propertyName = $parameterName.split('_0_')[1])
17 + #if ($propertyName == 'name')
18 + #set ($name = $stringtool.trim($request.get($parameterName)))
19 + #elseif ($propertyName == 'email')
20 + #set ($email = $stringtool.trim($request.get($parameterName)))
21 + #elseif ($propertyName == 'scope')
22 + #set ($scope = $stringtool.trim($request.get($parameterName)))
23 + #elseif ($propertyName == 'contactWebsite')
24 + #set ($contactWebsite = $stringtool.trim($request.get($parameterName)))
25 + #elseif ($propertyName == 'contactStartedAt')
26 + #set ($startedAtRaw = $stringtool.trim($request.get($parameterName)))
27 + #end
15 15   #end
16 16   #end
17 17  
18 - #if ("$!name" == '' && "$!email" == '')
31 + #if ("$!startedAtRaw" != '')
32 + #set ($startedAt = $numbertool.toNumber($startedAtRaw))
33 + #set ($now = $datetool.systemDate.time)
34 + #set ($elapsed = $now - $startedAt)
35 +
36 + ## Reject submissions faster than 10 seconds.
37 + #if ($elapsed > 0 && $elapsed < 10000)
38 + #set ($statusCode = 400)
39 + #set ($message = 'Please take a moment to describe your XWiki request before submitting.')
40 + #end
41 + #elseif ("$!contactWebsite.trim()" != '')
19 19   #set ($statusCode = 400)
43 + #set ($message = 'The request could not be sent. Please try again or contact Agnease by email.')
44 + #elseif ("$!name" == '' && "$!email" == '')
45 + #set ($statusCode = 400)
20 20   #set ($message = 'Please enter your name and email.')
21 21   #elseif ("$!name" == '')
22 22   #set ($statusCode = 400)
... ... @@ -24,6 +24,9 @@
24 24   #elseif ("$!email" == '')
25 25   #set ($statusCode = 400)
26 26   #set ($message = 'Please enter your email address.')
53 + #elseif ("$!scope" == '' || $scope.length() < 30)
54 + #set ($statusCode = 400)
55 + #set ($message = 'Please add a short description of your XWiki project, question or issue.')
27 27   #else
28 28   #try('contactException')
29 29   #set ($now = $datetool.get('yyyyMMddHHmm'))
... ... @@ -34,7 +34,9 @@
34 34  
35 35   #foreach ($parameterName in $request.parameterNames)
36 36   #set ($propertyName = $parameterName.split('_0_')[1])
37 - #set ($discard = $contactRequestObj.set($propertyName, $request.get($parameterName)))
66 + #if ($propertyName != 'contactWebsite' && $propertyName != 'contactStartedAt')
67 + #set ($discard = $contactRequestObj.set($propertyName, $request.get($parameterName)))
68 + #end
38 38   #end
39 39  
40 40   #set ($discard = $contactRequestDoc.saveAsAuthor())
... ... @@ -99,7 +99,18 @@
99 99   #end
100 100   </dl>
101 101   <p class="xHint">* Your information will only be used to respond to this request.</p>
102 - ##<p>Your information will only be used to respond to this request. See the Privacy Policy for details.</p>
133 + ## Hidden fields to catch requests filled by bots.
134 + <div class="contact-hp-wrapper" aria-hidden="true">
135 + <label for="Agnease.Code.ContactRequest.ContactRequestClass_0_contactWebsite">Website</label>
136 + <input
137 + id="contactWebsite"
138 + type="text"
139 + name="Agnease.Code.ContactRequest.ContactRequestClass_0_contactWebsite"
140 + autocomplete="off"
141 + tabindex="-1"
142 + />
143 + </div>
144 + <input type="hidden" name="Agnease.Code.ContactRequest.ContactRequestClass_0_contactStartedAt" value="$datetool.systemDate.time" />
103 103   <input id="contactSubmit" type="submit" class="btn btn-primary" value="Send my request">
104 104   </form>
105 105   #end
XWiki.JavaScriptExtension[0]
code
... ... @@ -21,10 +21,12 @@
21 21   url: serviceURL,
22 22   data: $.param(form.serializeArray())
23 23   }).done(function (data) {
24 + console.log(data)
24 24   successBox.find('.box div p').text(data.message);
25 25   successBox.removeClass('hidden');
26 26   form[0].reset();
27 27   }).fail(function (xhr) {
29 + console.log('fail' + xhr)
28 28   var message = xhr.responseJSON && xhr.responseJSON.message ? xhr.responseJSON.message
29 29   : 'The request could not be sent. Please try again or contact Agnease by email at alex@agnease.com';
30 30   errorBox.find('.box div p').text(message);
XWiki.StyleSheetExtension[0]
code
... ... @@ -66,3 +66,11 @@
66 66   color: @brand;
67 67   font-weight: 700;
68 68  }
69 +/* CSS for hidden field to identify requests filled by bots. */
70 +.contact-hp-wrapper {
71 + position: absolute;
72 + left: -9999px;
73 + width: 1px;
74 + height: 1px;
75 + overflow: hidden;
76 +}