Withdrawal Forms and Buttons

<?php snippet('header') ?>

<main>
    <h1><?= $page->title()->html() ?></h1>

    <?php if ($success): ?>
        <p class="alert success"><?= esc($success) ?></p>
    <?php else: ?>
        <?php if (isset($alert['error'])): ?>
            <p class="alert error"><?= esc($alert['error']) ?></p>
        <?php endif ?>

        <form method="post" action="<?= $page->url() ?>">
            <input type="hidden" name="csrf" value="<?= csrf() ?>">

            <div class="honeypot" hidden>
                <label for="website">Website</label>
                <input type="url" id="website" name="website" tabindex="-1" autocomplete="off">
            </div>

            <p>
                <label for="consumer_name">Name</label><br>
                <input
                    type="text"
                    id="consumer_name"
                    name="consumer_name"
                    value="<?= esc($data['consumer_name'] ?? '', 'attr') ?>"
                    autocomplete="name"
                    required
                >
                <?php if (isset($alert['consumer_name'])): ?>
                    <br><small><?= esc($alert['consumer_name']) ?></small>
                <?php endif ?>
            </p>

            <p>
                <label for="email">Email</label><br>
                <input
                    type="email"
                    id="email"
                    name="email"
                    value="<?= esc($data['email'] ?? '', 'attr') ?>"
                    autocomplete="email"
                    required
                >
                <?php if (isset($alert['email'])): ?>
                    <br><small><?= esc($alert['email']) ?></small>
                <?php endif ?>
            </p>

            <p>
                <label for="order_number">Order or invoice number</label><br>
                <input
                    type="text"
                    id="order_number"
                    name="order_number"
                    value="<?= esc($data['order_number'] ?? '', 'attr') ?>"
                    required
                >
                <?php if (isset($alert['order_number'])): ?>
                    <br><small><?= esc($alert['order_number']) ?></small>
                <?php endif ?>
            </p>

            <p>
                <label for="contract_items">Product, service, or contract part</label><br>
                <textarea id="contract_items" name="contract_items" required><?= esc($data['contract_items'] ?? '') ?></textarea>
                <?php if (isset($alert['contract_items'])): ?>
                    <br><small><?= esc($alert['contract_items']) ?></small>
                <?php endif ?>
            </p>

            <p>
                <label for="received_on">Received on, if applicable</label><br>
                <input
                    type="date"
                    id="received_on"
                    name="received_on"
                    value="<?= esc($data['received_on'] ?? '', 'attr') ?>"
                >
            </p>

            <p>
                <label for="message">Additional information, optional</label><br>
                <textarea id="message" name="message"><?= esc($data['message'] ?? '') ?></textarea>
            </p>

            <input
                type="hidden"
                name="statement"
                value="I hereby withdraw from the contract identified in this form."
            >

            <button type="submit" name="withdraw" value="1">Confirm withdrawal</button>
        </form>
    <?php endif ?>
</main>

<?php snippet('footer') ?>

<?php

return function ($kirby, $pages, $page) {
    $alert = [];
    $data = [];
    $success = null;

    if ($kirby->request()->is('POST') && get('withdraw')) {
        if (csrf(get('csrf')) !== true) {
            $alert['error'] = 'The form could not be verified. Please try again.';
        } elseif (empty(get('website')) === false) {
            go($page->url());
        } else {
            $data = [
                'consumer_name' => trim((string)get('consumer_name')),
                'email'         => trim((string)get('email')),
                'order_number'  => trim((string)get('order_number')),
                'contract_items'=> trim((string)get('contract_items')),
                'received_on'   => trim((string)get('received_on')),
                'message'       => trim((string)get('message')),
                'statement'     => trim((string)get('statement')),
            ];

            $rules = [
                'consumer_name' => ['required', 'minLength' => 2],
                'email'         => ['required', 'email'],
                'order_number'  => ['required', 'minLength' => 2],
                'contract_items'=> ['required', 'minLength' => 2],
                'statement'     => ['required'],
            ];

            $messages = [
                'consumer_name' => 'Please enter your name.',
                'email'         => 'Please enter a valid email address.',
                'order_number'  => 'Please enter an order or invoice number.',
                'contract_items'=> 'Please identify the product, service, or contract part.',
                'statement'     => 'The withdrawal statement is missing.',
            ];

            if ($invalid = invalid($data, $rules, $messages)) {
                $alert = $invalid;
            } else {
                $submittedAt = date('Y-m-d H:i:s T');

                $merchantBody = implode("\n", [
                    'Withdrawal request received',
                    '',
                    'Received at: ' . $submittedAt,
                    'Name: ' . $data['consumer_name'],
                    'Email: ' . $data['email'],
                    'Order/reference: ' . $data['order_number'],
                    'Items/contract: ' . $data['contract_items'],
                    'Received on: ' . ($data['received_on'] ?: '-'),
                    'Statement: ' . $data['statement'],
                    'Message: ' . ($data['message'] ?: '-'),
                ]);

                $customerBody = implode("\n", [
                    'We have received your withdrawal request.',
                    '',
                    'Received at: ' . $submittedAt,
                    'Order/reference: ' . $data['order_number'],
                    'Items/contract: ' . $data['contract_items'],
                    'Statement: ' . $data['statement'],
                    '',
                    'This message confirms receipt of your request. It does not decide whether the withdrawal is legally valid.',
                ]);

                try {
                    $kirby->email([
                        'from'    => option('shop.withdrawal.from', 'no-reply@example.com'),
                        'replyTo' => $data['email'],
                        'to'      => option('shop.withdrawal.to', 'shop@example.com'),
                        'subject' => 'Withdrawal request: ' . $data['order_number'],
                        'body'    => $merchantBody,
                    ]);

                    $kirby->email([
                        'from'    => option('shop.withdrawal.from', 'no-reply@example.com'),
                        'to'      => $data['email'],
                        'subject' => 'We received your withdrawal request',
                        'body'    => $customerBody,
                    ]);

                    $success = 'Your withdrawal request has been received.';
                    $data = [];
                } catch (Throwable $error) {
                    $alert['error'] = option('debug')
                        ? 'The request could not be sent: ' . $error->getMessage()
                        : 'The request could not be sent. Please try again later.';
                }
            }
        }
    }

    return [
        'alert'   => $alert,
        'data'    => $data,
        'success' => $success,
    ];
};

<?php

return [
    'shop.withdrawal.from' => 'no-reply@example.com',
    'shop.withdrawal.to'   => 'shop@example.com',
];

<?php

use Kirby\Toolkit\Str;

$parent = page('withdrawals');

if ($parent !== null) {
    $kirby->impersonate('kirby');

    $parent->createChild([
        'slug' => Str::slug($data['order_number'] . '-' . time()),
        'template' => 'withdrawal',
        'content' => [
            'title' => 'Withdrawal ' . $data['order_number'],
            'submitted_at' => $submittedAt,
            'consumer_name' => $data['consumer_name'],
            'email' => $data['email'],
            'order_number' => $data['order_number'],
            'contract_items' => $data['contract_items'],
            'received_on' => $data['received_on'],
            'statement' => $data['statement'],
            'message' => $data['message'],
        ],
    ]);
}