Automattic\WooCommerce\Internal\StockNotifications\Frontend

NotificationManagementService::maybe_process_resend_request │ public │ WC 1.0

Handle the resend-verification request if the current request carries one.

Method of the class: NotificationManagementService{}

No Hooks.

Returns

null. Nothing (null).

Usage

$NotificationManagementService = new NotificationManagementService();
$NotificationManagementService->maybe_process_resend_request(): void;

NotificationManagementService::maybe_process_resend_request() code WC 10.9.4

woocommerce/src/Internal/StockNotifications/Frontend/NotificationManagementService.php 
public function maybe_process_resend_request(): void {
	// Only run on frontend GET requests — skip admin, POST, CLI, etc. before doing any nonce/DB work.
	if ( is_admin() ) {
		return;
	}

	// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotValidated, WordPress.Security.NonceVerification.Recommended
	$method = isset( $_SERVER['REQUEST_METHOD'] ) ? strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ) ) ) : 'GET';
	if ( 'GET' !== $method ) {
		return;
	}

	// phpcs:ignore WordPress.Security.NonceVerification.Recommended
	if ( ! isset( $_GET[ self::RESEND_QUERY_ARG ] ) ) {
		return;
	}

	// phpcs:ignore WordPress.Security.NonceVerification.Recommended
	$notification_id = absint( wp_unslash( $_GET[ self::RESEND_QUERY_ARG ] ) );
	$nonce           = isset( $_GET['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ) : '';

	if ( empty( $notification_id ) ) {
		return;
	}

	// Scope the nonce per-notification so one valid resend URL cannot be replayed
	// across the notification id query arg to trigger emails for other customers.
	if ( ! wp_verify_nonce( $nonce, self::RESEND_NONCE_ACTION . '_' . $notification_id ) ) {
		return;
	}

	$notification = Factory::get_notification( $notification_id );
	if ( ! $notification instanceof Notification ) {
		return;
	}

	$this->ensure_notice_session();

	$redirect_url = $notification->get_product_permalink();
	if ( empty( $redirect_url ) ) {
		$redirect_url = wc_get_page_permalink( 'shop' );
	}

	if ( NotificationStatus::PENDING !== $notification->get_status() ) {
		wc_add_notice( esc_html__( 'This notification is already verified or cancelled.', 'woocommerce' ), 'error' );
		wp_safe_redirect( $redirect_url );
		exit;
	}

	$last_sent_at = (int) $notification->get_meta( self::LAST_VERIFY_EMAIL_SENT_META );
	if ( $last_sent_at > 0 && ( time() - $last_sent_at ) < self::RESEND_RATE_LIMIT_SECONDS ) {
		wc_add_notice( esc_html__( 'Please wait a moment before requesting another verification email.', 'woocommerce' ), 'notice' );
		wp_safe_redirect( $redirect_url );
		exit;
	}

	// Persist the rate-limit timestamp before dispatching the email so two near-simultaneous
	// requests can't both pass the rate-limit check and trigger duplicate sends.
	$notification->update_meta_data( self::LAST_VERIFY_EMAIL_SENT_META, (string) time() );
	$notification->save();

	$this->email_manager->send_verify_email( $notification );

	/* translators: %s user email. */
	wc_add_notice( sprintf( esc_html__( 'Verification email sent to %s.', 'woocommerce' ), $notification->get_user_email() ), 'success' );
	wp_safe_redirect( $redirect_url );
	exit;
}