From f46a941b61b61af539dd07d6115bc3bf3145f6e7 Mon Sep 17 00:00:00 2001
From: Miguel Nogueira <miguel456@spacejewel-hosting.com>
Date: Sun, 10 May 2020 06:36:42 +0100
Subject: [PATCH] Add hold period enforcement

---
 app/Http/Kernel.php                           |   1 +
 .../Middleware/ApplicationEligibility.php     |  59 ++++++++
 .../application-rendering/apply.blade.php     | 135 ++++++++++--------
 resources/views/dashboard/dashboard.blade.php |  12 ++
 resources/views/home.blade.php                |  10 +-
 routes/web.php                                |   6 +-
 6 files changed, 161 insertions(+), 62 deletions(-)
 create mode 100644 app/Http/Middleware/ApplicationEligibility.php

diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
index c3640f3..b81271b 100644
--- a/app/Http/Kernel.php
+++ b/app/Http/Kernel.php
@@ -62,5 +62,6 @@ class Kernel extends HttpKernel
         'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
         'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
         'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'eligibility' => \App\Http\Middleware\ApplicationEligibility::class
     ];
 }
diff --git a/app/Http/Middleware/ApplicationEligibility.php b/app/Http/Middleware/ApplicationEligibility.php
new file mode 100644
index 0000000..f091d8e
--- /dev/null
+++ b/app/Http/Middleware/ApplicationEligibility.php
@@ -0,0 +1,59 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Application;
+use Illuminate\Support\Facades\Log;
+use Carbon\Carbon;
+use Closure;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\View;
+
+class ApplicationEligibility
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @param \Closure $next
+     * @return mixed
+     * @throws \Exception
+     */
+    public function handle($request, Closure $next)
+    {
+        $curtime = new Carbon(now());
+
+
+        if (Auth::check())
+        {
+            $applications = Application::where('applicantUserID', Auth::user()->id)->get();
+            $eligible = true;
+
+            $daysRemaining = 0;
+
+            if (!$applications->isEmpty())
+            {
+                foreach ($applications as $application)
+                {
+                    $appTime = Carbon::parse($application->created_at);
+                    if ($appTime->isSameMonth($curtime))
+                    {
+
+                        Log::warning('Notice: Application ID ' . $application->id . ' was found to be in the same month as today\'s time, making the user ' . Auth::user()->name . ' ineligible for application');
+                        $eligible = false;
+                    }
+                }
+
+                $allowedTime = Carbon::parse($applications->last()->created_at)->addMonth();
+                $daysRemaining = $allowedTime->diffInDays(now());
+
+            }
+
+            View::share('isEligibleForApplication', $eligible);
+            View::share('eligibilityDaysRemaining', $daysRemaining);
+        }
+
+
+        return $next($request);
+    }
+}
diff --git a/resources/views/dashboard/application-rendering/apply.blade.php b/resources/views/dashboard/application-rendering/apply.blade.php
index cf15541..236b520 100644
--- a/resources/views/dashboard/application-rendering/apply.blade.php
+++ b/resources/views/dashboard/application-rendering/apply.blade.php
@@ -22,109 +22,119 @@
 
     @endif
 
+    @if(!$isEligibleForApplication)
+
+        <script>toastr.error("You do not have permission to view this page.", "Access denied")</script>
+
+    @endif
+
 @stop
 
 @section('content')
 
-    <div class="modal fade" tabindex="-1" id="confirm" role="dialog" aria-labelledby="modalConfirmLabel" aria-hidden="true">
-        <div class="modal-dialog" role="document">
-            <div class="modal-content">
-                <div class="modal-header">
-                    <h5 class="modal-title" id="modalConfirmLabel">Please confirm</h5>
-                    <button type="button" class="close" data-dismiss="modal" aria-label="Close">
-                        <span aria-hidden="true">&times;</span>
-                    </button>
-                </div>
-                <div class="modal-body">
+    @if($isEligibleForApplication)
 
-                    <p>Are you sure you want to submit your application? Please review each of your answers carefully before doing so.</p>
-                    <p class="text-bold">Please note: Applications CANNOT be modified once they're submitted!</p>
+        <div class="modal fade" tabindex="-1" id="confirm" role="dialog" aria-labelledby="modalConfirmLabel" aria-hidden="true">
+            <div class="modal-dialog" role="document">
+                <div class="modal-content">
+                    <div class="modal-header">
+                        <h5 class="modal-title" id="modalConfirmLabel">Please confirm</h5>
+                        <button type="button" class="close" data-dismiss="modal" aria-label="Close">
+                            <span aria-hidden="true">&times;</span>
+                        </button>
+                    </div>
+                    <div class="modal-body">
 
-                </div>
-                <div class="modal-footer">
-                    <button type="button" class="btn btn-success" onclick="document.getElementById('submitApplicationForm').submit()"><i class="fas fa-check-double"></i> Accept & Send</button>
-                    <button type="button" class="btn btn-secondary" data-dismiss="modal">Review</button>
+                        <p>Are you sure you want to submit your application? Please review each of your answers carefully before doing so.</p>
+                        <p class="text-bold">Please note: Applications CANNOT be modified once they're submitted!</p>
+
+                    </div>
+                    <div class="modal-footer">
+                        <button type="button" class="btn btn-success" onclick="document.getElementById('submitApplicationForm').submit()"><i class="fas fa-check-double"></i> Accept & Send</button>
+                        <button type="button" class="btn btn-secondary" data-dismiss="modal">Review</button>
+                    </div>
                 </div>
             </div>
         </div>
-    </div>
 
-    <div class="row">
+        <div class="row">
 
-        <div class="col">
+            <div class="col">
 
-            <div class="callout callout-success">
+                <div class="callout callout-success">
 
-                <p class="text-bold">You are applying for: {{$vacancy->vacancyName}}</p>
+                    <p class="text-bold">You are applying for: {{$vacancy->vacancyName}}</p>
 
-                <p>We're glad you've decided to apply. Generally, applications take 48 hours to be processed and reviewed. Depending on the circumstances and the volume of applications, you may receive an answer in a shorter time.</p>
-                <p>Please fill out the form below. Keep all answers concise and complete. Please keep in mind that the age requirement is <b>at least 18 years old</b>.</p>
-                <p class="text-bold">Asking about your application will result in instant denial. Everything you need to know is here.</p>
+                    <p>We're glad you've decided to apply. Generally, applications take 48 hours to be processed and reviewed. Depending on the circumstances and the volume of applications, you may receive an answer in a shorter time.</p>
+                    <p>Please fill out the form below. Keep all answers concise and complete. Please keep in mind that the age requirement is <b>at least 18 years old</b>.</p>
+                    <p class="text-bold">Asking about your application will result in instant denial. Everything you need to know is here.</p>
+
+                </div>
 
             </div>
 
         </div>
 
-    </div>
+
+        <div class="row">
+
+            <div class="col">
 
 
-    <div class="row">
+                <div class="card">
 
-        <div class="col">
+                    <div class="card-header">
 
+                        <div class="card-title"><h4>{{$vacancy->forms->formName}}</h4></div>
 
-            <div class="card">
+                    </div>
 
-                <div class="card-header">
+                    <div class="card-body">
 
-                    <div class="card-title"><h4>{{$vacancy->forms->formName}}</h4></div>
+                        <form action="{{route('saveApplicationForm', ['vacancySlug' => $vacancy->vacancySlug])}}" method="POST" id="submitApplicationForm">
+                            @csrf
+                            @foreach($preprocessedForm['fields'] as $fieldName => $field)
 
-                </div>
+                                @switch ($field['type'])
 
-                <div class="card-body">
+                                    @case('textarea')
 
-                   <form action="{{route('saveApplicationForm', ['vacancySlug' => $vacancy->vacancySlug])}}" method="POST" id="submitApplicationForm">
-                       @csrf
-                       @foreach($preprocessedForm['fields'] as $fieldName => $field)
+                                    <div class="form-group mt-2 mb-2">
 
-                           @switch ($field['type'])
-
-                               @case('textarea')
-
-                               <div class="form-group mt-2 mb-2">
-
-                                   <label for="{{$fieldName}}">{{$field['title']}}</label>
-                                   <textarea class="form-control" rows="7" name="{{$fieldName}}" id="{{$fieldName}}">
+                                        <label for="{{$fieldName}}">{{$field['title']}}</label>
+                                        <textarea class="form-control" rows="7" name="{{$fieldName}}" id="{{$fieldName}}">
 
                                      </textarea>
 
-                               </div>
+                                    </div>
 
-                               @break
+                                    @break
 
-                               @case('textbox')
+                                    @case('textbox')
 
-                               <div class="form-group mt-2 mb-2">
+                                    <div class="form-group mt-2 mb-2">
 
-                                   <label for="{{$fieldName}}">{{$field['title']}}</label>
-                                   <input type="text" name="{{$fieldName}}" id="{{$fieldName}}" class="form-control">
+                                        <label for="{{$fieldName}}">{{$field['title']}}</label>
+                                        <input type="text" name="{{$fieldName}}" id="{{$fieldName}}" class="form-control">
 
 
-                               </div>
+                                    </div>
 
-                               @break
+                                    @break
 
-                           @endswitch
+                                @endswitch
 
-                       @endforeach
+                            @endforeach
 
-                   </form>
+                        </form>
 
-                </div>
+                    </div>
 
-                <div class="card-footer text-center">
+                    <div class="card-footer text-center">
 
-                    <button type="button" class="btn btn-success" onclick="$('#confirm').modal('show')"><i class="fas fa-paper-plane"></i> Send</button>
+                        <button type="button" class="btn btn-success" onclick="$('#confirm').modal('show')"><i class="fas fa-paper-plane"></i> Send</button>
+
+                    </div>
 
                 </div>
 
@@ -132,6 +142,15 @@
 
         </div>
 
-    </div>
+    @else
+
+        <div class="alert alert-danger">
+
+            <p class="text-bold">Access denied</p>
+
+            <p>Your account is not permitted to submit another application. Please wait {{$eligibilityDaysRemaining}} more days before trying to submit an application.</p>
+        </div>
+
+    @endif
 
 @stop
diff --git a/resources/views/dashboard/dashboard.blade.php b/resources/views/dashboard/dashboard.blade.php
index 03d12aa..ea2f66f 100644
--- a/resources/views/dashboard/dashboard.blade.php
+++ b/resources/views/dashboard/dashboard.blade.php
@@ -40,4 +40,16 @@
         </div>
     </div>
 
+    <div class="row">
+
+        <div class="col">
+            <div class="alert alert-info">
+
+                <p>Your current application eligibility status: <span class="badge badge-warning">{{($isEligibleForApplication) ? 'Eligibile' : 'Ineligible' }}</span></p>
+
+            </div>
+        </div>
+
+    </div>
+
 @stop
diff --git a/resources/views/home.blade.php b/resources/views/home.blade.php
index a69c941..5f827c2 100644
--- a/resources/views/home.blade.php
+++ b/resources/views/home.blade.php
@@ -48,8 +48,16 @@
                               </div>
 
                               <div class="card-footer text-center">
+                                  @auth
+                                      <button {{($isEligibleForApplication) ? '' : 'disabled'}} type="button" class="btn btn-success" onclick="window.location.href='{{route('renderApplicationForm', ['vacancySlug' => $position->vacancySlug])}}'">Apply</button>
+                                      @if(!$isEligibleForApplication)
+                                          <span class="badge-warning badge"><i class="fa fa-info"></i> Ineligible ({{$eligibilityDaysRemaining}} days remaining)</span>
+                                      @endif
+                                  @endauth
 
-                                  <button type="button" class="btn btn-success" onclick="window.location.href='{{route('renderApplicationForm', ['vacancySlug' => $position->vacancySlug])}}'">Apply</button>
+                                  @guest
+                                          <button type="button" class="btn btn-success" onclick="window.location.href='{{route('renderApplicationForm', ['vacancySlug' => $position->vacancySlug])}}'">Apply</button>
+                                      @endguest
 
                               </div>
 
diff --git a/routes/web.php b/routes/web.php
index d1bd779..4d7475b 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -14,14 +14,14 @@ use Illuminate\Support\Facades\Route;
 */
 Auth::routes();
 
-Route::get('/','HomeController@index');
+Route::get('/','HomeController@index')->middleware('eligibility');
 Route::post('/form/contact', 'ContactController@create')
     ->name('sendSubmission');
 
 
 Route::group(['middleware' => 'auth'], function(){
 
-    Route::get('/dashboard', 'DashboardController@index');
+    Route::get('/dashboard', 'DashboardController@index')->middleware('eligibility');
 
     Route::group(['prefix' => '/applications'], function (){
 
@@ -45,7 +45,7 @@ Route::group(['middleware' => 'auth'], function(){
 
     });
 
-    Route::group(['prefix' => 'apply'], function (){
+    Route::group(['prefix' => 'apply', 'middleware' => ['eligibility']], function (){
 
         Route::get('positions/{vacancySlug}', 'ApplicationController@renderApplicationForm')
             ->name('renderApplicationForm');