<?php
/**
 * Shared pieces of the plugin's admin form handlers.
 *
 * @package Smsportal
 */

namespace Smsportal\Admin;

defined( 'ABSPATH' ) || exit;

/**
 * Every admin-post handler checks current_user_can( Menu::CAPABILITY ) and its form's nonce itself
 * (check_admin_referer) before it reads $_POST or changes anything; deny() is the answer to a user without
 * the capability.
 */
class Guard {

	/**
	 * Stop the request with 403: the user may not manage the plugin.
	 *
	 * @return void
	 */
	public static function deny(): void {
		wp_die(
			esc_html__( 'You do not have permission to access this page.', '85pl-android-sms-api' ),
			'',
			array( 'response' => 403 )
		);
	}

	/**
	 * Redirect back into the plugin screen and stop.
	 *
	 * @param string $target URL.
	 * @return void
	 */
	public static function redirect( string $target ): void {
		wp_safe_redirect( $target );
		exit;
	}
}