<?php
/**
 * Maintenance & Coming Soon mode.
 *
 * While it's on, visitors get a branded page instead of the site:
 *   - Coming soon: status 200, noindex (optional).
 *   - Maintenance: status 503 with Retry-After, so search engines keep the site's ranking.
 * Who still sees the site: logged-in users with the chosen roles, allowed IP addresses,
 * and anyone who opened the private preview link (a cookie for 7 days).
 * Always open: wp-admin, wp-login.php, AJAX, cron, the REST API, WooCommerce's
 * wc-api (payment webhooks), robots.txt, and any paths listed in the settings.
 *
 * @package BYLTCommerce
 */

defined( 'ABSPATH' ) || exit;

class Bylt_Maintenance extends Bylt_Module {

	const OPTION = 'bylt_maintenance';
	const COOKIE = 'bylt_mm_preview';

	/** @var array|null */
	private $settings;

	public static function defaults() {
		return array(
			'enabled'       => 'no',
			'mode'          => 'soon',      // soon | maintenance
			'headline'      => '',
			'message'       => '',
			'logo'          => '',
			'bg'            => '#f6f5f2',
			'bg_image'      => '',
			'text'          => '#1d1d1f',
			'accent'        => '#111111',
			'end'           => '',          // Site-local Y-m-d\TH:i. Turns itself off after this.
			'countdown'     => 'yes',
			'contact'       => '',          // Email shown on the page.
			'staff_link'    => 'yes',       // Small "Staff login" link.
			'noindex'       => 'yes',       // Coming soon: ask search engines not to index the page.
			'roles'         => array( 'administrator', 'shop_manager', 'editor' ),
			'ips'           => '',
			'paths'         => '',
			'token'         => '',
		);
	}

	public function settings() {
		if ( null === $this->settings ) {
			$saved          = get_option( self::OPTION, array() );
			$this->settings = wp_parse_args( is_array( $saved ) ? $saved : array(), self::defaults() );
		}
		return $this->settings;
	}

	public function init() {
		add_filter( 'bylt_settings_tabs', array( $this, 'settings_tab' ) );
		add_action( 'bylt_settings_tab_maintenance', array( $this, 'render_settings' ) );
		add_action( 'admin_post_bylt_maintenance_save', array( $this, 'save_settings' ) );
		add_action( 'template_redirect', array( $this, 'gate' ), 0 );
		add_action( 'admin_bar_menu', array( $this, 'admin_bar' ), 99 );
		add_action( 'wp_enqueue_scripts', array( $this, 'admin_bar_css' ) );
		add_action( 'admin_enqueue_scripts', array( $this, 'admin_bar_css' ) );
	}

	/* ---------------------------------------------------------------------
	 * State
	 * ------------------------------------------------------------------- */

	private function end_time() {
		$end = $this->settings()['end'];
		if ( ! $end ) {
			return 0;
		}
		try {
			$d = new DateTime( $end, wp_timezone() );
			return $d->getTimestamp();
		} catch ( Exception $e ) {
			return 0;
		}
	}

	/** On, and not past its end time. */
	public function is_on() {
		if ( 'yes' !== $this->settings()['enabled'] ) {
			return false;
		}
		$end = $this->end_time();
		return ! $end || time() < $end;
	}

	private function token() {
		return (string) $this->settings()['token'];
	}

	public function preview_url() {
		return $this->token() ? add_query_arg( 'bylt_preview', $this->token(), home_url( '/' ) ) : '';
	}

	private function cookie_value() {
		return wp_hash( 'bylt_mm|' . $this->token() );
	}

	/** Who sees the real site. */
	public function can_bypass() {
		if ( is_user_logged_in() ) {
			$user = wp_get_current_user();
			if ( array_intersect( (array) $user->roles, (array) $this->settings()['roles'] ) || is_super_admin() ) {
				return true;
			}
		}
		if ( Bylt_Ip::in_list( Bylt_Ip::client(), Bylt_Ip::parse_list( $this->settings()['ips'] ) ) ) {
			return true;
		}
		return $this->token() && isset( $_COOKIE[ self::COOKIE ] ) && hash_equals( $this->cookie_value(), sanitize_text_field( wp_unslash( $_COOKIE[ self::COOKIE ] ) ) );
	}

	private static function path() {
		$uri  = isset( $_SERVER['REQUEST_URI'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ) : '/';
		$path = (string) wp_parse_url( $uri, PHP_URL_PATH );
		$home = (string) wp_parse_url( home_url( '/' ), PHP_URL_PATH );
		return '/' . ltrim( substr( $path, strlen( rtrim( $home, '/' ) ) ), '/' );
	}

	private function always_open() {
		if ( is_admin() || wp_doing_ajax() || wp_doing_cron() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) || ( defined( 'XMLRPC_REQUEST' ) && XMLRPC_REQUEST ) ) {
			return true;
		}
		// phpcs:ignore WordPress.Security.NonceVerification -- routing only.
		if ( isset( $_GET['wc-api'] ) || isset( $_GET['rest_route'] ) || is_robots() ) {
			return true;
		}
		$path = self::path();
		if ( 0 === strpos( $path, '/wc-api/' ) || 0 === strpos( $path, '/' . rest_get_url_prefix() . '/' ) ) {
			return true;
		}
		foreach ( preg_split( '/\r\n|\r|\n/', (string) $this->settings()['paths'] ) as $p ) {
			$p = trim( $p );
			if ( '' !== $p && 0 === strpos( $path, '/' . ltrim( $p, '/' ) ) ) {
				return true;
			}
		}
		return false;
	}

	/* ---------------------------------------------------------------------
	 * Front end
	 * ------------------------------------------------------------------- */

	public function gate() {
		// Private preview link: remember this browser, then show the clean URL.
		// phpcs:disable WordPress.Security.NonceVerification -- the token is the check.
		if ( isset( $_GET['bylt_preview'] ) && $this->token() && hash_equals( $this->token(), sanitize_text_field( wp_unslash( $_GET['bylt_preview'] ) ) ) ) {
			setcookie( self::COOKIE, $this->cookie_value(), time() + WEEK_IN_SECONDS, COOKIEPATH ? COOKIEPATH : '/', COOKIE_DOMAIN, is_ssl(), true );
			$_COOKIE[ self::COOKIE ] = $this->cookie_value();
			wp_safe_redirect( remove_query_arg( 'bylt_preview' ) );
			exit;
		}
		// Staff can look at the page while it's off (Settings → "See the page").
		$peek = isset( $_GET['bylt_mm_peek'] ) && current_user_can( Bylt_Admin::cap() );
		// phpcs:enable
		if ( ! $peek && ( ! $this->is_on() || $this->always_open() || $this->can_bypass() ) ) {
			return;
		}
		$this->render_page( $peek );
	}

	private function render_page( $peek = false ) {
		$s     = $this->settings();
		$maint = 'maintenance' === $s['mode'];
		$end   = $this->end_time();
		$name  = wp_specialchars_decode( get_bloginfo( 'name' ), ENT_QUOTES );
		$head  = $s['headline'] ? $s['headline'] : ( $maint ? __( 'We\'ll be right back', 'byltcommerce-toolkit' ) : __( 'Coming soon', 'byltcommerce-toolkit' ) );
		$msg   = $s['message'] ? $s['message'] : ( $maint ? __( 'We\'re making some improvements. Please check back shortly.', 'byltcommerce-toolkit' ) : __( 'Our new site is almost ready. Check back soon.', 'byltcommerce-toolkit' ) );

		nocache_headers();
		if ( $maint && ! $peek ) {
			status_header( 503 );
			header( 'Retry-After: ' . ( $end ? max( 60, $end - time() ) : HOUR_IN_SECONDS ) );
		} else {
			status_header( 200 );
		}
		if ( ( $maint || 'yes' === $s['noindex'] ) ) {
			header( 'X-Robots-Tag: noindex, nofollow' );
		}
		header( 'Content-Type: text/html; charset=' . get_bloginfo( 'charset' ) );
		$logo = $s['logo'];
		if ( ! $logo ) { // The theme's logo.
			$id   = (int) get_theme_mod( 'custom_logo' );
			$id   = $id ? $id : (int) get_option( 'site_logo' );
			$logo = $id ? (string) wp_get_attachment_image_url( $id, 'medium' ) : '';
		}
		$bg = $s['bg_image'] ? 'background:' . $s['bg'] . ' url(' . esc_url( $s['bg_image'] ) . ') center/cover no-repeat fixed;' : 'background:' . $s['bg'] . ';';
		// This page skips the theme, so its own styles and script are printed directly (registered the WordPress way).
		wp_register_style( 'bylt-maintenance', $this->url( 'assets/maintenance.css' ), array(), BYLT_VERSION );
		wp_add_inline_style( 'bylt-maintenance', 'body{' . esc_html( $bg ) . 'color:' . esc_html( $s['text'] ) . '}.bylt-mm-contact a{color:' . esc_html( $s['accent'] ) . '}' );
		wp_register_script( 'bylt-maintenance-countdown', $this->url( 'assets/countdown.js' ), array(), BYLT_VERSION, true );
		?>
<!doctype html>
<html <?php language_attributes(); ?>>
<head>
<meta charset="<?php bloginfo( 'charset' ); ?>">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="robots" content="noindex, nofollow">
<title><?php echo esc_html( $head . ' · ' . $name ); ?></title>
		<?php
		$icon = get_site_icon_url( 64 );
		if ( $icon ) {
			echo '<link rel="icon" href="' . esc_url( $icon ) . '">';
		}
		?>
		<?php
		wp_print_styles( 'bylt-maintenance' );
		?>
</head>
<body>
		<?php if ( $peek ) : ?>
	<div class="bylt-mm-peek"><?php echo esc_html( $this->is_on() ? __( 'You\'re seeing the page visitors see.', 'byltcommerce-toolkit' ) : __( 'Preview: this page isn\'t switched on yet.', 'byltcommerce-toolkit' ) ); ?></div>
		<?php endif; ?>
<main class="bylt-mm">
		<?php if ( $logo ) : ?>
	<img class="bylt-mm-logo" src="<?php echo esc_url( $logo ); ?>" alt="<?php echo esc_attr( $name ); ?>">
		<?php else : ?>
	<div class="bylt-mm-name"><?php echo esc_html( $name ); ?></div>
		<?php endif; ?>
	<h1><?php echo esc_html( $head ); ?></h1>
	<div class="bylt-mm-msg"><?php echo wp_kses_post( wpautop( $msg ) ); ?></div>
		<?php if ( $end && 'yes' === $s['countdown'] && $end > time() ) : ?>
	<div class="bylt-mm-count" data-end="<?php echo (int) $end; ?>" aria-label="<?php esc_attr_e( 'Time left', 'byltcommerce-toolkit' ); ?>">
		<div><b data-u="d">0</b><span><?php esc_html_e( 'Days', 'byltcommerce-toolkit' ); ?></span></div>
		<div><b data-u="h">0</b><span><?php esc_html_e( 'Hours', 'byltcommerce-toolkit' ); ?></span></div>
		<div><b data-u="m">0</b><span><?php esc_html_e( 'Minutes', 'byltcommerce-toolkit' ); ?></span></div>
		<div><b data-u="s">0</b><span><?php esc_html_e( 'Seconds', 'byltcommerce-toolkit' ); ?></span></div>
	</div>
		<?php endif; ?>
		<?php if ( $s['contact'] ) : ?>
	<p class="bylt-mm-contact"><?php esc_html_e( 'Questions?', 'byltcommerce-toolkit' ); ?> <a href="mailto:<?php echo esc_attr( antispambot( $s['contact'] ) ); ?>"><?php echo esc_html( antispambot( $s['contact'] ) ); ?></a></p>
		<?php endif; ?>
</main>
		<?php if ( 'yes' === $s['staff_link'] ) : ?>
<a class="bylt-mm-staff" href="<?php echo esc_url( wp_login_url( home_url( '/' ) ) ); ?>" rel="nofollow"><?php esc_html_e( 'Staff login', 'byltcommerce-toolkit' ); ?></a>
		<?php endif; ?>
		<?php
		if ( $end && 'yes' === $s['countdown'] && $end > time() ) {
			wp_print_scripts( 'bylt-maintenance-countdown' );
		}
		?>
</body>
</html>
		<?php
		exit;
	}

	public function admin_bar( $bar ) {
		if ( ! $this->is_on() || ! current_user_can( Bylt_Admin::cap() ) ) {
			return;
		}
		$bar->add_node(
			array(
				'id'    => 'bylt-maintenance',
				'title' => 'maintenance' === $this->settings()['mode'] ? __( 'Maintenance mode is on', 'byltcommerce-toolkit' ) : __( 'Coming soon mode is on', 'byltcommerce-toolkit' ),
				'href'  => Bylt_Admin::url( 'maintenance' ),
				'meta'  => array( 'class' => 'bylt-mm-bar' ),
			)
		);
	}

	public function admin_bar_css() {
		if ( $this->is_on() && is_admin_bar_showing() ) {
			wp_add_inline_style( 'admin-bar', '#wpadminbar .bylt-mm-bar > .ab-item{background:#b32d2e!important;color:#fff!important;font-weight:600}' );
		}
	}

	/* ---------------------------------------------------------------------
	 * Settings
	 * ------------------------------------------------------------------- */

	public function settings_tab( $tabs ) {
		$tabs['maintenance'] = __( 'Maintenance', 'byltcommerce-toolkit' );
		return $tabs;
	}

	public function render_settings() {
		$s     = $this->settings();
		$roles = wp_roles()->get_names();
		// phpcs:ignore WordPress.Security.NonceVerification
		if ( isset( $_GET['updated'] ) ) {
			echo '<div class="notice notice-success is-dismissible"><p>' . esc_html__( 'Settings saved.', 'byltcommerce-toolkit' ) . '</p></div>';
		}
		if ( $this->is_on() ) {
			echo '<div class="notice notice-error inline"><p><strong>' . esc_html( 'maintenance' === $s['mode'] ? __( 'Maintenance mode is on: visitors see the maintenance page.', 'byltcommerce-toolkit' ) : __( 'Coming soon mode is on: visitors see the coming soon page.', 'byltcommerce-toolkit' ) ) . '</strong></p></div>';
		} elseif ( 'yes' === $s['enabled'] && $this->end_time() ) {
			echo '<div class="notice notice-info inline"><p>' . esc_html__( 'The end time has passed, so the site is open again. Clear or change the end time to switch it back on.', 'byltcommerce-toolkit' ) . '</p></div>';
		}
		echo '<form method="post" action="' . esc_url( admin_url( 'admin-post.php' ) ) . '"><input type="hidden" name="action" value="bylt_maintenance_save">';
		wp_nonce_field( 'bylt_maintenance_save' );
		echo '<table class="form-table" role="presentation">';
		echo '<tr><th scope="row">' . esc_html__( 'Status', 'byltcommerce-toolkit' ) . '</th><td><label class="bylt-tweak-head"><input type="checkbox" class="bylt-switch" name="enabled" value="yes" ' . checked( $s['enabled'], 'yes', false ) . '> ' . esc_html__( 'On: visitors see the page below', 'byltcommerce-toolkit' ) . '</label></td></tr>';
		echo '<tr><th scope="row">' . esc_html__( 'Type', 'byltcommerce-toolkit' ) . '</th><td>';
		echo '<label style="display:block;margin-bottom:6px"><input type="radio" name="mode" value="soon" ' . checked( $s['mode'], 'soon', false ) . '> <strong>' . esc_html__( 'Coming soon', 'byltcommerce-toolkit' ) . '</strong> — ' . esc_html__( 'a new site that isn\'t launched yet', 'byltcommerce-toolkit' ) . '</label>';
		echo '<label style="display:block"><input type="radio" name="mode" value="maintenance" ' . checked( $s['mode'], 'maintenance', false ) . '> <strong>' . esc_html__( 'Maintenance', 'byltcommerce-toolkit' ) . '</strong> — ' . esc_html__( 'a live site that\'s briefly down; search engines are told to come back later (503), so rankings aren\'t affected', 'byltcommerce-toolkit' ) . '</label>';
		echo '<label style="display:block;margin-top:10px"><input type="checkbox" name="noindex" value="yes" ' . checked( $s['noindex'], 'yes', false ) . '> ' . esc_html__( 'Coming soon: ask search engines not to index the page', 'byltcommerce-toolkit' ) . '</label></td></tr>';
		echo '<tr><th scope="row"><label for="bylt-mm-end">' . esc_html__( 'Switch off at', 'byltcommerce-toolkit' ) . '</label></th><td><input type="datetime-local" id="bylt-mm-end" name="end" value="' . esc_attr( $s['end'] ) . '"> <label><input type="checkbox" name="countdown" value="yes" ' . checked( $s['countdown'], 'yes', false ) . '> ' . esc_html__( 'Show a countdown', 'byltcommerce-toolkit' ) . '</label>';
		/* translators: %s: timezone */
		echo '<p class="description">' . esc_html( sprintf( __( 'Optional. The site opens on its own at this time (%s).', 'byltcommerce-toolkit' ), wp_timezone_string() ) ) . '</p></td></tr>';
		echo '</table>';

		echo '<h2>' . esc_html__( 'The page', 'byltcommerce-toolkit' ) . '</h2><table class="form-table" role="presentation">';
		echo '<tr><th scope="row"><label for="bylt-mm-head">' . esc_html__( 'Headline', 'byltcommerce-toolkit' ) . '</label></th><td><input type="text" class="regular-text" id="bylt-mm-head" name="headline" value="' . esc_attr( $s['headline'] ) . '" placeholder="' . esc_attr__( 'Coming soon / We\'ll be right back', 'byltcommerce-toolkit' ) . '"></td></tr>';
		echo '<tr><th scope="row"><label for="bylt-mm-msg">' . esc_html__( 'Message', 'byltcommerce-toolkit' ) . '</label></th><td><textarea class="large-text" rows="4" id="bylt-mm-msg" name="message" placeholder="' . esc_attr__( 'Our new site is almost ready. Check back soon.', 'byltcommerce-toolkit' ) . '">' . esc_textarea( $s['message'] ) . '</textarea><p class="description">' . esc_html__( 'Links and bold text are allowed.', 'byltcommerce-toolkit' ) . '</p></td></tr>';
		echo '<tr><th scope="row">' . esc_html__( 'Logo', 'byltcommerce-toolkit' ) . '</th><td>';
		Bylt_Admin::media_field( 'logo', $s['logo'], 'bylt-mm-logo' );
		echo '<p class="description">' . esc_html__( 'Empty: your theme\'s logo, or the site name if there isn\'t one.', 'byltcommerce-toolkit' ) . '</p></td></tr>';
		echo '<tr><th scope="row">' . esc_html__( 'Background image', 'byltcommerce-toolkit' ) . '</th><td>';
		Bylt_Admin::media_field( 'bg_image', $s['bg_image'], 'bylt-mm-bgimg' );
		echo '</td></tr>';
		echo '<tr><th scope="row">' . esc_html__( 'Colours', 'byltcommerce-toolkit' ) . '</th><td class="bylt-mm-colors">';
		foreach ( array( 'bg' => __( 'Background', 'byltcommerce-toolkit' ), 'text' => __( 'Text', 'byltcommerce-toolkit' ), 'accent' => __( 'Links', 'byltcommerce-toolkit' ) ) as $k => $l ) {
			echo '<label style="margin-right:18px">' . esc_html( $l ) . ' <input type="color" name="' . esc_attr( $k ) . '" value="' . esc_attr( $s[ $k ] ) . '"></label>';
		}
		echo '</td></tr>';
		echo '<tr><th scope="row"><label for="bylt-mm-contact">' . esc_html__( 'Contact email', 'byltcommerce-toolkit' ) . '</label></th><td><input type="email" class="regular-text" id="bylt-mm-contact" name="contact" value="' . esc_attr( $s['contact'] ) . '"> <label><input type="checkbox" name="staff_link" value="yes" ' . checked( $s['staff_link'], 'yes', false ) . '> ' . esc_html__( 'Small "Staff login" link in the corner', 'byltcommerce-toolkit' ) . '</label></td></tr>';
		echo '</table>';
		echo '<p><a class="button" href="' . esc_url( add_query_arg( 'bylt_mm_peek', 1, home_url( '/' ) ) ) . '" target="_blank" rel="noopener">' . esc_html__( 'See the page', 'byltcommerce-toolkit' ) . '</a> <span class="description">' . esc_html__( 'Save first to see your changes.', 'byltcommerce-toolkit' ) . '</span></p>';

		echo '<h2>' . esc_html__( 'Who still sees the site', 'byltcommerce-toolkit' ) . '</h2><table class="form-table" role="presentation">';
		echo '<tr><th scope="row">' . esc_html__( 'Logged-in roles', 'byltcommerce-toolkit' ) . '</th><td>';
		foreach ( $roles as $slug => $label ) {
			echo '<label style="display:inline-block;margin:0 16px 6px 0"><input type="checkbox" name="roles[]" value="' . esc_attr( $slug ) . '" ' . checked( in_array( $slug, (array) $s['roles'], true ), true, false ) . disabled( 'administrator', $slug, false ) . '> ' . esc_html( translate_user_role( $label ) ) . '</label>';
		}
		echo '<input type="hidden" name="roles[]" value="administrator"><p class="description">' . esc_html__( 'Administrators always see the site.', 'byltcommerce-toolkit' ) . '</p></td></tr>';
		echo '<tr><th scope="row">' . esc_html__( 'Preview link for clients', 'byltcommerce-toolkit' ) . '</th><td>';
		if ( $this->preview_url() ) {
			echo '<input type="text" class="large-text code" readonly value="' . esc_attr( $this->preview_url() ) . '" onclick="this.select()">';
		}
		echo '<p class="description">' . esc_html__( 'Anyone who opens this link sees the real site for 7 days in that browser, without logging in.', 'byltcommerce-toolkit' ) . '</p>';
		echo '<label><input type="checkbox" name="new_token" value="1"> ' . esc_html( $this->preview_url() ? __( 'Make a new link (the old one stops working)', 'byltcommerce-toolkit' ) : __( 'Make a preview link', 'byltcommerce-toolkit' ) ) . '</label></td></tr>';
		/* translators: %s: visitor's IP */
		echo '<tr><th scope="row"><label for="bylt-mm-ips">' . esc_html__( 'Allowed IP addresses', 'byltcommerce-toolkit' ) . '</label></th><td><textarea class="large-text code" rows="3" id="bylt-mm-ips" name="ips" placeholder="203.0.113.7&#10;198.51.100.0/24">' . esc_textarea( $s['ips'] ) . '</textarea><p class="description">' . esc_html( sprintf( __( 'One per line; ranges like 198.51.100.0/24 work. Your address right now is %s.', 'byltcommerce-toolkit' ), Bylt_Ip::client() ) ) . '</p></td></tr>';
		echo '<tr><th scope="row"><label for="bylt-mm-paths">' . esc_html__( 'Pages that stay open', 'byltcommerce-toolkit' ) . '</label></th><td><textarea class="large-text code" rows="3" id="bylt-mm-paths" name="paths" placeholder="/privacy-policy/&#10;/webhooks/">' . esc_textarea( $s['paths'] ) . '</textarea><p class="description">' . esc_html__( 'Addresses starting with these stay open to everyone. The REST API, WooCommerce payment webhooks (wc-api), robots.txt, wp-admin and the login page are always open.', 'byltcommerce-toolkit' ) . '</p></td></tr>';
		echo '</table>';
		submit_button();
		echo '</form>';
	}

	private static function color( $v, $fallback ) {
		$v = sanitize_hex_color( (string) $v );
		return $v ? $v : $fallback;
	}

	public function save_settings() {
		if ( ! current_user_can( Bylt_Admin::cap() ) ) {
			wp_die( esc_html__( 'You do not have permission to change these settings.', 'byltcommerce-toolkit' ), 403 );
		}
		check_admin_referer( 'bylt_maintenance_save' );
		$d   = self::defaults();
		$old = $this->settings();
		// phpcs:disable WordPress.Security.NonceVerification -- checked above.
		$end = isset( $_POST['end'] ) ? sanitize_text_field( wp_unslash( $_POST['end'] ) ) : '';
		$new = array(
			'enabled'    => empty( $_POST['enabled'] ) ? 'no' : 'yes',
			'mode'       => isset( $_POST['mode'] ) && 'maintenance' === $_POST['mode'] ? 'maintenance' : 'soon',
			'headline'   => isset( $_POST['headline'] ) ? sanitize_text_field( wp_unslash( $_POST['headline'] ) ) : '',
			'message'    => isset( $_POST['message'] ) ? wp_kses_post( wp_unslash( $_POST['message'] ) ) : '',
			'logo'       => isset( $_POST['logo'] ) ? esc_url_raw( wp_unslash( $_POST['logo'] ) ) : '',
			'bg_image'   => isset( $_POST['bg_image'] ) ? esc_url_raw( wp_unslash( $_POST['bg_image'] ) ) : '',
			'bg'         => self::color( isset( $_POST['bg'] ) ? wp_unslash( $_POST['bg'] ) : '', $d['bg'] ), // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- sanitize_hex_color().
			'text'       => self::color( isset( $_POST['text'] ) ? wp_unslash( $_POST['text'] ) : '', $d['text'] ), // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
			'accent'     => self::color( isset( $_POST['accent'] ) ? wp_unslash( $_POST['accent'] ) : '', $d['accent'] ), // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
			'end'        => preg_match( '/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}$/', $end ) ? $end : '',
			'countdown'  => empty( $_POST['countdown'] ) ? 'no' : 'yes',
			'contact'    => isset( $_POST['contact'] ) ? sanitize_email( wp_unslash( $_POST['contact'] ) ) : '',
			'staff_link' => empty( $_POST['staff_link'] ) ? 'no' : 'yes',
			'noindex'    => empty( $_POST['noindex'] ) ? 'no' : 'yes',
			'roles'      => isset( $_POST['roles'] ) ? array_values( array_unique( array_intersect( array_map( 'sanitize_key', (array) wp_unslash( $_POST['roles'] ) ), array_keys( wp_roles()->get_names() ) ) ) ) : array( 'administrator' ),
			'ips'        => isset( $_POST['ips'] ) ? implode( "\n", Bylt_Ip::parse_list( sanitize_textarea_field( wp_unslash( $_POST['ips'] ) ) ) ) : '',
			'paths'      => isset( $_POST['paths'] ) ? implode( "\n", array_filter( array_map( 'trim', array_map( 'sanitize_text_field', preg_split( '/\r\n|\r|\n/', (string) wp_unslash( $_POST['paths'] ) ) ) ) ) ) : '', // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- each line sanitized.
			'token'      => ! empty( $_POST['new_token'] ) || ! $old['token'] ? strtolower( wp_generate_password( 24, false ) ) : $old['token'],
		);
		// phpcs:enable
		if ( ! in_array( 'administrator', $new['roles'], true ) ) {
			$new['roles'][] = 'administrator';
		}
		update_option( self::OPTION, $new, false );
		$this->settings = null;
		if ( $old['enabled'] !== $new['enabled'] || $old['mode'] !== $new['mode'] ) {
			Bylt_Cache::purge_all(); // Visitors must not get a cached copy of the other state.
		}
		$this->log( 'settings_changed', sprintf( 'Maintenance & Coming Soon saved: %1$s (%2$s)%3$s.', 'yes' === $new['enabled'] ? 'on' : 'off', $new['mode'], $new['end'] ? ', until ' . $new['end'] : '' ) );
		wp_safe_redirect( Bylt_Admin::url( 'maintenance', array( 'updated' => 1 ) ) );
		exit;
	}
}