<?php
/**
 * Clean up when the plugin is deleted, only if the site asked for it.
 *
 * Without that setting the links stay, so a reinstall keeps every account
 * linked; the encryption key stays too, or the links could never be read again.
 *
 * @package Civipass
 */

if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
	exit;
}

$civipass_settings = get_option( 'civipass_settings' );
if ( ! is_array( $civipass_settings ) || empty( $civipass_settings['delete_on_remove'] ) ) {
	return;
}

foreach ( array( 'civipass_afm_index', 'civipass_afm', 'civipass_service', 'civipass_linked', 'civipass_last_login', 'civipass_extended', 'civipass_pending_email' ) as $civipass_key ) {
	delete_metadata( 'user', 0, $civipass_key, '', true );
}
delete_option( 'civipass_settings' );
delete_option( 'civipass_key' );
delete_option( 'civipass_key_check' );
delete_option( 'civipass_last_error' );
delete_site_option( 'civipass_key' );

// Short-lived sign-in states, pending sign-ups, rate counters and creation locks.
global $wpdb;
$wpdb->query( "DELETE FROM {$wpdb->options} WHERE option_name LIKE '\\_transient\\_civipass\\_%' OR option_name LIKE '\\_transient\\_timeout\\_civipass\\_%' OR option_name LIKE 'civipass\\_lock\\_%'" ); // phpcs:ignore WordPress.DB.DirectDatabaseQuery