<?php

if ( ! defined( 'ABSPATH' ) ) {
    exit;
}

class GUARDFORGE_Vuln_Range {

    /**
 * Decide whether $version falls inside $range.
 *
 * @param string $range Range expression from a feed record.
 * @param string $version Installed version.
 * @return bool
 */
    public static function matches( $range, $version ) {
        $range   = trim( (string) $range );
        $version = trim( (string) $version );
        if ( $range === '' || $version === '' ) {
            return false;
        }
        // Comma-separated windows are alternatives, not a conjunction: the
        // mirror joins one slug's several affected windows with commas, and a
        // version inside any of them is affected.
        if ( strpos( $range, ',' ) !== false ) {
            foreach ( explode( ',', $range ) as $part ) {
                if ( self::matches( $part, $version ) ) {
                    return true;
                }
            }
            return false;
        }
        // Every version. The mirror writes this when the advisory names no
        // version at all, which is the widest claim it can make, not the
        // narrowest.
        if ( $range === '*' ) {
            return true;
        }
        if ( preg_match( '/^<=\s*(.+)$/', $range, $m ) ) {
            return version_compare( $version, trim( $m[1] ), '<=' );
        }
        if ( preg_match( '/^<\s*(.+)$/', $range, $m ) ) {
            return version_compare( $version, trim( $m[1] ), '<' );
        }
        if ( preg_match( '/^>=\s*(.+)$/', $range, $m ) ) {
            return version_compare( $version, trim( $m[1] ), '>=' );
        }
        if ( preg_match( '/^>\s*(.+)$/', $range, $m ) ) {
            return version_compare( $version, trim( $m[1] ), '>' );
        }
        if ( preg_match( '/^=\s*(.+)$/', $range, $m ) ) {
            return version_compare( $version, trim( $m[1] ), '=' );
        }
        if ( preg_match( '/^(\d[^\s]*?)\s*-\s*(\d[^\s]*)$/', $range, $m ) ) {
            $lo = trim( $m[1] );
            $hi = trim( $m[2] );
            return version_compare( $version, $lo, '>=' ) && version_compare( $version, $hi, '<=' );
        }
        // Fallback: bare version string == exact match.
        return version_compare( $version, $range, '=' );
    }

    public static function patched_version( $range ) {
        $best = '';
        foreach ( explode( ',', (string) $range ) as $part ) {
            if ( ! preg_match( '/^<(?!=)\s*(.+)$/', trim( $part ), $m ) ) {
                continue;
            }
            $version = trim( $m[1] );
            if ( $version === '' ) {
                continue;
            }
            if ( $best === '' || version_compare( $version, $best, '>' ) ) {
                $best = $version;
            }
        }
        return $best;
    }
}