<?php
/**
 * Rate limiter.
 *
 * @package HostKhata
 */

namespace HostKhata\Security;

defined( 'ABSPATH' ) || exit;

use HostKhata\Support\Helpers;

/**
 * Counts attempts per visitor in a transient and tells when a limit is reached.
 * Keyed by IP address, which is the best a public form has.
 *
 * @since 0.1.0
 */
final class RateLimiter {

	/**
	 * Records an attempt and tells whether it is allowed.
	 *
	 * @since 0.1.0
	 *
	 * @param string $bucket Name of the action, for example `register`.
	 * @param int    $limit  Attempts allowed per window.
	 * @param int    $window Window length in seconds.
	 * @return bool False when the visitor is over the limit.
	 */
	public function hit( string $bucket, int $limit, int $window ): bool {
		$key   = 'hostkhata_rl_' . md5( $bucket . '|' . Helpers::client_ip() );
		$count = (int) get_transient( $key );

		if ( $count >= $limit ) {
			return false;
		}

		set_transient( $key, $count + 1, $window );

		return true;
	}
}