<?php
/**
 * The banner on every public page.
 *
 * Printed at wp_head priority 1, before the scripts other plugins enqueue
 * (WordPress prints those at priority 9), so Google's consent defaults are in
 * place before any Google tag runs. Never on wp-admin or the login page:
 * neither runs wp_head.
 */

defined( 'ABSPATH' ) || exit;

/**
 * Google Consent Mode defaults, the same ones the Installation page in Izini
 * shows: everything that needs consent starts denied until the visitor chooses.
 */
function izini_consent_defaults_script() {
	return "window.dataLayer = window.dataLayer || [];\n"
		. "function gtag(){dataLayer.push(arguments);}\n"
		. "gtag('consent', 'default', {"
		. "'analytics_storage': 'denied', 'ad_storage': 'denied', 'ad_user_data': 'denied', 'ad_personalization': 'denied', "
		. "'functionality_storage': 'granted', 'security_storage': 'granted', 'wait_for_update': 500});";
}

function izini_print_banner() {
	$code = izini_project_code();
	if ( '' === $code ) {
		return;
	}

	/**
	 * Whether to print the Google Consent Mode defaults before the banner: the
	 * Advanced tab's setting (on unless switched off), which the filter
	 * izini_consent_mode_defaults can still override.
	 */
	if ( apply_filters( 'izini_consent_mode_defaults', '0' !== get_option( 'izini_consent_defaults', '1' ) ) ) {
		wp_print_inline_script_tag( izini_consent_defaults_script(), array( 'id' => 'izini-consent-defaults' ) );
	}

	wp_print_script_tag(
		array(
			'id'                => 'izini-banner',
			'src'               => esc_url( IZINI_CDN . '/widget.js' ),
			'data-project-code' => $code,
			'data-platform'     => 'wordpress',
			'async'             => true,
		)
	);
}
add_action( 'wp_head', 'izini_print_banner', 1 );