<?php
/**
 * Settings screen: Settings → Logvia.
 *
 * @package Logvia
 */

defined( 'ABSPATH' ) || exit;

/**
 * Admin.
 */
final class Logvia_Admin {

	/**
	 * Hooks.
	 */
	public static function init() {
		add_action( 'admin_menu', array( __CLASS__, 'menu' ) );
		add_action( 'admin_init', array( __CLASS__, 'register' ) );
		add_action( 'admin_notices', array( __CLASS__, 'notices' ) );
		add_action( 'admin_post_logvia_create_page', array( __CLASS__, 'create_page' ) );
		add_action( 'admin_enqueue_scripts', array( __CLASS__, 'assets' ) );
		add_filter( 'plugin_action_links_' . plugin_basename( LOGVIA_FILE ), array( __CLASS__, 'action_links' ) );
		add_filter( 'display_post_states', array( __CLASS__, 'post_state' ), 10, 2 );
	}

	/**
	 * Tabs and the fields each one owns.
	 *
	 * @return array
	 */
	private static function tabs() {
		$tabs = array(
			'general'      => array(
				'label'  => __( 'General', 'logvia' ),
				'fields' => array( 'page_id', 'replace_wp_links', 'redirect_wp_login', 'redirect_after_login', 'redirect_custom', 'redirect_after_register', 'redirect_register_custom', 'redirect_after_logout', 'redirect_logout_custom', 'delete_data' ),
			),
			'registration' => array(
				'label'  => __( 'Registration', 'logvia' ),
				'fields' => array( 'registration', 'email_verification', 'min_password', 'default_role', 'reset_method' ),
			),
			'popup'        => array(
				'label'  => __( 'Popup', 'logvia' ),
				'fields' => array( 'popup_enabled', 'popup_style', 'popup_side', 'popup_intercept', 'popup_auto', 'popup_auto_delay', 'popup_auto_pages', 'popup_auto_once', 'popup_force' ),
			),
			'appearance'   => array(
				'label'  => __( 'Appearance', 'logvia' ),
				'fields' => array( 'accent', 'button_text', 'tab_active', 'tab_active_text', 'radius', 'popup_width', 'overlay_color', 'overlay_opacity', 'logo', 'layout', 'image', 'image_title', 'image_text' ),
			),
			'forms'        => array(
				'label'  => __( 'Form builder', 'logvia' ),
				'fields' => array(),
			),
			'texts'        => array(
				'label'  => __( 'Texts & emails', 'logvia' ),
				'fields' => array(),
			),
			'security'     => array(
				'label'  => __( 'Security', 'logvia' ),
				'fields' => array( 'captcha', 'captcha_site_key', 'captcha_secret', 'captcha_login', 'captcha_register', 'captcha_forgot', 'recaptcha_threshold', 'strength_meter', 'min_strength', 'limit_attempts', 'limit_window' ),
			),
			'google'       => array(
				'label'  => __( 'Google sign-in', 'logvia' ),
				'fields' => array( 'google_enabled', 'google_client_id', 'google_client_secret', 'google_register', 'google_allow_privileged' ),
			),
			'woocommerce'  => array(
				'label'  => __( 'WooCommerce', 'logvia' ),
				'fields' => array( 'wc_replace_myaccount', 'wc_checkout_login', 'gate_enabled', 'gate_notice' ),
			),
		);
		/**
		 * Filter the settings tabs and the fields each one saves. Add-ons
		 * append their own field keys to a tab here.
		 *
		 * @param array $tabs Tabs.
		 */
		return apply_filters( 'logvia_settings_tabs', $tabs );
	}

	/**
	 * Checkbox fields (missing from POST means off).
	 *
	 * @return string[]
	 */
	private static function checkboxes() {
		return apply_filters( 'logvia_settings_checkboxes', array( 'registration', 'email_verification', 'replace_wp_links', 'redirect_wp_login', 'delete_data', 'popup_enabled', 'popup_intercept', 'popup_auto', 'popup_auto_once', 'popup_force', 'captcha_login', 'captcha_register', 'captcha_forgot', 'strength_meter', 'google_enabled', 'google_register', 'google_allow_privileged', 'wc_replace_myaccount', 'wc_checkout_login', 'gate_enabled' ) );
	}

	/**
	 * Allowed values for select/radio fields.
	 *
	 * @return array
	 */
	private static function choices() {
		$choices = array(
			'redirect_after_login'    => array( 'account', 'home', 'same', 'custom' ),
			'redirect_after_register' => array( 'login', 'account', 'home', 'same', 'custom' ),
			'redirect_after_logout'   => array( 'login', 'home', 'same', 'custom' ),
			'reset_method'            => array( 'link', 'code' ),
			'popup_style'             => array( 'modal', 'slide' ),
			'popup_side'              => array( 'right', 'left' ),
			'layout'                  => array( 'card', 'split' ),
			'captcha'                 => array( 'none', 'turnstile', 'recaptcha_v2', 'recaptcha_v3' ),
			'min_strength'            => array( '0', '2', '3' ),
		);
		return apply_filters( 'logvia_settings_choices', $choices );
	}

	/**
	 * Menu entry.
	 */
	public static function menu() {
		add_options_page( __( 'Logvia', 'logvia' ), __( 'Logvia', 'logvia' ), 'manage_options', 'logvia', array( __CLASS__, 'render' ) );
	}

	/**
	 * Media picker on the Appearance tab.
	 *
	 * @param string $hook Hook.
	 */
	public static function assets( $hook ) {
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab check only.
		if ( 'settings_page_logvia' === $hook && isset( $_GET['tab'] ) && 'appearance' === $_GET['tab'] ) {
			wp_enqueue_media();
			wp_add_inline_script(
				'media-editor',
				"document.addEventListener('click',function(e){var b=e.target.closest('[data-logvia-media]');if(!b)return;e.preventDefault();var f=wp.media({library:{type:'image'},multiple:false});f.on('select',function(){var a=f.state().get('selection').first().toJSON();document.getElementById(b.getAttribute('data-logvia-media')).value=a.url;});f.open();});"
			);
		}
	}

	/**
	 * Register the option.
	 */
	public static function register() {
		register_setting(
			'logvia',
			Logvia_Settings::OPTION,
			array(
				'type'              => 'array',
				'sanitize_callback' => array( __CLASS__, 'sanitize' ),
			)
		);
	}

	/**
	 * Sanitize the fields of the submitted tab and keep the rest.
	 *
	 * @param mixed $input Submitted values.
	 * @return array
	 */
	public static function sanitize( $input ) {
		$input = is_array( $input ) ? $input : array();
		$old   = Logvia_Settings::all();
		$tabs  = self::tabs();
		$tab   = isset( $input['_tab'] ) && ! empty( $tabs[ $input['_tab'] ]['fields'] ) ? $input['_tab'] : '';

		if ( ! $tab ) {
			// Programmatic update_option() call: keep known keys only.
			return array_intersect_key( wp_parse_args( $input, $old ), Logvia_Settings::defaults() );
		}

		$choices = self::choices();
		$out     = $old;
		foreach ( $tabs[ $tab ]['fields'] as $field ) {
			$value = isset( $input[ $field ] ) ? $input[ $field ] : null;

			if ( in_array( $field, self::checkboxes(), true ) ) {
				$out[ $field ] = empty( $value ) ? 0 : 1;
				continue;
			}
			if ( isset( $choices[ $field ] ) ) {
				$value         = (string) $value;
				$out[ $field ] = in_array( $value, $choices[ $field ], true ) ? ( is_numeric( $value ) ? (int) $value : $value ) : Logvia_Settings::defaults()[ $field ];
				continue;
			}

			switch ( $field ) {
				case 'page_id':
					$out[ $field ] = absint( $value );
					break;
				case 'min_password':
					$out[ $field ] = min( 64, max( 6, absint( $value ) ) );
					break;
				case 'radius':
					$out[ $field ] = min( 30, absint( $value ) );
					break;
				case 'popup_width':
					$out[ $field ] = min( 900, max( 320, absint( $value ) ) );
					break;
				case 'overlay_opacity':
					$out[ $field ] = min( 100, absint( $value ) );
					break;
				case 'popup_auto_delay':
					$out[ $field ] = min( 120, absint( $value ) );
					break;
				case 'limit_attempts':
					$out[ $field ] = min( 50, max( 1, absint( $value ) ) );
					break;
				case 'limit_window':
					$out[ $field ] = min( 1440, max( 1, absint( $value ) ) );
					break;
				case 'recaptcha_threshold':
					$out[ $field ] = min( 1, max( 0, round( (float) $value, 1 ) ) );
					break;
				case 'default_role':
					$value         = sanitize_key( (string) $value );
					$out[ $field ] = array_key_exists( $value, Logvia_Forms::assignable_roles() ) ? $value : '';
					break;
				case 'accent':
				case 'button_text':
				case 'tab_active':
				case 'tab_active_text':
				case 'overlay_color':
					$color         = sanitize_hex_color( (string) $value );
					$out[ $field ] = $color ? $color : Logvia_Settings::defaults()[ $field ];
					break;
				case 'redirect_custom':
				case 'redirect_register_custom':
				case 'redirect_logout_custom':
				case 'image':
				case 'logo':
					$out[ $field ] = esc_url_raw( trim( (string) $value ) );
					break;
				case 'image_text':
					$out[ $field ] = sanitize_textarea_field( (string) $value );
					break;
				case 'popup_auto_pages':
					$out[ $field ] = implode( ',', array_filter( array_map( 'sanitize_title', explode( ',', (string) $value ) ) ) );
					break;
				default:
					$out[ $field ] = sanitize_text_field( (string) $value );
			}
		}
		return $out;
	}

	/**
	 * Settings page.
	 */
	public static function render() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return;
		}
		$tabs = self::tabs();
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab switch only.
		$tab = isset( $_GET['tab'] ) ? sanitize_key( wp_unslash( $_GET['tab'] ) ) : 'general';
		$tab = isset( $tabs[ $tab ] ) ? $tab : 'general';
		$s   = Logvia_Settings::all();
		?>
		<div class="wrap">
			<h1><?php esc_html_e( 'Logvia', 'logvia' ); ?></h1>
			<nav class="nav-tab-wrapper">
				<?php foreach ( $tabs as $key => $t ) : ?>
					<a href="<?php echo esc_url( admin_url( 'options-general.php?page=logvia&tab=' . $key ) ); ?>" class="nav-tab <?php echo $key === $tab ? 'nav-tab-active' : ''; ?>"><?php echo esc_html( $t['label'] ); ?></a>
				<?php endforeach; ?>
			</nav>
			<?php
			if ( 'forms' === $tab ) {
				Logvia_Forms_Admin::render_builder();
				echo '</div>';
				return;
			}
			if ( 'texts' === $tab ) {
				Logvia_Forms_Admin::render_texts();
				echo '</div>';
				return;
			}
			?>
			<form method="post" action="options.php">
				<?php settings_fields( 'logvia' ); ?>
				<input type="hidden" name="<?php echo esc_attr( Logvia_Settings::OPTION ); ?>[_tab]" value="<?php echo esc_attr( $tab ); ?>">
				<table class="form-table" role="presentation">
					<?php
					call_user_func( array( __CLASS__, 'tab_' . $tab ), $s );
					/**
					 * Add rows to a settings tab (use the public Logvia_Admin helpers).
					 *
					 * @param array $s Settings.
					 */
					do_action( 'logvia_settings_rows_' . $tab, $s );
					?>
				</table>
				<?php submit_button(); ?>
			</form>
		</div>
		<?php
	}

	/* ------------------------------------------------------------------
	 * Field helpers
	 * ------------------------------------------------------------------ */

	/**
	 * Field name helper.
	 *
	 * @param string $key Setting key.
	 * @return string
	 */
	public static function name( $key ) {
		return Logvia_Settings::OPTION . '[' . $key . ']';
	}

	/**
	 * Checkbox row.
	 *
	 * @param array  $s     Settings.
	 * @param string $key   Key.
	 * @param string $title Row title.
	 * @param string $label Checkbox label.
	 * @param string $desc  Description.
	 */
	public static function checkbox( $s, $key, $title, $label, $desc = '' ) {
		?>
		<tr>
			<th scope="row"><?php echo esc_html( $title ); ?></th>
			<td>
				<label><input type="checkbox" name="<?php echo esc_attr( self::name( $key ) ); ?>" value="1" <?php checked( ! empty( $s[ $key ] ) ); ?>> <?php echo esc_html( $label ); ?></label>
				<?php if ( $desc ) : ?>
					<p class="description"><?php echo esc_html( $desc ); ?></p>
				<?php endif; ?>
			</td>
		</tr>
		<?php
	}

	/**
	 * Text row.
	 *
	 * @param array  $s     Settings.
	 * @param string $key   Key.
	 * @param string $title Row title.
	 * @param string $desc  Description.
	 * @param string $type  Input type.
	 * @param string $class CSS class.
	 * @param string $after HTML after the input (trusted).
	 */
	public static function text( $s, $key, $title, $desc = '', $type = 'text', $class = 'regular-text', $after = '' ) {
		$id = 'logvia-' . $key;
		?>
		<tr>
			<th scope="row"><label for="<?php echo esc_attr( $id ); ?>"><?php echo esc_html( $title ); ?></label></th>
			<td>
				<input type="<?php echo esc_attr( $type ); ?>" id="<?php echo esc_attr( $id ); ?>" class="<?php echo esc_attr( $class ); ?>" name="<?php echo esc_attr( self::name( $key ) ); ?>" value="<?php echo esc_attr( $s[ $key ] ); ?>" <?php echo 'password' === $type ? 'autocomplete="new-password"' : 'autocomplete="off"'; ?> <?php echo 'number' === $type ? 'step="any"' : ''; ?>>
				<?php echo $after; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Trusted markup built in this class. ?>
				<?php if ( $desc ) : ?>
					<p class="description"><?php echo esc_html( $desc ); ?></p>
				<?php endif; ?>
			</td>
		</tr>
		<?php
	}

	/**
	 * Select row.
	 *
	 * @param array  $s       Settings.
	 * @param string $key     Key.
	 * @param string $title   Row title.
	 * @param array  $options value => label.
	 * @param string $desc    Description.
	 */
	public static function select( $s, $key, $title, $options, $desc = '' ) {
		$id = 'logvia-' . $key;
		?>
		<tr>
			<th scope="row"><label for="<?php echo esc_attr( $id ); ?>"><?php echo esc_html( $title ); ?></label></th>
			<td>
				<select id="<?php echo esc_attr( $id ); ?>" name="<?php echo esc_attr( self::name( $key ) ); ?>">
					<?php foreach ( $options as $value => $label ) : ?>
						<option value="<?php echo esc_attr( $value ); ?>" <?php selected( (string) $s[ $key ], (string) $value ); ?>><?php echo esc_html( $label ); ?></option>
					<?php endforeach; ?>
				</select>
				<?php if ( $desc ) : ?>
					<p class="description"><?php echo esc_html( $desc ); ?></p>
				<?php endif; ?>
			</td>
		</tr>
		<?php
	}

	/**
	 * Section heading inside the table.
	 *
	 * @param string $title Title.
	 */
	public static function section( $title ) {
		echo '<tr><th colspan="2" style="padding-bottom:0"><h2 style="margin:12px 0 0">' . esc_html( $title ) . '</h2></th></tr>';
	}

	/* ------------------------------------------------------------------
	 * Tabs
	 * ------------------------------------------------------------------ */

	/**
	 * General tab.
	 *
	 * @param array $s Settings.
	 */
	private static function tab_general( $s ) {
		$page = Logvia_Plugin::page_id();
		?>
		<tr>
			<th scope="row"><label for="logvia-page_id"><?php esc_html_e( 'Account page', 'logvia' ); ?></label></th>
			<td>
				<?php
				wp_dropdown_pages(
					array(
						'name'              => esc_attr( self::name( 'page_id' ) ),
						'id'                => 'logvia-page_id',
						'selected'          => (int) $s['page_id'],
						'show_option_none'  => esc_html__( '— Select —', 'logvia' ),
						'option_none_value' => '0',
					)
				);
				?>
				<p class="description">
					<?php esc_html_e( 'The page that holds the [logvia] shortcode. Screens live under it, for example:', 'logvia' ); ?>
					<?php if ( $page ) : ?>
						<code><?php echo esc_html( Logvia_Plugin::url( 'login' ) ); ?></code>
					<?php endif; ?>
				</p>
				<?php if ( ! $page ) : ?>
					<p><a class="button" href="<?php echo esc_url( wp_nonce_url( admin_url( 'admin-post.php?action=logvia_create_page' ), 'logvia_create_page' ) ); ?>"><?php esc_html_e( 'Create the page for me', 'logvia' ); ?></a></p>
				<?php endif; ?>
			</td>
		</tr>
		<?php
		self::checkbox( $s, 'replace_wp_links', __( 'WordPress links', 'logvia' ), __( 'Point WordPress login, register and lost-password links to Logvia', 'logvia' ) );
		self::checkbox( $s, 'redirect_wp_login', __( 'wp-login.php', 'logvia' ), __( 'Send visitors of wp-login.php to Logvia', 'logvia' ), __( 'Password-reset links and logout keep working. If you ever get locked out, add define( \'LOGVIA_DISABLE_WP_LOGIN_REDIRECT\', true ); to wp-config.php.', 'logvia' ) );

		self::section( __( 'Redirects', 'logvia' ) );
		$common = array(
			'account' => __( 'My Account page', 'logvia' ),
			'home'    => __( 'Home page', 'logvia' ),
			'same'    => __( 'Stay on the same page', 'logvia' ),
			'custom'  => __( 'Custom URL', 'logvia' ),
		);
		self::select( $s, 'redirect_after_login', __( 'After login', 'logvia' ), $common, __( 'Used when the visitor did not come from another page (for example a product they wanted to buy).', 'logvia' ) );
		self::text( $s, 'redirect_custom', __( 'Custom URL after login', 'logvia' ), '', 'url', 'large-text' );
		self::select( $s, 'redirect_after_register', __( 'After registration', 'logvia' ), array( 'login' => __( 'Same as after login', 'logvia' ) ) + $common );
		self::text( $s, 'redirect_register_custom', __( 'Custom URL after registration', 'logvia' ), '', 'url', 'large-text' );
		self::select(
			$s,
			'redirect_after_logout',
			__( 'After logout', 'logvia' ),
			array(
				'login'  => __( 'Login screen', 'logvia' ),
				'home'   => __( 'Home page', 'logvia' ),
				'same'   => __( 'Stay on the same page', 'logvia' ),
				'custom' => __( 'Custom URL', 'logvia' ),
			)
		);
		self::text( $s, 'redirect_logout_custom', __( 'Custom URL after logout', 'logvia' ), '', 'url', 'large-text' );

		self::section( __( 'Data', 'logvia' ) );
		self::checkbox( $s, 'delete_data', __( 'Uninstall', 'logvia' ), __( 'Delete Logvia settings and the account page when the plugin is deleted', 'logvia' ) );
	}

	/**
	 * Registration tab.
	 *
	 * @param array $s Settings.
	 */
	private static function tab_registration( $s ) {
		self::checkbox( $s, 'registration', __( 'Registration', 'logvia' ), __( 'Let visitors create accounts', 'logvia' ) );
		self::checkbox( $s, 'email_verification', __( 'Email verification', 'logvia' ), __( 'Confirm the email address with a six-digit code before the account is created', 'logvia' ), __( 'Recommended. It keeps fake and mistyped accounts out of your store.', 'logvia' ) );
		self::text( $s, 'min_password', __( 'Minimum password length', 'logvia' ), '', 'number', 'small-text' );

		$roles = array( '' => __( 'Default (Customer with WooCommerce)', 'logvia' ) ) + Logvia_Forms::assignable_roles();
		self::select( $s, 'default_role', __( 'Role of new accounts', 'logvia' ), $roles, __( 'Only roles without admin, editing or shop-management rights can be chosen.', 'logvia' ) );
		self::select(
			$s,
			'reset_method',
			__( 'Password reset', 'logvia' ),
			array(
				'link' => __( 'Email a reset link', 'logvia' ),
				'code' => __( 'Email a six-digit code (customers stay on the page)', 'logvia' ),
			)
		);
	}

	/**
	 * Popup tab.
	 *
	 * @param array $s Settings.
	 */
	private static function tab_popup( $s ) {
		self::checkbox( $s, 'popup_enabled', __( 'Popup', 'logvia' ), __( 'Open login and registration in a popup', 'logvia' ), __( 'Guests can log in without leaving the page they are on.', 'logvia' ) );
		self::select(
			$s,
			'popup_style',
			__( 'Style', 'logvia' ),
			array(
				'modal' => __( 'Centered window', 'logvia' ),
				'slide' => __( 'Slide-in panel', 'logvia' ),
			)
		);
		self::select(
			$s,
			'popup_side',
			__( 'Panel side', 'logvia' ),
			array(
				'right' => __( 'Right', 'logvia' ),
				'left'  => __( 'Left', 'logvia' ),
			)
		);
		self::checkbox( $s, 'popup_intercept', __( 'Links', 'logvia' ), __( 'Open the popup when visitors click any link to the login or registration screen', 'logvia' ) );
		?>
		<tr>
			<th scope="row"><?php esc_html_e( 'How to open it', 'logvia' ); ?></th>
			<td>
				<ul style="margin:0;list-style:disc;padding-left:18px">
					<li><?php esc_html_e( 'Appearance → Menus → "Logvia" box: Log in, Sign up, My account, Log out items that change with the visitor.', 'logvia' ); ?></li>
					<li><?php esc_html_e( 'Any link to #logvia-login or #logvia-register (works in block-theme navigation too).', 'logvia' ); ?></li>
					<li><?php esc_html_e( 'The classes logvia-login-trigger and logvia-register-trigger on any button or link.', 'logvia' ); ?></li>
					<li><code>[logvia_link type="both"]</code></li>
				</ul>
			</td>
		</tr>
		<?php
		self::section( __( 'Open automatically', 'logvia' ) );
		self::checkbox( $s, 'popup_auto', __( 'Auto-open', 'logvia' ), __( 'Open the popup by itself for guests', 'logvia' ) );
		self::text( $s, 'popup_auto_delay', __( 'Delay (seconds)', 'logvia' ), '', 'number', 'small-text' );
		self::text( $s, 'popup_auto_pages', __( 'Only on these pages', 'logvia' ), __( 'Page IDs, slugs or post types separated by commas, for example: 12,shop,product,home. Leave empty for every page.', 'logvia' ), 'text', 'large-text' );
		self::checkbox( $s, 'popup_auto_once', __( 'Frequency', 'logvia' ), __( 'Open it only once per visitor', 'logvia' ) );
		self::checkbox( $s, 'popup_force', __( 'Members-only site', 'logvia' ), __( 'Open immediately and do not allow closing it', 'logvia' ), __( 'Guests must log in or register to see the page. Use "Only on these pages" to limit it.', 'logvia' ) );
	}

	/**
	 * Appearance tab.
	 *
	 * @param array $s Settings.
	 */
	private static function tab_appearance( $s ) {
		self::text( $s, 'accent', __( 'Accent colour', 'logvia' ), __( 'Buttons, links and focus rings.', 'logvia' ), 'color', '' );
		self::text( $s, 'button_text', __( 'Button text colour', 'logvia' ), '', 'color', '' );
		self::text( $s, 'tab_active', __( 'Popup tab colour', 'logvia' ), __( 'The selected "Log in" / "Sign up" tab in the popup.', 'logvia' ), 'color', '' );
		self::text( $s, 'tab_active_text', __( 'Popup tab text colour', 'logvia' ), '', 'color', '' );
		self::text( $s, 'radius', __( 'Corner radius (px)', 'logvia' ), '', 'number', 'small-text' );
		self::text( $s, 'popup_width', __( 'Popup width (px)', 'logvia' ), '', 'number', 'small-text' );
		self::text( $s, 'overlay_color', __( 'Popup background colour', 'logvia' ), '', 'color', '' );
		self::text( $s, 'overlay_opacity', __( 'Popup background opacity (%)', 'logvia' ), '', 'number', 'small-text' );
		$pick = '<button type="button" class="button" data-logvia-media="logvia-%s">' . esc_html__( 'Choose image', 'logvia' ) . '</button>';
		self::text( $s, 'logo', __( 'Logo', 'logvia' ), __( 'Shown above the forms instead of the icon.', 'logvia' ), 'url', 'regular-text', sprintf( $pick, 'logo' ) );
		self::select(
			$s,
			'layout',
			__( 'Page layout', 'logvia' ),
			array(
				'card'  => __( 'Centered card', 'logvia' ),
				'split' => __( 'Image on the left, form on the right', 'logvia' ),
			),
			__( 'The split layout needs an image and works best on full-width page templates.', 'logvia' )
		);
		self::text( $s, 'image', __( 'Side image', 'logvia' ), __( 'Portrait images of at least 1200×1500 px look best.', 'logvia' ), 'url', 'regular-text', sprintf( $pick, 'image' ) );
		self::text( $s, 'image_title', __( 'Image title', 'logvia' ) );
		?>
		<tr>
			<th scope="row"><label for="logvia-image_text"><?php esc_html_e( 'Image text', 'logvia' ); ?></label></th>
			<td><textarea id="logvia-image_text" class="large-text" rows="3" name="<?php echo esc_attr( self::name( 'image_text' ) ); ?>"><?php echo esc_textarea( $s['image_text'] ); ?></textarea></td>
		</tr>
		<?php
	}

	/**
	 * Security tab.
	 *
	 * @param array $s Settings.
	 */
	private static function tab_security( $s ) {
		self::section( __( 'Bot protection', 'logvia' ) );
		self::select(
			$s,
			'captcha',
			__( 'Captcha', 'logvia' ),
			array(
				'none'         => __( 'Off', 'logvia' ),
				'turnstile'    => __( 'Cloudflare Turnstile (recommended, privacy-friendly)', 'logvia' ),
				'recaptcha_v2' => __( 'Google reCAPTCHA v2 (checkbox)', 'logvia' ),
				'recaptcha_v3' => __( 'Google reCAPTCHA v3 (invisible)', 'logvia' ),
			)
		);
		self::text( $s, 'captcha_site_key', __( 'Site key', 'logvia' ), '', 'text', 'large-text' );
		self::text( $s, 'captcha_secret', __( 'Secret key', 'logvia' ), __( 'Stored on your server only.', 'logvia' ), 'password', 'large-text' );
		?>
		<tr>
			<th scope="row"><?php esc_html_e( 'Protect', 'logvia' ); ?></th>
			<td>
				<?php
				foreach (
					array(
						'captcha_login'    => __( 'Login', 'logvia' ),
						'captcha_register' => __( 'Registration', 'logvia' ),
						'captcha_forgot'   => __( 'Lost password', 'logvia' ),
					) as $key => $label
				) :
					?>
					<label style="margin-right:16px"><input type="checkbox" name="<?php echo esc_attr( self::name( $key ) ); ?>" value="1" <?php checked( ! empty( $s[ $key ] ) ); ?>> <?php echo esc_html( $label ); ?></label>
				<?php endforeach; ?>
			</td>
		</tr>
		<?php
		self::text( $s, 'recaptcha_threshold', __( 'reCAPTCHA v3 minimum score', 'logvia' ), __( 'Between 0 and 1. 0.5 is a good start.', 'logvia' ), 'number', 'small-text' );

		self::section( __( 'Passwords', 'logvia' ) );
		self::checkbox( $s, 'strength_meter', __( 'Strength meter', 'logvia' ), __( 'Show how strong a new password is while it is typed', 'logvia' ) );
		self::select(
			$s,
			'min_strength',
			__( 'Required strength', 'logvia' ),
			array(
				'0' => __( 'No requirement (length only)', 'logvia' ),
				'2' => __( 'At least medium', 'logvia' ),
				'3' => __( 'At least strong', 'logvia' ),
			)
		);

		self::section( __( 'Login attempts', 'logvia' ) );
		self::text( $s, 'limit_attempts', __( 'Failed logins allowed', 'logvia' ), __( 'Per account. Each IP address may try four times as many accounts.', 'logvia' ), 'number', 'small-text' );
		self::text( $s, 'limit_window', __( 'Lockout time (minutes)', 'logvia' ), '', 'number', 'small-text' );
	}

	/**
	 * Google tab.
	 *
	 * @param array $s Settings.
	 */
	private static function tab_google( $s ) {
		?>
		<tr>
			<th scope="row"><?php esc_html_e( 'Setup', 'logvia' ); ?></th>
			<td>
				<ol style="margin-top:0">
					<li><?php esc_html_e( 'Open Google Cloud Console → APIs & Services → Credentials.', 'logvia' ); ?></li>
					<li><?php esc_html_e( 'Create an OAuth client ID of type "Web application".', 'logvia' ); ?></li>
					<li><?php esc_html_e( 'Add this URL under "Authorized redirect URIs":', 'logvia' ); ?><br>
						<?php if ( Logvia_Plugin::page_id() ) : ?>
							<code><?php echo esc_html( Logvia_Google::callback_url() ); ?></code>
						<?php else : ?>
							<em><?php esc_html_e( 'Choose the account page on the General tab first.', 'logvia' ); ?></em>
						<?php endif; ?>
					</li>
					<li><?php esc_html_e( 'Paste the Client ID and Client secret below and enable Google sign-in.', 'logvia' ); ?></li>
				</ol>
			</td>
		</tr>
		<?php
		self::checkbox( $s, 'google_enabled', __( 'Google sign-in', 'logvia' ), __( 'Show "Continue with Google"', 'logvia' ) );
		self::text( $s, 'google_client_id', __( 'Client ID', 'logvia' ), '', 'text', 'large-text' );
		self::text( $s, 'google_client_secret', __( 'Client secret', 'logvia' ), __( 'Stored on your server only and never sent to the browser.', 'logvia' ), 'password' );
		self::checkbox( $s, 'google_register', __( 'New accounts', 'logvia' ), __( 'Create an account the first time someone signs in with Google', 'logvia' ) );
		self::checkbox( $s, 'google_allow_privileged', __( 'Staff accounts', 'logvia' ), __( 'Allow administrators, editors and shop managers to sign in with Google', 'logvia' ), __( 'Off by default: staff log in with their password, so a compromised Google account cannot reach the dashboard.', 'logvia' ) );
	}

	/**
	 * WooCommerce tab.
	 *
	 * @param array $s Settings.
	 */
	private static function tab_woocommerce( $s ) {
		if ( ! class_exists( 'WooCommerce' ) ) {
			echo '<tr><td colspan="2"><p>' . esc_html__( 'Install and activate WooCommerce to use these options.', 'logvia' ) . '</p></td></tr>';
		}
		self::checkbox( $s, 'wc_replace_myaccount', __( 'My Account', 'logvia' ), __( 'Replace the WooCommerce login/register form with Logvia', 'logvia' ), __( 'Logged-out visitors of My Account are sent to the Logvia login screen and brought back afterwards.', 'logvia' ) );
		self::checkbox( $s, 'wc_checkout_login', __( 'Checkout', 'logvia' ), __( 'Replace the "Returning customer? Click here to login" box on the checkout', 'logvia' ), __( 'Uses the popup when it is on, otherwise an inline form. Needs "Allow customers to log into an existing account during checkout" in WooCommerce settings.', 'logvia' ) );
		self::section( __( 'Require an account to check out', 'logvia' ) );
		self::checkbox( $s, 'gate_enabled', __( 'Require login', 'logvia' ), __( 'Ask visitors to log in or register before checkout', 'logvia' ), __( 'Guests can fill a cart; at checkout they log in and come straight back with the cart kept.', 'logvia' ) );
		self::text( $s, 'gate_notice', __( 'Message on the login screen', 'logvia' ), __( 'Leave empty for the default: "Please log in or create an account to place an order."', 'logvia' ), 'text', 'large-text' );
	}

	/* ------------------------------------------------------------------
	 * Misc
	 * ------------------------------------------------------------------ */

	/**
	 * Create the account page from the settings screen.
	 */
	public static function create_page() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'Sorry, you are not allowed to do that.', 'logvia' ) );
		}
		check_admin_referer( 'logvia_create_page' );
		Logvia_Plugin::ensure_page();
		wp_safe_redirect( admin_url( 'options-general.php?page=logvia' ) );
		exit;
	}

	/**
	 * Warnings.
	 */
	public static function notices() {
		if ( ! current_user_can( 'manage_options' ) ) {
			return;
		}
		if ( ! Logvia_Plugin::page_id() ) {
			echo '<div class="notice notice-warning"><p>'
				. esc_html__( 'Logvia needs an account page to show its login and registration screens.', 'logvia' )
				. ' <a href="' . esc_url( admin_url( 'options-general.php?page=logvia' ) ) . '">' . esc_html__( 'Open settings', 'logvia' ) . '</a></p></div>';
		}
		if ( Logvia_Settings::get( 'google_enabled' ) && ! Logvia_Google::enabled() && Logvia_Plugin::page_id() ) {
			echo '<div class="notice notice-warning"><p>' . esc_html__( 'Logvia: Google sign-in is switched on but the Client ID or Client secret is missing.', 'logvia' ) . '</p></div>';
		}
		if ( 'none' !== Logvia_Settings::get( 'captcha' ) && 'none' === Logvia_Captcha::provider() ) {
			echo '<div class="notice notice-warning"><p>' . esc_html__( 'Logvia: a captcha is selected but its site key or secret key is missing, so it is not active.', 'logvia' ) . '</p></div>';
		}
	}

	/**
	 * "Settings" link on the Plugins screen.
	 *
	 * @param array $links Links.
	 * @return array
	 */
	public static function action_links( $links ) {
		array_unshift( $links, '<a href="' . esc_url( admin_url( 'options-general.php?page=logvia' ) ) . '">' . esc_html__( 'Settings', 'logvia' ) . '</a>' );
		return $links;
	}

	/**
	 * Label the account page in the Pages list.
	 *
	 * @param array   $states States.
	 * @param WP_Post $post   Post.
	 * @return array
	 */
	public static function post_state( $states, $post ) {
		if ( (int) $post->ID === (int) Logvia_Settings::get( 'page_id' ) ) {
			$states['logvia'] = __( 'Logvia account page', 'logvia' );
		}
		return $states;
	}
}