<?php
/**
 * Admin side of the form builder and texts editor, and custom fields on the
 * user profile screen.
 *
 * @package Logvia
 */

defined( 'ABSPATH' ) || exit;

/**
 * Forms admin.
 */
final class Logvia_Forms_Admin {

	/**
	 * Hooks.
	 */
	public static function init() {
		add_action( 'admin_init', array( __CLASS__, 'register_texts' ) );
		add_action( 'admin_enqueue_scripts', array( __CLASS__, 'assets' ) );
		add_action( 'wp_ajax_logvia_save_form', array( __CLASS__, 'ajax_save' ) );

		add_action( 'show_user_profile', array( __CLASS__, 'profile_fields' ) );
		add_action( 'edit_user_profile', array( __CLASS__, 'profile_fields' ) );
		add_action( 'personal_options_update', array( __CLASS__, 'save_profile_fields' ) );
		add_action( 'edit_user_profile_update', array( __CLASS__, 'save_profile_fields' ) );
	}

	/**
	 * Texts option.
	 */
	public static function register_texts() {
		register_setting(
			'logvia_texts',
			Logvia_Texts::OPTION,
			array(
				'type'              => 'array',
				'sanitize_callback' => array( 'Logvia_Texts', 'sanitize' ),
			)
		);
	}

	/**
	 * Builder assets on Settings → Logvia → Form builder.
	 *
	 * @param string $hook Admin page hook.
	 */
	public static function assets( $hook ) {
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab check only.
		if ( 'settings_page_logvia' !== $hook || ! isset( $_GET['tab'] ) || 'forms' !== $_GET['tab'] ) {
			return;
		}
		wp_enqueue_style( 'logvia-builder', LOGVIA_URL . 'assets/css/admin-builder.css', array(), LOGVIA_VERSION );
		wp_enqueue_script( 'logvia-builder', LOGVIA_URL . 'assets/js/admin-builder.js', array(), LOGVIA_VERSION, true );

		$types = array();
		foreach ( Logvia_Forms::types() as $key => $t ) {
			$types[] = array(
				'type'  => $key,
				'label' => $t[0],
				'group' => $t[1],
				'icon'  => $t[2],
			);
		}

		$preview = Logvia_Plugin::page_id() ? Logvia_Plugin::url( 'register', array( 'logvia_preview' => '1' ) ) : '';

		wp_localize_script(
			'logvia-builder',
			'LogviaBuilder',
			array(
				'ajaxUrl'  => admin_url( 'admin-ajax.php' ),
				'nonce'    => wp_create_nonce( 'logvia_save_form' ),
				'fields'   => Logvia_Forms::fields(),
				'defaults' => Logvia_Forms::default_fields(),
				'types'    => $types,
				'core'     => array(
					'core_email'            => __( 'Email', 'logvia' ),
					'core_password'         => __( 'Password', 'logvia' ),
					'core_password_confirm' => __( 'Confirm password', 'logvia' ),
				),
				'maps'     => Logvia_Forms::maps(),
				'mapsFor'  => array_combine( array_keys( Logvia_Forms::types() ), array_map( array( 'Logvia_Forms', 'maps_for' ), array_keys( Logvia_Forms::types() ) ) ),
				'singles'  => Logvia_Forms::single_types(),
				'roles'    => Logvia_Forms::assignable_roles(),
				'hasWoo'   => class_exists( 'WooCommerce' ),
				'preview'  => $preview,
				'i18n'     => array(
					'groups'        => array(
						'input'   => __( 'Inputs', 'logvia' ),
						'choice'  => __( 'Choices', 'logvia' ),
						'content' => __( 'Content', 'logvia' ),
						'account' => __( 'Account', 'logvia' ),
						'upload'  => __( 'Uploads', 'logvia' ),
					),
					'countryCode'   => __( 'Show a country code picker', 'logvia' ),
					'fileTypes'     => __( 'Allowed files', 'logvia' ),
					'images'        => __( 'Images (JPG, PNG, GIF, WebP)', 'logvia' ),
					'documents'     => __( 'Documents (PDF, Word, Excel, text)', 'logvia' ),
					'anyFile'       => __( 'Images and documents', 'logvia' ),
					'maxSize'       => __( 'Maximum size (MB)', 'logvia' ),
					'roles'         => __( 'Account types visitors can choose', 'logvia' ),
					'rolesHint'     => __( 'Only roles without admin, editing or shop-management rights are listed.', 'logvia' ),
					'fixedSave'     => __( 'Saved automatically', 'logvia' ),
					'single'        => __( 'Already in the form', 'logvia' ),
					'addHint'       => __( 'Drag a field into the form, or click it to add it at the end.', 'logvia' ),
					'empty'         => __( 'Select a field to edit its settings.', 'logvia' ),
					'save'          => __( 'Save form', 'logvia' ),
					'saving'        => __( 'Saving…', 'logvia' ),
					'saved'         => __( 'Saved', 'logvia' ),
					'saveFailed'    => __( 'Could not save. Please reload the page and try again.', 'logvia' ),
					'unsaved'       => __( 'Unsaved changes', 'logvia' ),
					'preview'       => __( 'Preview', 'logvia' ),
					'reset'         => __( 'Reset to default', 'logvia' ),
					'resetConfirm'  => __( 'Replace the form with the default fields? Your custom fields will be removed after you save.', 'logvia' ),
					'leave'         => __( 'You have unsaved changes.', 'logvia' ),
					'label'         => __( 'Label', 'logvia' ),
					'headingText'   => __( 'Heading text', 'logvia' ),
					'placeholder'   => __( 'Placeholder', 'logvia' ),
					'help'          => __( 'Help text', 'logvia' ),
					'required'      => __( 'Required', 'logvia' ),
					'width'         => __( 'Width', 'logvia' ),
					'full'          => __( 'Full width', 'logvia' ),
					'half'          => __( 'Half width', 'logvia' ),
					'options'       => __( 'Options (one per line)', 'logvia' ),
					'default'       => __( 'Default value', 'logvia' ),
					'checkedDefault'=> __( 'Checked by default', 'logvia' ),
					'content'       => __( 'Text (links allowed)', 'logvia' ),
					'checkboxText'  => __( 'Checkbox text (links allowed)', 'logvia' ),
					'checkboxHint'  => __( 'Example: I agree to the <a href="/terms">terms</a>', 'logvia' ),
					'maxlength'     => __( 'Maximum length (0 = no limit)', 'logvia' ),
					'saveTo'        => __( 'Save value to', 'logvia' ),
					'metaKey'       => __( 'Meta key', 'logvia' ),
					'metaHint'      => __( 'Lowercase letters, numbers, - and _. Leave empty to generate one.', 'logvia' ),
					'enabled'       => __( 'Ask visitors to type the password twice', 'logvia' ),
					'coreNote'      => __( 'Built-in field: it can be moved and renamed but not removed.', 'logvia' ),
					'moveUp'        => __( 'Move up', 'logvia' ),
					'moveDown'      => __( 'Move down', 'logvia' ),
					'duplicate'     => __( 'Duplicate', 'logvia' ),
					'remove'        => __( 'Remove', 'logvia' ),
					'drag'          => __( 'Drag to reorder', 'logvia' ),
					'fieldSettings' => __( 'Field settings', 'logvia' ),
					'hidden'        => __( 'Off', 'logvia' ),
					'newField'      => __( 'New field', 'logvia' ),
					'required_star' => __( 'Required', 'logvia' ),
				),
			)
		);
	}

	/**
	 * Builder screen markup (the JavaScript renders the rest).
	 */
	public static function render_builder() {
		?>
		<div id="logvia-builder" class="logvia-builder">
			<noscript><p><?php esc_html_e( 'The form builder needs JavaScript.', 'logvia' ); ?></p></noscript>
		</div>
		<?php
	}

	/**
	 * Texts tab.
	 */
	public static function render_texts() {
		$saved = get_option( Logvia_Texts::OPTION, array() );
		?>
		<form method="post" action="options.php" class="logvia-texts">
			<?php settings_fields( 'logvia_texts' ); ?>
			<p class="description"><?php esc_html_e( 'Leave a field empty to use the default text, shown in grey. Registration field labels are edited in the Form builder.', 'logvia' ); ?></p>
			<p class="description"><?php esc_html_e( 'Email placeholders: {site_name}, {email}, {name}, {code} (verification code) and {link} (button).', 'logvia' ); ?></p>
			<?php foreach ( Logvia_Texts::defaults() as $screen => $keys ) : ?>
				<h2><?php echo esc_html( $keys['_label'] ); ?></h2>
				<table class="form-table" role="presentation">
					<?php
					foreach ( $keys as $key => $def ) :
						if ( '_' === $key[0] ) {
							continue;
						}
						$id    = 'logvia-text-' . $screen . '-' . $key;
						$value = isset( $saved[ $screen ][ $key ] ) ? $saved[ $screen ][ $key ] : '';
						?>
						<tr>
							<th scope="row"><label for="<?php echo esc_attr( $id ); ?>"><?php echo esc_html( $def[0] ); ?></label></th>
							<td>
								<?php if ( 'body' === $key ) : ?>
									<textarea class="large-text" rows="5" id="<?php echo esc_attr( $id ); ?>" name="<?php echo esc_attr( Logvia_Texts::OPTION . '[' . $screen . '][' . $key . ']' ); ?>" placeholder="<?php echo esc_attr( $def[1] ); ?>"><?php echo esc_textarea( $value ); ?></textarea>
								<?php else : ?>
									<input type="text" class="<?php echo ! empty( $keys['_email'] ) ? 'large-text' : 'regular-text'; ?>" id="<?php echo esc_attr( $id ); ?>" name="<?php echo esc_attr( Logvia_Texts::OPTION . '[' . $screen . '][' . $key . ']' ); ?>" value="<?php echo esc_attr( $value ); ?>" placeholder="<?php echo esc_attr( $def[1] ); ?>">
								<?php endif; ?>
							</td>
						</tr>
					<?php endforeach; ?>
				</table>
			<?php endforeach; ?>
			<?php submit_button(); ?>
		</form>
		<?php
	}

	/**
	 * Save the builder (AJAX).
	 */
	public static function ajax_save() {
		if ( ! current_user_can( 'manage_options' ) || ! check_ajax_referer( 'logvia_save_form', 'nonce', false ) ) {
			wp_send_json_error( array( 'message' => __( 'Your session expired. Please reload the page.', 'logvia' ) ), 403 );
		}
		$raw    = isset( $_POST['fields'] ) ? json_decode( wp_unslash( $_POST['fields'] ), true ) : null; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Decoded JSON is sanitized field by field in Logvia_Forms::save().
		if ( ! is_array( $raw ) ) {
			wp_send_json_error( array( 'message' => __( 'Invalid form data.', 'logvia' ) ), 400 );
		}
		wp_send_json_success( array( 'fields' => Logvia_Forms::save( $raw ) ) );
	}

	/**
	 * Custom fields on the user profile screen.
	 *
	 * @param WP_User $user User.
	 */
	public static function profile_fields( $user ) {
		$fields = Logvia_Forms::meta_fields();
		if ( ! $fields || ! current_user_can( 'edit_user', $user->ID ) ) {
			return;
		}
		?>
		<h2><?php esc_html_e( 'Registration details', 'logvia' ); ?></h2>
		<table class="form-table" role="presentation">
			<?php
			foreach ( $fields as $f ) :
				$id    = 'logvia-profile-' . $f['id'];
				$value = (string) get_user_meta( $user->ID, $f['meta_key'], true );
				$label = '' !== $f['label'] ? $f['label'] : Logvia_Forms::type_label( $f['type'] );
				?>
				<tr>
					<th scope="row"><label for="<?php echo esc_attr( $id ); ?>"><?php echo esc_html( wp_strip_all_tags( $label ) ); ?></label></th>
					<td>
						<?php if ( in_array( $f['type'], array( 'file', 'avatar', 'checkboxes' ), true ) ) : ?>
							<?php echo Logvia_Forms::display_value( $f, get_user_meta( $user->ID, $f['meta_key'], true ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Escaped in display_value(). ?>
						<?php elseif ( 'checkbox' === $f['type'] ) : ?>
							<input type="checkbox" id="<?php echo esc_attr( $id ); ?>" name="logvia_profile[<?php echo esc_attr( $f['id'] ); ?>]" value="1" <?php checked( '1', $value ); ?>>
						<?php elseif ( 'textarea' === $f['type'] ) : ?>
							<textarea id="<?php echo esc_attr( $id ); ?>" class="regular-text" rows="3" name="logvia_profile[<?php echo esc_attr( $f['id'] ); ?>]"><?php echo esc_textarea( $value ); ?></textarea>
						<?php else : ?>
							<input type="text" id="<?php echo esc_attr( $id ); ?>" class="regular-text" name="logvia_profile[<?php echo esc_attr( $f['id'] ); ?>]" value="<?php echo esc_attr( $value ); ?>">
						<?php endif; ?>
						<p class="description"><code><?php echo esc_html( $f['meta_key'] ); ?></code></p>
					</td>
				</tr>
			<?php endforeach; ?>
		</table>
		<?php
	}

	/**
	 * Save profile screen values. Core already verified the
	 * update-user_{$id} nonce before these hooks run.
	 *
	 * @param int $user_id User ID.
	 */
	public static function save_profile_fields( $user_id ) {
		$nonce = isset( $_POST['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) ) : '';
		if ( ! wp_verify_nonce( $nonce, 'update-user_' . $user_id ) || ! current_user_can( 'edit_user', $user_id ) ) {
			return;
		}
		$posted = isset( $_POST['logvia_profile'] ) && is_array( $_POST['logvia_profile'] ) ? map_deep( wp_unslash( $_POST['logvia_profile'] ), 'sanitize_textarea_field' ) : array();
		foreach ( Logvia_Forms::meta_fields() as $f ) {
			if ( in_array( $f['type'], array( 'file', 'avatar', 'checkboxes' ), true ) ) {
				continue;
			}
			if ( 'checkbox' === $f['type'] ) {
				update_user_meta( $user_id, $f['meta_key'], empty( $posted[ $f['id'] ] ) ? '' : '1' );
				continue;
			}
			if ( ! isset( $posted[ $f['id'] ] ) || ! is_scalar( $posted[ $f['id'] ] ) ) {
				continue;
			}
			$value = 'textarea' === $f['type'] ? sanitize_textarea_field( $posted[ $f['id'] ] ) : sanitize_text_field( $posted[ $f['id'] ] );
			update_user_meta( $user_id, $f['meta_key'], $value );
		}
	}
}