<?php
/** MKB term editor: presentation layer for the existing WordPress CPT. */
if (!defined('ABSPATH')) exit;

/** Retain a rejected editor submission for one redirect only (per-user and short lived). */
function mkb_glossar_editor_submission_key($token) {
 if (!is_string($token) || !preg_match('/^[A-Za-z0-9]{24}$/D',$token)) return '';
 return 'mkb_glossar_form_'.get_current_user_id().'_'.$token;
}
/** A malformed editor POST must never reach sanitizers or overwrite existing content. */
function mkb_glossar_editor_submission_shape_valid($input) {
 if (!mkb_glossar_request_optional_scalar_fields($input, [
  'term_id', 'term_title', 'term_summary', 'term_synonyms', 'term_content',
  'term_status', 'mkb_term_action', 'mkb_lang', 'mkb_source', 'new_lang', 'lang', 'from_post',
  'term_references', 'term_external_url', 'term_use_external', 'term_external_newtab', 'term_external_nofollow', 'term_external_sponsored', 'term_external_ugc', 'term_auto_details', 'term_case_sensitive', 'term_related_ids'
 ])) return false;
 if (isset($input['term_topics'])) {
  if (!is_array($input['term_topics']) || count($input['term_topics']) > 500) return false;
  foreach ($input['term_topics'] as $id) if (!is_int($id) && !(is_string($id) && ctype_digit($id))) return false;
 }
 if (isset($input['term_new_topics'])) {
  if (!is_array($input['term_new_topics']) || count($input['term_new_topics']) > 10) return false;
  foreach ($input['term_new_topics'] as $name) if (!is_string($name) || strlen($name)>180) return false;
 }
 if (isset($input['term_sources'])) {
  if (!is_array($input['term_sources']) || count($input['term_sources'])>12) return false;
  foreach ($input['term_sources'] as $row) {
   if (!is_array($row) || array_diff(array_keys($row),['name','url','newtab','nofollow','sponsored','ugc'])) return false;
   foreach ($row as $value) if (!is_scalar($value) || strlen((string)$value)>2048) return false;
  }
 }
 return true;
}
/** Build a one-time restore snapshot from an explicitly supplied, shape-validated
 * request. This helper never reads PHP superglobals or authorizes requests.
 * Only the nonce/capability-gated admin-post handler may call the redirect writer.
 */
function mkb_glossar_editor_submission_snapshot($input,$message='') {
 if (!mkb_glossar_editor_submission_shape_valid($input)) return null;
 $new_topics = isset($input['term_new_topics']) && is_array($input['term_new_topics'])
  ? wp_unslash($input['term_new_topics']) : [];
 $source_rows = isset($input['term_sources']) && is_array($input['term_sources'])
  ? wp_unslash($input['term_sources']) : [];
 $form=[
  'term_id'=>absint($input['term_id']??0),
  'error_message'=>sanitize_text_field($message),
  'title'=>sanitize_text_field(wp_unslash($input['term_title']??'')),
  'summary'=>sanitize_textarea_field(wp_unslash($input['term_summary']??'')),
  'synonyms'=>sanitize_textarea_field(wp_unslash($input['term_synonyms']??'')),
  'content'=>isset($input['term_content'])?wp_kses_post(wp_unslash($input['term_content'])):null,
  'status'=>sanitize_key(wp_unslash($input['term_status']??'draft')),
  'topics'=>array_values(array_filter(array_map('absint',(array)($input['term_topics']??[])))),
  'new_topics'=>array_values(array_filter(array_map('sanitize_text_field', array_filter($new_topics,'is_string')))),
  'editorial'=>[
   'mkb_glossar_sources_form'=>array_map(static function($row){return is_array($row)?array_map(static fn($v)=>is_scalar($v)?sanitize_text_field((string)$v):'',$row):[];},$source_rows),
   'mkb_glossar_references'=>isset($input['term_references']) && is_scalar($input['term_references']) ? sanitize_textarea_field(wp_unslash((string)$input['term_references'])) : '',
   'mkb_glossar_external_url'=>isset($input['term_external_url']) && is_scalar($input['term_external_url']) ? sanitize_text_field(wp_unslash((string)$input['term_external_url'])) : '',
   'mkb_glossar_related_ids'=>isset($input['term_related_ids']) && is_scalar($input['term_related_ids']) ? sanitize_text_field(wp_unslash((string)$input['term_related_ids'])) : '',
   'mkb_glossar_use_external'=>isset($input['term_use_external']) && (string)$input['term_use_external'] === '1' ? '1' : '0',
   'mkb_glossar_external_newtab'=>isset($input['term_external_newtab']) && (string)$input['term_external_newtab'] === '1' ? '1' : '0',
   'mkb_glossar_external_nofollow'=>isset($input['term_external_nofollow']) && (string)$input['term_external_nofollow'] === '1' ? '1' : '0',
   'mkb_glossar_external_sponsored'=>isset($input['term_external_sponsored']) && (string)$input['term_external_sponsored'] === '1' ? '1' : '0',
   'mkb_glossar_external_ugc'=>isset($input['term_external_ugc']) && (string)$input['term_external_ugc'] === '1' ? '1' : '0',
   'mkb_glossar_auto_details'=>isset($input['term_auto_details']) && $input['term_auto_details'] === '0' ? '0' : '1',
   'mkb_glossar_case_sensitive'=>isset($input['term_case_sensitive']) && (string)$input['term_case_sensitive'] === '1' ? '1' : '0'
  ]
 ];
 return $form;
}
/** Store a rejected, already-authorized editor submission for a single redirect.
 * The caller must pass the request it validated after checking nonce/capability.
 */
function mkb_glossar_editor_preserve_submission($redirect,$error,$validated_input,$extra=[],$message='') {
 $form=mkb_glossar_editor_submission_snapshot($validated_input,$message);
 if (!is_array($form)) wp_die('Ungültige Eingabedaten.',400);
 $token=wp_generate_password(24,false,false);
 $key=mkb_glossar_editor_submission_key($token);
 if ($key) set_transient($key,$form,5*MINUTE_IN_SECONDS);
 wp_safe_redirect(add_query_arg(array_merge(['mkb_error'=>$error,'mkb_restore'=>$token],$extra),$redirect));
 exit;
}
function mkb_glossar_editor_restore_submission($id,$token) {
 $key=mkb_glossar_editor_submission_key($token);
 if (!$key) return null;
 $form=get_transient($key);
 if (!is_array($form) || (int)($form['term_id']??-1)!==(int)$id) return null;
 delete_transient($key);
 return $form;
}
function mkb_glossar_editor_url($id=0) {
 return add_query_arg(array_filter(['page'=>'mkb-glossar-term-editor','term_id'=>absint($id)]),admin_url('admin.php'));
}
/** Keep translation context when Polylang/WPML send users to the native post editor. */
function mkb_glossar_editor_context($input) {
 $language=mkb_glossar_request_key($input,'mkb_lang');
 if (!$language) $language=mkb_glossar_request_key($input,'new_lang');
 if (!$language) $language=mkb_glossar_request_key($input,'lang');
 $source = is_array($input) && array_key_exists('mkb_source',$input)
  ? mkb_glossar_request_id($input,'mkb_source')
  : mkb_glossar_request_id($input,'from_post');
 if ($source && get_post_type($source)!=='mkb_glossar') $source=0;
 if ($language && !preg_match('/^[a-z][a-z0-9_-]{1,19}$/i',$language)) $language='';
 return ['language'=>$language,'source'=>$source];
}
function mkb_glossar_editor_languages() {
 if (mkb_glossar_polylang_enabled() && function_exists('pll_languages_list')) {
  $codes=pll_languages_list(['fields'=>'slug']);
  return is_array($codes)?array_values(array_filter($codes,'is_string')):[];
 }
 if (mkb_glossar_wpml_enabled()) {
  // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- Required third-party WPML/Elementor API hook name; changing it would break integration.
  $languages=apply_filters('wpml_active_languages',null,['skip_missing'=>0]);
  return is_array($languages)?array_keys($languages):[];
 }
 return [];
}
function mkb_glossar_editor_language_valid($language) {
 return is_string($language) && $language!=='' && in_array($language,mkb_glossar_editor_languages(),true);
}
/** One effective language for the editor UI and its AJAX identity check. */
function mkb_glossar_editor_active_language($id=0,$context_language='') {
 $languages=mkb_glossar_editor_languages();
 if (!$languages) return '';
 $language=$id?mkb_glossar_post_language($id):$context_language;
 if (!$language && mkb_glossar_polylang_enabled() && function_exists('pll_default_language')) $language=pll_default_language('slug');
 if (!$language) $language=mkb_glossar_current_language();
 return mkb_glossar_editor_language_valid($language)?$language:$languages[0];
}
function mkb_glossar_editor_language_label($language) {
 if (mkb_glossar_polylang_enabled() && function_exists('pll_the_languages')) {
  $items=pll_the_languages(['raw'=>1]);
  if (is_array($items) && isset($items[$language]['name'])) return $items[$language]['name'];
 }
 if (mkb_glossar_wpml_enabled()) {
  // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- Required third-party WPML/Elementor API hook name; changing it would break integration.
  $items=apply_filters('wpml_active_languages',null,['skip_missing'=>0]);
  if (is_array($items) && isset($items[$language]['translated_name'])) return $items[$language]['translated_name'];
 }
 return strtoupper($language);
}
function mkb_glossar_editor_translations($id) {
 if (!$id) return [];
 if (mkb_glossar_polylang_enabled() && function_exists('pll_get_post_translations')) {
  $items=pll_get_post_translations($id);
  return is_array($items)?$items:[];
 }
 if (mkb_glossar_wpml_enabled()) {
  // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- Required third-party WPML/Elementor API hook name; changing it would break integration.
  $trid=apply_filters('wpml_element_trid',null,$id,'post_mkb_glossar');
  if (!$trid) return [];
  // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- Required third-party WPML/Elementor API hook name; changing it would break integration.
  $items=apply_filters('wpml_get_element_translations',null,$trid,'post_mkb_glossar');
  $out=[];
  foreach ((array)$items as $code=>$item) if (isset($item->element_id)) $out[$code]=(int)$item->element_id;
  return $out;
 }
 return [];
}
function mkb_glossar_editor_translation_url($source,$language) {
 return add_query_arg(['mkb_lang'=>$language,'mkb_source'=>$source],mkb_glossar_editor_url());
}
function mkb_glossar_editor_assign_translation($id,$language,$source=0) {
 if (!mkb_glossar_editor_language_valid($language)) return false;
 if (mkb_glossar_polylang_enabled() && function_exists('pll_set_post_language')) {
  pll_set_post_language($id,$language);
  if ($source && function_exists('pll_save_post_translations')) {
   $translations=mkb_glossar_editor_translations($source);
   if (!isset($translations[$language]) || (int)$translations[$language]===$id) {
    $translations[$language]=$id;
    pll_save_post_translations($translations);
   }
  }
  return true;
 }
 if (mkb_glossar_wpml_enabled()) {
  // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- Required third-party WPML/Elementor API hook name; changing it would break integration.
  $trid=$source?apply_filters('wpml_element_trid',null,$source,'post_mkb_glossar'):null;
  $source_language=$source?mkb_glossar_post_language($source):null;
  // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- Required third-party WPML/Elementor API hook name; changing it would break integration.
  do_action('wpml_set_element_language_details',['element_id'=>$id,'element_type'=>'post_mkb_glossar','trid'=>$trid,'language_code'=>$language,'source_language_code'=>$source_language]);
  return true;
 }
 return false;
}
function mkb_glossar_editor_native_url($id) {
 return add_query_arg('mkb_native','1',get_edit_post_link($id,'raw'));
}
add_action('admin_menu',function(){
 /* translators: %s is the configured singular name of an item (for example, Artikel). */
 add_submenu_page('edit.php?post_type=mkb_glossar',sprintf(__('Create %s','mkb-glossar'),mkb_glossar_display_names()['item']),sprintf(__('Create %s','mkb-glossar'),mkb_glossar_display_names()['item']),'edit_posts','mkb-glossar-term-editor','mkb_glossar_render_term_editor');
},20);
// The submenu action creates a term, but the browser tab must show the actual screen state.
// Scope the title change to an existing Glossar item being edited in our custom editor.
add_filter('admin_title', static function($admin_title, $title) {
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 if (mkb_glossar_request_key($_GET,'page')!=='mkb-glossar-term-editor') return $admin_title;
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 $id=mkb_glossar_request_id($_GET,'term_id');
 if (!$id || get_post_type($id)!=='mkb_glossar') return $admin_title;
 $edit_title=__('Edit Term','mkb-glossar');
 if (str_starts_with((string)$admin_title,(string)$title)) {
  return $edit_title.substr((string)$admin_title,strlen((string)$title));
 }
 return $edit_title.' – '.(string)$admin_title;
}, 10, 2);
// Put the primary create action immediately after the native "All terms" link.
add_action('admin_menu',function(){
 global $submenu;
 $parent='edit.php?post_type=mkb_glossar';
 if (empty($submenu[$parent]) || !is_array($submenu[$parent])) return;
 $items=array_values($submenu[$parent]); $create=null;
 foreach ($items as $index=>$item) {
  if (($item[2]??'')==='mkb-glossar-term-editor') { $create=$item; unset($items[$index]); break; }
 }
 if ($create===null) return;
 $items=array_values($items);
 // The CPT "All terms" is at index zero. Keep it there.
 array_splice($items,1,0,[$create]);
 $submenu[$parent]=$items;
},999);
// Hide only the duplicate native Add New submenu; keep native edit URLs usable.
add_action('admin_menu',function(){
 remove_submenu_page('edit.php?post_type=mkb_glossar','post-new.php?post_type=mkb_glossar');
},99);
// Keep the standard WP edit screen available through an explicit opt-in link.
add_action('admin_init',function(){
 global $pagenow;
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 if (!in_array($pagenow,['post-new.php','post.php'],true) || isset($_GET['mkb_native'])) return;
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 if ($pagenow==='post-new.php' && mkb_glossar_request_key($_GET,'post_type')==='mkb_glossar') {
  // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
  if (current_user_can('edit_posts')) wp_safe_redirect(add_query_arg(array_filter(['mkb_lang'=>mkb_glossar_editor_context($_GET)['language'],'mkb_source'=>mkb_glossar_editor_context($_GET)['source']]),mkb_glossar_editor_url()));
  exit;
 }
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 if ($pagenow==='post.php' && mkb_glossar_request_key($_GET,'action')==='edit') {
  // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
  $id=mkb_glossar_request_id($_GET,'post');
  if ($id && get_post_type($id)==='mkb_glossar' && current_user_can('edit_post',$id)) {
   wp_safe_redirect(mkb_glossar_editor_url($id));exit;
  }
 }
},20);

add_action('admin_enqueue_scripts',function($hook){
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 if ($hook!=='glossar_page_mkb-glossar-term-editor' && !(isset($_GET['page']) && $_GET['page']==='mkb-glossar-term-editor')) return;
 $editor_css_path = MKB_GLOSSAR_PATH . 'assets/admin-term-editor.css';
 $editor_css_version = is_file($editor_css_path) ? (string) filemtime($editor_css_path) : MKB_GLOSSAR_VERSION;
 wp_enqueue_style('mkb-glossar-term-editor',MKB_GLOSSAR_URL.'assets/admin-term-editor.css',[],$editor_css_version);
 $editor_js_path = MKB_GLOSSAR_PATH . 'assets/admin-term-editor.js';
 $editor_js_version = is_file($editor_js_path) ? (string)filemtime($editor_js_path) : MKB_GLOSSAR_VERSION;
 wp_enqueue_script('mkb-glossar-term-editor',MKB_GLOSSAR_URL.'assets/admin-term-editor.js',[],$editor_js_version,true);
 wp_add_inline_script('mkb-glossar-term-editor','window.mkbTermEditor='.wp_json_encode([
  'ajax'=>admin_url('admin-ajax.php'), 'nonce'=>wp_create_nonce('mkb_glossar_identity'),
  // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
  'postId'=>mkb_glossar_request_id($_GET,'term_id'), 'language'=>mkb_glossar_editor_active_language(mkb_glossar_request_id($_GET,'term_id'),mkb_glossar_editor_context($_GET)['language'])
 ]).';','before');
 wp_add_inline_script('mkb-glossar-term-editor','window.mkbTermTopics='.wp_json_encode(['remove'=>__('Remove','mkb-glossar'), 'limit'=>__('Add no more than ten new topics at once.', 'mkb-glossar'), 'pending'=>__('The new topic is selected and will be created when you save.', 'mkb-glossar')]).';','before');
});

function mkb_glossar_render_term_editor(){
 $names=mkb_glossar_display_names();
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 $id=mkb_glossar_request_id($_GET,'term_id'); $post=$id?get_post($id):null;
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 $context=mkb_glossar_editor_context($_GET);
 $languages=mkb_glossar_editor_languages();
 $active_language=mkb_glossar_editor_active_language($id,$context['language']);
 $source=(!$id && $context['source'])?$context['source']:0;
 $translations=$id?mkb_glossar_editor_translations($id):($source?mkb_glossar_editor_translations($source):[]);
 if ($source) $translations[mkb_glossar_post_language($source)]=$source;
 if ($id && (!$post || $post->post_type!=='mkb_glossar')) wp_die(esc_html__('The content could not be found.','mkb-glossar'));
 if (!current_user_can($id?'edit_post':'edit_posts',$id?:null)) wp_die(esc_html__('Keine Berechtigung.','mkb-glossar'));
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 $error=mkb_glossar_request_key($_GET,'mkb_error');
 $conflicts=[];
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 $conflict_id=mkb_glossar_request_id($_GET,'mkb_conflict');
 if ($conflict_id) {
  // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
  if ($conflict_id && get_post_type($conflict_id)==='mkb_glossar') $conflicts[]=['id'=>$conflict_id,'kind'=>mkb_glossar_request_key($_GET,'mkb_kind','title'),'label'=>get_the_title($conflict_id)];
 }
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately.
 $restore_token=isset($_GET['mkb_restore']) && is_scalar($_GET['mkb_restore']) ? sanitize_text_field(wp_unslash((string)$_GET['mkb_restore'])) : '';
 $restored=$restore_token!=='' ? mkb_glossar_editor_restore_submission($id,$restore_token) : null;
 $title=$post?$post->post_title:'';
 $summary=$id?get_post_meta($id,'mkb_glossar_summary',true):'';
 $synonyms=$id?get_post_meta($id,'mkb_glossar_synonyms',true):'';
 $content=$post?$post->post_content:'';
 $elementor_active=$id && get_post_meta($id,'_elementor_edit_mode',true)==='builder';
 $blocked=($post && function_exists('has_blocks') && has_blocks($content)) || $elementor_active;
 $selected=$id?wp_get_object_terms($id,'mkb_glossar_topic',['fields'=>'ids']):[];
 if (is_wp_error($selected)) $selected=[];
 $current_status=$post?$post->post_status:'draft';
 $restored_editorial=[]; $restored_new_topics=[];
 $preview_url=$post?get_preview_post_link($post):'';
 $public_url=($post && $post->post_status==='publish')?get_permalink($post):'';
 if ($restored!==null) {
  $title=$restored['title'];
  $summary=$restored['summary'];
  $synonyms=$restored['synonyms'];
  if ($restored['content']!==null) $content=$restored['content'];
  $selected=$restored['topics'];
  $restored_new_topics=(array)($restored['new_topics']??[]);
  $restored_editorial=(array)($restored['editorial']??[]);
  if (in_array($restored['status'],['draft','publish','pending','private'],true)) $current_status=$restored['status'];
 }
 $topics=get_terms(['taxonomy'=>'mkb_glossar_topic','hide_empty'=>false]);
 if (is_wp_error($topics)) $topics=[];
 if ($languages && mkb_glossar_polylang_enabled() && function_exists('pll_get_term_language')) $topics=array_values(array_filter($topics,function($topic)use($active_language){return pll_get_term_language($topic->term_id,'slug')===$active_language;}));
 ?>
 <div class="wrap mkb-term-editor">
 <?php /* translators: %s is the configured singular name of an item (for example, Artikel). */ ?>
 <div class="mkb-term-heading"><div><h1><?php echo esc_html(sprintf($id ? __('Edit %s','mkb-glossar') : __('Create %s','mkb-glossar'), $names['item'])); ?></h1><p><?php esc_html_e('Manage content easily – WordPress remains the technical foundation.','mkb-glossar'); ?></p></div><div class="mkb-term-heading-actions"><a class="mkb-term-button" href="<?php echo esc_url(mkb_glossar_help_url('terms')); ?>"><span class="dashicons dashicons-editor-help" aria-hidden="true"></span><?php esc_html_e('Handbook','mkb-glossar'); ?></a><a class="mkb-term-button" href="<?php echo esc_url(admin_url('edit.php?post_type=mkb_glossar')); ?>">← <?php echo esc_html(sprintf(__('Overview: %s','mkb-glossar'), $names['collection'])); ?></a><?php if ($id && class_exists('\\Elementor\\Plugin') && in_array('mkb_glossar', (array)get_option('elementor_cpt_support', []), true)): ?><a class="mkb-term-button" href="<?php echo esc_url(add_query_arg(['post'=>$id,'action'=>'elementor'],admin_url('post.php'))); ?>"><span class="dashicons dashicons-edit" aria-hidden="true"></span><?php esc_html_e('Edit with Elementor', 'mkb-glossar'); ?></a><?php endif; ?></div></div>
 <?php /* translators: Placeholders are the site-configured collection/item names or numerical counts shown in this message. */ ?>
 <?php if (isset($_GET['mkb_saved'])): ?><div class="mkb-term-feedback mkb-term-feedback-success" role="status"><svg class="mkb-term-feedback-symbol" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="12" cy="12" r="10"/><path d="m7 12 3 3 7-7"/></svg><p><?php echo esc_html(sprintf(__('%s saved.','mkb-glossar'), $names['item'])); ?></p><button type="button" class="mkb-term-feedback-dismiss" aria-label="<?php esc_attr_e('Close message','mkb-glossar'); ?>"><svg viewBox="0 0 24 24" width="16" height="16" stroke="currentColor" stroke-width="2" fill="none" aria-hidden="true"><path d="M5 5 19 19M19 5 5 19"/></svg></button></div><?php endif; ?>
 <?php /* translators: Placeholders are the site-configured collection/item names or numerical counts shown in this message. */ ?>
 <?php $topic_notice=get_transient('mkb_glossar_topic_notice_'.get_current_user_id()); if (is_string($topic_notice) && $topic_notice!==''): delete_transient('mkb_glossar_topic_notice_'.get_current_user_id()); ?><div class="mkb-term-feedback mkb-term-feedback-warning" role="alert"><svg class="mkb-term-feedback-symbol" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3 22 21H2L12 3Z"/><path d="M12 9v5M12 18h.01"/></svg><p><?php echo esc_html(sprintf(__('The term was saved, but a topic could not be added: %s', 'mkb-glossar'), $topic_notice)); ?></p></div><?php endif; ?>
 <?php // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only GET/navigation parameter; no state is changed and input is validated separately. ?>
 <?php if ($error==='duplicate' && $conflicts): ?><div class="mkb-term-alert" role="alert"><strong><?php echo esc_html(mkb_glossar_identity_message($conflicts)); ?></strong><p><a href="<?php echo esc_url(mkb_glossar_editor_url($conflicts[0]['id'])); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e('Open existing content', 'mkb-glossar'); ?></a></p></div><?php elseif($error): ?><div class="mkb-term-alert" role="alert"><?php if ($error==='editorial'): ?><?php echo esc_html(!empty($restored['error_message']) ? $restored['error_message'] : mkb_glossar_editorial_error_message(mkb_glossar_request_key($_GET,'mkb_detail'))); ?><?php else: ?><?php esc_html_e('The content could not be saved. Check your information.', 'mkb-glossar'); ?><?php endif; ?></div><?php endif; ?>
 <form method="post" action="<?php echo esc_url(admin_url('admin-post.php')); ?>" id="mkb-term-form">
 <?php wp_nonce_field('mkb_glossar_term_save_'.$id,'mkb_term_nonce'); ?><input type="hidden" name="action" value="mkb_glossar_term_save"><input type="hidden" name="term_id" value="<?php echo esc_attr($id); ?>"><?php if ($languages): ?><input type="hidden" name="mkb_lang" value="<?php echo esc_attr($active_language); ?>"><input type="hidden" name="mkb_source" value="<?php echo esc_attr($source); ?>"><?php endif; ?>
 <?php if ($languages): ?>
 <section class="mkb-term-card mkb-term-languages"><h2><?php esc_html_e('Sprache & Übersetzungen','mkb-glossar'); ?></h2>
 <div class="mkb-term-language-current"><span><?php esc_html_e('Sprache dieses Begriffs','mkb-glossar'); ?></span><?php if (!$id && !$source): ?><select id="mkb-term-language-select" class="mkb-term-language-select" aria-label="<?php esc_attr_e('Sprache dieses Begriffs','mkb-glossar'); ?>"><?php foreach ($languages as $option): ?><option value="<?php echo esc_attr($option); ?>" <?php selected($active_language,$option); ?>><?php echo esc_html(mkb_glossar_editor_language_label($option)); ?></option><?php endforeach; ?></select><?php else: ?><strong><?php echo esc_html(mkb_glossar_editor_language_label($active_language)); ?></strong><?php endif; ?></div>
 <?php if ($source): ?><p class="description"><?php esc_html_e('Neue Übersetzung von','mkb-glossar'); ?>: <a href="<?php echo esc_url(mkb_glossar_editor_url($source)); ?>"><?php echo esc_html(get_the_title($source)); ?></a></p><?php endif; ?>
 <div class="mkb-term-translation-list">
 <?php foreach ($languages as $language):
  $translated_id=absint($translations[$language]??0);
  if ($id && $language===$active_language) $translated_id=$id;
  $label=mkb_glossar_editor_language_label($language);
  ?>
  <div class="mkb-term-translation-row"><span class="mkb-term-translation-name"><?php echo esc_html($label); ?></span>
  <?php if ($translated_id): ?>
   <span class="mkb-term-translation-title"><?php echo esc_html(get_the_title($translated_id)); ?></span>
   <?php if ($translated_id===$id): ?><span class="mkb-term-translation-self"><?php esc_html_e('Aktuell','mkb-glossar'); ?></span><?php else: ?><a class="mkb-term-button" href="<?php echo esc_url(mkb_glossar_editor_url($translated_id)); ?>"><span class="dashicons dashicons-edit" aria-hidden="true"></span><?php esc_html_e('Übersetzung bearbeiten','mkb-glossar'); ?></a><?php endif; ?>
  <?php elseif ($id || $source): ?>
   <a class="mkb-term-button" href="<?php echo esc_url(mkb_glossar_editor_translation_url($id?:$source,$language)); ?>"><span class="dashicons dashicons-plus-alt" aria-hidden="true"></span><?php esc_html_e('Übersetzung erstellen','mkb-glossar'); ?></a>
  <?php else: ?><span class="description"><?php esc_html_e('Nach dem ersten Speichern verfügbar','mkb-glossar'); ?></span><?php endif; ?>
  </div>
 <?php endforeach; ?></div>
 </section>
 <?php endif; ?>
 <section class="mkb-term-card"><h2><?php esc_html_e('Begriff & Verlinkung','mkb-glossar'); ?></h2>
 <label for="mkb-term-title"><?php echo esc_html($names['item']); ?> <span aria-hidden="true">*</span></label><input required maxlength="250" class="mkb-term-field" id="mkb-term-title" name="term_title" value="<?php echo esc_attr($title); ?>" autocomplete="off">
 <div id="mkb-term-conflict" aria-live="polite" role="status" hidden></div>
 <label for="mkb-term-summary"><?php esc_html_e('Kurzdefinition für Tooltips','mkb-glossar'); ?></label><textarea id="mkb-term-summary" name="term_summary" rows="3" class="mkb-term-field"><?php echo esc_textarea($summary); ?></textarea>
 <label for="mkb-term-synonyms"><?php esc_html_e('Synonyme und alternative Schreibweisen (eine je Zeile)','mkb-glossar'); ?></label><textarea id="mkb-term-synonyms" name="term_synonyms" rows="4" class="mkb-term-field"><?php echo esc_textarea($synonyms); ?></textarea>
 <div class="mkb-term-editor-description"><h3><?php esc_html_e('Ausführliche Beschreibung','mkb-glossar'); ?></h3>
 <?php if ($blocked): ?><div class="mkb-term-alert"><strong><?php echo esc_html($elementor_active ? __('The long description is edited with Elementor.', 'mkb-glossar') : __('Dieser Beitrag enthält Gutenberg-Blöcke.','mkb-glossar')); ?></strong><p><?php echo esc_html($elementor_active ? __('You can still edit all other glossary fields here. The Elementor content will be preserved when saving.', 'mkb-glossar') : __('Zum Schutz der vorhandenen Blöcke kann die Beschreibung nur im WordPress-Editor geändert werden. Alle übrigen Glossarfelder können hier bearbeitet werden.','mkb-glossar')); ?></p><a class="mkb-term-button" href="<?php echo esc_url($elementor_active ? add_query_arg(['post'=>$id,'action'=>'elementor'],admin_url('post.php')) : mkb_glossar_editor_native_url($id)); ?>"><?php echo esc_html($elementor_active ? __('Edit with Elementor', 'mkb-glossar') : __('Im WordPress-Editor bearbeiten ↗','mkb-glossar')); ?></a></div><?php else: ?><?php if (!$id && class_exists('\\Elementor\\Plugin') && in_array('mkb_glossar', (array)get_option('elementor_cpt_support', []), true)): ?><p class="description mkb-term-elementor-first-save"><?php esc_html_e('Save this new glossary term first. You can then design its full description with Elementor. Its name, synonyms, topics and sources stay editable here.', 'mkb-glossar'); ?></p><?php endif; ?><?php wp_editor($content,'mkbtermcontent',['textarea_name'=>'term_content','textarea_rows'=>12,'media_buttons'=>true,'teeny'=>false,'quicktags'=>true]); ?><?php endif; ?></div>
 <div class="mkb-term-topic-heading" id="mkb-term-topics-label"><?php esc_html_e('Themen','mkb-glossar'); ?></div>
 <p class="description mkb-term-topics-intro"><?php esc_html_e('Choose existing topics, or add a new one. New topics are created when you save the term.','mkb-glossar'); ?></p>
 <?php /* translators: %s is the configured singular name of an item (for example, Artikel). */ ?>
 <div class="mkb-term-topics" role="group" aria-labelledby="mkb-term-topics-label"><?php if (!$topics): ?><p class="description mkb-term-topics-empty"><?php esc_html_e('Noch keine Themen vorhanden.','mkb-glossar'); ?></p><?php else: foreach($topics as $topic): ?><label class="mkb-term-topic"><input type="checkbox" name="term_topics[]" value="<?php echo esc_attr($topic->term_id); ?>" <?php checked(in_array((int)$topic->term_id,array_map('intval',$selected),true)); ?>><span><?php echo esc_html($topic->name); ?></span></label><?php endforeach; endif; ?><?php foreach($restored_new_topics as $topic): ?><div class="mkb-term-topic mkb-term-topic-pending"><input type="hidden" name="term_new_topics[]" value="<?php echo esc_attr($topic); ?>"><span class="mkb-term-topic-pending-check" aria-hidden="true">✓</span><span><?php echo esc_html($topic); ?></span><button type="button" aria-label="<?php echo esc_attr(sprintf(__('Remove %s', 'mkb-glossar'), $topic)); ?>">×</button></div><?php endforeach; ?></div>
 <?php $tax=get_taxonomy('mkb_glossar_topic'); if ($tax && current_user_can($tax->cap->manage_terms)): ?>
 <div class="mkb-term-new-topic"><label for="mkb-term-new-topic-name"><?php esc_html_e('Add a new topic','mkb-glossar'); ?></label>
 <div class="mkb-term-new-topic-controls"><input id="mkb-term-new-topic-name" class="mkb-term-field" type="text" maxlength="100" placeholder="<?php esc_attr_e('Name of new topic','mkb-glossar'); ?>"><button type="button" class="mkb-term-button" id="mkb-term-add-topic"><span class="dashicons dashicons-plus-alt2" aria-hidden="true"></span><?php esc_html_e('Add topic','mkb-glossar'); ?></button></div>
 <p id="mkb-term-new-topic-feedback" class="description" role="status" aria-live="polite"></p>
 <p class="description"><?php esc_html_e('New topics are automatically selected and saved together with this glossary term.','mkb-glossar'); ?></p></div>
 <?php endif; ?></section>
 <section class="mkb-term-card"><h2><?php esc_html_e('References and related terms','mkb-glossar'); ?></h2><?php mkb_glossar_editorial_form_fields($id,$active_language,$restored_editorial); ?></section>
 <section class="mkb-term-card mkb-term-footer"><div class="mkb-term-status-group"><label for="mkb-term-status"><?php esc_html_e('Status','mkb-glossar'); ?></label><select name="term_status" id="mkb-term-status" class="mkb-term-field"><option value="draft" <?php selected($current_status,'draft'); ?>><?php esc_html_e('Entwurf','mkb-glossar'); ?></option><option value="publish" <?php selected($current_status,'publish'); ?>><?php esc_html_e('Veröffentlicht','mkb-glossar'); ?></option><option value="pending" <?php selected($current_status,'pending'); ?>><?php esc_html_e('Ausstehend','mkb-glossar'); ?></option><?php if($post && $post->post_status==='private'): ?><option value="private" selected><?php esc_html_e('Privat','mkb-glossar'); ?></option><?php endif; ?></select><p id="mkb-term-status-hint" class="mkb-term-status-hint" aria-live="polite"></p></div><div class="mkb-term-actions">
 <?php /* translators: %s is the configured singular name of an item (for example, Artikel). */ ?>
 <?php if ($id && $public_url): ?><a class="mkb-term-button" href="<?php echo esc_url($public_url); ?>" target="_blank" rel="noopener noreferrer"><span class="dashicons dashicons-external" aria-hidden="true"></span><?php echo esc_html(sprintf(__('View: %s','mkb-glossar'), $names['item'])); ?></a><?php elseif ($id && $preview_url): ?><a class="mkb-term-button" href="<?php echo esc_url($preview_url); ?>" target="_blank" rel="noopener noreferrer"><span class="dashicons dashicons-visibility" aria-hidden="true"></span><?php esc_html_e('Vorschau öffnen','mkb-glossar'); ?></a><?php else: ?><span class="mkb-term-preview-pending" title="<?php esc_attr_e('Vorschau nach dem ersten Speichern verfügbar.','mkb-glossar'); ?>"><span class="dashicons dashicons-visibility" aria-hidden="true"></span><?php esc_html_e('Vorschau nach Speichern','mkb-glossar'); ?></span><?php endif; ?>
 <?php if (current_user_can('publish_posts')): ?><button id="mkb-term-publish" type="submit" name="mkb_term_action" value="publish" class="button mkb-term-button mkb-term-primary"><span class="mkb-term-publish-icon" aria-hidden="true"></span><?php esc_html_e('Veröffentlichen','mkb-glossar'); ?></button><?php endif; ?>
 <button id="mkb-term-save" type="submit" name="mkb_term_action" value="save" class="button mkb-term-button mkb-term-primary"><span class="mkb-term-save-icon" aria-hidden="true"></span><span id="mkb-term-save-label"><?php esc_html_e('Entwurf speichern','mkb-glossar'); ?></span></button></div></section><?php if($id): ?><div class="mkb-term-native-link"><a href="<?php echo esc_url(mkb_glossar_editor_native_url($id)); ?>" target="_blank" rel="noopener noreferrer"><span class="dashicons dashicons-external" aria-hidden="true"></span><?php esc_html_e('WordPress-Standard-Bearbeitung','mkb-glossar'); ?></a></div><?php endif; ?>
 </form></div><?php
}

add_action('admin_post_mkb_glossar_term_save',function(){
 // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Restricted WordPress admin-post/classic-editor code; caller verifies nonce, capability and request shape before accessing POST.
 $id=mkb_glossar_request_id($_POST,'term_id');
 if (!isset($_POST['mkb_term_nonce']) || !is_scalar($_POST['mkb_term_nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash((string)$_POST['mkb_term_nonce'])),'mkb_glossar_term_save_'.$id)) wp_die('Ungültige Anfrage.',403);
 if ($id && get_post_type($id)!=='mkb_glossar') wp_die('Ungültiger Beitrag.',400);
 if (!current_user_can($id?'edit_post':'edit_posts',$id?:null)) wp_die('Keine Berechtigung.',403);
 if (!mkb_glossar_editor_submission_shape_valid($_POST)) wp_die('Ungültige Eingabedaten.',400);
 // phpcs:ignore WordPress.Security.NonceVerification.Missing -- The nonce, capability and request shape are checked immediately above.
 $validated_submission = $_POST;
 $title=sanitize_text_field(wp_unslash($validated_submission['term_title']??''));
 $summary=sanitize_textarea_field(wp_unslash($validated_submission['term_summary']??''));
 $synonyms=sanitize_textarea_field(wp_unslash($validated_submission['term_synonyms']??''));
 $status=mkb_glossar_request_key($validated_submission,'term_status','draft');
 $action=mkb_glossar_request_key($validated_submission,'mkb_term_action','save');
 if ($action==='publish') $status='publish';
 if (!in_array($status,['draft','publish','pending','private'],true)) $status='draft';
 if (in_array($status,['publish','private'],true) && !current_user_can('publish_posts')) $status='pending';
 $context=mkb_glossar_editor_context($validated_submission);
 $language=mkb_glossar_editor_active_language($id,$context['language']);
 if ($context['language'] && !mkb_glossar_editor_language_valid($context['language'])) wp_die('Ungültige Sprache.',400);
 if (mkb_glossar_editor_languages() && !mkb_glossar_editor_language_valid($language)) wp_die('Ungültige Sprache.',400);
 $source=(!$id && $context['source'])?$context['source']:0;
 if ($source && !current_user_can('edit_post',$source)) wp_die('Keine Berechtigung.',403);
 if ($source && $language===mkb_glossar_post_language($source)) wp_die('Ausgangssprache und Zielsprache sind identisch.',400);
 if ($source) { $existing=mkb_glossar_editor_translations($source); if (isset($existing[$language])) wp_die('Für diese Sprache existiert bereits eine Übersetzung.',409); }
 $redirect=$id?mkb_glossar_editor_url($id):add_query_arg(array_filter(['mkb_lang'=>$language,'mkb_source'=>$source]),mkb_glossar_editor_url());
 if (!$title) mkb_glossar_editor_preserve_submission($redirect,'missing',$validated_submission);
 $conflicts=mkb_glossar_identity_conflicts($title,$synonyms,$id,$language);
 if ($conflicts) {
  mkb_glossar_editor_preserve_submission($redirect,'duplicate',$validated_submission,['mkb_conflict'=>$conflicts[0]['id'],'mkb_kind'=>$conflicts[0]['kind']]);
 }
 $editorial=mkb_glossar_editorial_prepare($validated_submission,$id,$language);
 if (is_wp_error($editorial)) mkb_glossar_editor_preserve_submission($redirect,'editorial',$validated_submission,['mkb_detail'=>$editorial->get_error_code()],$editorial->get_error_message());
 $fields=['post_type'=>'mkb_glossar','post_title'=>$title,'post_status'=>$status];
 if ($id) $fields['ID']=$id;
 // Never overwrite Gutenberg block markup with an absent WYSIWYG field.
 if (isset($validated_submission['term_content']) && (!$id || (!has_blocks(get_post_field('post_content',$id)) && get_post_meta($id,'_elementor_edit_mode',true)!=='builder'))) $fields['post_content']=wp_kses_post(wp_unslash($validated_submission['term_content']));
 $saved=wp_insert_post(wp_slash($fields),true);
 if (is_wp_error($saved)) mkb_glossar_editor_preserve_submission($redirect,'save',$validated_submission);
 if (!$id && mkb_glossar_editor_languages()) mkb_glossar_editor_assign_translation($saved,$language,$source);
 update_post_meta($saved,'mkb_glossar_summary',$summary);
 update_post_meta($saved,'mkb_glossar_synonyms',$synonyms);
 mkb_glossar_editorial_save($saved,$editorial);
 $topics=array_filter(array_map('absint',(array)($validated_submission['term_topics']??[])));
 $new_topics=isset($validated_submission['term_new_topics']) && is_array($validated_submission['term_new_topics'])
  ? array_map('sanitize_text_field', wp_unslash($validated_submission['term_new_topics'])) : [];
 $taxonomy=get_taxonomy('mkb_glossar_topic');
 if ($new_topics && $taxonomy && current_user_can($taxonomy->cap->manage_terms)) {
  // Names were unslashed and sanitized once above; do not strip literal backslashes again.
  foreach (array_unique($new_topics) as $name) {
   $name=trim($name);
   if ($name==='' || strlen($name)>100) continue;
   $existing=term_exists($name,'mkb_glossar_topic');
   $result=$existing ?: wp_insert_term($name,'mkb_glossar_topic');
   if (is_wp_error($result)) {set_transient('mkb_glossar_topic_notice_'.get_current_user_id(),$result->get_error_message(),60);continue;}
   $topic_id=(int)(is_array($result)?$result['term_id']:$result);
   if (!$topic_id) continue;
   if (!$existing && $language && mkb_glossar_polylang_enabled() && function_exists('pll_set_term_language')) pll_set_term_language($topic_id,$language);
   // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound -- Required third-party WPML/Elementor API hook name; changing it would break integration.
   if (!$existing && $language && mkb_glossar_wpml_enabled()) do_action('wpml_set_element_language_details',['element_id'=>$topic_id,'element_type'=>'tax_mkb_glossar_topic','trid'=>null,'language_code'=>$language,'source_language_code'=>null]);
   if ($language && mkb_glossar_polylang_enabled() && function_exists('pll_get_term_language') && pll_get_term_language($topic_id,'slug')!==$language) continue;
   $topics[]=$topic_id;
  }
 }

 $topics=array_values(array_filter($topics,function($topic)use($language){ if (!term_exists($topic,'mkb_glossar_topic')) return false; if (mkb_glossar_polylang_enabled() && function_exists('pll_get_term_language')) return pll_get_term_language($topic,'slug')===$language; return true; }));
 wp_set_object_terms($saved,$topics,'mkb_glossar_topic');
 wp_safe_redirect(add_query_arg('mkb_saved','1',mkb_glossar_editor_url($saved)));exit;
});