<?php

if (!defined('ABSPATH')) {
    exit;
}

class ShadowSync_SEO_Security {

    public function __construct() {
        add_action('init', [$this, 'security_checks']);
    }

    public function security_checks() {
        // Reserved for future security rules
    }

    /**
     * Check the current user has admin rights.
     *
     * Nonces are verified with check_ajax_referer() at each handler rather
     * than through a wrapper here: static analysis only recognises a nonce
     * check when it appears directly in the function doing the work.
     */
    public static function require_admin() {
        if (!current_user_can('manage_options')) {
            wp_die(
                esc_html__('You do not have permission to do this.', 'shadowsync-seo'),
                esc_html__('Forbidden', 'shadowsync-seo'),
                ['response' => 403]
            );
        }
    }
}