<?php
/**
 * Plugin Name:       SyncNet Patch Radar
 * Plugin URI:        https://www.syncnet.de/sicherheitslage/
 * Description:       Collects critical security vulnerabilities in widely used products (BSI/CERT-Bund "critical", CISA Known Exploited Vulnerabilities, NVD CVSS 9+ reported by the vendor) and shows them on a page with search, vendor filters, shareable alert pages and RSS feeds. No tracking.
 * Version:           1.4.0
 * Requires at least: 6.4
 * Requires PHP:      8.0
 * Author:            SyncNet | Oliver Giesbert
 * Author URI:        https://www.syncnet.de/
 * License:           GPL-2.0-or-later
 * License URI:       https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain:       syncnet-patch-radar
 *
 * @package SyncNetPatchRadar
 */

defined( 'ABSPATH' ) || exit;

define( 'CPRADAR_VERSION', '1.4.0' );
define( 'CPRADAR_FILE', __FILE__ );
define( 'CPRADAR_DIR', plugin_dir_path( __FILE__ ) );
define( 'CPRADAR_BSI_URL', 'https://wid.cert-bund.de/content/public/securityAdvisory/rss' );
define( 'CPRADAR_CISA_URL', 'https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json' );
define( 'CPRADAR_NVD_URL', 'https://services.nvd.nist.gov/rest/json/cves/2.0' );
define( 'CPRADAR_FEED', 'patch-radar' );

require_once CPRADAR_DIR . 'includes/settings.php';
require_once CPRADAR_DIR . 'includes/sources.php';
require_once CPRADAR_DIR . 'includes/render.php';
require_once CPRADAR_DIR . 'includes/admin.php';

register_activation_hook( CPRADAR_FILE, 'cpradar_activate' );
register_deactivation_hook( CPRADAR_FILE, 'cpradar_deactivate' );

/**
 * Activation: create the draft page and register URLs.
 *
 * Nothing is fetched and nothing is scheduled here: the plugin only connects to external
 * services after the administrator has switched fetching on in the settings.
 */
function cpradar_activate() {
	cpradar_create_page();
	cpradar_rewrite_rules();
	flush_rewrite_rules();
	update_option( 'cpradar_version', CPRADAR_VERSION, false );
}

/**
 * Deactivation: stop the schedule.
 */
function cpradar_deactivate() {
	wp_clear_scheduled_hook( 'cpradar_fetch' );
	flush_rewrite_rules();
}

/**
 * Schedule the hourly fetch only while fetching is switched on.
 */
function cpradar_schedule() {
	$on = ! empty( cpradar_settings()['enabled'] );
	if ( $on && ! wp_next_scheduled( 'cpradar_fetch' ) ) {
		wp_schedule_event( time() + 60, 'hourly', 'cpradar_fetch' );
	} elseif ( ! $on ) {
		wp_clear_scheduled_hook( 'cpradar_fetch' );
	}
}

/**
 * Create the page holding the list, unless one is already configured.
 */
function cpradar_create_page() {
	$s = cpradar_settings();
	if ( $s['page_id'] && get_post( $s['page_id'] ) ) {
		return;
	}
	$id = wp_insert_post(
		array(
			'post_type'    => 'page',
			'post_status'  => 'draft',
			'post_title'   => __( 'Security alerts', 'syncnet-patch-radar' ),
			'post_content' => "<!-- wp:shortcode -->\n[syncnet_patch_radar]\n<!-- /wp:shortcode -->",
		)
	);
	if ( $id && ! is_wp_error( $id ) ) {
		$s['page_id'] = (int) $id;
		update_option( 'cpradar_settings', $s );
	}
}

/**
 * After an update: re-register URLs and fetch again.
 */
function cpradar_maybe_upgrade() {
	if ( get_option( 'cpradar_version' ) === CPRADAR_VERSION ) {
		return;
	}
	update_option( 'cpradar_version', CPRADAR_VERSION, false );
	cpradar_schedule();
	flush_rewrite_rules( false );
}
add_action( 'init', 'cpradar_maybe_upgrade', 20 );