<?php
/**
 * Uninstall handler. Removes options + per-user meta only when the admin
 * opted in via the "Delete data on uninstall" setting.
 *
 * Multisite note: options, transients and cron events are per-site, but
 * user meta lives in a single network-wide `usermeta` table. Deleting the
 * meta while any site still wants it would silently unverify every user on
 * that site, so the meta is only dropped when *every* site in the network
 * has opted in.
 *
 * @package WPCoreToolsEmailVerify
 */

defined( 'WP_UNINSTALL_PLUGIN' ) || exit;

if ( ! function_exists( 'wpcev_uninstall_opted_in' ) ) {
	/**
	 * Whether the current site opted into data deletion.
	 *
	 * @return bool
	 */
	function wpcev_uninstall_opted_in() {
		$opt = get_option( 'wpcev_settings', array() );
		return is_array( $opt ) && ! empty( $opt['delete_data_on_uninstall'] );
	}
}

if ( ! function_exists( 'wpcev_uninstall_site_data' ) ) {
	/**
	 * Delete the per-site footprint: options, transients and the purge cron.
	 * Must be called in the context of the site being cleaned.
	 */
	function wpcev_uninstall_site_data() {
		delete_option( 'wpcev_settings' );
		delete_option( 'wpcev_wizard_completed' );
		delete_option( 'wpcev_fail_log' );
		delete_option( 'wpcev_wc_backfill' );
		delete_option( 'wpcev_version' );

		delete_transient( 'wpcev_run_wizard' );
		delete_transient( 'wpcev_conflicts_v1' );
		delete_transient( 'wpcev_stats_v1' );
		delete_transient( 'wpcev_purge_eligible_v1' );
		delete_transient( 'wpcev_scan_v1' );

		// Scheduled per site, so it has to be cleared per site. Deactivation
		// normally handles this, but a network-deleted plugin may never fire
		// the deactivation hook on every site.
		wp_clear_scheduled_hook( 'wpcev_purge_unverified' );
		wp_clear_scheduled_hook( 'wpcev_wc_backfill_batch' );
		if ( function_exists( 'as_unschedule_all_actions' ) && did_action( 'action_scheduler_init' ) ) {
			as_unschedule_all_actions( 'wpcev_wc_backfill_batch', array(), 'wpcoretools-email-verify' );
		}
	}
}

if ( ! function_exists( 'wpcev_uninstall_user_meta' ) ) {
	/**
	 * Delete the network-wide user meta. Uses the metadata API rather than a
	 * raw DELETE so the user-meta object cache is invalidated too — a direct
	 * query leaves stale values behind on sites with persistent object cache.
	 */
	function wpcev_uninstall_user_meta() {
		global $wpdb;

		$keys = array(
			'wpcev_verified',
			'wpcev_verified_via',
			'wpcev_token',
			'wpcev_token_sent_at',
			'wpcev_send_attempts',
			'wpcev_ever_verified',
			'wpcev_email_corrections',
		);
		foreach ( $keys as $key ) {
			// $delete_all = true → every user, with cache invalidation.
			delete_metadata( 'user', 0, $key, '', true );
		}

		// Dismissed-notice flags carry an md5 suffix, so they can't be listed
		// up front. Resolve the rows, then delete through the API so the cache
		// stays correct.
		$like = $wpdb->esc_like( 'wpcev_dismissed_' ) . '%';
		// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- one-shot uninstall; no caching layer applies.
		$rows = $wpdb->get_results(
			$wpdb->prepare( "SELECT user_id, meta_key FROM {$wpdb->usermeta} WHERE meta_key LIKE %s", $like )
		);
		foreach ( (array) $rows as $row ) {
			delete_user_meta( (int) $row->user_id, $row->meta_key );
		}
	}
}

if ( is_multisite() ) {
	$wpcev_site_ids  = get_sites(
		array(
			'fields'                 => 'ids',
			'number'                 => 0,
			'update_site_meta_cache' => false,
		)
	);
	$wpcev_all_opted = ! empty( $wpcev_site_ids );
	$wpcev_any_opted = false;

	foreach ( $wpcev_site_ids as $wpcev_site_id ) {
		switch_to_blog( (int) $wpcev_site_id );
		if ( wpcev_uninstall_opted_in() ) {
			wpcev_uninstall_site_data();
			$wpcev_any_opted = true;
		} else {
			$wpcev_all_opted = false;
		}
		restore_current_blog();
	}

	// Only safe to drop the shared user meta when nobody still needs it.
	if ( $wpcev_all_opted && $wpcev_any_opted ) {
		wpcev_uninstall_user_meta();
	}

	unset( $wpcev_site_ids, $wpcev_site_id, $wpcev_all_opted, $wpcev_any_opted );
} elseif ( wpcev_uninstall_opted_in() ) {
	wpcev_uninstall_site_data();
	wpcev_uninstall_user_meta();
}