<?php
namespace Zadex\Dynamic\Tags;

defined('ABSPATH') || exit;

use Zadex\Dynamic\Context;
use Zadex\Dynamic\Tag;

/** A query-string parameter (`?utm_source=…`), sanitized as plain text. Pages using it should not be page-cached. */
final class UrlParam extends Tag
{
    public function name(): string
    {
        return 'url-param';
    }

    public function title(): string
    {
        return __('URL parameter', 'zadex');
    }

    public function group(): string
    {
        return 'other';
    }

    public function controls(): array
    {
        return [
            ['id' => 'key', 'type' => 'text', 'label' => __('Parameter', 'zadex'), 'default' => '', 'placeholder' => 'utm_source'],
        ];
    }

    public function render(array $settings, Context $ctx)
    {
        $key = isset($settings['key']) && is_string($settings['key']) ? trim($settings['key']) : '';
        if ($key === '' || !isset($ctx->query[$key]) || !is_scalar($ctx->query[$key])) {
            return '';
        }
        // Context::for_*() already unslashed and sanitized the query string; sanitize again for contexts built by hand.
        return sanitize_text_field((string) $ctx->query[$key]);
    }
}