<?php
/**
 * weDevs Settings API wrapper class
 *
 * This class has been updated with proper escaping, enqueuing, 
 * and removal of unnecessary CSS and JS as per plugin requirements.
 *
 * @version 1.3 (27-Sep-2016) - Updated on 10 February, 2025
 *
 * @author Tareq Hasan <tareq@weDevs.com>
 * @link https://tareq.co Tareq Hasan
 * @example example/oop-example.php How to use the class
 *
 * @package Responsive Portfolio Image Gallery 1.3 - 10 July, 2025
 * @link https://www.realwebcare.com/
 */
if ( !class_exists( 'RPGAL_WeDevs_Settings_API' ) ):
    class RPGAL_WeDevs_Settings_API {

        /**
         * settings sections array
         *
         * @var array
         */
        protected $settings_sections = array();
        /**
         * Settings fields array
         *
         * @var array
         */
        protected $settings_fields = array();

        public function __construct() {
            add_action( 'admin_enqueue_scripts', array( $this, 'admin_enqueue_scripts' ) );
        }
        /**
         * Enqueue scripts and styles
         */
        function admin_enqueue_scripts() {
            wp_enqueue_script( 'jquery' );
            wp_enqueue_script( 'rpgal-admin', RPGAL_PLUGIN_URL . 'assets/js/rpgal-admin.js', array('jquery'), '1.4.1', array( 'in_footer' => true ) );
            wp_enqueue_style( 'rpgal-admin', RPGAL_PLUGIN_URL . 'assets/css/rpgal-admin.css', array(), '1.4.1' );
        }
        /**
         * Set settings sections
         *
         * @param array   $sections setting sections array
         */
        function set_sections( $sections ) {
            $this->settings_sections = $sections;
            return $this;
        }
        /**
         * Add a single section
         *
         * @param array   $section
         */
        function add_section( $section ) {
            $this->settings_sections[] = $section;
            return $this;
        }
        /**
         * Set settings fields
         *
         * @param array   $fields settings fields array
         */
        function set_fields( $fields ) {
            $this->settings_fields = $fields;
            return $this;
        }

        function add_field( $section, $field ) {
            $defaults = array(
                'name'  => '',
                'label' => '',
                'desc'  => '',
                'type'  => 'text'
            );
            $arg = wp_parse_args( $field, $defaults );
            $this->settings_fields[$section][] = $arg;
            return $this;
        }
        /**
         * Initialize and registers the settings sections and fileds to WordPress
         *
         * Usually this should be called at `admin_init` hook.
         *
         * This function gets the initiated settings sections and fields. Then
         * registers them to WordPress and ready for use.
         */
        function admin_init() {
            // Register settings sections
            foreach ( $this->settings_sections as $section ) {
                if ( false == get_option( $section['id'] ) ) {
                    add_option( esc_attr( $section['id'] ) );
                }
        
                if ( isset( $section['desc'] ) && ! empty( $section['desc'] ) ) {
                    $section['desc'] = '<div class="inside">' . wp_kses_post( $section['desc'] ) . '</div>';
                    $callback = function() use ( $section ) {
                        echo $section['desc']; // No need for esc_html() as wp_kses_post() already sanitizes it
                    };
                } elseif ( isset( $section['callback'] ) ) {
                    $callback = $section['callback'];
                } else {
                    $callback = null;
                }
        
                add_settings_section(
                    esc_attr( $section['id'] ), 
                    esc_html( $section['title'] ), 
                    $callback, 
                    esc_attr( $section['id'] )
                );
            }
        
            // Register settings fields
            foreach ( $this->settings_fields as $section => $field ) {
                foreach ( $field as $option ) {
                    $name     = isset( $option['name'] ) ? esc_attr( $option['name'] ) : '';
                    $type     = isset( $option['type'] ) ? esc_attr( $option['type'] ) : 'text';
                    $label    = isset( $option['label'] ) ? esc_html( $option['label'] ) : '';
                    $callback = isset( $option['callback'] ) ? $option['callback'] : array( $this, 'callback_' . $type );
        
                    $args = array(
                        'id'                => $name,
                        'class'             => isset( $option['class'] ) ? esc_attr( $option['class'] ) : $name,
                        'label_for'         => esc_attr( "{$section}[{$name}]" ),
                        'desc'              => isset( $option['desc'] ) ? wp_kses_post( $option['desc'] ) : '',
                        'name'              => $label,
                        'section'           => esc_attr( $section ),
                        'size'              => isset( $option['size'] ) ? esc_attr( $option['size'] ) : null,
                        'options'           => isset( $option['options'] ) ? $option['options'] : '',
                        'std'               => isset( $option['default'] ) ? esc_attr( $option['default'] ) : '',
                        'sanitize_callback' => isset( $option['sanitize_callback'] ) ? $option['sanitize_callback'] : '',
                        'type'              => $type,
                        'placeholder'       => isset( $option['placeholder'] ) ? esc_attr( $option['placeholder'] ) : '',
                        'min'               => isset( $option['min'] ) ? esc_attr( $option['min'] ) : '',
                        'max'               => isset( $option['max'] ) ? esc_attr( $option['max'] ) : '',
                        'step'              => isset( $option['step'] ) ? esc_attr( $option['step'] ) : '',
                    );
        
                    add_settings_field( "{$section}[{$name}]", $label, $callback, $section, $section, $args );
                }
            }
        
            // Create settings in the options table
            foreach ( $this->settings_sections as $section ) {
                register_setting( esc_attr( $section['id'] ), esc_attr( $section['id'] ), array( $this, 'sanitize_options' ) );
            }
        }
        
        /**
         * Get field description for display
         *
         * @param array   $args settings field args
         */
        public function get_field_description( $args ) {
            if ( ! empty( $args['desc'] ) ) {
                $desc = sprintf( '<p class="description">%s</p>', wp_kses_post( $args['desc'] ) );
            } else {
                $desc = '';
            }
            return $desc;
        }

        /**
         * Displays a text field for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_text( $args ) {
            $value       = esc_attr( $this->get_option( $args['id'], $args['section'], $args['std'] ) );
            $size        = isset( $args['size'] ) && ! is_null( $args['size'] ) ? esc_attr( $args['size'] ) : 'regular';
            $type        = isset( $args['type'] ) ? esc_attr( $args['type'] ) : 'text';
            $placeholder = ! empty( $args['placeholder'] ) ? ' placeholder="' . esc_attr( $args['placeholder'] ) . '"' : '';
        
            $html = sprintf(
                '<input type="%1$s" class="%2$s-text" id="%3$s[%4$s]" name="%3$s[%4$s]" value="%5$s"%6$s/>',
                $type, $size, esc_attr( $args['section'] ), esc_attr( $args['id'] ), $value, $placeholder
            );
        
            // Add the description field with proper escaping
            $html .= $this->get_field_description( $args );
        
            // Output the HTML
            echo $html; // No escaping needed as all dynamic parts are already escaped
        }

        /**
         * Displays a url field for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_url( $args ) {
            $this->callback_text( $args );
        }

        /**
         * Displays a number field for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_number( $args ) {
            $value       = $this->get_option( $args['id'], $args['section'], $args['std'] );

            // Validate value against min/max
            if ( isset( $args['min'] ) && $args['min'] !== '' && floatval($value) < floatval($args['min']) ) {
                $value = $args['std']; // Fallback to default if below min
            }
            if ( isset( $args['max'] ) && $args['max'] !== '' && floatval($value) > floatval($args['max']) ) {
                $value = $args['std']; // Fallback to default if above max
            }

            $value = esc_attr( $value );
            $size = isset( $args['size'] ) && ! is_null( $args['size'] ) ? esc_attr( $args['size'] ) : 'regular';
            $type = isset( $args['type'] ) ? esc_attr( $args['type'] ) : 'number';
            $placeholder = ! empty( $args['placeholder'] ) ? ' placeholder="' . esc_attr( $args['placeholder'] ) . '"' : '';
            $min = isset( $args['min'] ) && $args['min'] !== '' ? ' min="' . esc_attr( $args['min'] ) . '"' : '';
            $max = isset( $args['max'] ) && $args['max'] !== '' ? ' max="' . esc_attr( $args['max'] ) . '"' : '';
            $step = isset( $args['step'] ) && $args['step'] !== '' ? ' step="' . esc_attr( $args['step'] ) . '"' : '';

            $html = sprintf(
                '<input type="%1$s" class="%2$s-number" id="%3$s[%4$s]" name="%3$s[%4$s]" value="%5$s"%6$s%7$s%8$s%9$s/>',
                $type, $size, esc_attr( $args['section'] ), esc_attr( $args['id'] ), $value, $placeholder, $min, $max, $step
            );
        
            // Add the description field with proper escaping
            $html .= $this->get_field_description( $args );

            // Output the HTML
            echo $html; // No escaping needed as all dynamic parts are already escaped
        }

        /**
         * Displays a checkbox for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_checkbox( $args ) {
            $value = esc_attr( $this->get_option( $args['id'], $args['section'], $args['std'] ) );
        
            $html  = '<fieldset>';
            $html .= sprintf( '<label for="wpuf-%1$s[%2$s]">', esc_attr( $args['section'] ), esc_attr( $args['id'] ) );
            $html .= sprintf( '<input type="hidden" name="%1$s[%2$s]" value="off" />', esc_attr( $args['section'] ), esc_attr( $args['id'] ) );
            $html .= sprintf(
                '<input type="checkbox" class="checkbox" id="wpuf-%1$s[%2$s]" name="%1$s[%2$s]" value="on" %3$s />',
                esc_attr( $args['section'] ), esc_attr( $args['id'] ), checked( $value, 'on', false )
            );
            $html .= sprintf( '<span class="description">%1$s</span></label>', wp_kses_post( $args['desc'] ) );
            $html .= '</fieldset>';
        
            // Output the HTML
            echo $html; // No escaping needed as all dynamic parts are already escaped
        }

        /**
         * Displays a multicheckbox for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_multicheck( $args ) {
            $value = $this->get_option( $args['id'], $args['section'], $args['std'] );
        
            $html  = '<fieldset>';
            $html .= sprintf( '<input type="hidden" name="%1$s[%2$s]" value="" />', esc_attr( $args['section'] ), esc_attr( $args['id'] ) );
        
            foreach ( $args['options'] as $key => $label ) {
                $checked_value = isset( $value[ $key ] ) ? esc_attr( $value[ $key ] ) : '0';
        
                $html .= sprintf( '<label for="wpuf-%1$s[%2$s][%3$s]">', esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $key ) );
                $html .= sprintf(
                    '<input type="checkbox" class="checkbox" id="wpuf-%1$s[%2$s][%3$s]" name="%1$s[%2$s][%3$s]" value="%3$s" %4$s />',
                    esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $key ), checked( $checked_value, $key, false )
                );
                $html .= sprintf( '%1$s</label><br>', esc_html( $label ) );
            }
        
            // Add the description field with escaping
            $html .= $this->get_field_description( $args );
            $html .= '</fieldset>';
        
            // Output the HTML
            echo $html; // No escaping needed as all dynamic parts are already escaped
        }

        /**
         * Displays a radio button for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_radio( $args ) {
            $value = $this->get_option( $args['id'], $args['section'], $args['std'] );
            $html  = '<fieldset>';
            foreach ( $args['options'] as $key => $label ) {
                $html .= sprintf( '<label for="wpuf-%1$s[%2$s][%3$s]">',  esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $key ) );
                $html .= sprintf( '<input type="radio" class="radio" id="wpuf-%1$s[%2$s][%3$s]" name="%1$s[%2$s]" value="%3$s" %4$s />', esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $key ), checked( $value, $key, false ) );
                $html .= sprintf( '%1$s</label><br>', esc_html( $label ) ); // Escaped $label
            }
        
            // Add the description field with escaping
            $html .= $this->get_field_description( $args );
            $html .= '</fieldset>';
        
            // Output the HTML
            echo $html; // No escaping here because all dynamic parts are already escaped
        }

        /**
         * Displays a selectbox for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_select( $args ) {
            $value = esc_attr( $this->get_option( $args['id'], $args['section'], $args['std'] ) );
            $size  = isset( $args['size'] ) && !is_null( $args['size'] ) ? $args['size'] : 'regular';
            $html  = sprintf( '<select class="%1$s" name="%2$s[%3$s]" id="%2$s[%3$s]">', esc_attr( $size ), esc_attr( $args['section'] ), esc_attr( $args['id'] ) );
        
            foreach ( $args['options'] as $key => $label ) {
                $html .= sprintf( '<option value="%s"%s>%s</option>', esc_attr( $key ), selected( esc_attr( $value ), esc_attr( $key ), false ), esc_html( ucfirst( $label ) ) );
            }
        
            $html .= sprintf( '</select>' );
        
            // Add the description field with escaping
            $html .= $this->get_field_description( $args );
        
            // Output the HTML
            echo $html; // No escaping here because all dynamic parts are already escaped
        }

        /**
         * Displays a textarea for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_textarea( $args ) {
            $value       = esc_textarea( $this->get_option( $args['id'], $args['section'], $args['std'] ) );
            $size        = isset( $args['size'] ) && !is_null( $args['size'] ) ? $args['size'] : 'regular';
            $placeholder = empty( $args['placeholder'] ) ? '' : ' placeholder="'.esc_attr( $args['placeholder'] ).'"';
            if( $args['id'] == 'ticker_tag' ) {
                $html        = sprintf( '<textarea rows="5" cols="55" class="%1$s-text" id="%3$s" name="%2$s[%3$s]"%4$s>%5$s</textarea>', esc_attr( $size ), esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $placeholder ), esc_attr( $value ) );
            } else {
                $html        = sprintf( '<textarea rows="5" cols="55" class="%1$s-text" id="%2$s[%3$s]" name="%2$s[%3$s]"%4$s>%5$s</textarea>', esc_attr( $size ), esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $placeholder ), esc_attr( $value ) );
            }

            // Add the description field with escaping
            $html        .= $this->get_field_description( $args );

            // Output the HTML
            echo $html; // No escaping here because all dynamic parts are already escaped
        }

        /**
         * Displays the html for a settings field
         * 
         * @param mixed $args
         * @return void
         */
        function callback_html( $args ) {
            // Add the description field with escaping
            echo $this->get_field_description( $args );
        }

        /**
         * Displays a rich text textarea for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_wysiwyg( $args ) {
            $value = $this->get_option( $args['id'], $args['section'], $args['std'] );
            $size  = isset( $args['size'] ) && !is_null( $args['size'] ) ? $args['size'] : '500px';
            echo '<div style="max-width: ' . esc_attr( $size ) . ';">';
            $editor_settings = array(
                'teeny'         => true,
                'textarea_name' => esc_attr( $args['section'] ) . '[' . esc_attr( $args['id'] ) . ']',
                'textarea_rows' => 10
            );
            if ( isset( $args['options'] ) && is_array( $args['options'] ) ) {
                $editor_settings = array_merge( $editor_settings, $args['options'] );
            }
            wp_editor( $value, $args['section'] . '-' . $args['id'], $editor_settings );
            echo '</div>';

            // Add the description field with escaping
            echo $this->get_field_description( $args );
        }

        /**
         * Displays a file upload field for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_file( $args ) {
            $value = esc_attr( $this->get_option( $args['id'], $args['section'], $args['std'] ) );
            $size  = isset( $args['size'] ) && !is_null( $args['size'] ) ? $args['size'] : 'regular';
            $id    = esc_attr( $args['section'] )  . '[' . esc_attr( $args['id'] ) . ']';
            $label = isset( $args['options']['button_label'] ) ? $args['options']['button_label'] : __( 'Choose File', 'responsive-portfolio-image-gallery' );
            $html  = sprintf( '<input type="text" class="%1$s-text rpgal-url" id="%2$s[%3$s]" name="%2$s[%3$s]" value="%4$s"/>', esc_attr( $size ), esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $value ) );
            $html  .= '<input type="button" class="button rpgal-browse" value="' . esc_attr( $label ) . '" />';
        
            // Add the description field with escaping
            $html  .= $this->get_field_description( $args );
        
            // Output the HTML
            echo $html; // No escaping here because all dynamic parts are already escaped
        }

        /**
         * Displays a password field for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_password( $args ) {
            $value = esc_attr( $this->get_option( $args['id'], $args['section'], $args['std'] ) );
            $size  = isset( $args['size'] ) && !is_null( $args['size'] ) ? $args['size'] : 'regular';
            $html  = sprintf( '<input type="password" class="%1$s-text" id="%2$s[%3$s]" name="%2$s[%3$s]" value="%4$s"/>', esc_attr( $size ), esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $value ) );
        
            // Add the description field with escaping
            $html  .= $this->get_field_description( $args );
        
            // Output the HTML
            echo $html; // No escaping here because all dynamic parts are already escaped
        }

        /**
         * Displays a color picker field for a settings field
         *
         * @param array   $args settings field args
         */
        function callback_color( $args ) {
            $value = esc_attr( $this->get_option( $args['id'], $args['section'], $args['std'] ) );
            $size  = isset( $args['size'] ) && !is_null( $args['size'] ) ? $args['size'] : 'regular';
            $html  = sprintf( '<input type="text" class="%1$s-text wp-color-picker-field" id="%2$s[%3$s]" name="%2$s[%3$s]" value="%4$s" data-default-color="%5$s" />', esc_attr( $size ), esc_attr( $args['section'] ), esc_attr( $args['id'] ), esc_attr( $value ), esc_attr( $args['std'] ) );
        
            // Add the description field with escaping
            $html  .= $this->get_field_description( $args );
        
            // Output the HTML
            echo $html; // No escaping here because all dynamic parts are already escaped
        }

        /**
         * Displays a select box for creating the pages select box
         *
         * @param array   $args settings field args
         */
        function callback_pages( $args ) {
            $dropdown_args = array(
                'selected' => esc_attr( $this->get_option($args['id'], $args['section'], $args['std'] ) ),
                'name'     => $args['section'] . '[' . $args['id'] . ']',
                'id'       => $args['section'] . '[' . $args['id'] . ']',
                'echo'     => 0
            );
            $html = wp_dropdown_pages( $dropdown_args );
        
            // Output the HTML
            echo $html; // No escaping here because all dynamic parts are already escaped
        }

        /**
         * Sanitize callback for Settings API
         *
         * @return mixed
         */
        function sanitize_options( $options ) {
            if ( !$options ) {
                return $options;
            }
            foreach( $options as $option_slug => $option_value ) {
                $sanitize_callback = $this->get_sanitize_callback( $option_slug );
                // If callback is set, call it
                if ( $sanitize_callback ) {
                    $options[ $option_slug ] = call_user_func( $sanitize_callback, $option_value );
                    continue;
                }
            }
            return $options;
        }

        /**
         * Get sanitization callback for given option slug
         *
         * @param string $slug option slug
         *
         * @return mixed string or bool false
         */
        function get_sanitize_callback( $slug = '' ) {
            if ( empty( $slug ) ) {
                return false;
            }
            // Iterate over registered fields and see if we can find proper callback
            foreach( $this->settings_fields as $section => $options ) {
                foreach ( $options as $option ) {
                    if ( $option['name'] != $slug ) {
                        continue;
                    }
                    // Return the callback name
                    return isset( $option['sanitize_callback'] ) && is_callable( $option['sanitize_callback'] ) ? $option['sanitize_callback'] : false;
                }
            }
            return false;
        }

        /**
         * Get the value of a settings field
         *
         * @param string  $option  settings field name
         * @param string  $section the section name this field belongs to
         * @param string  $default default text if it's not found
         * @return string
         */
        function get_option( $option, $section, $default = '' ) {
            $options = get_option( $section );
            if ( isset( $options[$option] ) ) {
                return $options[$option];
            }
            return $default;
        }

        /**
         * Show navigations as tab
         *
         * Shows all the settings section labels as tab
         */
        function show_navigation() {
            $html = '<h2 class="nav-tab-wrapper">';
            $count = count( $this->settings_sections );
            // don't show the navigation if only one section exists
            if ( $count === 1 ) {
                return;
            }
            foreach ( $this->settings_sections as $tab ) {
                $html .= sprintf( '<a href="#%1$s" class="nav-tab" id="%1$s-tab">%2$s</a>', $tab['id'], $tab['title'] );
            }
            $html .= '</h2>';
            echo wp_kses_post( $html );
        }

        /**
         * Show the section settings forms
         *
         * This function displays every sections in a different form
         */
        function show_forms() {
            ?>
            <div class="metabox-holder">
                <?php foreach ( $this->settings_sections as $form ) { ?>
                    <div id="<?php echo $form['id']; ?>" class="group" style="display: none;">
                        <form method="post" action="options.php">
                            <?php
                            do_action( 'rpgal_form_top_' . $form['id'], $form );
                            settings_fields( $form['id'] );
                            do_settings_sections( $form['id'] );
                            do_action( 'rpgal_form_bottom_' . $form['id'], $form );
                            if ( isset( $this->settings_fields[ $form['id'] ] ) ):
                            ?>
                            <div style="padding-left: 10px">
                                <?php submit_button(); ?>
                            </div>
                            <?php endif; ?>
                        </form>
                    </div>
                <?php } ?>
            </div>
            <?php
        }
    }
endif;