<?php
/**
 * Saving the data to DB. (including insert, update).
 *
 * @package rundiz-downloads
 */


namespace RundizDownloads\App\Controllers\Admin\Downloads\Xhr;


if (!class_exists('\\RundizDownloads\\App\\Controllers\\Admin\\Downloads\\Xhr\\XhrSave')) {
    /**
     * XhrSave class.
     */
    class XhrSave extends \RundizDownloads\App\Controllers\XhrBased implements \RundizDownloads\App\Controllers\ControllerInterface
    {


        /**
         * Automatically add GitHub webhook "if not exists".
         *
         * This method was called from `saveInsertData()`, `saveUpdateData()` methods.
         *
         * @param array $data The data same as prepared for save.
         */
        private function addGitHubWebhook(array $data)
        {
            if (!isset($data['download_type']) || (isset($data['download_type']) && intval($data['download_type']) !== 1)) {
                // if not GitHub.
                return;
            }

            if (!isset($data['download_github_name']) || (isset($data['download_github_name']) && empty($data['download_github_name']))) {
                // if there is no GitHub name.
                return;
            }

            $Github = new \RundizDownloads\App\Libraries\Github();

            $user_id = (isset($data['user_id']) && !empty($data['user_id']) ? $data['user_id'] : get_current_user_id());
            $accessToken = $Github->getOAuthAccessToken($user_id);
            $secretKey = $Github->getWebhookSecretKey($user_id);

            if (empty($accessToken) || empty($secretKey)) {
                // if there is no access token or secret key.
                // do nothing
                unset($accessToken, $Github, $secretKey, $user_id);
                return;
            }

            $expNameWithOwner = explode('/', $data['download_github_name']);
            $repoOwner = $expNameWithOwner[0];
            unset($expNameWithOwner[0]);
            $repoName = implode('/', $expNameWithOwner);
            unset($expNameWithOwner);

            $headers = $Github->apiV3Headers($accessToken);
            $hook_id = $Github->apiGetWebhookId($headers, $repoOwner, $repoName);

            if (false !== $hook_id) {
                // if already have webhook.
                unset($accessToken, $Github, $headers, $hook_id, $repoName, $repoOwner, $secretKey, $user_id);
                return;
            }
            unset($hook_id);

            $result = $Github->apiAddUpdateGitHubWebhook($user_id, '', $secretKey, $repoOwner, $repoName, $headers);

            \RundizDownloads\App\Libraries\Logger::staticDebugLog($result, 'github-api-add-webhook-on-save-download-data-' . current_time('Ymd-Hi'));
            unset($result);

            unset($accessToken, $Github, $headers, $repoName, $repoOwner, $secretKey, $user_id);
        }// addGitHubWebhook


        /**
         * Prepare input data.
         *
         * Also auto detect URL and then get additional data that will be insert/update to DB table.
         *
         * @return array|string Return array with data if success. Return string if there is an error message.
         */
        private function prepareInputData()
        {
            $data = [];
            $data['download_url'] = filter_input(INPUT_POST, 'download_url', FILTER_SANITIZE_URL);

            if (strpos($data['download_url'], '..') !== false) {
                return __('Hacking attempt!', 'rundiz-downloads');
            }

            $data['download_name'] = filter_input(INPUT_POST, 'download_name', FILTER_SANITIZE_FULL_SPECIAL_CHARS);
            $data['download_admin_comment'] = filter_input(INPUT_POST, 'download_admin_comment', FILTER_SANITIZE_FULL_SPECIAL_CHARS);
            $data['download_related_path'] = filter_input(INPUT_POST, 'download_related_path', FILTER_UNSAFE_RAW);
            $data['download_size'] = filter_input(INPUT_POST, 'download_size', FILTER_SANITIZE_NUMBER_INT);
            if (empty($data['download_size'])) {
                $data['download_size'] = 0;
            }
            $data['download_count'] = filter_input(INPUT_POST, 'download_count', FILTER_SANITIZE_NUMBER_INT);
            if (empty($data['download_count'])) {
                $data['download_count'] = 0;
            }
            $data['download_update'] = current_time('mysql');
            $data['download_update_gmt'] = current_time('mysql', true);

            $Url = new \RundizDownloads\App\Libraries\Url();
            $domainNoSub = strtolower($Url->getDomain($data['download_url']));
            $currentDomain = strtolower($Url->getDomain('http://' . (isset($_SERVER['HTTP_HOST']) ? sanitize_text_field(wp_unslash($_SERVER['HTTP_HOST'])) : '') . '/'));
            $FileSystem = new \RundizDownloads\App\Libraries\FileSystem();
            if (null !== $domainNoSub && false !== $domainNoSub) {
                // if can get domain without sub domain from the specific URL.
                $opt_force_download = filter_input(INPUT_POST, 'opt_force_download', FILTER_SANITIZE_NUMBER_INT);
                $opt_download_version = filter_input(INPUT_POST, 'opt_download_version');
                if (is_string($opt_download_version)) {
                    $opt_download_version = wp_strip_all_tags($opt_download_version);
                }
                $opt_download_version_range = filter_input(INPUT_POST, 'opt_download_version_range');
                if (is_string($opt_download_version_range)) {
                    $opt_download_version_range = htmlspecialchars($opt_download_version_range, ENT_QUOTES);
                }
                $data['download_options'] = maybe_serialize(
                    [
                        'opt_force_download' => $opt_force_download,
                        'opt_download_version' => $opt_download_version,
                        'opt_download_version_range' => $opt_download_version_range,
                    ]
                );
                unset($opt_force_download);

                switch ($domainNoSub) {
                    case 'github.com':
                        // for github domain.
                        $data['download_type'] = 1;

                        $Semver = new \RundizDownloads\App\Libraries\Semver();
                        $version_range = $opt_download_version_range;
                        if ((is_null($version_range) || '' === $version_range)) {
                            $version_range = $Semver->getDefaultVersionConstraint($opt_download_version);
                        }
                        unset($Semver);

                        $Github = new \RundizDownloads\App\Libraries\Github();
                        $nameWithOwner = $Github->getNameWithOwnerFromUrl($data['download_url']);
                        unset($Github);
                        if (is_array($nameWithOwner) && isset($nameWithOwner[0]) && isset($nameWithOwner[1])) {
                            // if can get GitHub name with owner.
                            $data['download_github_name'] = $nameWithOwner[0] . '/' . $nameWithOwner[1];
                            if (empty($data['download_name'])) {
                                $data['download_name'] = $nameWithOwner[0] . '/' . $nameWithOwner[1];
                            }
                        } else {
                            // if cannot get GitHub name with owner. mark this to null and set download type to other remote URL (type 2).
                            $data['download_github_name'] = null;
                            $data['download_type'] = 2;
                        }
                        unset($nameWithOwner);

                        $data['download_related_path'] = null;
                        break;
                    case $currentDomain:
                    default:
                        // for local and other remote domains.
                        $data['download_github_name'] = null;

                        if ($domainNoSub === $currentDomain) {
                            // if domain without sub domain matched current domain.
                            $data['download_type'] = 0;

                            $wp_upload_dir = wp_upload_dir();
                            if (isset($wp_upload_dir['baseurl'])) {
                                $relatedPathUrl = str_replace(trailingslashit($wp_upload_dir['baseurl']), '', $data['download_url']);
                                if ($relatedPathUrl !== $data['download_related_path']) {
                                    // if related path is missing from manual enter path that is on this server.
                                    $data['download_related_path'] = $relatedPathUrl;
                                }
                                unset($relatedPathUrl);
                            }
                            unset($wp_upload_dir);
                        } else {
                            // if domain without sub domain does not match current domain.
                            $data['download_type'] = 2;
                            $data['download_related_path'] = null;
                        }
                        break;
                }// endswitch;

                unset($opt_download_version, $opt_download_version_range);

                // set common data for each download type.
                $fileParts = $FileSystem->getFilePart($data['download_url']);
                if (isset($fileParts['nameext'])) {
                    $data['download_file_name'] = $fileParts['nameext'];
                }
                unset($fileParts);

                if (empty($data['download_name']) && isset($data['download_file_name']) && !empty($data['download_file_name'])) {
                    // if download name is empty, set it to file name (just name with extension).
                    $data['download_name'] = $data['download_file_name'];
                }

                $opt_force_download = filter_input(INPUT_POST, 'opt_force_download', FILTER_SANITIZE_NUMBER_INT);
                $opt_download_version = filter_input(INPUT_POST, 'opt_download_version');
                if (is_string($opt_download_version)) {
                    $opt_download_version = wp_strip_all_tags($opt_download_version);
                }
                $opt_download_version_range = filter_input(INPUT_POST, 'opt_download_version_range');
                if (is_string($opt_download_version_range)) {
                    $opt_download_version_range = htmlspecialchars($opt_download_version_range, ENT_QUOTES);
                }
                $data['download_options'] = maybe_serialize(
                    [
                        'opt_force_download' => $opt_force_download,
                        'opt_download_version' => $opt_download_version,
                        'opt_download_version_range' => $opt_download_version_range,
                    ]
                );
                unset($opt_download_version, $opt_download_version_range, $opt_force_download);
            } else {
                // if cannot get domain without sub domain from the specific URL.
                unset($currentDomain, $domainNoSub, $FileSystem, $Url);
                return __('Incorrect Download URL value.', 'rundiz-downloads');
            }// endif; $domainNoSub.
            unset($currentDomain, $domainNoSub, $FileSystem, $Url);

            return $data;
        }// prepareInputData


        /**
         * {@inheritDoc}
         */
        public function registerHooks()
        {
            if (is_admin()) {
                add_action('wp_ajax_RdDownloadsSaveData', [$this, 'saveData']);
            }
        }// registerHooks


        /**
         * Determine saving data to be insert or update and call to its function.
         *
         * @return void
         */
        public function saveData()
        {
            $this->commonAccessCheck(['post'], ['rundiz-downloads-ajax-saving-nonce', 'security']);

            if (!current_user_can('upload_files')) {
                $output['form_result_class'] = 'notice-error';
                $output['form_result_msg'] = __('You do not have permission to access this page.', 'rundiz-downloads');
                wp_send_json($output, 403);
            }

            $download_id = filter_input(INPUT_POST, 'download_id', FILTER_SANITIZE_NUMBER_INT);

            if (empty($download_id) || $download_id <= '0') {
                // use insert.
                $this->saveInsertData();
            } else {
                // use update.
                $this->saveUpdateData();
            }
        }// saveData


        /**
         * Save new data (insert) to DB.
         *
         * @global \wpdb $wpdb
         */
        protected function saveInsertData()
        {
            $responseStatus = 201;
            $output = [];

            // prepare data for validate & save.
            $data = [];
            $data['user_id'] = get_current_user_id();
            $data['download_create'] = current_time('mysql');
            $data['download_create_gmt'] = current_time('mysql', true);

            $additionalData = $this->prepareInputData();
            if (is_array($additionalData) && !empty($additionalData)) {
                // if success get additional data from download url.
                $data = $data + $additionalData;

                // make empty as null.
                $Input = new \RundizDownloads\App\Libraries\Input();
                $data = $Input->setNullIfDataValueEmpty($data);
                unset($Input);

                $validated = true;
            } else {
                // if contain error.
                $responseStatus = 400;
                $output['form_result_class'] = 'notice-error';
                $output['form_result_msg'] = (is_scalar($additionalData) ? $additionalData : __('Unknown error, please reload the webpage and try again.', 'rundiz-downloads'));
                $validated = false;
            }
            unset($additionalData);

            // ready to insert the data.
            if (isset($validated) && true === $validated) {
                if (defined('WP_DEBUG') && WP_DEBUG === true) {
                    $output['debugDataToSave'] = $data;
                }

                global $wpdb;
                $output['insertResult'] = $wpdb->insert($wpdb->prefix . 'rundiz_downloads', $data);// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
                if (false !== $output['insertResult']) {
                    $output['download_id'] = $wpdb->insert_id;
                    $output['saved'] = true;
                    $output['editUrl'] = admin_url('admin.php?page=' . \RundizDownloads\App\Controllers\Admin\Downloads\Menu::SUB_MENU_SLUG_EDIT . '&download_id=' . $output['download_id']);
                    $output['form_result_class'] = 'notice-success';
                    $output['form_result_msg'] = __('Your download was saved successfully.', 'rundiz-downloads');

                    $Dll = new \RundizDownloads\App\Models\RdDownloadLogs();
                    $Dll->writeLog('admin_insert', [
                        'download_id' => $output['download_id'],
                    ]);
                    unset($Dll);

                    $this->addGitHubWebhook($data);
                } else {
                    $responseStatus = 500;
                    $output['form_result_class'] = 'notice-error';
                    $output['form_result_msg'] = $wpdb->last_error;
                }
            }

            unset($data, $validated);

            // response with data.
            wp_send_json($output, $responseStatus);
        }// saveInsertData


        /**
         * Save update data to DB.
         *
         * @global \wpdb $wpdb
         */
        protected function saveUpdateData()
        {
            $responseStatus = 200;
            $output = [];

            // prepare data for validate & save.
            $data = [];
            $download_id = filter_input(INPUT_POST, 'download_id', FILTER_SANITIZE_NUMBER_INT);

            // check first that is this user editing other's file or not.
            $RdDownloads = new \RundizDownloads\App\Models\RdDownloads();
            $checkResult = $RdDownloads->get(['*select' => 'user_id', 'download_id' => $download_id]);
            if (
                empty($checkResult) ||
                is_null($checkResult) ||
                (
                    (
                        is_array($checkResult) ||
                        is_object($checkResult)
                    ) &&
                    empty($checkResult)
                )
            ) {
                $output['form_result_class'] = 'notice-error';
                $output['form_result_msg'] = __('The editing item was not found.', 'rundiz-downloads');
                wp_send_json($output, 404);
            } else {
                if (isset($checkResult->user_id) && intval($checkResult->user_id) !== get_current_user_id() && !current_user_can('edit_others_posts')) {
                    $output['form_result_class'] = 'notice-error';
                    $output['form_result_msg'] = __('You do not have permission to access this page.', 'rundiz-downloads');
                    wp_send_json($output, 403);
                }
            }
            unset($checkResult);

            $additionalData = $this->prepareInputData();
            if (is_array($additionalData) && !empty($additionalData)) {
                // if success get additional data from download url.
                $data = $data + $additionalData;

                // make empty as null.
                $Input = new \RundizDownloads\App\Libraries\Input();
                $data = $Input->setNullIfDataValueEmpty($data);
                unset($Input);

                $validated = true;
            } else {
                // if contain error.
                $responseStatus = 400;
                $output['form_result_class'] = 'notice-error';
                $output['form_result_msg'] = (is_scalar($additionalData) ? $additionalData : __('Unknown error, please reload the webpage and try again.', 'rundiz-downloads'));
                $validated = false;
            }
            unset($additionalData);

            // ready to update the data.
            if (isset($validated) && true === $validated) {
                if (defined('WP_DEBUG') && WP_DEBUG === true) {
                    $output['debugDataToSave'] = $data;
                }

                $output['updateResult'] = $RdDownloads->update($data, ['download_id' => $download_id]);
                if (false !== $output['updateResult']) {
                    $output['last_update'] = \RundizDownloads\App\Libraries\DateTime::displayDateTime(current_time('mysql', true));
                    $output['saved'] = true;
                    $output['form_result_class'] = 'notice-success';
                    $output['form_result_msg'] = __('Your download was saved successfully.', 'rundiz-downloads');

                    $Dll = new \RundizDownloads\App\Models\RdDownloadLogs();
                    $Dll->writeLog('admin_update', [
                        'download_id' => $download_id,
                    ]);
                    unset($Dll);

                    $this->addGitHubWebhook($data);

                    // clear all cache on save.
                    $Cache = new \RundizDownloads\App\Libraries\Cache();
                    $output['cacheCleared'] = $Cache->getInstance()->clear();
                    unset($Cache);
                } else {
                    global $wpdb;
                    $responseStatus = 500;
                    $output['form_result_class'] = 'notice-error';
                    $output['form_result_msg'] = $wpdb->last_error;
                }
            }

            unset($data, $download_id, $RdDownloads, $validated);

            // response with data.
            wp_send_json($output, $responseStatus);
        }// saveUpdateData


    }// XhrSave
}
