<?php
require_once plugin_dir_path(__FILE__) . '../onesignal-helpers.php';

defined('ABSPATH') or die('This page may not be accessed directly.');

// Add OneSignal to WP Admin Menu
add_action('admin_menu', 'onesignal_admin_menu');

function onesignal_admin_menu()
{
  add_menu_page('OneSignal - Push Notifications', 'OneSignal', 'manage_options', 'onesignal-admin-page.php', 'onesignal_admin_page', 'data:image/svg+xml;base64,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', 81);
}

// Load style for page
add_action('admin_enqueue_scripts', 'admin_files');

function admin_files()
{
  $cache_buster = ceil(time() / 3600); // updates every hour
  wp_enqueue_script(
    'onesignal_admin_js',
    plugins_url('onesignal-admin.js', __FILE__),
    array(),
    $cache_buster
  );
  wp_enqueue_style('style', plugins_url('onesignal-admin.css', __FILE__), array(), $cache_buster);
}

// Hook settings save handler to admin_init
add_action('admin_init', 'onesignal_handle_settings_save');

function onesignal_handle_settings_save() {
  // Only process POST requests
  if (!isset($_SERVER['REQUEST_METHOD']) || $_SERVER['REQUEST_METHOD'] !== 'POST') {
    return;
  }

  if (!isset($_GET['page']) || $_GET['page'] !== 'onesignal-admin-page.php') {
    return;
  }

  // Only process when submit button is clicked
  if (!isset($_POST["submit"]) || $_POST["submit"] !== "Save Settings") {
    return;
  }

  // Verify nonce - dies on failure with error message
  check_admin_referer('onesignal_v3_save_settings', 'onesignal_v3_settings_nonce');

  // Verify user capability
  if (!current_user_can('manage_options')) {
    wp_die(
      __('You do not have sufficient permissions to access this page.', 'onesignal'),
      __('Permission Denied', 'onesignal'),
      array('response' => 403)
    );
  }

  // Get existing settings with default values
  $onesignal_settings = get_option('OneSignalWPSetting', onesignal_get_default_settings());

  if (isset($_POST['onesignal_app_id']) && !empty($_POST['onesignal_app_id'])) {
      $onesignal_settings['app_id'] = sanitize_text_field($_POST['onesignal_app_id']);
  }

  if (isset($_POST['onesignal_rest_api_key']) && !empty($_POST['onesignal_rest_api_key'])) {
      $onesignal_settings['app_rest_api_key'] = sanitize_text_field($_POST['onesignal_rest_api_key']);
  }

  if (isset($_POST['utm_additional_url_params'])) {
      $onesignal_settings['utm_additional_url_params'] = sanitize_text_field($_POST['utm_additional_url_params']);
  }

  if (isset($_POST['allowed_custom_post_types'])) {
      $onesignal_settings['allowed_custom_post_types'] = sanitize_text_field($_POST['allowed_custom_post_types']);
  }

  // Save the auto send notifications setting for posts
  $auto_send = isset($_POST['onesignal_auto_send']) ? 1 : 0;
  $onesignal_settings['notification_on_post'] = $auto_send;

  // Save the auto send notifications setting for pages
  $auto_send_pages = isset($_POST['onesignal_auto_send_pages']) ? 1 : 0;
  $onesignal_settings['notification_on_page'] = $auto_send_pages;

  // Save the notification on post from plugin setting
  $notification_on_post_from_plugin = isset($_POST['notification_on_post_from_plugin']) ? 1 : 0;
  $onesignal_settings['notification_on_post_from_plugin'] = $notification_on_post_from_plugin;

  // Save the mobile subscribers setting
  $send_to_mobile = isset($_POST['onesignal_send_to_mobile']) ? 1 : 0;
  $onesignal_settings['send_to_mobile_platforms'] = $send_to_mobile;

  // Save the auto send notifications setting for post updates
  $auto_send_post_update = isset($_POST['onesignal_auto_send_post_update']) ? 1 : 0;
  $onesignal_settings['notification_on_post_update'] = $auto_send_post_update;

  // Save the auto send notifications setting for page updates
  $auto_send_page_update = isset($_POST['onesignal_auto_send_page_update']) ? 1 : 0;
  $onesignal_settings['notification_on_page_update'] = $auto_send_page_update;

  // Update with autoload set to 'no' to prevent caching issues
  update_option('OneSignalWPSetting', $onesignal_settings, 'no');

  // Force refresh the settings in cache
  wp_cache_delete('OneSignalWPSetting', 'options');
}

// Add this function near the top of the file
function onesignal_get_default_settings() {
    return array(
        'notification_on_post' => 0,
        'notification_on_page' => 0,
        'notification_on_post_from_plugin' => 0,
        'send_to_mobile_platforms' => 0,
        'notification_on_post_update' => 0,
        'notification_on_page_update' => 0
    );
}

// Content for WP Admin Page
function onesignal_admin_page()
{
  // Get settings with defaults
  $settings = get_option('OneSignalWPSetting', onesignal_get_default_settings());

  $is_new_install = !$settings || !isset($settings['app_id']);
?>
  <header><img src="<?php echo plugins_url('/images/onesignal.svg', __FILE__); ?>"></header>
  <div class="os-content">
    <h2>Settings</h2>
    <?php
    if ($is_new_install) {
    ?>
    <div style="margin-bottom: 20px;">
      <span style="margin-bottom:35px;color:#E54B4D; font-weight:700;">
        <a href="https://documentation.onesignal.com/docs/wordpress" target="_blank">Getting Started →	</a>
      </span>
    </div>
    <?php
    }
    ?>
    <form method="post">
      <?php wp_nonce_field('onesignal_v3_save_settings', 'onesignal_v3_settings_nonce'); ?>
      <label for="appid">OneSignal App ID</label>
      <div class="input-with-icon">
        <input type="text" id="appid" name="onesignal_app_id"
              value="<?php echo esc_attr(get_option('OneSignalWPSetting')['app_id'] ?? ''); ?>" />
        <span class="validation-icon">
          <?php
          $appID = esc_attr(get_option('OneSignalWPSetting')['app_id'] ?? '');
          echo !empty($appID) ? '✅' : '❌';
          ?>
        </span>
      </div>

      <label for="apikey">OneSignal REST API Key
          <?php
          $apiKey = get_option('OneSignalWPSetting')['app_rest_api_key'] ?? '';
          if (!empty($apiKey)) {
              // Display the API key type
              echo '<span class="api-key-badge api-key-type-'.strtolower(onesignal_get_api_key_type()).'">' . onesignal_get_api_key_type() . ' API Key</span>';
          }
          ?>
      </label>
      <div class="input-with-icon">
        <input type="password" id="apikey" name="onesignal_rest_api_key" placeholder="Enter a REST API Key to update" />
        <span class="validation-icon">
          <?php
          $apiKey = get_option('OneSignalWPSetting')['app_rest_api_key'] ?? '';
          if (!empty($apiKey)) {
              echo '✅';
          } else {
              echo '❌';
          }
          ?>
        </span>
      </div>
      <p>
        <?php
        $apiKey = get_option('OneSignalWPSetting')['app_rest_api_key'] ?? '';
        if (!empty($apiKey)) {
            // Get the last four characters
            $lastFour = substr($apiKey, -4);
            // Hide the rest of the key with asterisks
            $hiddenKey = str_repeat('*', strlen($apiKey) - 4) . $lastFour;

            echo 'Current Key: ' . $hiddenKey;
        } else {
            echo '❌ Please enter your REST API Key';
        }
        ?>
      </p>
      <p class="help-text">The REST API Key is hidden for security reasons. Enter a new key to update.</p>

      <h3>Advanced Settings</h3>
      <div class="ui borderless shadowless segment">
      <?php
        $oneSignalSettings = get_option('OneSignalWPSetting');
        $utmParams = ''; // Default empty value

        // Check if the settings are an array and if the key exists
        if (is_array($oneSignalSettings) && isset($oneSignalSettings['utm_additional_url_params'])) {
            $utmParams = esc_attr($oneSignalSettings['utm_additional_url_params']);
        }
        ?>
        <div class="field utm-params">
            <label>Additional Notification URL Parameters</label>
            <div class="help" aria-label="More information">
              <svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" fill="currentColor">
                <g fill="currentColor">
                  <path d="M8 0a8 8 0 108 8 8.009 8.009 0 00-8-8zm0 12.667a1 1 0 110-2 1 1 0 010 2zm1.067-4.054a.667.667 0 00-.4.612.667.667 0 01-1.334 0 2 2 0 011.2-1.834A1.333 1.333 0 106.667 6.17a.667.667 0 01-1.334 0 2.667 2.667 0 113.734 2.444z"></path>
                </g>
              </svg>
            </div>
            <div class="information" style="display: none;">
              <p>Adds the specified string as extra URL parameters to your notification URL so that they can be tracked as an event by your analytics system.</p><p>For example, if you want:</p><em><li><code>utm_medium</code> to be <code>ppc</code></li><li><code>utm_source</code> to be <code>adwords</code></li><li><code>utm_campaign</code> to be <code>snow boots</code></li><li><code>utm_content</code> to be <code>durable snow boots</code></li></em><p><p>Then use the following string:</p><p><code style='word-break: break-all;'>utm_medium=ppc&utm_source=adwords&utm_campaign=snow boots&utm_content=durable snow boots</code></p>
            </div>
            <input id="utm-params" type="text" placeholder="utm_medium=ppc&utm_source=adwords&utm_campaign=snow boots&utm_content=durable snow boots" name="utm_additional_url_params" value="<?php echo $utmParams; ?>">
        </div>
      </div>

      <?php
        $oneSignalSettings = get_option('OneSignalWPSetting');
        $customPostTypes = ''; // Default empty value

        // Check if the settings are an array and if the key exists
        if (is_array($oneSignalSettings) && isset($oneSignalSettings['allowed_custom_post_types'])) {
            $customPostTypes = esc_attr($oneSignalSettings['allowed_custom_post_types']);
        }
        ?>
      <br>
      <div class="field custom-post-types">
        <label>Additional Custom Post Types for Automatic Notifications Created From Plugins</label>
        <div class="help" aria-label="More information">
          <svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" fill="currentColor">
            <g fill="currentColor">
              <path d="M8 0a8 8 0 108 8 8.009 8.009 0 00-8-8zm0 12.667a1 1 0 110-2 1 1 0 010 2zm1.067-4.054a.667.667 0 00-.4.612.667.667 0 01-1.334 0 2 2 0 011.2-1.834A1.333 1.333 0 106.667 6.17a.667.667 0 01-1.334 0 2.667 2.667 0 113.734 2.444z"></path>
            </g>
          </svg>
        </div>
        <div class="information" style="display: none;">
            <p>Enter a comma-separated list of custom post type names. Anytime a post is published with one of the listed post types, a notification will be sent to all your users. <strong class='least-strong'>The setting</strong> <em>Automatically send a push notification when I publish a post from 3rd party plugins</em> <strong class='least-strong'>must be enabled for this feature to work</strong>."</p>
        </div>
        <input id="custom-post-types"type="text" placeholder="forum,reply,topic  (comma separated, no spaces between commas)" name="allowed_custom_post_types" value="<?php echo esc_attr($customPostTypes); ?>">
      </div>

      <!-- Auto Send For Posts Checkbox -->
      <div class="checkbox-wrapper auto-send">
        <label for="auto-send">
          <input id="auto-send" type="checkbox" name="onesignal_auto_send"
                 <?php echo (!empty($settings['notification_on_post'])) ? 'checked' : ''; ?>>
          <span class="checkbox"></span>
          Automatically send notifications when a post is published
        </label>
      </div>

      <!-- Auto Send for Post Updates Checkbox -->
      <div class="checkbox-wrapper auto-send-post-update">
        <label for="auto-send-post-update">
          <input id="auto-send-post-update" type="checkbox" name="onesignal_auto_send_post_update"
                 <?php echo (!empty($settings['notification_on_post_update'])) ? 'checked' : ''; ?>>
          <span class="checkbox"></span>
          Automatically send notifications when a post is updated
        </label>
      </div>

      <!-- Auto Send for Pages Checkbox -->
      <div class="checkbox-wrapper auto-send-pages">
        <label for="auto-send-pages">
          <input id="auto-send-pages" type="checkbox" name="onesignal_auto_send_pages"
                 <?php echo (!empty($settings['notification_on_page'])) ? 'checked' : ''; ?>>
          <span class="checkbox"></span>
          Automatically send notifications when a page is published
        </label>
      </div>

      <!-- Auto Send for Page Updates Checkbox -->
      <div class="checkbox-wrapper auto-send-page-update">
        <label for="auto-send-page-update">
          <input id="auto-send-page-update" type="checkbox" name="onesignal_auto_send_page_update"
                 <?php echo (!empty($settings['notification_on_page_update'])) ? 'checked' : ''; ?>>
          <span class="checkbox"></span>
          Automatically send notifications when a page is updated
        </label>
      </div>

      <!-- 3rd Party Plugins Checkbox -->
      <div class="checkbox-wrapper notification-on-post-from-plugin">
        <label for="notification-on-post-from-plugin">
            <input id="notification-on-post-from-plugin" type="checkbox" name="notification_on_post_from_plugin" value="true"
            <?php echo (!empty($settings['notification_on_post_from_plugin'])) ? 'checked' : ''; ?>
            >
            <span class="checkbox"></span>
            Automatically send a push notification when I publish a post from 3<sup>rd</sup> party plugins
        </label>
        <div class="help" aria-label="More information">
          <svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" fill="currentColor">
            <g fill="currentColor">
              <path d="M8 0a8 8 0 108 8 8.009 8.009 0 00-8-8zm0 12.667a1 1 0 110-2 1 1 0 010 2zm1.067-4.054a.667.667 0 00-.4.612.667.667 0 01-1.334 0 2 2 0 011.2-1.834A1.333 1.333 0 106.667 6.17a.667.667 0 01-1.334 0 2.667 2.667 0 113.734 2.444z"></path>
            </g>
          </svg>
        </div>
        <div class="information" style="display: none;">
          <p>If checked, when a post is created outside of WordPress's editor, a push notification will automatically be sent. Must be the built-in WordPress post type 'post' and the post must be published.</p>
        </div>
      </div>

      <!-- Mobile App Checkbox -->
      <div class="checkbox-wrapper mobile-app">
        <label for="send-to-mobile">
          <input id="send-to-mobile" type="checkbox" name="onesignal_send_to_mobile"
                 <?php echo (!empty($settings['send_to_mobile_platforms'])) ? 'checked' : ''; ?>>
          <span class="checkbox"></span>
          Send notification to Mobile app subscribers
        </label>
        <div class="help" aria-label="More information">
          <svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" fill="currentColor">
            <g fill="currentColor">
              <path d="M8 0a8 8 0 108 8 8.009 8.009 0 00-8-8zm0 12.667a1 1 0 110-2 1 1 0 010 2zm1.067-4.054a.667.667 0 00-.4.612.667.667 0 01-1.334 0 2 2 0 011.2-1.834A1.333 1.333 0 106.667 6.17a.667.667 0 01-1.334 0 2.667 2.667 0 113.734 2.444z"></path>
            </g>
          </svg>
        </div>
        <div class="information" style="display: none;">
          <p>If you also have a mobile app setup in OneSignal, that's separate to your Website, this will include subscribers from your Mobile app in notification sends.</p>
          <p>You can choose a different URL(<a href="https://documentation.onesignal.com/docs/links#deep-linking">Deep Link</a>) for your Mobile app subscribers in the Post metabox.</p>
          <p>If you do not include a different URL, it will direct them to your Website, rather than a specific page of your app.</p>
        </div>
      </div>
      <?php submit_button('Save Settings', 'primary', 'submit', true, array('id' => 'save-settings-button')); ?>
    </form>
  </div>
<?php
}

register_activation_hook(__FILE__, 'onesignal_activate');

// Ensures that when the plugin is activated, there are proper default values in place for certain setting
// Meant to guard against the "undefined index" error
function onesignal_activate() {
    $existing_settings = get_option('OneSignalWPSetting', array());
    $merged_settings = wp_parse_args($existing_settings, onesignal_get_default_settings());
    update_option('OneSignalWPSetting', $merged_settings, 'no');
}