<?php
namespace AIAAS;

defined('ABSPATH') || exit;

/**
 * Centralized request access helpers.
 *
 * We intentionally encapsulate superglobal usage here (with strict sanitization)
 * so the rest of the codebase doesn't touch $_GET/$_POST/$_REQUEST/$_SERVER directly.
 */
if ( ! class_exists( __NAMESPACE__ . '\\Request', false ) ) {
class Request {

    // phpcs:disable WordPress.Security.ValidatedSanitizedInput, WordPress.Security.NonceVerification

    public static function get( $key, $type = 'text', $default = null ) {
        if ( ! isset( $_GET[ $key ] ) ) {
            return $default;
        }
        return self::sanitize( wp_unslash( $_GET[ $key ] ), $type );
    }

    public static function post( $key, $type = 'text', $default = null ) {
        if ( ! isset( $_POST[ $key ] ) ) {
            return $default;
        }
        return self::sanitize( wp_unslash( $_POST[ $key ] ), $type );
    }

    public static function request( $key, $type = 'text', $default = null ) {
        if ( ! isset( $_REQUEST[ $key ] ) ) {
            return $default;
        }
        return self::sanitize( wp_unslash( $_REQUEST[ $key ] ), $type );
    }

    public static function server( $key, $type = 'text', $default = null ) {
        if ( ! isset( $_SERVER[ $key ] ) ) {
            return $default;
        }
        return self::sanitize( wp_unslash( $_SERVER[ $key ] ), $type );
    }


    public static function file( $key, $default = null ) {
        if ( ! isset( $_FILES[ $key ] ) ) {
            return $default;
        }
        return $_FILES[ $key ];
    }

    public static function has_file( $key ) {
        return isset( $_FILES[ $key ] ) && is_array( $_FILES[ $key ] );
    }

    public static function seed_post( $key, $value ) {
        $_POST[ $key ] = $value;
    }

    public static function seed_request( $key, $value ) {
        $_REQUEST[ $key ] = $value;
    }

    public static function seed_get( $key, $value ) {
        $_GET[ $key ] = $value;
    }

    public static function seed_file( $key, array $value ) {
        $_FILES[ $key ] = $value;
    }


    public static function query_args( array $exclude = array() ) {
        $out = array();
        foreach ( $_GET as $key => $value ) {
            if ( in_array( (string) $key, $exclude, true ) ) {
                continue;
            }
            if ( is_array( $value ) ) {
                continue;
            }
            $out[ sanitize_key( (string) $key ) ] = sanitize_text_field( (string) wp_unslash( $value ) );
        }
        return $out;
    }


    private static function sanitize( $value, $type ) {
        switch ( $type ) {
            case 'int':
                return intval( $value );
            case 'int_array':
                if ( is_array( $value ) ) {
                    $out = array();
                    foreach ( $value as $v ) {
                        $out[] = intval( $v );
                    }
                    // unique + remove zeros
                    $out = array_values( array_filter( array_unique( $out ), static function ( $n ) { return $n > 0; } ) );
                    return $out;
                }
                // Accept comma/space separated lists as a convenience.
                $str = (string) $value;
                if ( trim( $str ) === '' ) {
                    return array();
                }
                $parts = preg_split( '/[^0-9]+/', $str );
                if ( ! is_array( $parts ) ) {
                    return array();
                }
                $out = array();
                foreach ( $parts as $p ) {
                    $out[] = intval( $p );
                }
                $out = array_values( array_filter( array_unique( $out ), static function ( $n ) { return $n > 0; } ) );
                return $out;
            case 'bool':
                return (bool) $value;
            case 'key':
                return sanitize_key( (string) $value );
            case 'url':
                return esc_url_raw( (string) $value );
            case 'html':
                return wp_kses_post( (string) $value );
            case 'raw':
                return $value;
            default:
                return sanitize_text_field( (string) $value );
        }
    }

    // phpcs:enable
}
}