<?php
/**
 * Admin Settings for Accelvia – Content Protection for WordPress.
 *
 * Registers the settings page, sections, fields, and handles sanitization.
 *
 * @package Accelvia_Content_Protection
 */

if (!defined('ABSPATH')) {
    exit;
}

/**
 * Register the plugin settings page under Settings menu.
 */
function accelvia_add_settings_page()
{
    add_options_page(
        esc_html__('Accelvia Protection Settings', 'accelvia-content-protection'),
        esc_html__('Accelvia Protection', 'accelvia-content-protection'),
        'manage_options',
        'accelvia-protection',
        'accelvia_render_settings_page'
    );
}
add_action('admin_menu', 'accelvia_add_settings_page');

/**
 * Register the plugin settings.
 */
function accelvia_register_settings()
{
    register_setting(
        'accelvia_settings_group',
        ACCELVIA_OPTION_KEY,
        array(
            'sanitize_callback' => 'accelvia_sanitize_options',
        )
    );
}
add_action('admin_init', 'accelvia_register_settings');

/**
 * Sanitize and validate all plugin options.
 *
 * @param array $input Raw input from the settings form.
 * @return array Sanitized options.
 */
function accelvia_sanitize_options($input)
{
    $sanitized = array();

    // Checkboxes – cast to '1' or '0'.
    $checkboxes = array(
        'enable_protection',
        'disable_right_click',
        'disable_shortcuts',
        'disable_text_selection',
        'disable_image_drag',
        'disable_copy',
        'skip_admins',
    );
    foreach ($checkboxes as $key) {
        $sanitized[$key] = !empty($input[$key]) ? '1' : '0';
    }

    // Notification type – whitelist.
    $allowed_types = array('alert', 'toast');
    $sanitized['notification_type'] = (isset($input['notification_type']) && in_array($input['notification_type'], $allowed_types, true))
        ? $input['notification_type']
        : 'toast';

    // Notification message – sanitize text.
    $sanitized['notification_message'] = isset($input['notification_message'])
        ? sanitize_text_field($input['notification_message'])
        : __('This content is protected by Accelvia.', 'accelvia-content-protection');

    // Protected post types – array of sanitized slugs.
    if (!empty($input['protected_post_types']) && is_array($input['protected_post_types'])) {
        $sanitized['protected_post_types'] = array_map('sanitize_key', $input['protected_post_types']);
    } else {
        $sanitized['protected_post_types'] = array('post', 'page');
    }

    // Excluded page IDs – comma-separated integers.
    $sanitized['excluded_page_ids'] = '';
    if (!empty($input['excluded_page_ids'])) {
        $raw_ids = preg_split('/[\s,]+/', trim($input['excluded_page_ids']));
        $clean_ids = array_filter(array_map('absint', $raw_ids));
        $sanitized['excluded_page_ids'] = implode(',', $clean_ids);
    }

    return $sanitized;
}

/**
 * Enqueue admin assets only on the plugin's settings page.
 *
 * @param string $hook Current admin page hook suffix.
 */
function accelvia_enqueue_admin_assets($hook)
{
    if ('settings_page_accelvia-protection' !== $hook) {
        return;
    }

    wp_enqueue_style(
        'accelvia-admin-css',
        ACCELVIA_PLUGIN_URL . 'assets/css/admin.css',
        array(),
        ACCELVIA_VERSION
    );

    wp_enqueue_script(
        'accelvia-admin-js',
        ACCELVIA_PLUGIN_URL . 'assets/js/admin.js',
        array(),
        ACCELVIA_VERSION,
        true
    );
}
add_action('admin_enqueue_scripts', 'accelvia_enqueue_admin_assets');

/**
 * Render the full settings page HTML.
 */
function accelvia_render_settings_page()
{
    if (!current_user_can('manage_options')) {
        wp_die(esc_html__('You do not have permission to access this page.', 'accelvia-content-protection'));
    }

    $options = get_option(ACCELVIA_OPTION_KEY, array());

    // Merge with defaults to ensure all keys exist.
    $defaults = array(
        'enable_protection' => '0',
        'disable_right_click' => '1',
        'disable_shortcuts' => '1',
        'disable_text_selection' => '0',
        'disable_image_drag' => '1',
        'disable_copy' => '0',
        'notification_type' => 'toast',
        'notification_message' => __('This content is protected by Accelvia.', 'accelvia-content-protection'),
        'skip_admins' => '1',
        'protected_post_types' => array('post', 'page'),
        'excluded_page_ids' => '',
    );
    $options = wp_parse_args($options, $defaults);

    // Get all public post types.
    $post_types = get_post_types(array('public' => true), 'objects');
    ?>
    <div class="wrap accelvia-admin-wrap">

        <div class="accelvia-admin-header">
            <div class="accelvia-logo">
                <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">
                    <rect width="32" height="32" rx="8" fill="#2563EB" />
                    <path d="M16 6L8 12V20L16 26L24 20V12L16 6Z" fill="white" fill-opacity="0.2" stroke="white"
                        stroke-width="1.5" />
                    <path d="M16 10L11 14V19L16 23L21 19V14L16 10Z" fill="white" />
                </svg>
                <span>
                    <?php esc_html_e('Accelvia Content Protection', 'accelvia-content-protection'); ?>
                </span>
            </div>
            <div class="accelvia-version">v
                <?php echo esc_html(ACCELVIA_VERSION); ?>
            </div>
        </div>

        <?php settings_errors('accelvia_settings_group'); ?>

        <form method="post" action="options.php" id="accelvia-settings-form">
            <?php settings_fields('accelvia_settings_group'); ?>

            <div class="accelvia-master-toggle">
                <label class="accelvia-toggle-label">
                    <input type="checkbox" id="accelvia_enable_protection"
                        name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[enable_protection]" value="1" <?php checked('1', $options['enable_protection']); ?>
                    />
                    <span class="accelvia-toggle-switch"></span>
                    <span class="accelvia-toggle-text">
                        <?php esc_html_e('Enable Protection', 'accelvia-content-protection'); ?>
                    </span>
                </label>
                <p class="description">
                    <?php esc_html_e('Master switch. Disabling this turns off all frontend protection globally.', 'accelvia-content-protection'); ?>
                </p>
            </div>

            <div class="accelvia-tab-nav" role="tablist">
                <button type="button" class="accelvia-tab-btn active" data-tab="general" role="tab" aria-selected="true">
                    <?php esc_html_e('General Settings', 'accelvia-content-protection'); ?>
                </button>
                <button type="button" class="accelvia-tab-btn" data-tab="advanced" role="tab" aria-selected="false">
                    <?php esc_html_e('Advanced Settings', 'accelvia-content-protection'); ?>
                </button>
            </div>

            <!-- General Settings Tab -->
            <div class="accelvia-tab-panel" id="accelvia-tab-general" role="tabpanel">
                <div class="accelvia-card">
                    <h2>
                        <?php esc_html_e('Protection Features', 'accelvia-content-protection'); ?>
                    </h2>
                    <p class="accelvia-section-desc">
                        <?php esc_html_e('Choose which protection features to enable on the frontend.', 'accelvia-content-protection'); ?>
                    </p>

                    <table class="form-table" role="presentation">
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Disable Right Click', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <label>
                                    <input type="checkbox"
                                        name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[disable_right_click]" value="1"
                                        <?php checked('1', $options['disable_right_click']); ?> />
                                    <?php esc_html_e('Block the browser context menu on right-click', 'accelvia-content-protection'); ?>
                                </label>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Disable Keyboard Shortcuts', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <label>
                                    <input type="checkbox"
                                        name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[disable_shortcuts]" value="1"
                                        <?php checked('1', $options['disable_shortcuts']); ?> />
                                    <?php esc_html_e('Block F12, Ctrl+Shift+I/J, Ctrl+U, Ctrl+S, Ctrl+P', 'accelvia-content-protection'); ?>
                                </label>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Disable Text Selection', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <label>
                                    <input type="checkbox"
                                        name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[disable_text_selection]"
                                        value="1" <?php checked('1', $options['disable_text_selection']); ?> />
                                    <?php esc_html_e('Prevent users from selecting text on the page', 'accelvia-content-protection'); ?>
                                </label>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Disable Image Drag', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <label>
                                    <input type="checkbox"
                                        name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[disable_image_drag]" value="1"
                                        <?php checked('1', $options['disable_image_drag']); ?> />
                                    <?php esc_html_e('Prevent images from being dragged out of the browser', 'accelvia-content-protection'); ?>
                                </label>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Disable Copy (Ctrl+C)', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <label>
                                    <input type="checkbox"
                                        name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[disable_copy]" value="1" <?php checked('1', $options['disable_copy']); ?> />
                                    <?php esc_html_e('Block Ctrl+C keyboard shortcut for copying', 'accelvia-content-protection'); ?>
                                </label>
                            </td>
                        </tr>
                    </table>
                </div>
            </div>

            <!-- Advanced Settings Tab -->
            <div class="accelvia-tab-panel" id="accelvia-tab-advanced" role="tabpanel" style="display:none;">
                <div class="accelvia-card">
                    <h2>
                        <?php esc_html_e('Notification Settings', 'accelvia-content-protection'); ?>
                    </h2>

                    <table class="form-table" role="presentation">
                        <tr>
                            <th scope="row">
                                <label for="accelvia_notification_message">
                                    <?php esc_html_e('Notification Message', 'accelvia-content-protection'); ?>
                                </label>
                            </th>
                            <td>
                                <input type="text" id="accelvia_notification_message"
                                    name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[notification_message]"
                                    value="<?php echo esc_attr($options['notification_message']); ?>"
                                    class="regular-text" />
                                <p class="description">
                                    <?php esc_html_e('Message shown when a protected action is attempted.', 'accelvia-content-protection'); ?>
                                </p>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Notification Type', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <fieldset>
                                    <legend class="screen-reader-text">
                                        <?php esc_html_e('Notification Type', 'accelvia-content-protection'); ?>
                                    </legend>
                                    <label>
                                        <input type="radio"
                                            name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[notification_type]"
                                            value="toast" <?php checked('toast', $options['notification_type']); ?> />
                                        <?php esc_html_e('Modern Toast Popup (bottom-right, auto-dismisses after 3s)', 'accelvia-content-protection'); ?>
                                    </label><br />
                                    <label>
                                        <input type="radio"
                                            name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[notification_type]"
                                            value="alert" <?php checked('alert', $options['notification_type']); ?> />
                                        <?php esc_html_e('Browser Default Alert', 'accelvia-content-protection'); ?>
                                    </label>
                                </fieldset>
                            </td>
                        </tr>
                    </table>
                </div>

                <div class="accelvia-card" style="margin-top: 20px;">
                    <h2>
                        <?php esc_html_e('Access Control', 'accelvia-content-protection'); ?>
                    </h2>

                    <table class="form-table" role="presentation">
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Skip Administrators', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <label>
                                    <input type="checkbox"
                                        name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[skip_admins]" value="1" <?php checked('1', $options['skip_admins']); ?> />
                                    <?php esc_html_e('Disable protection for logged-in administrators', 'accelvia-content-protection'); ?>
                                </label>
                            </td>
                        </tr>
                    </table>
                </div>

                <div class="accelvia-card" style="margin-top: 20px;">
                    <h2>
                        <?php esc_html_e('Scope & Exclusions', 'accelvia-content-protection'); ?>
                    </h2>

                    <table class="form-table" role="presentation">
                        <tr>
                            <th scope="row">
                                <?php esc_html_e('Protect Post Types', 'accelvia-content-protection'); ?>
                            </th>
                            <td>
                                <fieldset>
                                    <legend class="screen-reader-text">
                                        <?php esc_html_e('Post types to protect', 'accelvia-content-protection'); ?>
                                    </legend>
                                    <?php foreach ($post_types as $pt): ?>
                                        <label style="display:block; margin-bottom:6px;">
                                            <input type="checkbox"
                                                name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[protected_post_types][]"
                                                value="<?php echo esc_attr($pt->name); ?>" <?php checked(in_array($pt->name, (array) $options['protected_post_types'], true)); ?> />
                                            <?php echo esc_html($pt->labels->singular_name); ?>
                                            <code>(<?php echo esc_html($pt->name); ?>)</code>
                                        </label>
                                    <?php endforeach; ?>
                                </fieldset>
                                <p class="description">
                                    <?php esc_html_e('If none selected, protection applies to all post types.', 'accelvia-content-protection'); ?>
                                </p>
                            </td>
                        </tr>
                        <tr>
                            <th scope="row">
                                <label for="accelvia_excluded_page_ids">
                                    <?php esc_html_e('Exclude Page IDs', 'accelvia-content-protection'); ?>
                                </label>
                            </th>
                            <td>
                                <textarea id="accelvia_excluded_page_ids"
                                    name="<?php echo esc_attr(ACCELVIA_OPTION_KEY); ?>[excluded_page_ids]" rows="3"
                                    class="large-text code"><?php echo esc_textarea($options['excluded_page_ids']); ?></textarea>
                                <p class="description">
                                    <?php esc_html_e('Enter post/page IDs to exclude from protection, separated by commas. Example: 12, 34, 56', 'accelvia-content-protection'); ?>
                                </p>
                            </td>
                        </tr>
                    </table>
                </div>
            </div><!-- /.accelvia-tab-panel advanced -->

            <div class="accelvia-submit-row">
                <?php submit_button(__('Save Settings', 'accelvia-content-protection'), 'primary', 'submit', false); ?>
                <span class="accelvia-save-note">
                    <?php esc_html_e('Changes take effect immediately on the frontend.', 'accelvia-content-protection'); ?>
                </span>
            </div>

        </form>

        <div class="accelvia-footer">
            <p>
                <?php
                printf(
                    /* translators: %s: plugin version */
                    esc_html__('Accelvia Content Protection v%s — Deterrence-based frontend security.', 'accelvia-content-protection'),
                    esc_html(ACCELVIA_VERSION)
                );
                ?>
            </p>
        </div>

    </div><!-- /.wrap -->
    <?php
}