<?php
/**
 * Public-facing view for the plugin
 *
 * @link       http://acewebx.com
 * @since      1.0.0
 * @package    Ace_User_Management
 */

$custom_css = get_option('ace_custom_css_plugin');
global $wpdb, $user_ID;

$current_user = wp_get_current_user();
// phpcs:ignore WordPress.DB.DirectDatabaseQuery
$results = $wpdb->get_results("SELECT * FROM {$wpdb->prefix}ace_register_fields ORDER BY sortby ASC");
$success = '';
$errors = [];
require_once plugin_dir_path(__FILE__) . 'countries.php';

if (isset($_SERVER['REQUEST_METHOD']) && $_SERVER['REQUEST_METHOD'] === 'POST') {
    if (!empty($_POST['update_profile']) && check_admin_referer('ace_update_profile')) {
      if ( isset( $_FILES['profile_img'] ) && ! empty( $_FILES['profile_img']['name'] ) ) {
        $file = [
            'name'     => sanitize_file_name( $_FILES['profile_img']['name'] ),
            'type'     => isset( $_FILES['profile_img']['type'] )
                            ? sanitize_mime_type( $_FILES['profile_img']['type'] )
                            : '',
            'tmp_name' => isset( $_FILES['profile_img']['tmp_name'] )
                            ? sanitize_text_field( $_FILES['profile_img']['tmp_name'] )
                            : '',
            'error'    => isset( $_FILES['profile_img']['error'] )
                            ? intval( $_FILES['profile_img']['error'] )
                            : 0,
            'size'     => isset( $_FILES['profile_img']['size'] )
                            ? intval( $_FILES['profile_img']['size'] )
                            : 0,
        ];

        $file_name = $file['name'];


            // Allowed mime types
            $allowed_mime = [ 'image/jpeg', 'image/gif', 'image/png' ];

            // Validate file type using WordPress function
            $filetype = wp_check_filetype( $file_name );

            if ( ! in_array( $filetype['type'], $allowed_mime, true ) ) {
                $errors[] = esc_html__( 'Invalid file type. Allowed: JPG, GIF, PNG.', 'ace-user-management' );
            } elseif ( $file['size'] > 800 * 1024 ) { // Max 800KB
                $errors[] = esc_html__( 'File too large. Max size: 800KB.', 'ace-user-management' );
            } else {
                // Use WordPress to handle upload safely
                $overrides = [ 'test_form' => false ];
                $movefile  = wp_handle_upload( $file, $overrides );

                if ( $movefile && ! isset( $movefile['error'] ) ) {
                    update_user_meta( $current_user->ID, 'custom_avatar', esc_url( $movefile['url'] ) );
                    $success[] = esc_html__( 'Profile image updated successfully.', 'ace-user-management' );
                } else {
                    $errors[] = isset( $movefile['error'] )
                        ? esc_html( $movefile['error'] )
                        : esc_html__( 'Failed to upload image.', 'ace-user-management' );
                }
            }
        }


        // Save custom fields
        $sanitized = Ace_User_Management_Function::sanitize($_POST);
        $meta_fields = array_combine(
            array_map(fn($k) => $k . '_', array_keys($sanitized)),
            $sanitized
        );  

        if (update_user_meta($current_user->ID, 'user_extrafields', $meta_fields)) {
            foreach ($sanitized as $key => $val) {
                update_user_meta($current_user->ID, $key, sanitize_text_field($val));
            }
            $success .= "Profile updated successfully.";
        }
    }

    // PASSWORD CHANGE
    if (!empty($_POST['change_password']) && check_admin_referer('ace_change_password')) {
        $pass1 = isset($_POST['password']) ? sanitize_text_field(wp_unslash($_POST['password'])) : '';
        $pass2 = isset($_POST['confirm_password']) ? sanitize_text_field(wp_unslash($_POST['confirm_password'])) : '';
        
        // Function to check if the password is strong
        function is_strong_password($password) {
            return preg_match('/^(?=.*[A-Za-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/', $password);
        }

        if ($pass1 && $pass1 === $pass2) {
            if (!is_strong_password($pass1)) {
                $errors[] = "Your password must be at least 8 characters long, contain at least one letter, one number, and one special character.";
            } else {
            wp_set_password( $pass1, $current_user->ID );

            wp_logout();

            wp_safe_redirect( wp_login_url() );
            exit;

            }

        } else {
            $errors[] = "Passwords do not match or are empty.";
        }
    }

    // ACCOUNT INFO
    if (!empty($_POST['account_info']) && check_admin_referer('ace_account_info')) {
        $fields = [
            'billing_first_name', 'billing_last_name', 'billing_company',
            'billing_city', 'billing_postcode', 'billing_zipcode',
            'billing_country', 'billing_phone'
        ];

        foreach ($fields as $field) {
            if (isset($_POST[$field])) {
                update_user_meta($current_user->ID, $field, sanitize_text_field(wp_unslash($_POST[$field])));
            }
        }
        $success .= "Billing information updated.";
    }
}

// Get user meta and other info
$user_extrafields_value = get_user_meta($current_user->ID, 'user_extrafields', true);
$custom_avatar_url = get_user_meta($current_user->ID, 'custom_avatar', true);
$profile_image = $custom_avatar_url ?: get_avatar_url($current_user->ID);

$billing_fields_data = [];
$billing_fields = [
    'billing_first_name', 'billing_last_name', 'billing_company',
    'billing_city', 'billing_postcode', 'billing_zipcode',
    'billing_country', 'billing_phone'
];

foreach ($billing_fields as $field) {
    $billing_fields_data[$field] = get_user_meta($current_user->ID, $field, true);
}

?>

<style><?php echo esc_html($custom_css); ?></style>
<div class="custom_profile_setting container light-style flex-grow-1 container-p-y">
    <h4 class="font-weight-bold py-3 mb-4"><?php echo esc_html('Account Settings', 'ace-user-management'); ?></h4>

    <?php 
    // Display any errors
    foreach ($errors as $err) {
        echo "<div class='ace-all-error'>" . esc_html($err) . "</div>";
    }
    
    // Display success messages
    if (!empty($success)) {
        echo "<div class='ace-all-success'>" . esc_html($success) . "</div>";
    }
    ?>

    <div class="card overflow-hidden">
        <div class="row no-gutters row-bordered row-border-light">
            <div class="col-md-3 pt-0">
                <div class="list-group list-group-flush account-settings-links">
                    <a class="list-group-item list-group-item-action active" data-toggle="list" href="#account-general">
                      General
                    </a>
                    <a class="list-group-item list-group-item-action" data-toggle="list" href="#account-change-password">
                        Change Password
                    </a>
                    <a class="list-group-item list-group-item-action" data-toggle="list" href="#account-info">
                       Info
                    </a>
                    <a class="list-group-item list-group-item-action" href="<?php echo esc_url(wp_logout_url()); ?>">
                      Log out
                    </a>
                </div>
            </div>

            <div class="col-md-9">
                <div class="tab-content">
                    <!-- General Tab -->
                    <div class="tab-pane fade active show" id="account-general">
                        <form method="post" enctype="multipart/form-data">
                            <?php wp_nonce_field('ace_update_profile'); ?>
                            <input type="hidden" name="update_profile" value="1">

                            <div class="card-body media align-items-center">
                                <img src="<?php echo esc_url($profile_image); ?>" alt="Profile Image" class="profile-img">
                                <div class="media-body ml-4">
                                    <label class="btn btn-outline-primary">
                                        Upload New Photo
                                        <input type="file" name="profile_img" class="account-settings-fileinput">
                                    </label>
                                    <div class="text small mt-1">Allowed JPG, GIF, or PNG. Max size 800K</div>
                                </div>
                            </div>

                            <div class="card-body">
                                <table>
                                    <tr>
                                        <th><?php echo esc_html('Email', 'ace-user-management'); ?></th>
                                        <td><input type="text" value="<?php echo esc_attr($current_user->user_email); ?>" disabled></td>
                                    </tr>
                                    <tr>
                                        <th>Username</th>
                                        <td><input type="text" value="<?php echo esc_attr($current_user->user_login); ?>" disabled></td>
                                    </tr>
                                </table>

                                <!-- Dynamic Custom Fields -->
                                <?php foreach ($results as $field):
                                    $field_name = esc_attr($field->input_name);
                                    $field_value = esc_attr($user_extrafields_value[$field_name] ?? get_user_meta(get_current_user_id(), $field_name, true));
                                    ?>
                                    <div class="form-group">
                                        <label><?php echo esc_html(ucfirst($field->input_label)); ?></label>
                                        <?php if ($field->input_type === 'text'): ?>
                                            <input type="text" name="<?php echo esc_html($field_name); ?>" value="<?php echo esc_html($field_value); ?>" required>
                                        <?php elseif ($field->input_type === 'textarea'): ?>
                                            <textarea name="<?php echo esc_html($field_name); ?>" rows="2" required><?php echo esc_textarea($field_value); ?></textarea>
                                       <?php elseif ($field->input_type === 'dropdown'): ?>
                                        <select name="<?php echo esc_attr($field_name); ?>" required>
                                            <?php foreach (explode(",", $field->dropdown_options) as $option):
                                                [$opt_val, $opt_label] = array_pad(explode(':', trim($option)), 2, trim($option));
                                            ?>
                                                <option value="<?php echo esc_attr($opt_val); ?>" <?php selected($field_value, $opt_val); ?>>
                                                    <?php echo esc_html($opt_label); ?>
                                                </option>
                                            <?php endforeach; ?>
                                        </select>
                                    <?php endif; ?>

                                    </div>
                                <?php endforeach; ?>
                            </div>

                            <div class="text-right mt-3">
                                <button type="submit" class="btn btn-primary"><?php echo esc_html('Save changes', 'ace-user-management'); ?></button>
                            </div>
                        </form>
                    </div>

                    <!-- Change Password Tab -->
                    <div class="tab-pane fade" id="account-change-password">
                        <form method="post">
                            <?php wp_nonce_field('ace_change_password'); ?>
                            <input type="hidden" name="change_password" value="1">
                            <div class="card-body pb-2">
                                <div class="form-group">
                                    <label><?php echo esc_html('Password', 'ace-user-management'); ?></label>
                                    <input type="password" name="password" class="form-control">
                                </div>
                                <div class="form-group">
                                    <label><?php echo  esc_html('Confirm Password', 'ace-user-management'); ?></label>
                                    <input type="password" name="confirm_password" class="form-control">
                                </div>
                            </div>
                            <div class="text-right mt-3">
                                <button type="submit" class="btn btn-primary"><?php echo esc_html('Save changes', 'ace-user-management'); ?></button>
                            </div>
                        </form>
                    </div>

                    <!-- Account Info Tab -->
                    <div class="tab-pane fade" id="account-info">
                        <form method="post">
                            <?php wp_nonce_field('ace_account_info'); ?>
                            <input type="hidden" name="account_info" value="1">
                            <?php
                            $billing_fields = [
                                'billing_first_name' => 'Billing Name',
                                'billing_last_name' => 'Billing Address',
                                'billing_company' => 'Company',
                                'billing_city' => 'City',
                                'billing_postcode' => 'State/Province',
                                'billing_zipcode' => 'Postal Code',
                                'billing_country' => 'Country',
                                'billing_phone' => 'Phone',
                            ];
                            
                           foreach ($billing_fields as $name => $label): ?>
                            <div class="form-group">
                                <label for="<?php echo esc_html($name); ?>"><?php echo esc_html($label, 'ace-user-management'); ?></label>
                                <?php if ($name === 'billing_country'): ?>
                                <select name="<?php echo esc_attr($name); ?>" class="form-control" required>
                                <?php
                                    if (class_exists('WC_Countries')) {
                                        $countries_obj = new WC_Countries();
                                        $countries = $countries_obj->get_countries();
                                    } else {
                                      $countries = $customcountries;
                                    }
                                    foreach ($countries as $code => $country_name):
                                        $selected = selected($billing_fields_data[$name] ?? '', $code, false);
                                ?>
                                    <option value="<?php echo esc_attr($code); ?>" <?php echo esc_html($selected); ?>>
                                        <?php echo esc_html($country_name); ?>
                                    </option>
                                <?php endforeach; ?>
                                </select>
                                <?php 
                            else: ?>
                            <input type="text" name="<?php echo esc_html($name); ?>" value="<?php echo esc_attr($billing_fields_data[$name] ?? ''); ?>" class="form-control" required>
                                 <?php endif; ?>
                            </div>
                            <?php endforeach; ?>

                            <div class="text-right mt-3">
                                <button type="submit" class="btn btn-primary"><?php echo  esc_html('Save changes', 'ace-user-management'); ?></button>
                            </div>
                        </form>
                    </div>

                </div>
            </div>
        </div>
    </div>
</div>