<?php
if ( ! defined( 'ABSPATH' ) ) {
	exit;
} // Exit if accessed directly

define( 'ATKP_EVENT', strtolower( ATKP_PLUGIN_PREFIX ) . '_event' );
define( 'ATKP_CHECK', strtolower( ATKP_PLUGIN_PREFIX ) . '_check' );
define( 'ATKP_CSVIMPORT', strtolower( ATKP_PLUGIN_PREFIX ) . '_csvimport' );

define( 'ATKP_SHOP_POSTTYPE', strtolower( ATKP_PLUGIN_PREFIX ) . '_shop' );
define( 'ATKP_LIST_POSTTYPE', strtolower( ATKP_PLUGIN_PREFIX ) . '_list' );
define( 'ATKP_PRODUCT_POSTTYPE', strtolower( ATKP_PLUGIN_PREFIX ) . '_product' );
define( 'ATKP_TEMPLATE_POSTTYPE', strtolower( ATKP_PLUGIN_PREFIX ) . '_template' );
define( 'ATKP_FIELDGROUP_POSTTYPE', strtolower( ATKP_PLUGIN_PREFIX ) . '_fieldgroup' );

define( 'ATKP_SHORTCODE', strtolower( ATKP_PLUGIN_PREFIX ) . '_shortcode' );
define( 'ATKP_LIST_SHORTCODE', strtolower( ATKP_PLUGIN_PREFIX ) . '_list' );

define( 'ATKP_PRODUCT_SHORTCODE', strtolower( ATKP_PLUGIN_PREFIX ) . '_product' );
define( 'ATKP_SEARCHFORM_SHORTCODE', strtolower( ATKP_PLUGIN_PREFIX ) . '_searchform' );
define( 'ATKP_WIDGET', strtolower( ATKP_PLUGIN_PREFIX ) . '_widget' );
define( 'ATKP_LIVELIST_SHORTCODE', strtolower( ATKP_PLUGIN_PREFIX ) . '_livelist' );

if ( ! defined( 'ATKP_VARIATION_COUNT' ) ) {
	define( 'ATKP_VARIATION_COUNT', 5 );
}
if ( ! defined( 'ATKP_MANUALOFFER_COUNT' ) ) {
	define( 'ATKP_MANUALOFFER_COUNT', 3 );
}
if ( ! defined( 'ATKP_FILTER_COUNT' ) ) {
	define( 'ATKP_FILTER_COUNT', 10 );
}
if ( ! defined( 'ATKP_LOGFILE' ) ) {
	$atkp_log_key = ATKPTools::get_setting( ATKP_PLUGIN_PREFIX . '_logkey' );
	if ( $atkp_log_key == '' ) {
		$atkp_log_key = uniqid();
		ATKPTools::set_setting( ATKP_PLUGIN_PREFIX . '_logkey', $atkp_log_key );
	}

	define( 'ATKP_LOGFILE', WP_CONTENT_DIR . '/atkp-' . $atkp_log_key . '-debug.log' );
}
if ( ! defined( 'ATKP_TEMPLATEDIR' ) ) {
	define( 'ATKP_TEMPLATEDIR', ATKP_PLUGIN_DIR . '/templates' );
}

define( 'ATKP_STORE_URL', 'https://www.affiliate-toolkit.com/' );
define( 'ATKP_SUBSHOPTYPE', '-1' );

require_once( ATKP_PLUGIN_DIR . '/lib/vendor/imelgrat/barcode-validator/src/barcode-validator.php' );

ATKPSettings::load_settings();

$atkp_options = new atkp_options();


add_filter( 'atkp_variation_name', 'atkp_variation_name', 10 );

function atkp_variation_name( $variationName ) {
	switch ( $variationName ) {
		case 'Size':
			// return 'Größe';

			return __( 'Size', 'affiliate-toolkit-starter' );
			break;
		case 'Color':
			return __( 'Color', 'affiliate-toolkit-starter' );
			break;
		default:
			return $variationName;
	}
}

add_filter( 'atkp_find_product', 'atkp_find_product_callback', 10, 7 );


function atkp_find_product_callback( $product_id, $shop_id, $asin, $ean, $title, $brand, $mpn ) {

	//search in internal database

	if ( $product_id <= 0 && $asin != '' ) {
		$prdid = atkp_product::idbyasin( $asin );

		if ( $prdid > 0 ) {
			$product_id = $prdid;
		}
	}

	if ( $product_id <= 0 && $ean != '' ) {
		$eans = explode( ',', $ean );

		foreach ( $eans as $e ) {
			if ( $e == '' ) {
				continue;
			}

			$prdid = atkp_product::idbyean( trim( $e ) );

			if ( $prdid > 0 ) {
				$product_id = $prdid;
			}
		}
	}

	if ( $product_id <= 0 && $title != '' ) {
		$prdid = atkp_product::idbyname( $title );

		if ( $prdid > 0 ) {
			$product_id = $prdid;
		}
	}

	if ( $product_id <= 0 && $brand != '' && $mpn != '' ) {

		$args = array(
			'post_type'      => ATKP_PRODUCT_POSTTYPE,
			'post_status'    => array( 'publish', 'draft' ),
			'posts_per_page' => 2,

			// phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query -- Required to find product by brand+MPN combination.
			'meta_query' => array(
				'relation' => 'AND',
				array(
					'key'     => ATKP_PRODUCT_POSTTYPE . '_mpn',
					'value'   => $mpn,
					'compare' => '=',
				),
				array(
					'key'     => ATKP_PRODUCT_POSTTYPE . '_brand',
					'compare' => '=',
					'value'   => $brand,
				),
			)
		);

		$posts = get_posts( $args );

		if ( count( $posts ) == 1 ) {
			$product_id = $posts[0]->ID;
		}
	}


	return $product_id;
}


//add_filter( 'atkp_post_exists', 'atkp_post_exists', 10, 7 );

/**
 * @param $post_id
 * @param $shopid
 * @param $asin
 * @param $asintype
 * @param $title
 * @param $brand
 * @param $mpn
 *
 * @return int|mixed|null
 */
function atkp_post_exists( $post_id, $shopid, $asin, $asintype, $title, $brand, $mpn ) {

	if ( $brand != '' && $mpn != '' ) {

		$args = array(
			'post_type'      => ATKP_PRODUCT_POSTTYPE,
			'post_status'    => array( 'publish', 'draft' ),
			'posts_per_page' => 2,

			// phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_query -- Required to find product by brand+MPN combination.
			'meta_query' => array(
				'relation' => 'AND',
				array(
					'key'     => ATKP_PRODUCT_POSTTYPE . '_mpn',
					'value'   => $mpn,
					'compare' => '=',
				),
				array(
					'key'     => ATKP_PRODUCT_POSTTYPE . '_brand',
					'compare' => '=',
					'value'   => $brand,
				),
			)
		);

		$posts = get_posts( $args );

		if ( count( $posts ) == 1 ) {
			return $posts[0]->ID;
		}

		return $post_id;
	}

	switch ( $asintype ) {
		default:
		case 'ASIN':
			$prdid = atkp_product::idbyasin( $asin );

			if ( $prdid > 0 ) {
				$post_id = $prdid;
			}
			break;
		case 'EAN':
			$prdid = atkp_product::idbyean( $asin );

			if ( $prdid > 0 ) {
				$post_id = $prdid;
			}
			break;
		case 'ARTICLENUMBER':
			break;
		case 'TITLE':
			$prdid = atkp_product::idbyname( $asin );

			if ( $prdid > 0 ) {
				$post_id = $prdid;
			}
			break;
	}

	return $post_id;

}

add_filter( 'atkp_ajax_products', 'atkp_ajax_products_demo', 10, 2 );

function atkp_ajax_products_demo( $products, $parameters ) {

	if ( count( $products ) > 0 && $products[0]->productid == - 1 && ( $parameters->templateid == 'list_display' || $parameters->templateid == 'grid_3_columns' || $parameters->templateid == 'product_table' ) ) {
		$products[] = $products[0];
		$products[] = $products[0];
	} else if ( count( $products ) > 0 && $products[0]->productid == - 1 && ( $parameters->templateid == 'grid_2_columns' ) ) {
		$products[] = $products[0];
	}

	return $products;
}


add_action( 'template_redirect', 'atkp_out_redirect', 20 );
function atkp_out_redirect() {

	// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotValidated
	$request_url = isset( $_SERVER['REQUEST_URI'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ) : '';

	if ( ATKPTools::str_contains( $request_url, '/a_out/' ) ) {
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public redirect endpoint, nonce not applicable for affiliate link redirects.
		$hash     = ! isset( $_GET['hash'] ) ? null : sanitize_text_field( wp_unslash( $_GET['hash'] ) );
		$site_key = atkp_formatter::get_sitekey();

		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public redirect endpoint, nonce not applicable.
		if ( isset( $_GET['url'] ) ) {
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$url = sanitize_text_field( wp_unslash( $_GET['url'] ) );

			//redirect by url
			$url = base64_decode( $url );

			if ( md5( $url . $site_key ) != $hash ) {
				wp_die( esc_html__( 'Checksum is invalid', 'affiliate-toolkit-starter' ) );
			}

			if ( substr( strtolower( $url ), 0, 7 ) !== 'http://' && substr( strtolower( $url ), 0, 8 ) !== 'https://' ) {
				wp_die( esc_html__( 'URL must start with http:// or https://', 'affiliate-toolkit-starter' ) );
			}

			// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public redirect endpoint.
			do_action( 'atkp_out_link_redirect', isset( $_GET['pid'] ) ? intval( $_GET['pid'] ) : 0, isset( $_GET['sid'] ) ? intval( $_GET['sid'] ) : 0, isset( $_GET['pt'] ) ? intval( $_GET['pt'] ) : 0 ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended

			// wp_redirect is intentional here: redirecting to external affiliate URLs
			// which wp_safe_redirect would block (it only allows same-host redirects).
			wp_redirect( esc_url_raw( $url ), 301 ); // phpcs:ignore WordPress.Security.SafeRedirect.wp_redirect_wp_redirect
			exit;
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public redirect endpoint, nonce not applicable.
		} else if ( isset( $_GET['pid'] ) && isset( $_GET['sid'] ) && isset( $_GET['pt'] ) ) {
			//redirect by id
			$url        = '';
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$product_id = intval( $_GET['pid'] );
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$shop_id    = intval( $_GET['sid'] );
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$link_type  = intval( $_GET['pt'] );

			if ( md5( $product_id . $site_key ) != $hash ) {
				wp_die( esc_html__( 'Checksum is invalid', 'affiliate-toolkit-starter' ) );
			}

			$prds = atkp_product_collection::load( $product_id, $shop_id );

			$prd = null;
			foreach ( $prds->products as $p ) {

				if ( $p->ismainshop ) {

					$prd = $p;
					break;
				}
			}

			if ( $prd == null ) {
				$prd = $prds->get_main_product();
			}


			switch ( $link_type ) {
				default:
				case atkp_link_type::Link:
				case atkp_link_type::Offer:
				case atkp_link_type::Image:
					$url = $prd->producturl;
					break;
				case atkp_link_type::Cart:
					$url = $prd->addtocarturl;
					break;
				case atkp_link_type::Customerreview:
					$url = $prd->customerreviewurl;
					break;
			}

			do_action( 'atkp_out_link_redirect', $product_id, $shop_id, $link_type );

			// wp_redirect is intentional here: redirecting to external affiliate URLs
			// which wp_safe_redirect would block (it only allows same-host redirects).
			wp_redirect( esc_url_raw( $url ), 301 ); // phpcs:ignore WordPress.Security.SafeRedirect.wp_redirect_wp_redirect
			exit;
		}
	// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public image proxy endpoint, nonce not applicable.
	} else if ( isset( $_GET['a_image'] ) && intval( $_GET['a_image'] ) == 1 ) {

		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public image proxy endpoint.
		if ( isset( $_GET['pid'] ) && isset( $_GET['sid'] ) && isset( $_GET['name'] ) ) {
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$product_id = intval( $_GET['pid'] );
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$list_id    = isset( $_GET['lid'] ) ? intval( $_GET['lid'] ) : 0;
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$shop_id    = intval( $_GET['sid'] );

			// phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Base64-encoded value, sanitized after decode.
			$name_param_raw = isset( $_GET['name'] ) ? (string) wp_unslash( $_GET['name'] ) : '';
			$image_name     = $name_param_raw !== '' ? base64_decode( $name_param_raw, true ) : '';
			// phpcs:ignore WordPress.Security.NonceVerification.Recommended
			$hash           = isset( $_GET['key'] ) ? sanitize_text_field( wp_unslash( $_GET['key'] ) ) : '';

			if ( $image_name === false || $image_name == '' ) {
				wp_die( esc_html__( 'Image parameter missing or invalid', 'affiliate-toolkit-starter' ) );
			}

			if ( $shop_id < 0 && $list_id < 0 && $product_id < 0 ) {
				wp_die( esc_html__( 'Shop ID missing', 'affiliate-toolkit-starter' ) );
			}

			$image_url = '';

			if ( $product_id <= 0 && $list_id <= 0 ) {
				//shop logo
				$shop = atkp_shop::load( $shop_id );

				if ( $shop != null ) {
					if ( ATKPTools::str_contains( $shop->customlogourl, $image_name ) ) {
						$image_url = $shop->customlogourl;
					} else if ( ATKPTools::str_contains( $shop->customsmalllogourl, $image_name ) ) {
						$image_url = $shop->customsmalllogourl;
					}
				}

				if ( ATKPTools::startsWith( $image_url, '//' ) ) {
					$image_url = 'https:' . $image_url;
				}

			} else if ( $product_id > 0 ) {
				$prds    = atkp_product_collection::load( $product_id, $shop_id );
				if ( $prds == null ) {
					return '';
				}
				$prd_man = atkp_product::load( $product_id );

				$shop_id = null;
				foreach ( $prds->products as $p ) {
					if ( $p->ismainshop ) {
						$shop_id = $p->shopid;
						break;
					}
				}

				$prd = $prds->get_main_product( $shop_id );

				if ( ATKPTools::str_contains( $prd->largeimageurl, $image_name ) ) {
					$image_url = $prd->largeimageurl;
				} else if ( ATKPTools::str_contains( $prd->mediumimageurl, $image_name ) ) {
					$image_url = $prd->mediumimageurl;
				} else if ( ATKPTools::str_contains( $prd->smallimageurl, $image_name ) ) {
					$image_url = $prd->smallimageurl;
				} else if ( $prd->images != null ) {
					foreach ( $prd->images as $img ) {
						if ( ATKPTools::str_contains( $img->largeimageurl, $image_name ) ) {
							$image_url = $img->largeimageurl;
						} else if ( ATKPTools::str_contains( $img->mediumimageurl, $image_name ) ) {
							$image_url = $img->mediumimageurl;
						} else if ( ATKPTools::str_contains( $img->smallimageurl, $image_name ) ) {
							$image_url = $img->smallimageurl;
						}
					}
				}

				if ( $prd->variations != null ) {
					foreach ( $prd->variations as $var ) {
						if ( ATKPTools::str_contains( $var->smallimageurl, $image_name ) ) {
							$image_url = $var->smallimageurl;
						}
					}
				}
			} else if ( $list_id > 0 ) {
				$list = atkp_list::load( $list_id );

				$x          = new atkp_output();
				$outputprds = $x->get_list_products( $list_id, 100, false, array(), false, 999, '', $max_num_pages, $found_posts );

				foreach ( $outputprds as $prd ) {
					if ( ATKPTools::str_contains( $prd->largeimageurl, $image_name ) ) {
						$image_url = $prd->largeimageurl;
					} else if ( ATKPTools::str_contains( $prd->mediumimageurl, $image_name ) ) {
						$image_url = $prd->mediumimageurl;
					} else if ( ATKPTools::str_contains( $prd->smallimageurl, $image_name ) ) {
						$image_url = $prd->smallimageurl;
					} else if ( $prd->images != null ) {
						foreach ( $prd->images as $img ) {
							if ( ATKPTools::str_contains( $img->largeimageurl, $image_name ) ) {
								$image_url = $img->largeimageurl;
							} else if ( ATKPTools::str_contains( $img->mediumimageurl, $image_name ) ) {
								$image_url = $img->mediumimageurl;
							} else if ( ATKPTools::str_contains( $img->smallimageurl, $image_name ) ) {
								$image_url = $img->smallimageurl;
							}
						}
					}
				}
			}

			if ( $image_url == '' ) {
				// HMAC-Prüfung mit Fallback für atkp_formatter
				if ( ! class_exists( 'atkp_formatter' ) && defined( 'ATKP_PLUGIN_DIR' ) ) {
					require_once ATKP_PLUGIN_DIR . '/includes/helper/atkp_formatter.php';
				}

				$site_key = method_exists( 'atkp_formatter', 'get_sitekey' ) ? atkp_formatter::get_sitekey() : '';

				// Tolerante HMAC-Prüfung: sowohl Base64-String als auch dekodierte URL
				$checkkey_base64 = $site_key !== '' ? hash_hmac( 'sha256', $name_param_raw, $site_key ) : '';
				$checkkey_decurl = $site_key !== '' ? hash_hmac( 'sha256', $image_name, $site_key ) : '';

				$hmac_ok = ( $hash !== '' ) &&
				           ( hash_equals( $checkkey_base64, $hash ) || hash_equals( $checkkey_decurl, $hash ) );

				if ( $hmac_ok ) {
					$image_url = $image_name;
				} else {
					wp_die( esc_html__( 'Image not found in database: ', 'affiliate-toolkit-starter' ) . esc_html( $image_name ) );
				}
			}

			// Content-Type dynamisch anhand Dateiendung bestimmen
			$path = wp_parse_url( $image_url, PHP_URL_PATH );
			$ext  = strtolower( pathinfo( $path ?? '', PATHINFO_EXTENSION ) );
			$mime = 'image/jpeg';
			if ( $ext === 'png' ) {
				$mime = 'image/png';
			} else if ( $ext === 'gif' ) {
				$mime = 'image/gif';
			} else if ( $ext === 'webp' ) {
				$mime = 'image/webp';
			} else if ( $ext === 'svg' ) {
				$mime = 'image/svg+xml';
			}

			$uploads_dir = wp_upload_dir()['basedir'];

			header( 'Content-Type: ' . $mime );
			header( 'X-Robots-Tag: noindex' );
			header( 'Cache-Control: public, max-age=86400' );
			header( 'HTTP/1.1 200 OK' );

			if ( file_exists( $uploads_dir ) ) {
				$cache_dir = $uploads_dir . '/affiliate-toolkit-cache/';

				// Verbessertes Verzeichnis-Erstellen mit wp_mkdir_p
				if ( ! file_exists( $cache_dir ) ) {
					if ( ! wp_mkdir_p( $cache_dir ) ) {
						// Fallback ohne Cache
						readfile( $image_url ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_readfile
						exit;
					}
				}

				$filename = md5( $image_url );

				if ( file_exists( $cache_dir . $filename ) && filemtime( $cache_dir . $filename ) >= ( time() - 86400 ) ) {
					readfile( $cache_dir . $filename ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_readfile
					exit;
				} else {
					// Verbessertes Remote-Fetch mit wp_remote_get
					$response = wp_remote_get( $image_url, array(
						'timeout'   => 15,
						'sslverify' => true
					) );

					if ( is_wp_error( $response ) ) {
						// Fehler beim Abrufen - 404 zurückgeben
						header( 'HTTP/1.1 404 Not Found' );
						exit;
					}

					$status_code = wp_remote_retrieve_response_code( $response );
					if ( $status_code !== 200 ) {
						header( 'HTTP/1.1 ' . $status_code . ' Error' );
						exit;
					}

					$image_data = wp_remote_retrieve_body( $response );

					if ( $image_data !== '' ) {
						// phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents -- Writing to cache directory, WP_Filesystem not available at this point.
						file_put_contents( $cache_dir . $filename, $image_data );
						readfile( $cache_dir . $filename ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_readfile
						exit;
					}
				}
			}

			readfile( $image_url ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_readfile
			exit;
		}
	}

}