<?php
/**
 * Accessibility statement generator: a guided form that creates a draft page
 * following the structure of the EU model statement (Commission Implementing Decision (EU) 2018/1523).
 * The page text is content, so it is written in the language chosen in the form (Italian or English).
 *
 * @package Agevole
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

define( 'AGEVOLE_A11Y_STATEMENT_OPTION', 'agevole_a11y_statement' );

/**
 * Saved statement data merged with defaults.
 *
 * @return array
 */
function agevole_a11y_statement_data() {
	$saved = get_option( AGEVOLE_A11Y_STATEMENT_OPTION, array() );
	return wp_parse_args(
		is_array( $saved ) ? $saved : array(),
		array(
			'lang'          => 0 === strpos( get_locale(), 'it' ) ? 'it' : 'en',
			'org'           => get_bloginfo( 'name' ),
			'status'        => '',
			'standard'      => '2.2',
			'noncompliant'  => '',
			'alternatives'  => '',
			'method'        => 'self',
			'date'          => '',
			'email'         => get_option( 'admin_email' ),
			'response_days' => 30,
			'enforcement'   => '',
			'page_id'       => 0,
		)
	);
}

/**
 * Validates the submitted form.
 *
 * @param array $in Raw input (already unslashed).
 * @return array
 */
function agevole_a11y_statement_sanitize( $in ) {
	$date = isset( $in['date'] ) ? sanitize_text_field( $in['date'] ) : '';
	return array(
		'lang'          => ( isset( $in['lang'] ) && 'en' === $in['lang'] ) ? 'en' : 'it',
		'org'           => isset( $in['org'] ) ? sanitize_text_field( $in['org'] ) : '',
		'status'        => ( isset( $in['status'] ) && in_array( $in['status'], array( 'full', 'partial', 'none' ), true ) ) ? $in['status'] : '',
		'standard'      => ( isset( $in['standard'] ) && '2.1' === $in['standard'] ) ? '2.1' : '2.2',
		'noncompliant'  => isset( $in['noncompliant'] ) ? sanitize_textarea_field( $in['noncompliant'] ) : '',
		'alternatives'  => isset( $in['alternatives'] ) ? sanitize_textarea_field( $in['alternatives'] ) : '',
		'method'        => ( isset( $in['method'] ) && 'third' === $in['method'] ) ? 'third' : 'self',
		'date'          => preg_match( '/^\d{4}-\d{2}-\d{2}$/', $date ) ? $date : '',
		'email'         => isset( $in['email'] ) ? sanitize_email( $in['email'] ) : '',
		'response_days' => isset( $in['response_days'] ) ? min( 90, max( 1, absint( $in['response_days'] ) ) ) : 30,
		'enforcement'   => isset( $in['enforcement'] ) ? sanitize_textarea_field( $in['enforcement'] ) : '',
	);
}

/**
 * Texts of the statement page, in Italian and English.
 *
 * @param string $lang it|en.
 * @return array
 */
function agevole_a11y_statement_texts( $lang ) {
	if ( 'it' === $lang ) {
		return array(
			'title'        => 'Dichiarazione di accessibilità',
			'intro'        => '%1$s si impegna a rendere accessibile il proprio sito web %2$s. Questa dichiarazione si riferisce al sito %2$s e fa riferimento alle Linee guida per l’accessibilità dei contenuti web (WCAG) %3$s, livello AA, e alla norma europea EN 301 549.',
			'h_status'     => 'Stato di conformità',
			'full'         => 'Questo sito è pienamente conforme alle WCAG %s livello AA.',
			'partial'      => 'Questo sito è parzialmente conforme alle WCAG %s livello AA, a causa dei casi di non conformità elencati di seguito.',
			'none'         => 'Questo sito non è conforme alle WCAG %s livello AA. I casi di non conformità sono elencati di seguito.',
			'h_content'    => 'Contenuti non accessibili',
			'alternatives' => 'Alternative accessibili',
			'h_prep'       => 'Redazione della dichiarazione',
			'prepared'     => 'Questa dichiarazione è stata redatta il %s.',
			'self'         => 'La valutazione è stata effettuata con un’autovalutazione.',
			'third'        => 'La valutazione è stata effettuata da una terza parte.',
			'h_feedback'   => 'Segnalazioni e contatti',
			'feedback'     => 'Se riscontri problemi di accessibilità o non riesci ad accedere a un contenuto o a un servizio, scrivi a %1$s. Ti risponderemo entro %2$d giorni.',
			'h_enforce'    => 'Procedura di attuazione',
		);
	}
	return array(
		'title'        => 'Accessibility statement',
		'intro'        => '%1$s is committed to making its website %2$s accessible. This statement applies to %2$s and refers to the Web Content Accessibility Guidelines (WCAG) %3$s, level AA, and to the European standard EN 301 549.',
		'h_status'     => 'Compliance status',
		'full'         => 'This website is fully compliant with WCAG %s level AA.',
		'partial'      => 'This website is partially compliant with WCAG %s level AA, due to the non-compliances listed below.',
		'none'         => 'This website is not compliant with WCAG %s level AA. The non-compliances are listed below.',
		'h_content'    => 'Non-accessible content',
		'alternatives' => 'Accessible alternatives',
		'h_prep'       => 'Preparation of this statement',
		'prepared'     => 'This statement was prepared on %s.',
		'self'         => 'The assessment was carried out as a self-assessment.',
		'third'        => 'The assessment was carried out by a third party.',
		'h_feedback'   => 'Feedback and contact information',
		'feedback'     => 'If you find accessibility problems or cannot access any content or service, write to %1$s. We will reply within %2$d days.',
		'h_enforce'    => 'Enforcement procedure',
	);
}

/**
 * Block markup of the statement page.
 *
 * @param array $d Statement data.
 * @return string
 */
function agevole_a11y_statement_content( $d ) {
	$t    = agevole_a11y_statement_texts( $d['lang'] );
	$p    = static function ( $html ) {
		return "<!-- wp:paragraph -->\n<p>" . $html . "</p>\n<!-- /wp:paragraph -->\n\n";
	};
	$h    = static function ( $text ) {
		return "<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">" . esc_html( $text ) . "</h2>\n<!-- /wp:heading -->\n\n";
	};
	$ul   = static function ( $lines ) {
		$items = '';
		foreach ( $lines as $line ) {
			$items .= "<!-- wp:list-item -->\n<li>" . esc_html( $line ) . "</li>\n<!-- /wp:list-item -->\n";
		}
		return "<!-- wp:list -->\n<ul class=\"wp-block-list\">" . $items . "</ul>\n<!-- /wp:list -->\n\n";
	};
	$site = untrailingslashit( home_url( '/' ) );
	$date = '' !== $d['date'] ? $d['date'] : wp_date( 'Y-m-d' );
	$date = date_i18n( 'it' === $d['lang'] ? 'j/n/Y' : 'Y-m-d', strtotime( $date . ' 12:00:00' ) );

	$out  = $p( esc_html( sprintf( $t['intro'], $d['org'], $site, $d['standard'] ) ) );
	$out .= $h( $t['h_status'] );
	$out .= $p( esc_html( sprintf( $t[ $d['status'] ], $d['standard'] ) ) );

	$lines = array_filter( array_map( 'trim', explode( "\n", $d['noncompliant'] ) ) );
	if ( 'full' !== $d['status'] && $lines ) {
		$out .= $h( $t['h_content'] );
		$out .= $ul( $lines );
		if ( '' !== trim( $d['alternatives'] ) ) {
			$out .= $p( '<strong>' . esc_html( $t['alternatives'] ) . '</strong>: ' . nl2br( esc_html( $d['alternatives'] ) ) );
		}
	}

	$out .= $h( $t['h_prep'] );
	$out .= $p( esc_html( sprintf( $t['prepared'], $date ) ) . ' ' . esc_html( $t[ $d['method'] ] ) );

	$out .= $h( $t['h_feedback'] );
	$mail = '<a href="' . esc_url( 'mailto:' . $d['email'] ) . '">' . esc_html( $d['email'] ) . '</a>';
	$out .= $p( sprintf( esc_html( $t['feedback'] ), $mail, (int) $d['response_days'] ) );

	if ( '' !== trim( $d['enforcement'] ) ) {
		$out .= $h( $t['h_enforce'] );
		$out .= $p( nl2br( esc_html( $d['enforcement'] ) ) );
	}
	return $out;
}

/**
 * Statement tab: guided form.
 */
function agevole_a11y_render_statement_tab() {
	$d      = agevole_a11y_statement_data();
	$page   = $d['page_id'] ? get_post( (int) $d['page_id'] ) : null;
	$page   = ( $page && 'trash' !== $page->post_status ) ? $page : null;
	$done   = isset( $_GET['statement'] ) ? sanitize_key( wp_unslash( $_GET['statement'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Display only.
	$can    = current_user_can( 'manage_options' );
	$f      = static function ( $key ) {
		return 'agevole-st-' . $key;
	};
	?>
	<h2><?php esc_html_e( 'Accessibility statement', 'agevole-accessibility' ); ?></h2>
	<p><?php esc_html_e( 'Fill in the form to create a draft page with your accessibility statement, following the structure of the EU model statement. Review it before publishing: declare the real status of your site, checked on your content. An accessibility toolbar does not make a site compliant.', 'agevole-accessibility' ); ?></p>
	<p class="description"><?php esc_html_e( 'This is not legal advice. Public administrations in Italy must use the AgID form (form.agid.gov.it).', 'agevole-accessibility' ); ?></p>

	<?php if ( 'created' === $done || 'updated' === $done ) : ?>
		<div class="notice notice-success inline"><p>
			<?php echo 'created' === $done ? esc_html__( 'Draft page created.', 'agevole-accessibility' ) : esc_html__( 'Page updated.', 'agevole-accessibility' ); ?>
			<?php if ( $page ) : ?>
				<a href="<?php echo esc_url( get_edit_post_link( $page->ID ) ); ?>"><?php esc_html_e( 'Review and publish it', 'agevole-accessibility' ); ?></a>
			<?php endif; ?>
		</p></div>
	<?php elseif ( 'invalid' === $done ) : ?>
		<div class="notice notice-error inline"><p><?php esc_html_e( 'Choose the compliance status and enter a valid email address.', 'agevole-accessibility' ); ?></p></div>
	<?php endif; ?>

	<?php if ( ! $can ) : ?>
		<p><?php esc_html_e( 'Only administrators can create the statement page.', 'agevole-accessibility' ); ?></p>
		<?php
		return;
	endif;
	?>
	<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>">
		<input type="hidden" name="action" value="agevole_a11y_statement">
		<?php wp_nonce_field( 'agevole_a11y_statement' ); ?>
		<table class="form-table" role="presentation">
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'lang' ) ); ?>"><?php esc_html_e( 'Language of the page', 'agevole-accessibility' ); ?></label></th>
				<td><select id="<?php echo esc_attr( $f( 'lang' ) ); ?>" name="st[lang]">
					<option value="it" <?php selected( 'it', $d['lang'] ); ?>>Italiano</option>
					<option value="en" <?php selected( 'en', $d['lang'] ); ?>>English</option>
				</select></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'org' ) ); ?>"><?php esc_html_e( 'Organization', 'agevole-accessibility' ); ?></label></th>
				<td><input type="text" class="regular-text" id="<?php echo esc_attr( $f( 'org' ) ); ?>" name="st[org]" value="<?php echo esc_attr( $d['org'] ); ?>" required></td>
			</tr>
			<tr>
				<th scope="row"><?php esc_html_e( 'Compliance status', 'agevole-accessibility' ); ?></th>
				<td><fieldset>
					<legend class="screen-reader-text"><?php esc_html_e( 'Compliance status', 'agevole-accessibility' ); ?></legend>
					<label><input type="radio" name="st[status]" value="full" <?php checked( 'full', $d['status'] ); ?> required> <?php esc_html_e( 'Fully compliant', 'agevole-accessibility' ); ?></label><br>
					<label><input type="radio" name="st[status]" value="partial" <?php checked( 'partial', $d['status'] ); ?>> <?php esc_html_e( 'Partially compliant', 'agevole-accessibility' ); ?></label><br>
					<label><input type="radio" name="st[status]" value="none" <?php checked( 'none', $d['status'] ); ?>> <?php esc_html_e( 'Not compliant', 'agevole-accessibility' ); ?></label>
					<p class="description"><?php esc_html_e( 'Choose "fully compliant" only if every page meets all the WCAG level AA criteria.', 'agevole-accessibility' ); ?></p>
				</fieldset></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'standard' ) ); ?>"><?php esc_html_e( 'Reference standard', 'agevole-accessibility' ); ?></label></th>
				<td><select id="<?php echo esc_attr( $f( 'standard' ) ); ?>" name="st[standard]">
					<option value="2.2" <?php selected( '2.2', $d['standard'] ); ?>>WCAG 2.2 AA</option>
					<option value="2.1" <?php selected( '2.1', $d['standard'] ); ?>>WCAG 2.1 AA</option>
				</select></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'noncompliant' ) ); ?>"><?php esc_html_e( 'Non-accessible content', 'agevole-accessibility' ); ?></label></th>
				<td><textarea class="large-text" rows="5" id="<?php echo esc_attr( $f( 'noncompliant' ) ); ?>" name="st[noncompliant]" aria-describedby="<?php echo esc_attr( $f( 'noncompliant-d' ) ); ?>"><?php echo esc_textarea( $d['noncompliant'] ); ?></textarea>
				<p class="description" id="<?php echo esc_attr( $f( 'noncompliant-d' ) ); ?>"><?php esc_html_e( 'One item per line: what is not accessible and why (for example "PDF price lists published before 2024 are not tagged").', 'agevole-accessibility' ); ?></p></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'alternatives' ) ); ?>"><?php esc_html_e( 'Accessible alternatives (optional)', 'agevole-accessibility' ); ?></label></th>
				<td><textarea class="large-text" rows="2" id="<?php echo esc_attr( $f( 'alternatives' ) ); ?>" name="st[alternatives]"><?php echo esc_textarea( $d['alternatives'] ); ?></textarea></td>
			</tr>
			<tr>
				<th scope="row"><?php esc_html_e( 'Assessment', 'agevole-accessibility' ); ?></th>
				<td><fieldset>
					<legend class="screen-reader-text"><?php esc_html_e( 'Assessment', 'agevole-accessibility' ); ?></legend>
					<label><input type="radio" name="st[method]" value="self" <?php checked( 'self', $d['method'] ); ?>> <?php esc_html_e( 'Self-assessment', 'agevole-accessibility' ); ?></label><br>
					<label><input type="radio" name="st[method]" value="third" <?php checked( 'third', $d['method'] ); ?>> <?php esc_html_e( 'Third-party assessment', 'agevole-accessibility' ); ?></label>
				</fieldset></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'date' ) ); ?>"><?php esc_html_e( 'Date of the assessment', 'agevole-accessibility' ); ?></label></th>
				<td><input type="date" id="<?php echo esc_attr( $f( 'date' ) ); ?>" name="st[date]" value="<?php echo esc_attr( '' !== $d['date'] ? $d['date'] : wp_date( 'Y-m-d' ) ); ?>"></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'email' ) ); ?>"><?php esc_html_e( 'Email for accessibility feedback', 'agevole-accessibility' ); ?></label></th>
				<td><input type="email" class="regular-text" id="<?php echo esc_attr( $f( 'email' ) ); ?>" name="st[email]" value="<?php echo esc_attr( $d['email'] ); ?>" required></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'days' ) ); ?>"><?php esc_html_e( 'Reply within (days)', 'agevole-accessibility' ); ?></label></th>
				<td><input type="number" min="1" max="90" class="small-text" id="<?php echo esc_attr( $f( 'days' ) ); ?>" name="st[response_days]" value="<?php echo esc_attr( (string) $d['response_days'] ); ?>"></td>
			</tr>
			<tr>
				<th scope="row"><label for="<?php echo esc_attr( $f( 'enforcement' ) ); ?>"><?php esc_html_e( 'Enforcement procedure (optional)', 'agevole-accessibility' ); ?></label></th>
				<td><textarea class="large-text" rows="3" id="<?php echo esc_attr( $f( 'enforcement' ) ); ?>" name="st[enforcement]" aria-describedby="<?php echo esc_attr( $f( 'enforcement-d' ) ); ?>"><?php echo esc_textarea( $d['enforcement'] ); ?></textarea>
				<p class="description" id="<?php echo esc_attr( $f( 'enforcement-d' ) ); ?>"><?php esc_html_e( 'Which authority users can turn to if your reply is unsatisfactory. Check the right authority for your country and sector.', 'agevole-accessibility' ); ?></p></td>
			</tr>
		</table>
		<?php submit_button( $page ? __( 'Save and update the page', 'agevole-accessibility' ) : __( 'Save and create a draft page', 'agevole-accessibility' ) ); ?>
	</form>
	<?php
}

/**
 * Saves the form and creates (as draft) or updates the statement page.
 */
function agevole_a11y_statement_save() {
	check_admin_referer( 'agevole_a11y_statement' );
	if ( ! current_user_can( 'manage_options' ) ) {
		wp_die( esc_html__( 'You are not allowed to do this.', 'agevole-accessibility' ), 403 );
	}
	$raw = isset( $_POST['st'] ) && is_array( $_POST['st'] ) ? wp_unslash( $_POST['st'] ) : array(); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Sanitized in agevole_a11y_statement_sanitize().
	$d   = agevole_a11y_statement_sanitize( $raw );
	$old = agevole_a11y_statement_data();

	$d['page_id'] = (int) $old['page_id'];
	update_option( AGEVOLE_A11Y_STATEMENT_OPTION, $d, false );

	if ( '' === $d['status'] || ! is_email( $d['email'] ) ) {
		wp_safe_redirect( agevole_a11y_tools_url( 'statement', array( 'statement' => 'invalid' ) ) );
		exit;
	}

	$texts = agevole_a11y_statement_texts( $d['lang'] );
	$page  = $d['page_id'] ? get_post( $d['page_id'] ) : null;
	if ( $page && 'page' === $page->post_type && 'trash' !== $page->post_status ) {
		wp_update_post(
			array(
				'ID'           => $page->ID,
				'post_content' => agevole_a11y_statement_content( $d ),
			)
		);
		$result = 'updated';
	} else {
		$id = wp_insert_post(
			array(
				'post_type'    => 'page',
				'post_status'  => 'draft',
				'post_title'   => $texts['title'],
				'post_content' => agevole_a11y_statement_content( $d ),
			),
			true
		);
		if ( is_wp_error( $id ) ) {
			wp_die( esc_html( $id->get_error_message() ) );
		}
		$d['page_id'] = (int) $id;
		update_option( AGEVOLE_A11Y_STATEMENT_OPTION, $d, false );
		$result = 'created';
	}
	wp_safe_redirect( agevole_a11y_tools_url( 'statement', array( 'statement' => $result ) ) );
	exit;
}
add_action( 'admin_post_agevole_a11y_statement', 'agevole_a11y_statement_save' );