<?php
/**
 * Admin menu registration
 *
 * @package Airy_Frontend_Forms
 */

// Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}


/**
 * Class AFFCF_Menu
 *
 * Handles admin menu registration and page rendering.
 *
 * @since 1.0.0
 */
class AFFCF_Menu {
	use AFFCF_Singleton;

	/**
	 * Initialize
	 */
	protected function init() {
		add_action( 'admin_menu', array( $this, 'register_menu' ) );
	}

	/**
	 * Register admin menu
	 */
	public function register_menu() {
		// Main menu page.
		add_menu_page(
			__( 'Airy Forms', 'airy-frontend-forms' ),
			__( 'Airy Forms', 'airy-frontend-forms' ),
			'manage_options',
			'affcf-forms',
			array( $this, 'render_forms_page' ),
			'dashicons-feedback',
			30
		);

		// Forms submenu (same as parent).
		add_submenu_page(
			'affcf-forms',
			__( 'All Forms', 'airy-frontend-forms' ),
			__( 'All Forms', 'airy-frontend-forms' ),
			'manage_options',
			'affcf-forms',
			array( $this, 'render_forms_page' )
		);

		// Add New Form.
		add_submenu_page(
			'affcf-forms',
			__( 'Add New Form', 'airy-frontend-forms' ),
			__( 'Add New Form', 'airy-frontend-forms' ),
			'manage_options',
			'affcf-add-form',
			array( $this, 'render_add_form_page' )
		);

		// Submissions.
		add_submenu_page(
			'affcf-forms',
			__( 'Submissions', 'airy-frontend-forms' ),
			__( 'Submissions', 'airy-frontend-forms' ),
			'manage_options',
			'affcf-submissions',
			array( $this, 'render_submissions_page' )
		);

		// Settings.
		add_submenu_page(
			'affcf-forms',
			__( 'Settings', 'airy-frontend-forms' ),
			__( 'Settings', 'airy-frontend-forms' ),
			'manage_options',
			'affcf-settings',
			array( $this, 'render_settings_page' )
		);
	}

	/**
	 * Render forms list page
	 */
	public function render_forms_page() {
		// Check if editing.
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Reading GET parameters to determine which view to render
		if ( isset( $_GET['action'] ) && 'edit' === $_GET['action'] && isset( $_GET['form_id'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			require_once AFFCF_PLUGIN_DIR . 'includes/admin/views/forms/form-edit.php';
		} else {
			require_once AFFCF_PLUGIN_DIR . 'includes/admin/views/forms/form-list.php';
		}
	}

	/**
	 * Render add form page
	 */
	public function render_add_form_page() {
		// Check if editing.
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Reading GET parameters to determine which view to render
		if ( isset( $_GET['action'] ) && 'edit' === $_GET['action'] && isset( $_GET['form_id'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
			require_once AFFCF_PLUGIN_DIR . 'includes/admin/views/forms/form-edit.php';
		} else {
			require_once AFFCF_PLUGIN_DIR . 'includes/admin/views/forms/form-add.php';
		}
	}

	/**
	 * Render settings page
	 */
	public function render_settings_page() {
		require_once AFFCF_PLUGIN_DIR . 'includes/admin/views/settings/settings-page.php';
	}

	/**
	 * Render submissions page
	 */
	public function render_submissions_page() {
		// Handle CSV export.
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Nonce verified on next line via check_admin_referer
		if ( isset( $_GET['action'] ) && 'export' === $_GET['action'] ) {
			check_admin_referer( 'export_submissions' );
			$this->export_submissions_csv();
			return;
		}

		require_once AFFCF_PLUGIN_DIR . 'includes/admin/views/submissions/submissions-list.php';
	}

	/**
	 * Export submissions to CSV
	 */
	private function export_submissions_csv() {
		if ( ! current_user_can( 'manage_options' ) ) {
			wp_die( esc_html__( 'You do not have sufficient permissions to export submissions.', 'airy-frontend-forms' ) );
		}

		global $wpdb;
		$submissions_table = $wpdb->prefix . 'affcf_submissions';

		// Get all submissions.
		// phpcs:disable WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, PluginCheck.Security.DirectDB.UnescapedDBParameter -- Table names from $wpdb->prefix, plugin-controlled
		$submissions = $wpdb->get_results(
			"SELECT s.*,
			 p.post_title,
			 p.post_status,
			 u.display_name as user_name,
			 u.user_email,
			 f.form_name
			 FROM {$submissions_table} s
			 LEFT JOIN {$wpdb->posts} p ON s.post_id = p.ID
			 LEFT JOIN {$wpdb->users} u ON s.user_id = u.ID
			 LEFT JOIN {$wpdb->prefix}affcf_forms f ON s.form_id = f.id
			 ORDER BY s.submission_date DESC"
		);
		// phpcs:enable WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, PluginCheck.Security.DirectDB.UnescapedDBParameter

		// Set headers for CSV download.
		header( 'Content-Type: text/csv; charset=utf-8' );
		header( 'Content-Disposition: attachment; filename="submissions-' . gmdate( 'Y-m-d-H-i-s' ) . '.csv"' );

		// Create output stream.
		$output = fopen( 'php://output', 'w' );

		// Add BOM for UTF-8.
		fprintf( $output, chr( 0xEF ) . chr( 0xBB ) . chr( 0xBF ) );

		// Add headers.
		fputcsv(
			$output,
			array(
				'ID',
				'Post Title',
				'User Name',
				'User Email',
				'Form Name',
				'Submission Type',
				'Post Status',
				'Submission Date',
				'IP Address',
				'User Agent',
				'CAPTCHA Score',
			)
		);

		// Add data.
		foreach ( $submissions as $submission ) {
			fputcsv(
				$output,
				array(
					$submission->id,
					$submission->post_title ?? '',
					$submission->user_name ?? '',
					$submission->user_email ?? '',
					$submission->form_name ?? '',
					ucfirst( $submission->submission_type ),
					ucfirst( $submission->post_status ),
					$submission->submission_date,
					$submission->ip_address ?? '',
					$submission->user_agent ?? '',
					$submission->captcha_score ?? '',
				)
			);
		}

		// php://output is automatically closed by PHP, no fclose() needed.
		exit;
	}
}