<?php
/**
 * CAPTCHA Handler File
 *
 * @package Airy_Frontend_Forms
 */

// If this file is called directly, abort.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}
/**
 * Google reCAPTCHA v3 Handler
 *
 * Handles reCAPTCHA verification and spam protection
 *
 * @package Airy_Frontend_Forms
 */
class AFFCF_Captcha {

	/**
	 * Verify reCAPTCHA response
	 *
	 * @param string $response_token Response token from frontend.
	 * @return bool|WP_Error True if valid, WP_Error if invalid.
	 */
	public static function verify( $response_token ) {
		$settings = get_option( 'affcf_captcha_settings', array() );

		// Check if CAPTCHA is enabled.
		if ( empty( $settings['enabled'] ) ) {
			return true; // CAPTCHA disabled, allow through.
		}

		// Check if secret key is configured.
		if ( empty( $settings['secret_key'] ) ) {
			return new WP_Error(
				'captcha_not_configured',
				__( 'reCAPTCHA is not properly configured. Please contact the site administrator.', 'airy-frontend-forms' )
			);
		}

		// Check if response token provided.
		if ( empty( $response_token ) ) {
			return new WP_Error(
				'captcha_missing',
				__( 'CAPTCHA verification required. Please try again.', 'airy-frontend-forms' )
			);
		}

		// Verify with Google.
		$verify_url = 'https://www.google.com/recaptcha/api/siteverify';

		$response = wp_remote_post(
			$verify_url,
			array(
				'body'    => array(
					'secret'   => $settings['secret_key'],
					'response' => $response_token,
					'remoteip' => isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '',
				),
				'timeout' => 10,
			)
		);

		// Check for connection errors.
		if ( is_wp_error( $response ) ) {
			return new WP_Error(
				'captcha_connection_error',
				__( 'Unable to verify CAPTCHA. Please try again.', 'airy-frontend-forms' )
			);
		}

		// Parse response.
		$response_body = wp_remote_retrieve_body( $response );
		$result        = json_decode( $response_body, true );

		if ( empty( $result ) ) {
			return new WP_Error(
				'captcha_invalid_response',
				__( 'CAPTCHA verification failed. Please try again.', 'airy-frontend-forms' )
			);
		}

		// Check if verification was successful.
		if ( empty( $result['success'] ) ) {
			$error_codes = isset( $result['error-codes'] ) ? implode( ', ', $result['error-codes'] ) : 'unknown';

			return new WP_Error(
				'captcha_verification_failed',
				__( 'CAPTCHA verification failed. Please try again.', 'airy-frontend-forms' )
			);
		}

		// Check score threshold.
		$score_threshold = isset( $settings['score_threshold'] ) ? (float) $settings['score_threshold'] : 0.5;
		$actual_score    = isset( $result['score'] ) ? (float) $result['score'] : 0.0;

		if ( $actual_score < $score_threshold ) {
			// Log the score for debugging (removed to comply with PHPCS).

			return new WP_Error(
				'captcha_low_score',
				__( 'Suspicious activity detected. Please try again or contact support if this problem persists.', 'airy-frontend-forms' )
			);
		}

		// Verification successful!

		// Return score for tracking.
		return array(
			'success' => true,
			'score'   => $actual_score,
		);
	}

	/**
	 * Check if reCAPTCHA is enabled
	 *
	 * @return bool.
	 */
	public static function is_enabled() {
		$settings = get_option( 'affcf_captcha_settings', array() );
		return ! empty( $settings['enabled'] ) && ! empty( $settings['site_key'] ) && ! empty( $settings['secret_key'] );
	}

	/**
	 * Get site key for frontend
	 *
	 * @return string.
	 */
	public static function get_site_key() {
		$settings = get_option( 'affcf_captcha_settings', array() );
		return $settings['site_key'] ?? '';
	}

	/**
	 * Get score threshold
	 *
	 * @return float.
	 */
	public static function get_score_threshold() {
		$settings = get_option( 'affcf_captcha_settings', array() );
		return isset( $settings['score_threshold'] ) ? (float) $settings['score_threshold'] : 0.5;
	}

	/**
	 * Render reCAPTCHA badge in frontend
	 */
	public static function render_badge() {
		if ( ! self::is_enabled() ) {
			return;
		}

		?>
		<div class="affcf-recaptcha-notice" style="margin-top: 10px; font-size: 12px; color: #666;">
			<?php esc_html_e( 'This site is protected by reCAPTCHA and the Google', 'airy-frontend-forms' ); ?>
			<a href="https://policies.google.com/privacy" target="_blank"><?php esc_html_e( 'Privacy Policy', 'airy-frontend-forms' ); ?></a>
			<?php esc_html_e( 'and', 'airy-frontend-forms' ); ?>
			<a href="https://policies.google.com/terms" target="_blank"><?php esc_html_e( 'Terms of Service', 'airy-frontend-forms' ); ?></a>
			<?php esc_html_e( 'apply.', 'airy-frontend-forms' ); ?>
		</div>
		<?php
	}
}