<?php
/**
 * Fluent Forms class
 *
 * @package ZeroSpam
 */

namespace ZeroSpam\Modules\FluentForms;

// Security Note: Blocks direct access to the plugin PHP files.
defined( 'ABSPATH' ) || die();

/**
 * Fluent Forms
 */
class FluentForms {
	/**
	 * Constructor
	 */
	public function __construct() {
		add_action( 'init', array( $this, 'init' ) );
	}

	/**
	 * Fires after WordPress has finished loading but before any headers are sent.
	 */
	public function init() {
		add_filter( 'zerospam_setting_sections', array( $this, 'sections' ) );
		add_filter( 'zerospam_settings', array( $this, 'settings' ), 10, 1 );
		add_filter( 'zerospam_types', array( $this, 'types' ), 10, 1 );

		if (
			'enabled' === \ZeroSpam\Core\Settings::get_settings( 'verify_fluentforms' ) &&
			\ZeroSpam\Core\Access::process()
		) {
			// Load scripts.
			add_action( 'fluentform_load_form_assets', array( $this, 'scripts' ), 10 );

			// Adds Zero Spam's honeypot field.
			add_filter( 'fluentform_rendering_form', array( $this, 'render_form' ), 10, 1 );

			// Processes the form.
			add_action( 'fluentform_before_insert_submission', array( $this, 'process_form' ), 10, 3 );

			// Validates email addresses.
			add_filter( 'fluentform_validate_input_item_input_email', array( $this, 'validate_email' ), 10, 5 );
		}
	}

	/**
	 * Fires before a form is rendered.
	 */
	public function scripts() {
		do_action( 'zerospam_fluentforms_scripts' );
	}

	/**
	 * Adds Zero Spam's custom form fields.
	 *
	 * @see https://fluentforms.com/docs/fluentform_rendering_form/
	 *
	 * @param $form The $form Object.
	 */
	public function render_form( $form ) {
		// Add Zero Spam's honeypot field.
		$honeypot_field_name = \ZeroSpam\Core\Utilities::get_honeypot();

		$form->fields['fields'][] = array(
			'element'    => 'input_hidden',
			'attributes' => array(
				'type'  => 'hidden',
				'name'  => $honeypot_field_name,
				'value' => '',
			),
		);

		return $form;
	}

	/**
	 * Processes a Fluent Form submission after it's validation is completed.
	 *
	 * @see https://fluentforms.com/docs/fluentform_before_insert_submission/
	 *
	 * @param array  $insert_data submission_data Array.
	 * @param array  $data        $_POST[‘data’] from submission.
	 * @param object $form        The $form Object.
	 */
	public function process_form( $insert_data, $data, $form ) {
		$error_message = \ZeroSpam\Core\Utilities::detection_message( 'fluentforms_spam_message' );

		// Check Zero Spam's honeypot field.
		$honeypot_field_name = \ZeroSpam\Core\Utilities::get_honeypot();

		// Create the details array for logging & sharing data.
		$details = array(
			'insert_data' => $insert_data,
			'data'        => $data,
			'form'        => array(
				'id'    => $form->id,
				'title' => $form->title,
			),
		);

		if ( ! isset( $data[ $honeypot_field_name ] ) || ! empty( $data[ $honeypot_field_name ] ) ) {
			// Failed the honeypot check.
			$details['failed'] = 'honeypot';

			// Log the detection if enabled.
			if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'log_blocked_fluentforms' ) ) {
				\ZeroSpam\Includes\DB::log( 'fluent_form', $details );
			}

			// Share the detection if enabled.
			if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'share_data' ) ) {
				$details['type'] = 'fluent_form';
				do_action( 'zerospam_share_detection', $details );
			}

			wp_send_json(
				array(
					'errors' => array(
						'zerospam_honeypot' => $error_message,
					),
				),
				422
			);
		}

		// Check submitted fields against disallowed words list.
		if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'verify_fluentforms_disallowed_words' ) ) {
			foreach ( $data as $value ) {
				if ( is_string( $value ) && ! empty( trim( $value ) ) && \ZeroSpam\Core\Utilities::is_disallowed( $value ) ) {
					$details['failed'] = 'disallowed_list';

					if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'log_blocked_fluentforms' ) ) {
						\ZeroSpam\Includes\DB::log( 'fluent_form', $details );
					}

					if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'share_data' ) ) {
						$details['type'] = 'fluent_form';
						do_action( 'zerospam_share_detection', $details );
					}

					wp_send_json(
						array(
							'errors' => array(
								'zerospam_disallowed' => $error_message,
							),
						),
						422
					);
				}
			}
		}

		// Fire hook for additional validation (ex. David Walsh script).
		$errors = apply_filters( 'zerospam_preprocess_fluentform_submission', array(), $data, 'fluentforms_spam_message' );

		if ( ! empty( $errors ) ) {
			$errors_array = array();
			foreach ( $errors as $key => $message ) {
				$errors_array[ $key ] = $message;

				$details['failed'] = str_replace( 'zerospam_', '', $key );

				// Log the detection if enabled.
				if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'log_blocked_fluentforms' ) ) {
					\ZeroSpam\Includes\DB::log( 'fluent_form', $details );
				}

				// Share the detection if enabled.
				if ( 'enabled' === \ZeroSpam\Core\Settings::get_settings( 'share_data' ) ) {
					$details['type'] = 'fluent_form';
					do_action( 'zerospam_share_detection', $details );
				}
			}

			wp_send_json(
				array(
					'errors' => $errors_array,
				),
				422
			);
		}
	}

	/**
	 * Validates email inputs.
	 *
	 * @see https://fluentforms.com/docs/fluentform_validate_input_item_input_text/
	 *
	 * @param string $error     Error message.
	 * @param array  $field     Contains the fill field settings.
	 * @param array  $form_data Contains all the user input values as key pair.
	 * @param array  $fields    All fields of the form.
	 * @param object $form      The $form Object.
	 */
	public function validate_email( $error, $field, $form_data, $fields, $form ) {
		$field_name = $field['name'];
		if ( empty( $form_data[ $field_name ] ) ) {
			return $error;
		}

		$email = $form_data[ $field_name ];

		// Check blocked email domains.
		if (
			\ZeroSpam\Core\Utilities::is_email( $email ) &&
			\ZeroSpam\Core\Utilities::is_email_domain_blocked( $email )
		) {
			$error_message = \ZeroSpam\Core\Utilities::detection_message( 'fluentforms_spam_message' );

			return array( $error_message );
		}

		return $error;
	}


	/**
	 * Add to the types array
	 *
	 * @param array $types Array of available detection types.
	 */
	public function types( $types ) {
		$types['fluent_form'] = array(
			'label' => __( 'Fluent Form', 'zero-spam' ),
			'color' => '#0171ff',
		);

		return $types;
	}

	/**
	 * Fluent Forms sections
	 *
	 * @param array $sections Array of available setting sections.
	 */
	public function sections( $sections ) {
		$sections['fluent_form'] = array(
			'title' => __( 'Fluent Forms', 'zero-spam' ),
			'icon'  => 'modules/fluentforms/icon-fluent-forms.svg',
		);

		return $sections;
	}

	/**
	 * Admin settings
	 *
	 * @param array $settings Array of available settings.
	 */
	public function settings( $settings ) {
		$options = get_option( 'zero-spam-fluent_form' );

		$settings['verify_fluentforms'] = array(
			'title'       => __( 'Protect Fluent Form Submissions', 'zero-spam' ),
			'desc'        => __( 'Stop spam from Fluent Forms.', 'zero-spam' ),
			'section'     => 'fluent_form',
			'module'      => 'fluent_form',
			'type'        => 'checkbox',
			'options'     => array(
				'enabled' => false,
			),
			'value'       => ! empty( $options['verify_fluentforms'] ) ? $options['verify_fluentforms'] : false,
			'recommended' => 'enabled',
		);

		$message = __( 'Your IP has been flagged as spam/malicious.', 'zero-spam' );

		$settings['fluentforms_spam_message'] = array(
			'title'       => __( 'Flagged Message', 'zero-spam' ),
			'desc'        => __( 'The message shown when Fluent Forms detects spam.', 'zero-spam' ),
			'section'     => 'fluent_form',
			'module'      => 'fluent_form',
			'type'        => 'text',
			'field_class' => 'large-text',
			'placeholder' => $message,
			'value'       => ! empty( $options['fluentforms_spam_message'] ) ? $options['fluentforms_spam_message'] : $message,
			'recommended' => $message,
		);

		$settings['verify_fluentforms_disallowed_words'] = array(
			'title'       => __( 'Check Disallowed Words', 'zero-spam' ),
			'desc'        => __( 'Block Fluent Forms submissions containing words from the WordPress disallowed words list.', 'zero-spam' ),
			'section'     => 'fluent_form',
			'module'      => 'fluent_form',
			'type'        => 'checkbox',
			'options'     => array(
				'enabled' => false,
			),
			'value'       => ! empty( $options['verify_fluentforms_disallowed_words'] ) ? $options['verify_fluentforms_disallowed_words'] : false,
			'recommended' => 'enabled',
		);

		$settings['log_blocked_fluentforms'] = array(
			'title'       => __( 'Log Blocked Fluent Form Submissions', 'zero-spam' ),
			'section'     => 'fluent_form',
			'module'      => 'fluent_form',
			'type'        => 'checkbox',
			'desc'        => __( 'Keep a record of blocked Fluent Forms submissions.', 'zero-spam' ),
			'options'     => array(
				'enabled' => false,
			),
			'value'       => ! empty( $options['log_blocked_fluentforms'] ) ? $options['log_blocked_fluentforms'] : false,
			'recommended' => 'enabled',
		);

		return $settings;
	}
}
