<?php

use WPLEClient\LEFunctions;

class WPLE_Ajax
{

  public function __construct()
  {

    add_action('wp_ajax_wple_admin_httpverify', [$this, 'wple_ajx_verify_http']);

    add_action('wp_ajax_wple_admin_dnsverify', [$this, 'wple_ajx_verify_dns']);

    add_action('wp_ajax_wple_validate_ssl', [$this, 'wple_validate_nocp_ssl']);

    add_action('wp_ajax_wple_getcert_for_copy', [$this, 'wple_retrieve_certs_forcopy']);

    add_action('wp_ajax_wple_include_www', [$this, 'wple_include_www_check']);

    add_action('wp_ajax_wple_backup_ignore', [$this, 'wple_ignore_backup_suggest']);
  }

  /**
   * Local check HTTP records via Ajax for subdir sites
   * 
   * @since 4.7.0
   * @return void
   */
  public function wple_ajx_verify_http()
  {

    if (isset($_POST['nc'])) {

      if (!wp_verify_nonce($_POST['nc'], 'verifyhttprecords')) {
        exit('Unauthorized');
      }

      $domain = str_ireplace(array('https://', 'http://'), '', site_url());

      if (stripos($domain, '/') !== false) { //subdir site
        $domain = substr($domain, 0, stripos($domain, '/'));
      }

      $opts = get_option('wple_opts');
      $httpch = $opts['challenge_files'];

      if (empty($httpch)) {
        echo 'empty';
        exit();
      }

      $counter = get_option('wple_failed_verification');
      $curl_exists = function_exists('curl_init');

      if ($curl_exists) {
        foreach ($httpch as $index => $ch) {
          $chfile = sanitize_file_name($ch['file']);
          $chval = esc_html($ch['value']);

          $fpath = trailingslashit(ABSPATH) . '.well-known/acme-challenge/';

          if (stripos(site_url(), '/', 10) !== false) { //its from sub-dir site
            $rpos = strrpos(trailingslashit(ABSPATH), '/', -2);
            $fpath = trailingslashit(substr(ABSPATH, 0, $rpos)) . '.well-known/acme-challenge/';
          }

          if ($counter >= 5) {
            if (!file_exists($fpath)) {
              mkdir($fpath, 0775, true);
            }
            WPLE_Trait::wple_logger(' -> Helping with HTTP challenge file', 'success', 'a');
            file_put_contents($fpath . $chfile, trim($chval));
          }

          $acmefilepath = $fpath . $chfile;
          if (file_exists($acmefilepath . '.txt')) {
            unlink($acmefilepath . '.txt');
            file_put_contents($acmefilepath, trim($chval));
          }

          //cleanup htaccess files
          $ABS = trailingslashit(ABSPATH);
          if (file_exists($ABS . '.well-known/.htaccess')) unlink($ABS . '.well-known/.htaccess');
          if (file_exists($ABS . '.well-known/acme-challenge/.htaccess')) unlink($ABS . '.well-known/acme-challenge/.htaccess');

          $check = LEFunctions::checkHTTPChallenge($domain, $chfile, $chval, false);

          $chfileexists = file_exists($fpath . $chfile);

          if (!$check && $chfileexists) {

            if (!file_exists($fpath)) {
              mkdir($fpath, 0775, true);
            }
            WPLE_Trait::wple_logger('Local file exists - Trying to help with HTTP challenge file', 'success', 'a');

            file_put_contents($fpath . $chfile, trim($chval));

            //re-check once
            $check = LEFunctions::checkHTTPChallenge($domain, $chfile, $chval, false);
            if (!$check) {
              echo 'not_possible';
              exit();
            }
          }

          // if ($check === true) {
          //   //skip
          // } else if ($check == 200 && $chfileexists) {
          //   $check = 2;
          // } else {
          if (!$check) {

            if (FALSE === $counter) {
              $newcount = 1;
            } else {
              $newcount = $counter + 1;
            }
            update_option('wple_failed_verification', $newcount);

            update_option('wple_stage', 'failed_httpverification_' . intval($newcount)); //pro

            WPLE_Trait::wple_logger("HTTP challenge file (" . $domain . "/.well-known/acme-challenge/" . $chfile . ") checked locally - found invalid ($chfileexists)", 'success', 'a', false);
            WPLE_Trait::wple_send_log_data();

            echo 'fail';
            exit();
          }
        }
      }

      // if ($check == 2) {
      //   WPLE_Trait::wple_logger("Local check - Found challenge file in acme-challenge => proceeding to ACME verification\n", 'success', 'a', false);
      //   delete_option('wple_failed_verification');
      //   echo 1;
      //   exit();
      // }

      if (!$curl_exists) {
        WPLE_Trait::wple_logger("HTTP local verification skipped due to non-availability of CURL\n", 'success', 'a', false);
      }

      WPLE_Trait::wple_logger("Local check - All HTTP challenges verified\n", 'success', 'a', false);

      delete_option('wple_failed_verification');

      echo 1;
      exit();
    }
  }

  /**
   * Local check DNS records via Ajax
   * 
   * @since 4.6.0
   * @return void
   */
  public function wple_ajx_verify_dns()
  {

    if (isset($_POST['nc'])) {
      if (!wp_verify_nonce($_POST['nc'], 'verifydnsrecords')) {
        exit('Unauthorized');
      }
      $toVerify = get_option('wple_opts');

      if (array_key_exists('dns_challenges', $toVerify) && !empty($toVerify['dns_challenges'])) {
        $toVerify = $dnspendings = $toVerify['dns_challenges'];
        //array

        foreach ($toVerify as $index => $item) {
          $domain_code = explode('||', $item);
          $acme = '_acme-challenge.' . esc_html($domain_code[0]);
          $requestURL = 'https://dns.google.com/resolve?name=' . addslashes($acme) . '&type=TXT';
          $handle = curl_init();
          curl_setopt($handle, CURLOPT_URL, $requestURL);
          curl_setopt($handle, CURLOPT_RETURNTRANSFER, true);
          curl_setopt($handle, CURLOPT_FOLLOWLOCATION, true);
          $response = json_decode(trim(curl_exec($handle)));

          if ($response->Status === 0 && isset($response->Answer)) {

            //if ($answer->type == 16) {            
            $found = 'Pending';
            foreach ($response->Answer as $answer) {
              $livecode = str_ireplace('"', '', $answer->data);
              if ($livecode == $domain_code[1]) {
                unset($dnspendings[$index]);
                $found = 'OK';
                continue;
              }
            }

            WPLE_Trait::wple_logger("\n" . esc_html($requestURL . ' should return ' . $domain_code[1] . ' -> ' . $found) . "\n");
          } else {

            WPLE_Trait::wple_logger("\n" . esc_html($requestURL . ' should return ' . $domain_code[1] . ' -> No records found yet') . "\n");

            echo  'fail';
            exit();
          }
        }

        if (empty($dnspendings)) {
          WPLE_Trait::wple_logger("Local check - All DNS challenges verified\n", 'success', 'a', false);

          echo  1;
          exit;
        } else {
          update_option('wple_stage', 'failed_dns_verification');

          echo  'fail';
          exit();
        }
      } else if (empty($toVerify['dns_challenges'])) {
        WPLE_Trait::wple_logger("Local check - DNS challenges empty\n", 'success', 'a', false);

        echo  1;
        exit();
      }
    }

    WPLE_Trait::wple_send_log_data();

    echo  'fail';
    exit();
  }

  /**
   * Validate SSL button for non-cpanel
   *
   * @since 5.2.6
   * @return void
   */
  public function wple_validate_nocp_ssl()
  {
    if (!current_user_can('manage_options')) {
      exit('Unauthorized');
    }

    $basedomain = str_ireplace(array('http://', 'https://'), array('', ''), addslashes(site_url()));

    //4.7
    if (false !== stripos($basedomain, '/')) {
      $basedomain = substr($basedomain, 0, stripos($basedomain, '/'));
    }

    $client = WPLE_Trait::wple_verify_ssl($basedomain);

    if ($client || is_ssl()) {
      $reverter = uniqid('wple');

      $savedopts = get_option('wple_opts');
      $savedopts['force_ssl'] = 1;
      $savedopts['revertnonce'] = $reverter;

      ///WPLE_Trait::wple_send_reverter_secret($reverter);

      update_option('wple_opts', $savedopts);
      delete_option('wple_error'); //complete
      update_option('wple_ssl_screen', 'success');

      update_option('siteurl', str_ireplace('http:', 'https:', get_option('siteurl')));
      update_option('home', str_ireplace('http:', 'https:', get_option('home')));
      echo 1;
    } else {
      echo 0;
    }

    exit();
  }


  /**
   * Ajax Get cert contents for copy
   *
   * @since 5.3.16
   * @return void
   */
  public function wple_retrieve_certs_forcopy()
  {

    if (!wp_verify_nonce($_GET['nc'], 'copycerts') || !current_user_can('manage_options')) {
      exit('Authorization Failure');
    }

    $ftype = $_GET['gettype'];
    $output = '';
    $keypath = ABSPATH . 'keys/';

    switch ($ftype) {
      case 'cert':
        if (file_exists($keypath . 'certificate.crt')) $output = file_get_contents($keypath . 'certificate.crt');
        break;
      case 'key':
        if (file_exists($keypath . 'private.pem')) $output = file_get_contents($keypath . 'private.pem');
        break;
      case 'cabundle':
        if (file_exists(ABSPATH . 'keys/cabundle.crt')) {
          $output = file_get_contents(ABSPATH . 'keys/cabundle.crt');
        } else {
          $output = file_get_contents(WPLE_DIR . 'cabundle/ca.crt');
        }
        break;
    }

    echo esc_html($output);

    exit();
  }

  /**
   * Ajax check if both www & non-www domain accessible
   *
   * @since 5.6.2
   * @return void
   */
  public function wple_include_www_check()
  {

    if (!current_user_can('manage_options') || !wp_verify_nonce($_GET['nc'], 'legenerate')) {
      exit('Unauthorized request');
    }

    $maindomain = WPLE_Trait::get_root_domain(false);

    $errcode = 'www';

    if (stripos($maindomain, 'www') === false) {
      $altdomain = 'www.' . $maindomain;
    } else {
      $errcode = 'nonwww';
      $altdomain = str_ireplace('www.', '', $maindomain);
    }

    $altdomaintest = wp_remote_head('http://' . $altdomain, array('sslverify' => false, 'timeout' => 30));

    $rescode = wp_remote_retrieve_response_code($altdomaintest);

    if (!is_wp_error($altdomaintest) || $rescode == 301 || $rescode == 302) {
      echo 1;
      exit();
    }

    echo $errcode;
    exit();
  }

  public function wple_ignore_backup_suggest()
  {

    if (!current_user_can('manage_options')) {
      exit();
    }

    update_option('wple_backup_suggested', true);
    echo 1;
    exit();
  }
}