<?php

namespace ProfilePress\Core\Classes;

use WP_PPress_Session;

/**
 * This is a wrapper class for WP_PPress_Session / PHP $_SESSION
 *
 * @copyright   Copyright (c) 2015, Pippin Williamson
 * @license     http://opensource.org/licenses/gpl-2.0.php GNU Public License
 */
class PPRESS_Session
{
    /**
     * Holds our session data
     *
     * @var array
     *
     */
    private $session;

    /**
     * Get things started
     *
     * Defines our WP_PPress_Session constants, includes the necessary libraries and
     * retrieves the WP Session instance
     */
    public function __construct()
    {
        if ( ! $this->should_start_session()) {
            return;
        }

        if ( ! defined('WP_PPRESS_SESSION_COOKIE')) {
            define('WP_PPRESS_SESSION_COOKIE', $this->get_session_cookie_name());
        }

        if ( ! class_exists('PPRESS_Recursive_ArrayAccess')) {
            require_once PROFILEPRESS_SRC . 'lib/wp_session/class-recursive-arrayaccess.php';
        }

        // Include utilities class
        if ( ! class_exists('WP_PPress_Session_Utils')) {
            require_once PROFILEPRESS_SRC . 'lib/wp_session/class-wp-session-utils.php';
        }

        if ( ! class_exists('WP_PPress_Session')) {
            require_once PROFILEPRESS_SRC . 'lib/wp_session/class-wp-session.php';
            require_once PROFILEPRESS_SRC . 'lib/wp_session/wp-session.php';
        }

        $hook = (empty($this->session)) ? 'plugins_loaded' : 'init';

        add_action($hook, [$this, 'init'], -1);
    }

    public function get_session_cookie_name()
    {
        $name = 'ppwp_wp_session';

        /** @see https://docs.pantheon.io/cookies#cache-busting-cookies */
        if ( ! empty($_ENV['PANTHEON_ENVIRONMENT'])) $name = 'wp-' . $name;

        /** @see https://wpengine.com/support/cache/#Default_Cache_Exclusions */
        if (function_exists('is_wpe') && is_wpe()) $name = 'wordpress_' . $name;

        return $name;
    }

    /**
     * Setup the WP_PPress_Session instance
     *
     * @return mixed
     */
    public function init()
    {
        $this->session = WP_PPress_Session::get_instance();

        return $this->session;
    }

    public function get_all()
    {
        return $this->session->toArray();
    }

    /**
     * Retrieve a session variable
     *
     * @param string $key Session key
     *
     * @return mixed Session variable
     */
    public function get($key)
    {
        $key    = sanitize_key($key);
        $return = false;

        if (isset($this->session[$key]) && ! empty($this->session[$key])) {

            preg_match('/[oO]\s*:\s*\d+\s*:\s*"\s*(?!(?i)(stdClass))/', $this->session[$key], $matches);
            if ( ! empty($matches)) {
                $this->set($key, null);

                return false;
            }

            if (is_numeric($this->session[$key])) {
                $return = $this->session[$key];
            } else {

                $maybe_json = json_decode($this->session[$key]);

                // Since json_last_error is PHP 5.3+, we have to rely on a `null` value for failing to parse JSON.
                if (is_null($maybe_json)) {
                    $is_serialized = is_serialized($this->session[$key]);
                    if ($is_serialized) {
                        $value = @unserialize($this->session[$key]);
                        $this->set($key, (array)$value);
                        $return = $value;
                    } else {
                        $return = $this->session[$key];
                    }
                } else {
                    $return = json_decode($this->session[$key], true);
                }
            }
        }

        return $return;
    }

    /**
     * Set a session variable
     *
     * @param string $key Session key
     * @param int|string|array $value Session variable
     *
     * @return mixed Session variable
     */
    public function set($key, $value)
    {
        $key = sanitize_key($key);

        if (is_array($value)) {
            $this->session[$key] = wp_json_encode($value);
        } else {
            $this->session[$key] = esc_attr($value);
        }

        return $this->session[$key];
    }

    /**
     * Determines if we should start sessions
     *
     * @return bool
     */
    public function should_start_session()
    {
        $start_session = true;

        if ( ! empty($_SERVER['REQUEST_URI'])) {

            $blacklist = $this->get_blacklist();
            $uri       = ltrim($_SERVER['REQUEST_URI'], '/');
            $uri       = untrailingslashit($uri);

            if (in_array($uri, $blacklist)) {
                $start_session = false;
            }

            if (false !== strpos($uri, 'feed=')) {
                $start_session = false;
            }

            if (is_admin() && false === strpos($uri, 'wp-admin/admin-ajax.php')) {
                // We do not want to start sessions in the admin unless we're processing an ajax request
                $start_session = false;
            }

            if (false !== strpos($uri, 'wp_scrape_key')) {
                // Starting sessions while saving the file editor can break the save process, so don't start
                $start_session = false;
            }
        }

        if (defined('DOING_CRON') && DOING_CRON) {
            $start_session = false;
        }

        if ( ! ppress_is_any_active_plan() && ! ExtensionManager::is_enabled(ExtensionManager::SOCIAL_LOGIN)) {
            $start_session = false;
        }

        return apply_filters('ppress_should_start_session', $start_session);
    }

    /**
     * Retrieve the URI blacklist
     *
     * These are the URIs where we never start sessions
     *
     * @return array
     */
    public function get_blacklist()
    {
        $blacklist = array(
            'feed',
            'feed/rss',
            'feed/rss2',
            'feed/rdf',
            'feed/atom',
            'comments/feed'
        );

        // Look to see if WordPress is in a sub folder or this is a network site that uses sub folders
        $folder = str_replace(network_home_url(), '', get_site_url());

        if ( ! empty($folder)) {
            foreach ($blacklist as $path) {
                $blacklist[] = $folder . '/' . $path;
            }
        }

        return $blacklist;
    }

    public static function get_instance()
    {
        static $instance = null;

        if (is_null($instance)) {
            $instance = new self();
        }

        return $instance;
    }
}