<?php
/**
 * Database Prefix check.
 *
 * @package advanced-analytics
 *
 * @since 4.9.0
 */

declare(strict_types=1);

namespace ADVAN\Checks\Security;

use ADVAN\Checks\Abstract_Check;

// Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

if ( ! class_exists( 'ADVAN\Checks\Security\Database_Prefix_Check' ) ) {

	/**
	 * Database Prefix check class.
	 *
	 * @since 4.9.0
	 */
	class Database_Prefix_Check extends Abstract_Check {

		/**
		 * Check identifier (slug).
		 *
		 * @var string Check identifier (slug).
		 *
		 * @since 4.9.0
		 */
		protected static string $id = 'database-prefix';

		/**
		 * Check category.
		 *
		 * @var string Check category.
		 *
		 * @since 4.9.0
		 */
		protected static string $category = 'security';

		/**
		 * Check weight (1-10).
		 *
		 * @var int Check weight (1-10).
		 *
		 * @since 4.9.0
		 */
		protected static int $weight = 4;

		/**
		 * Check title (translatable).
		 *
		 * @return string Check title.
		 *
		 * @since 4.9.0
		 */
		public static function get_title(): string {
			return __( 'Database Table Prefix', '0-day-analytics' );
		}

		/**
		 * Check description (translatable).
		 *
		 * @return string Check description.
		 *
		 * @since 4.9.0
		 */
		public static function get_description(): string {
			return __( 'Checks if you\'re using the default wp_ prefix which is targeted by automated attacks.', '0-day-analytics' );
		}

		/**
		 * Run the check.
		 *
		 * @return array Check result.
		 *
		 * @since 4.9.0
		 */
		public static function run(): array {
			global $wpdb;

			$prefix = $wpdb->prefix;

			$details = array(
				'prefix' => $prefix,
			);

			// Check for common default prefixes.
			$default_prefixes = array( 'wp_', 'wordpress_', 'wp1_' );

			if ( in_array( $prefix, $default_prefixes, true ) ) {
				return static::warning(
					sprintf(
					/* translators: %s: database prefix */
						__( 'Your database uses the default table prefix "%s". While not critical, using a custom prefix adds a small layer of protection against automated attacks that target default WordPress installations.', '0-day-analytics' ),
						$prefix
					),
					__( 'Changing the database prefix on an existing site requires careful database modifications and is best done by a developer. For new sites, set a custom prefix during installation.', '0-day-analytics' ),
					$details
				);
			}

			return static::pass(
				sprintf(
				/* translators: %s: database prefix */
					__( 'Your database uses a custom table prefix "%s", which helps protect against automated attacks targeting default WordPress installations.', '0-day-analytics' ),
					$prefix
				),
				$details
			);
		}
	}
}