<?php
/**
 * File Editor check.
 *
 * @package advanced-analytics
 *
 * @since 4.9.0
 */

declare(strict_types=1);

namespace ADVAN\Checks\Security;

use ADVAN\Checks\Abstract_Check;

// Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

if ( ! class_exists( 'ADVAN\Checks\Security\File_Editor_Check' ) ) {

	/**
	 * File Editor check class.
	 *
	 * @since 4.9.0
	 */

	class File_Editor_Check extends Abstract_Check {

		/**
		 * Check identifier (slug).
		 *
		 * @var string Check identifier (slug).
		 *
		 * @since 4.9.0
		 */
		protected static string $id = 'file-editor';

		/**
		 * Check category.
		 *
		 * @var string Check category.
		 *
		 * @since 4.9.0
		 */
		protected static string $category = 'security';

		/**
		 * Check weight (1-10).
		 *
		 * @var int Check weight (1-10).
		 *
		 * @since 4.9.0
		 */
		protected static int $weight = 5;

		/**
		 * Check title (translatable).
		 *
		 * @return string Check title.
		 *
		 * @since 4.9.0
		 */
		public static function get_title(): string {
			return __( 'File Editor', '0-day-analytics' );
		}

		/**
		 * Check description (translatable).
		 *
		 * @return string Check description.
		 *
		 * @since 4.9.0
		 */
		public static function get_description(): string {
			return __( 'Checks if the built-in theme and plugin file editors are disabled.', '0-day-analytics' );
		}

		/**
		 * Run the check.
		 *
		 * @return array Check result.
		 *
		 * @since 4.9.0
		 */
		public static function run(): array {
			$editor_disabled = defined( 'DISALLOW_FILE_EDIT' ) && DISALLOW_FILE_EDIT;
			$mods_disabled   = defined( 'DISALLOW_FILE_MODS' ) && DISALLOW_FILE_MODS;

			$details = array(
				'DISALLOW_FILE_EDIT' => $editor_disabled ? 'true' : 'false',
				'DISALLOW_FILE_MODS' => $mods_disabled ? 'true' : 'false',
			);

			if ( $mods_disabled ) {
				return static::pass(
					__( 'File modifications are disabled. The theme and plugin editors are not accessible, and file changes require FTP access.', '0-day-analytics' ),
					$details
				);
			}

			if ( $editor_disabled ) {
				return static::pass(
					__( 'The built-in theme and plugin file editors are disabled. If someone gains access to your admin panel, they can\'t modify your code directly.', '0-day-analytics' ),
					$details
				);
			}

			return static::warning(
				__( 'The built-in theme and plugin file editors are enabled. If a hacker gains admin access, they could inject malicious code directly into your site files.', '0-day-analytics' ),
				__( 'Add this line to your wp-config.php file before "That\'s all, stop editing!": define(\'DISALLOW_FILE_EDIT\', true);', '0-day-analytics' ),
				$details
			);
		}
	}
}