<?php
/**
 * Uninstall 007AJ Backup Restore Verifier.
 *
 * ALWAYS removed: scheduled (cron) events and transients.
 *
 * Settings, backup history (tables) and the backup files are KEPT by default so that
 * deleting the plugin never destroys your backups. Tick "Delete all data when the plugin
 * is deleted" under Settings → Uninstall first and uninstall then also removes: all
 * options, the custom tables, the capability and the protected working directory
 * (uploads/brverify-working/, plus any pre-0.6.5 wp-content/brverify-working/, including every backup zip).
 *
 * If the other edition of this plugin (same data, different folder) is still installed
 * and active, the data is left alone even when the setting is on.
 *
 * @package BRVerify
 */

declare(strict_types=1);

if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
	exit;
}

global $wpdb;

/**
 * Recursively delete a directory (no plugin classes are loaded during uninstall).
 *
 * @param string $dir Absolute path already verified to be the working directory.
 */
if ( ! function_exists( 'brverify_uninstall_rrmdir' ) ) {
	function brverify_uninstall_rrmdir( string $dir ): void {
		if ( ! is_dir( $dir ) ) {
			return;
		}
		$items = scandir( $dir );
		if ( false === $items ) {
			return;
		}
		foreach ( $items as $item ) {
			if ( '.' === $item || '..' === $item ) {
				continue;
			}
			$path = $dir . DIRECTORY_SEPARATOR . $item;
			if ( is_dir( $path ) && ! is_link( $path ) ) {
				brverify_uninstall_rrmdir( $path );
			} else {
				wp_delete_file( $path );
			}
		}
		// phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_rmdir
		@rmdir( $dir );
	}
}

$brverify_settings = get_option( 'brverify_settings', array() );
$brverify_wipe     = is_array( $brverify_settings )
	&& ( ! empty( $brverify_settings['delete_data_on_uninstall'] ) || ! empty( $brverify_settings['delete_artifacts_on_uninstall'] ) );

// Another edition sharing this data still active? Then never wipe.
$brverify_active = (array) get_option( 'active_plugins', array() );
foreach ( array( '007aj-backup-restore-verifier/007aj-backup-restore-verifier.php', '007aj-backup-restore-verifier-pro/007aj-backup-restore-verifier-pro.php' ) as $brverify_other ) {
	if ( plugin_basename( WP_UNINSTALL_PLUGIN ) !== $brverify_other && in_array( $brverify_other, $brverify_active, true ) ) {
		$brverify_wipe = false;
	}
}

// 1. Always: cron events + transients.
$brverify_cron = _get_cron_array();
if ( is_array( $brverify_cron ) ) {
	foreach ( $brverify_cron as $brverify_events ) {
		foreach ( is_array( $brverify_events ) ? array_keys( $brverify_events ) : array() as $brverify_hook ) {
			if ( 0 === strpos( (string) $brverify_hook, 'brverify_' ) || 0 === strpos( (string) $brverify_hook, 'restoreproof_' ) ) {
				wp_clear_scheduled_hook( (string) $brverify_hook );
			}
		}
	}
}

// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
$brverify_transients = $wpdb->get_col(
	$wpdb->prepare(
		"SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE %s OR option_name LIKE %s",
		$wpdb->esc_like( '_transient_brverify_' ) . '%',
		$wpdb->esc_like( '_transient_restoreproof_' ) . '%'
	)
);
foreach ( is_array( $brverify_transients ) ? $brverify_transients : array() as $brverify_name ) {
	delete_transient( substr( (string) $brverify_name, strlen( '_transient_' ) ) );
}
if ( is_multisite() ) {
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
	$brverify_site_transients = $wpdb->get_col(
		$wpdb->prepare(
			"SELECT meta_key FROM {$wpdb->sitemeta} WHERE meta_key LIKE %s",
			$wpdb->esc_like( '_site_transient_brverify_' ) . '%'
		)
	);
	foreach ( is_array( $brverify_site_transients ) ? $brverify_site_transients : array() as $brverify_name ) {
		delete_site_transient( substr( (string) $brverify_name, strlen( '_site_transient_' ) ) );
	}
}

// Candidate working directories, found with WordPress functions (no plugin classes are loaded here):
// uploads/brverify-working (0.6.5+) and, for older installs, the folder next to the plugins directory.
$brverify_upload   = wp_upload_dir( null, false );
$brverify_content  = dirname( untrailingslashit( dirname( untrailingslashit( plugin_dir_path( __FILE__ ) ) ) ) );
$brverify_parents  = array();
if ( ! empty( $brverify_upload['basedir'] ) ) {
	$brverify_parents[] = (string) $brverify_upload['basedir'];
}
$brverify_parents[] = $brverify_content;

/**
 * Resolve <parent>/<name> only when it really is that directory (no symlink escapes).
 *
 * @param string $parent Parent directory.
 * @param string $name   Relative name.
 * @return string Normalised path or '' when it does not exist or fails the check.
 */
if ( ! function_exists( 'brverify_uninstall_jail' ) ) {
	function brverify_uninstall_jail( string $parent, string $name ): string {
		$root = realpath( $parent );
		$real = realpath( trailingslashit( $parent ) . $name );
		if ( false === $root || false === $real ) {
			return '';
		}
		$root_n = rtrim( str_replace( '\\', '/', $root ), '/' );
		$real_n = rtrim( str_replace( '\\', '/', $real ), '/' );
		return $real_n === $root_n . '/' . $name ? $real_n : '';
	}
}

// Migration scratch (prepared dumps, exported packages, incoming uploads) is always removed.
foreach ( $brverify_parents as $brverify_parent ) {
	$brverify_scratch = brverify_uninstall_jail( $brverify_parent, 'brverify-working/migrate' );
	if ( '' !== $brverify_scratch ) {
		brverify_uninstall_rrmdir( $brverify_scratch );
	}
}

if ( ! $brverify_wipe ) {
	return;
}

// 2. Opt-in full wipe: options (+ any pre-release leftovers), user meta, capability, tables.
// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
$brverify_options = $wpdb->get_col(
	$wpdb->prepare(
		"SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE %s OR option_name LIKE %s",
		$wpdb->esc_like( 'brverify_' ) . '%',
		$wpdb->esc_like( 'restoreproof_' ) . '%'
	)
);
foreach ( is_array( $brverify_options ) ? $brverify_options : array() as $brverify_name ) {
	delete_option( (string) $brverify_name );
	delete_site_option( (string) $brverify_name );
}
delete_metadata( 'user', 0, 'brverify_note_dismissed', '', true );
delete_metadata( 'user', 0, 'brverify_pro_dismissed', '', true );

$brverify_role = get_role( 'administrator' );
if ( $brverify_role ) {
	$brverify_role->remove_cap( 'manage_brverify' );
	$brverify_role->remove_cap( 'manage_restoreproof' );
}

foreach ( array( 'brverify_jobs', 'brverify_logs', 'brverify_artifacts', 'restoreproof_jobs', 'restoreproof_logs', 'restoreproof_artifacts' ) as $brverify_table ) {
	$brverify_full = $wpdb->prefix . $brverify_table;
	// phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.DirectDatabaseQuery.SchemaChange, WordPress.DB.PreparedSQL.InterpolatedNotPrepared
	$wpdb->query( "DROP TABLE IF EXISTS `{$brverify_full}`" );
}

// 3. Working directory (backup zips + job scratch). Path-jailed to the uploads / content directory.
foreach ( $brverify_parents as $brverify_parent ) {
	foreach ( array( 'brverify-working', 'restoreproof-working' ) as $brverify_dirname ) {
		$brverify_real_n = brverify_uninstall_jail( $brverify_parent, $brverify_dirname );
		if ( '' !== $brverify_real_n ) {
			brverify_uninstall_rrmdir( $brverify_real_n );
		}
	}
}