<?php
/*
Plugin Name: AboutBuzz Stories Embed
Plugin URI:  https://aboutbuzz.com
Description: Embed AboutBuzz video stories using [aboutbuzz_smart_stories brand_id="123,456"] shortcode. Requires activation with a secret code.
Version:     1.7.7
Author:      ftpwebdesign.com
Author URI:  https://ftpwebdesign.com
License:     GPLv2 or later
Requires PHP: 7.4
*/

// Prevent direct access
if (!defined('ABSPATH')) {
    exit;
}

// === Enqueue Styles and Scripts ===
function aboutbuzz_enqueue_assets() {
    // Enqueue CSS
    wp_enqueue_style(
        'aboutbuzz-stories-style', 
        plugin_dir_url(__FILE__) . 'assets/css/aboutbuzz-stories.css',
        array(),
        '1.7.7'
    );
    
    // Enqueue JavaScript
    wp_enqueue_script(
        'aboutbuzz-stories-script', 
        plugin_dir_url(__FILE__) . 'assets/js/aboutbuzz-stories.js',
        array(),
        '1.7.7',
        true
    );
    
    // Pass secret code to JavaScript securely
    wp_add_inline_script(
        'aboutbuzz-stories-script',
        'window.aboutbuzzSecretCode = ' . wp_json_encode(get_option('aboutbuzz_secret_code', '')) . ';',
        'before'
    );
}
add_action('wp_enqueue_scripts', 'aboutbuzz_enqueue_assets');

// === Activation Check ===
function aboutbuzz_is_activated() {
    $saved_code = get_option('aboutbuzz_secret_code');
    if (!$saved_code) return false;

    // Check cache first to avoid excessive API calls
    $cache_key = 'aboutbuzz_validation_' . md5($saved_code);
    $cached_result = get_transient($cache_key);
    if ($cached_result !== false) {
        return $cached_result === 'valid';
    }

    // Add rate limiting check
    $rate_limit_key = 'aboutbuzz_rate_limit_' . aboutbuzz_get_user_identifier();
    $rate_limit_count = get_transient($rate_limit_key);
    if ($rate_limit_count && $rate_limit_count >= 10) {
        return false;
    }

    // Validate with API
    $response = wp_remote_post('https://aboutbuzz.com/wp-json/aboutbuzz/v1/validate-code/', [
        'timeout' => 8,
        'headers' => [
            'Content-Type' => 'application/json',
            'User-Agent' => 'AboutBuzz-WordPress-Plugin/1.7.5',
            'Accept' => 'application/json',
            'Cache-Control' => 'no-cache'
        ],
        'body'    =>wp_json_encode([
            'code' => sanitize_text_field($saved_code),
            'site_url' => home_url(),
            'plugin_version' => '1.7.5'
        ]),
        'sslverify' => true,
        'redirection' => 0, // Prevent redirects
        'httpversion' => '1.1'
    ]);
    
    // Update rate limiting counter
    $new_count = $rate_limit_count ? $rate_limit_count + 1 : 1;
    set_transient($rate_limit_key, $new_count, 3600); // 1 hour window
    
    if (is_wp_error($response)) {
        // Cache negative result for shorter time
        set_transient($cache_key, 'invalid', 300); // 5 minutes
        return false;
    }

    $response_code = wp_remote_retrieve_response_code($response);
    $response_body = wp_remote_retrieve_body($response);
    
    // Enhanced response validation
    if ($response_code !== 200) {
        set_transient($cache_key, 'invalid', 300);
        return false;
    }

    // Validate JSON response
    $data = json_decode($response_body, true);
    if (json_last_error() !== JSON_ERROR_NONE) {
        set_transient($cache_key, 'invalid', 300);
        return false;
    }

    $valid = !empty($data['success']);

    // Cache result with different times
    $cache_value = $valid ? 'valid' : 'invalid';
    $cache_time = $valid ? 3600 : 300; // 1 hour for valid, 5 minutes for invalid
    set_transient($cache_key, $cache_value, $cache_time);

    return $valid;
}

// === Admin Menu ===
function aboutbuzz_activation_menu() {
    add_options_page(
        'AboutBuzz Activation',
        'AboutBuzz Activation',
        'manage_options',
        'aboutbuzz-activation',
        'aboutbuzz_activation_page'
    );
}
add_action('admin_menu', 'aboutbuzz_activation_menu');

function aboutbuzz_activation_page() {
    if (!current_user_can('manage_options')) {
        wp_die('Unauthorized user');
    }

    if (isset($_POST['aboutbuzz_secret_code']) && isset($_POST['aboutbuzz_nonce']) && wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['aboutbuzz_nonce'])), 'aboutbuzz_save_code')) {
        $code = sanitize_text_field(wp_unslash($_POST['aboutbuzz_secret_code']));
        if (strlen($code) > 0 && strlen($code) <= 255) {
            update_option('aboutbuzz_secret_code', $code);
            echo '<div class="updated"><p>' . esc_html__('Secret code saved.', 'aboutbuzz-stories-embed') . '</p></div>';        
        } else {
            echo '<div class="error"><p>' . esc_html__('Invalid secret code length.', 'aboutbuzz-stories-embed') . '</p></div>';
        }
    }

    $current_code = get_option('aboutbuzz_secret_code', '');
    ?>
    <div class="wrap">
        <h1>AboutBuzz Activation</h1>
        <form method="post">
            <?php wp_nonce_field('aboutbuzz_save_code', 'aboutbuzz_nonce'); ?>
            <label for="aboutbuzz_secret_code">Enter Secret Code:</label><br>
            <input type="text" id="aboutbuzz_secret_code" name="aboutbuzz_secret_code" value="<?php echo esc_attr($current_code); ?>" style="width:300px;" maxlength="255" required />
            <?php submit_button('Save Secret Code'); ?>
        </form>
    </div>
    <?php
}

// Add this function before the shortcode
function aboutbuzz_get_fallback_image() {
    // Return a data URI for a simple gray placeholder
    return 'data:image/svg+xml;base64,' . base64_encode(
        '<svg width="300" height="533" xmlns="http://www.w3.org/2000/svg"><rect width="100%" height="100%" fill="#f0f0f0"/><text x="50%" y="50%" text-anchor="middle" dy=".3em" font-family="Arial, sans-serif" font-size="16" fill="#999">Loading...</text></svg>'
    );
}

function aboutbuzz_is_mobile() {
    return wp_is_mobile() || (isset($_SERVER['HTTP_USER_AGENT']) && preg_match('/Mobile|Android|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i', sanitize_text_field(wp_unslash($_SERVER['HTTP_USER_AGENT']))));
}

// Helper function to get user identifier for both logged-in and anonymous users
function aboutbuzz_get_user_identifier() {
    $user_id = get_current_user_id();
    if ($user_id) {
        return 'user_' . $user_id;
    }
    
    // For anonymous users, use IP address as identifier
    $ip = isset($_SERVER['REMOTE_ADDR']) ? sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR'])) : 'unknown';
    
    // Hash the IP for privacy
    return 'anon_' . md5($ip . NONCE_SALT);
}

// Add this function after aboutbuzz_is_mobile()
function aboutbuzz_get_detailed_error($response_code, $response_body) {
    switch ($response_code) {
        case 401:
            return 'Invalid secret code. Please check your activation settings.';
        case 403:
            return 'Access forbidden. Your secret code may be expired.';
        case 404:
            return 'Brand ID not found. Please check your brand ID.';
        case 429:
            return 'Too many requests. Please wait a moment and try again.';
        case 500:
            return 'Server error. Please try again later.';
        default:
            $data = json_decode($response_body, true);
            if (isset($data['message'])) {
                return 'API Error: ' . $data['message'];
            }
            return 'Unknown API error (Code: ' . $response_code . ')';
    }
}

// === Enhanced Shortcode with Security Improvements ===
function aboutbuzz_smart_brand_stories_shortcode($atts) {
    // Public shortcode - no authentication required for viewing stories
    
    if (!aboutbuzz_is_activated()) {
        return '<div class="aboutbutzz_error" style="color:red; font-weight:bold;">Plugin not activated. Please enter a valid secret code in the AboutBuzz Activation settings.</div>';
    }

    $atts = shortcode_atts(['brand_id' => ''], $atts);
    if (empty($atts['brand_id'])) {
        return '<div class="aboutbutzz_error">Brand ID is required.</div>';
    }

    // Enhanced brand_id validation with security checks
    $brand_id_input = sanitize_text_field($atts['brand_id']);
    if (strlen($brand_id_input) > 100) { // Prevent extremely long inputs
        return '<div class="aboutbutzz_error">Brand ID too long.</div>';
    }

    $brand_ids_array = array_filter(
        array_map('intval', explode(',', $brand_id_input)), 
        function($id) { return $id > 0 && $id <= 999999; }
    );
    
    // Limit to max 10 brand IDs
    if (count($brand_ids_array) > 10) {
        return '<div class="aboutbutzz_error">Too many brand IDs. Maximum 10 allowed.</div>';
    }
    
    if (empty($brand_ids_array)) {
        return '<div class="aboutbutzz_error">Invalid brand ID(s).</div>';
    }
    $brand_ids = implode(',', $brand_ids_array);

    $secret_code = get_option('aboutbuzz_secret_code');
    
    // Ensure secret code exists before making API call
    if (empty($secret_code)) {
        return '<div class="aboutbutzz_error">Plugin not properly configured.</div>';
    }
    
    // Build URL with brand_id in the path
    $url = "https://aboutbuzz.com/wp-json/aboutbuzz/v1/stories/brand/" . $brand_ids;
    
    // Enhanced caching with user-specific cache
    $cache_key = 'aboutbuzz_stories_' . md5($brand_ids . $secret_code . aboutbuzz_get_user_identifier());
    $cached_stories = get_transient($cache_key);
    
    if ($cached_stories !== false) {
        $data = $cached_stories;
    } else {
        // Add rate limiting for API calls
        $api_rate_limit_key = 'aboutbuzz_api_rate_' . aboutbuzz_get_user_identifier();
        $api_rate_count = get_transient($api_rate_limit_key);
        if ($api_rate_count && $api_rate_count >= 20) {
            return '<div class="aboutbutzz_error">Too many requests. Please wait a moment.</div>';
        }

        $response = wp_remote_post($url, [
            'timeout' => 10, // Increased timeout for better reliability
            'headers' => [
                'Content-Type' => 'application/json',
                'User-Agent' => 'AboutBuzz-WordPress-Plugin/1.7.5',
                'Accept' => 'application/json',
                'Cache-Control' => 'max-age=300',
                'Referer' => home_url()
            ],
            'body' => wp_json_encode([
                'code' => sanitize_text_field($secret_code)
            ]),
            'sslverify' => true,
            'redirection' => 0, // Prevent redirects
            'httpversion' => '1.1'
        ]);
        
        // Update API rate limiting
        $new_api_count = $api_rate_count ? $api_rate_count + 1 : 1;
        set_transient($api_rate_limit_key, $new_api_count, 3600); // 1 hour window
        
        if (is_wp_error($response)) {
            return '<div class="aboutbutzz_error">Error fetching stories. Please try again later.</div>';
        }

        $response_code = wp_remote_retrieve_response_code($response);
        $response_body = wp_remote_retrieve_body($response);
        
        // Enhanced response validation
        if ($response_code !== 200) {
            $error_message = aboutbuzz_get_detailed_error($response_code, $response_body);
            return '<div class="aboutbutzz_error">' . esc_html($error_message) . '</div>';
        }

        // Validate response size (prevent memory issues)
        if (strlen($response_body) > 5000000) { // 5MB limit
            return '<div class="aboutbutzz_error">Response too large. Please contact support.</div>';
        }

        $data = json_decode($response_body, true);
        
        // Validate JSON and structure
        if (json_last_error() !== JSON_ERROR_NONE) {
            return '<div class="aboutbutzz_error">Invalid response format.</div>';
        }
        
        // Cache successful responses for 5 minutes
        if (!empty($data['success'])) {
            set_transient($cache_key, $data, 300);
        }
    }
    
    if (empty($data['success']) || empty($data['posts'])) {
        return '<div class="aboutbutzz_no_stories">Ni video ocen</div>';
    }

    // Sanitize and validate posts data
    $posts = array_slice($data['posts'], 0, 50); // Limit to 50 posts max
    $sanitized_posts = [];
    
    foreach ($posts as $post) {
        if (!is_array($post) || empty($post['ID'])) {
            continue; // Skip invalid posts
        }
        
        // Check if the post is approved - look in both meta and acf for approval
        $is_approved = false;
        
        // Check in meta field first (new structure)
        if (isset($post['meta']) && is_array($post['meta'])) {
            $approval_meta = $post['meta']['approval'] ?? null;
            if (is_array($approval_meta)) {
                $is_approved = in_array('1', $approval_meta) || in_array(1, $approval_meta) || in_array(true, $approval_meta);
            } else {
                $is_approved = $approval_meta == '1' || $approval_meta == 1 || $approval_meta === true;
            }
        }
        
        // Fallback to acf field (old structure)
        if (!$is_approved && isset($post['acf']) && is_array($post['acf'])) {
            $approval_acf = $post['acf']['approval'] ?? null;
            $is_approved = $approval_acf == '1' || $approval_acf == 1 || $approval_acf === true;
        }
        
        // Skip non-approved posts
        if (!$is_approved) {
            continue;
        }
        
        $sanitized_post = [
            'ID' => intval($post['ID']),
            'post_title' => sanitize_text_field($post['post_title'] ?? $post['title'] ?? ''),
            'acf' => [],
            'meta' => []
        ];
        
        // Handle meta fields (new structure)
        if (isset($post['meta']) && is_array($post['meta'])) {
            $meta = $post['meta'];
            $sanitized_post['meta'] = [
                'story' => isset($meta['story'][0]) ? esc_url_raw($meta['story'][0]) : '',
                'rating' => isset($meta['rating'][0]) ? max(0, min(5, intval($meta['rating'][0]))) : 0,
                'vote_count' => isset($meta['vote_count'][0]) ? max(0, intval($meta['vote_count'][0])) : 0,
                'watermark_video' => isset($meta['watermark_video'][0]) ? esc_url_raw($meta['watermark_video'][0]) : ''
            ];
        }
        
        // Handle ACF fields (old structure) - fallback
        if (isset($post['acf']) && is_array($post['acf'])) {
            $acf = $post['acf'];
            $sanitized_post['acf'] = [
                'watermark_video' => isset($acf['watermark_video']) ? esc_url_raw($acf['watermark_video']) : '',
                'story' => isset($acf['story']) ? esc_url_raw($acf['story']) : '',
                'rating' => isset($acf['rating']) ? max(0, min(5, intval($acf['rating']))) : 0,
                'vote_count' => isset($acf['vote_count']) ? max(0, intval($acf['vote_count'])) : 0
            ];
        }
        
        $sanitized_posts[] = $sanitized_post;
    }

    // Calculate average rating from sanitized data
    $total_rating = 0;
    $rating_count = 0;
    foreach ($sanitized_posts as $post) {
        // Try meta first, then fallback to acf
        $rating = $post['meta']['rating'] ?? $post['acf']['rating'] ?? 0;
        if ($rating > 0) {
            $total_rating += $rating;
            $rating_count++;
        }
    }
    $average_rating = $rating_count > 0 ? round($total_rating / $rating_count, 2) : 0;

    // Generate unique nonce for this widget instance
    $widget_nonce = wp_create_nonce('aboutbuzz_widget_' . md5($brand_ids));

    ob_start();
    ?>
    <div class="aboutbutzz_stories_container" data-nonce="<?php echo esc_attr($widget_nonce); ?>">
        <button class="aboutbutzz_carousel_arrow aboutbutzz_carousel_left" aria-label="Levo">&#8592;</button>
        <button class="aboutbutzz_carousel_arrow aboutbutzz_carousel_right" aria-label="Desno">&#8594;</button>
        <div class="aboutbutzz_videos_grid">
        <?php foreach ($sanitized_posts as $post): 
            // Merge meta and acf data with meta taking priority
            $video_data = array_merge($post['acf'], $post['meta']);
            
            $video_url = '';
            $screenshot = '';
            $post_id = $post['ID'];

            // Process video URL with enhanced security - check both watermark_video and story
            if (!empty($video_data['watermark_video'])) {
                $video_url = $video_data['watermark_video'];
                
                // Validate video URL
                if (!filter_var($video_url, FILTER_VALIDATE_URL) || 
                    !preg_match('/^https:\/\/aboutbuzz\.com\//', $video_url)) {
                    continue; // Skip invalid URLs
                }
                
                // Generate screenshot from watermarked video
                if (strpos($video_url, 'watermarked-') !== false) {
                    $screenshot = str_replace(
                        ['watermarked-', '.mp4'],
                        ['screenshot-', '.jpg'],
                        $video_url
                    );
                } else {
                    $video_url = ''; // Reset to trigger story field fallback
                }
            } 
            
            // Fallback to story field
            if (empty($video_url) && !empty($video_data['story'])) {
                $video_url = $video_data['story'];
                
                // Validate story URL
                if (!filter_var($video_url, FILTER_VALIDATE_URL) || 
                    !preg_match('/^https:\/\/aboutbuzz\.com\//', $video_url)) {
                    continue; // Skip invalid URLs
                }
                
                // Generate screenshot using post ID
                if ($post_id) {
                    $directory = dirname($video_url);
                    $screenshot = $directory . '/screenshot-' . $post_id . '.jpg';
                }
            }

            if (empty($video_url)) {
                continue;
            }

            // Add fallback for missing screenshots
            if (empty($screenshot) || !filter_var($screenshot, FILTER_VALIDATE_URL)) {
                $screenshot = aboutbuzz_get_fallback_image();
            }

            $vote_count = $video_data['vote_count'] ?? 0;
            $rating = $video_data['rating'] ?? 0;
            
            // Check if mobile device for optimization
            $is_mobile = aboutbuzz_is_mobile();
        ?>
            <div class="aboutbutzz_video_item" 
                 data-is-mobile="<?php echo esc_attr($is_mobile ? 'true' : 'false'); ?>"
                 data-post-id="<?php echo esc_attr($post_id); ?>">
                <div class="aboutbutzz_video_wrapper">
                    <?php if ($is_mobile): ?>
                        <div class="aboutbutzz_mobile_placeholder" 
                             data-video-src="<?php echo esc_url($video_url); ?>"
                             data-screenshot="<?php echo esc_url($screenshot); ?>"
                             style="background-image: url('<?php echo esc_url($screenshot); ?>'); background-size: cover; background-position: center; background-repeat: no-repeat;"
                             role="button"
                             tabindex="0"
                             aria-label="<?php echo esc_attr('Predvajaj video oceno za ' . $post['post_title']); ?>">
                            <div class="aboutbutzz_play">
                                <svg viewBox="-3 0 28 28" version="1.1" xmlns="http://www.w3.org/2000/svg" fill="#ffffff" stroke="#ffffff" width="48" height="48">
                                    <g id="SVGRepo_iconCarrier">
                                        <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
                                            <g id="Icon-Set" transform="translate(-417.000000, -569.000000)" fill="#ffffff">
                                                <path d="M418.983,594.247 L418.983,571.722 L436.831,582.984 L418.983,594.247 L418.983,594.247 Z M438.204,581.536 L419.394,569.279 C418.278,568.672 417,568.943 417,570.917 L417,595.052 C417,597.012 418.371,597.361 419.394,596.689 L438.204,584.433 C439.288,583.665 439.258,582.242 438.204,581.536 L438.204,581.536 Z" id="play"></path>
                                            </g>
                                        </g>
                                    </g>
                                </svg>
                            </div>
                            <div class="aboutbutzz_mobile_loading" style="display: none;">
                                <div class="aboutbutzz_spinner"></div>
                                <span>Nalaganje...</span>
                            </div>
                        </div>
                    <?php else: ?>
                        <div class="aboutbutzz_desktop_placeholder" 
                             data-video-src="<?php echo esc_url($video_url); ?>"
                             data-screenshot="<?php echo esc_url($screenshot); ?>"
                             style="background-image: url('<?php echo esc_url($screenshot); ?>'); background-size: cover; background-position: center; background-repeat: no-repeat;"
                             role="button"
                             tabindex="0"
                             aria-label="<?php echo esc_attr('Predvajaj video oceno za ' . $post['post_title']); ?>">
                            <div class="aboutbutzz_play">
                                <svg viewBox="-3 0 28 28" version="1.1" xmlns="http://www.w3.org/2000/svg" fill="#ffffff" stroke="#ffffff" width="48" height="48">
                                    <g id="SVGRepo_iconCarrier">
                                        <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
                                            <g id="Icon-Set" transform="translate(-417.000000, -569.000000)" fill="#ffffff">
                                                <path d="M418.983,594.247 L418.983,571.722 L436.831,582.984 L418.983,594.247 L418.983,594.247 Z M438.204,581.536 L419.394,569.279 C418.278,568.672 417,568.943 417,570.917 L417,595.052 C417,597.012 418.371,597.361 419.394,596.689 L438.204,584.433 C439.288,583.665 439.258,582.242 438.204,581.536 L438.204,581.536 Z" id="play"></path>
                                            </g>
                                        </g>
                                    </g>
                                </svg>
                            </div>
                            <div class="aboutbutzz_desktop_loading" style="display: none;">
                                <div class="aboutbutzz_spinner"></div>
                                <span>Nalaganje videa...</span>
                            </div>
                        </div>
                    <?php endif; ?>
                </div>
                <div class="aboutbutzz_under_video">
                    <span class="aboutbutzz_verified"><span class="aboutbutzz_check">&#10003;</span> Preverjeno</span>
                    <span class="aboutbutzz_rating_display">★ <?php echo esc_html($rating); ?>/5</span>
                    <span class="aboutbutzz_useful">
                        <button class="aboutbutzz_like_btn" 
                                data-postid="<?php echo esc_attr($post_id); ?>" 
                                data-nonce="<?php echo esc_attr($widget_nonce); ?>"
                                style="background:none;border:none;padding:0;cursor:pointer;font-size:inherit;line-height:1;">
                            <span class="aboutbutzz_heart" aria-label="Like" role="button">❤️</span>
                        </button>
                        <span class="aboutbutzz_vote_count" data-postid="<?php echo esc_attr($post_id); ?>">
                            <?php echo esc_html($vote_count); ?>
                        </span> uporabno
                    </span>
                </div>
            </div>
        <?php endforeach; ?>
        </div>
        <div class="aboutbutzz_footer_inline">
            <span class="aboutbutzz_caption_inline">
                Skupna ocena: <?php echo esc_html($average_rating); ?>/5 - iskrena mnenja resničnih ljudi!
            </span>
            <a href="https://aboutbuzz.com" target="_blank" rel="noopener noreferrer" class="aboutbutzz_link_inline">
                <?php 
                $logo_path = plugin_dir_path(__FILE__) . 'assets/aboutbuzz-logo.png';
                $logo_url = plugin_dir_url(__FILE__) . 'assets/aboutbuzz-logo.png';
                if (file_exists($logo_path)): ?>
                    <span class="aboutbutzz_logo_inline" 
                          style="background-image: url('<?php echo esc_url($logo_url); ?>'); background-size: contain; background-repeat: no-repeat; background-position: center;"
                          aria-label="AboutBuzz - platforma za iskren pregled mnenj in ocen"
                          role="img"></span>
                <?php else: ?>
                    <span class="aboutbutzz_logo_text">AboutBuzz</span>
                <?php endif; ?>
            </a>
        </div>
    </div>

    <?php
    return ob_get_clean();
}
add_shortcode('aboutbuzz_smart_stories', 'aboutbuzz_smart_brand_stories_shortcode');

// === AJAX Handler for Like Functionality ===
function aboutbuzz_like_post() {
    // Verify nonce
    if (!isset($_POST['nonce']) || !isset($_POST['post_id'])) {
    wp_die('Invalid request', 'Error', array('response' => 400));
}
    
    $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));
    $post_id = intval(wp_unslash($_POST['post_id']));
    
    // Verify nonce format
    if (!wp_verify_nonce($nonce, 'aboutbuzz_widget_' . md5(strval($post_id)))) {
        wp_die('Security check failed');
    }
    
    // Get user identifier
    $user_id = aboutbuzz_get_user_identifier();
    
    // Check if user already liked this post
    $like_key = 'aboutbuzz_liked_' . $post_id . '_' . $user_id;
    if (get_transient($like_key)) {
        wp_send_json_error(['message' => 'Already liked']);
        return;
    }
    
    // Rate limiting
    $rate_limit_key = 'aboutbuzz_like_rate_' . $user_id;
    $rate_count = get_transient($rate_limit_key);
    if ($rate_count && $rate_count >= 5) {
        wp_send_json_error(['message' => 'Too many likes']);
        return;
    }
    
    // Update rate limiting
    $new_rate_count = $rate_count ? $rate_count + 1 : 1;
    set_transient($rate_limit_key, $new_rate_count, 3600); // 1 hour
    
    // Call API to increment like count
    $secret_code = get_option('aboutbuzz_secret_code');
    if (!$secret_code) {
        wp_send_json_error(['message' => 'Plugin not configured']);
        return;
    }
    
    $response = wp_remote_post('https://aboutbuzz.com/wp-json/aboutbuzz/v1/like-post/', [
        'timeout' => 8,
        'headers' => [
            'Content-Type' => 'application/json',
            'User-Agent' => 'AboutBuzz-WordPress-Plugin/1.7.6'
        ],
        'body' => wp_json_encode([
            'code' => sanitize_text_field($secret_code),
            'post_id' => $post_id
        ])
    ]);
    
    if (is_wp_error($response)) {
        wp_send_json_error(['message' => 'API error']);
        return;
    }
    
    $response_code = wp_remote_retrieve_response_code($response);
    $response_body = wp_remote_retrieve_body($response);
    
    if ($response_code !== 200) {
        wp_send_json_error(['message' => 'API error']);
        return;
    }
    
    $data = json_decode($response_body, true);
    if (!$data || !isset($data['success']) || !$data['success']) {
        wp_send_json_error(['message' => 'API error']);
        return;
    }
    
    // Mark as liked
    set_transient($like_key, true, 86400); // 24 hours
    
    wp_send_json_success([
        'vote_count' => intval($data['vote_count'] ?? 0)
    ]);
}
add_action('wp_ajax_aboutbuzz_like_post', 'aboutbuzz_like_post');
add_action('wp_ajax_nopriv_aboutbuzz_like_post', 'aboutbuzz_like_post');

// === Uninstall Hook ===
register_uninstall_hook(__FILE__, 'aboutbuzz_uninstall');

function aboutbuzz_uninstall() {
    try {
        // Remove all plugin options
        delete_option('aboutbuzz_secret_code');
        
        // Clean up all transients using WordPress functions
        $transient_keys = [
            'aboutbuzz_validation_',
            'aboutbuzz_rate_limit_',
            'aboutbuzz_cache_'
        ];
        
        foreach ($transient_keys as $key) {
            // Use WordPress function to clean transients
            wp_cache_delete($key, 'transient');
        }
        
        // Clear caches
        wp_cache_flush();
        
    } catch (Exception $e) {
        // Silent fail for WordPress.org compliance
    }
}

// === Plugin Activation Hook ===
register_activation_hook(__FILE__, 'aboutbuzz_activate');

function aboutbuzz_activate() {
    // Check minimum requirements
    if (version_compare(PHP_VERSION, '7.4', '<')) {
        deactivate_plugins(plugin_basename(__FILE__));
        wp_die('This plugin requires PHP 7.4 or higher.');
    }
    
    // Set default options
    add_option('aboutbuzz_secret_code', '');
    
    // Clear any existing caches
    wp_cache_flush();
}

// === Plugin Deactivation Hook ===
register_deactivation_hook(__FILE__, 'aboutbuzz_deactivate');

function aboutbuzz_deactivate() {
    // Clean up transients using WordPress functions
    $transient_keys = [
        'aboutbuzz_validation_',
        'aboutbuzz_rate_limit_',
        'aboutbuzz_cache_'
    ];
    
    foreach ($transient_keys as $key) {
        wp_cache_delete($key, 'transient');
    }
    
    // Clear caches
    wp_cache_flush();
}