<?php

/**
 * Plugin Name: Admin Login Hide - PTI
 * Plugin URI: https://github.com/ptiwebtech/admin-login-hide-pti
 * Description: Hide or change the default WordPress login URL to enhance login security.
 * Requires at least: 5.0
 * Requires PHP: 7.2
 * Version: 1.0.5
 * Author: ptiwebtech2025
 * Author URI: https://www.ptiwebtech.com/
 * License: GPL-2.0+
 * License URI: https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain: admin-login-hide-pti
 */


if (!defined('ABSPATH')) exit;

// Admin
require_once plugin_dir_path(__FILE__) . 'includes/class-adlhpti-admin.php';

// Handle empty username or password or email login
add_filter('authenticate', 'adlhpti_custom_auth_redirect', 30, 3);
function adlhpti_custom_auth_redirect($user, $username, $password)
{
    $is_enabled = get_option('adlhpti_enabled', false);
    if (! $is_enabled) {
        return $user;
    }

    // If user is already authenticated by an earlier filter, return immediately
    if ($user instanceof WP_User) {
        return $user;
    }

    if (empty($username) || empty($password)) {
        $slug = trim(get_option('adlhpti_custom_login_slug', 'secure-login'), '/');

        $redirect_url = add_query_arg(
            [
                'login'          => 'failed',
                'reason'         => 'empty',
                '_adlhpti_nonce' => wp_create_nonce('adlhpti_login_notice'),
            ],
            home_url('/' . $slug . '/')
        );

        wp_safe_redirect($redirect_url);
        exit;
    }

    // Check for invalid username / email (both username and email are allowed in WordPress)
    if (! username_exists($username) && ! email_exists($username)) {
        $slug = trim(get_option('adlhpti_custom_login_slug', 'secure-login'), '/');

        $redirect_url = add_query_arg(
            [
                'login'          => 'failed',
                'reason'         => 'invalid_username',
                '_adlhpti_nonce' => wp_create_nonce('adlhpti_login_notice'),
            ],
            home_url('/' . $slug . '/')
        );

        wp_safe_redirect($redirect_url);
        exit;
    }

    return $user;
}

// Handle incorrect password
add_action('wp_login_failed', 'adlhpti_redirect_on_login_failed');
function adlhpti_redirect_on_login_failed($username)
{
    $is_enabled = get_option('adlhpti_enabled', false);
    if (! $is_enabled) {
        return;
    }

    $slug = trim(get_option('adlhpti_custom_login_slug', 'secure-login'), '/');

    $redirect_url = add_query_arg(
        [
            'login'      => 'failed',
            'reason'     => 'wp_login_failed',
            '_adlhpti_nonce' => wp_create_nonce('adlhpti_login_notice'),
        ],
        home_url('/' . $slug . '/')
    );

    wp_safe_redirect($redirect_url);
    exit;
}