<?php

/**
 * The admin-specific functionality of the plugin.
 *
 * @link       wpchop.com
 * @since      1.0.0
 *
 * @package    Affreviews
 * @subpackage Affreviews/admin
 */

defined( 'ABSPATH' ) || exit;

/**
 * The admin-specific functionality of the plugin.
 *
 * Defines the plugin name, version, and two examples hooks for how to
 * enqueue the admin-specific stylesheet and JavaScript.
 *
 * @package    Affreviews
 * @subpackage Affreviews/admin
 * @author     WPchop <info@wpchop.com>
 */
class Affreviews_Admin {

	/**
	 * Legacy blocks that can be previewed on the settings page.
	 */
	const PREVIEW_BLOCKS = array(
		'affreviews/table',
		'affreviews/table-large',
		'affreviews/grid',
		'affreviews/single',
		'affreviews/single-large',
	);

	/**
	 * Review fields edited in the block editor's "Review details" panel,
	 * mapped to their REST sanitize callback. Keys and stored shapes are the
	 * ones the CMB2 metabox has always saved.
	 */
	const REVIEW_TEXT_META = array(
		'affreviews_rating'                => 'sanitize_text_field',
		'affreviews_bonus'                 => 'wp_kses_post',
		'affreviews_afflink'               => 'sanitize_review_url',
		'affreviews_review_link'           => 'sanitize_review_url',
		'affreviews_logo_background_color' => 'sanitize_meta_color',
		'affreviews_description'           => 'wp_kses_post',
		'affreviews_tag_text'              => 'sanitize_text_field',
		'affreviews_tag_background_color'  => 'sanitize_meta_color',
		'affreviews_terms'                 => 'wp_kses_post',
		// Made unique by Affreviews_Links::dedupe_saved_slug() after the save.
		'affreviews_link_slug'             => 'sanitize_title',
	);

	const REVIEW_LIST_META = array(
		'affreviews_positives',
		'affreviews_negatives',
	);

	const REVIEW_INFO_LIST_META = 'affreviews_group_info_list';

	/**
	 * The ID of this plugin.
	 *
	 * @since    1.0.0
	 * @access   private
	 * @var      string    $plugin_name    The ID of this plugin.
	 */
	private $plugin_name;

	/**
	 * The version of this plugin.
	 *
	 * @since    1.0.0
	 * @access   private
	 * @var      string    $version    The current version of this plugin.
	 */
	private $version;

	/**
	 * Initialize the class and set its properties.
	 *
	 * @since    1.0.0
	 * @param      string    $plugin_name       The name of this plugin.
	 * @param      string    $version    The version of this plugin.
	 */
	public function __construct( $plugin_name, $version ) {

		$this->plugin_name = $plugin_name;
		$this->version     = $version;

	}

	/**
	 * Register the stylesheets for the admin area.
	 *
	 * @since    1.0.0
	 */
	public function enqueue_styles( $hook ) {

		$screen = get_current_screen();

		// Load this stylesheet only to Reviews edit screen
		if ( ( 'post.php' === $hook && 'affreviews_reviews' === $screen->post_type ) || 'toplevel_page_affreviews-settings' === $hook ) {
			// Versioned by file time so a rebuild isn't hidden by the browser cache.
			wp_enqueue_style( $this->plugin_name, plugin_dir_url( __FILE__ ) . 'assets/settings/build/admin.css', array(), filemtime( __DIR__ . '/assets/settings/build/admin.css' ), 'all' );
		}

		if ( 'toplevel_page_affreviews-settings' === $hook ) {
			wp_enqueue_style( 'wp-components' );
			wp_enqueue_style( $this->plugin_name . '-public', AFFREVIEWS_URL . 'public/assets/build/public.css', array(), $this->version, 'all' );

			// Styles of the legacy blocks shown in the Styles preview.
			foreach ( self::PREVIEW_BLOCKS as $block_name ) {
				$block_type = WP_Block_Type_Registry::get_instance()->get_registered( $block_name );
				if ( $block_type ) {
					array_map( 'wp_enqueue_style', $block_type->style_handles );
				}
			}

			affreviews_register_css_vars( $this->plugin_name . '-public' );
		}

	}

	/**
	 * Register the JavaScript for the Settings area.
	 *
	 * @since    1.0.0
	 */
	public function enqueue_scripts( $hook ) {

		if ( 'toplevel_page_affreviews-settings' !== $hook ) {
			return;
		}

		$script_dependencies = array(
			'dependencies' => null,
			'version'      => $this->version,
		);

		if ( file_exists( __DIR__ . '/assets/settings/build/admin.asset.php' ) ) {
			$script_dependencies = require __DIR__ . '/assets/settings/build/admin.asset.php';
		}

		wp_enqueue_script( $this->plugin_name, plugin_dir_url( __FILE__ ) . 'assets/settings/build/admin.js', $script_dependencies['dependencies'], $script_dependencies['version'], true );
		wp_set_script_translations( $this->plugin_name, 'affiliate-reviews' );

		$latest_review = get_posts(
			array(
				'post_type'      => AFFREVIEWS_CPT,
				'post_status'    => 'publish',
				'posts_per_page' => 1,
				'fields'         => 'ids',
			)
		);

		// JSON keeps the numbers typed (wp_localize_script() would cast them to strings).
		$data = array(
			'version'        => $this->version,
			'reviewsCount'   => (int) wp_count_posts( AFFREVIEWS_CPT )->publish,
			'latestReviewId' => $latest_review ? (int) $latest_review[0] : 0,
			'homeUrl'        => home_url( '/' ),
			'plainLinks'     => ! get_option( 'permalink_structure' ),
			'blocks'         => $this->get_guide_blocks(),
			'urls'           => array(
				'newPage'    => admin_url( 'post-new.php?post_type=page' ),
				'newReview'  => admin_url( 'post-new.php?post_type=' . AFFREVIEWS_CPT ),
				'reviews'    => admin_url( 'edit.php?post_type=' . AFFREVIEWS_CPT ),
				'categories' => admin_url( 'edit-tags.php?taxonomy=' . AFFREVIEWS_TAX . '&post_type=' . AFFREVIEWS_CPT ),
				'permalinks' => admin_url( 'options-permalink.php' ),
			),
		);

		wp_add_inline_script( $this->plugin_name, 'var affreviewsSettings = ' . wp_json_encode( $data ) . ';', 'before' );

	}

	/**
	 * The plugin's registered blocks, for the block list on the Guide tab.
	 *
	 * Read from the registry so the list follows block.json.
	 *
	 * @return array[]
	 */
	private function get_guide_blocks() {
		$blocks = array();

		foreach ( WP_Block_Type_Registry::get_instance()->get_all_registered() as $name => $block_type ) {
			if ( 0 !== strpos( $name, 'affreviews/' ) ) {
				continue;
			}

			$blocks[] = array(
				'name'        => $name,
				'title'       => $block_type->title,
				'description' => $block_type->description,
				'deprecated'  => 'affreviews-deprecated' === $block_type->category,
			);
		}

		return $blocks;
	}

	/**
	 * Register the REST route that counts where the legacy blocks are used.
	 *
	 * @return void
	 */
	public function register_guide_routes() {
		register_rest_route(
			'affreviews/v1',
			'/legacy-usage',
			array(
				'methods'             => WP_REST_Server::READABLE,
				'callback'            => array( $this, 'get_legacy_usage' ),
				'permission_callback' => function () {
					return current_user_can( 'manage_options' );
				},
				'args'                => array(
					'refresh' => array(
						'type'    => 'boolean',
						'default' => false,
					),
				),
			)
		);
	}

	/**
	 * Posts that contain each legacy block: a count and the latest few.
	 *
	 * Cached for an hour, since it scans post_content.
	 *
	 * @param WP_REST_Request $request Request.
	 * @return WP_REST_Response
	 */
	public function get_legacy_usage( $request ) {
		$usage = $request['refresh'] ? false : get_transient( 'affreviews_legacy_usage' );

		if ( false === $usage ) {
			global $wpdb;

			$usage = array();
			$shown = 10;

			foreach ( WP_Block_Type_Registry::get_instance()->get_all_registered() as $name => $block_type ) {
				if ( 'affreviews-deprecated' !== $block_type->category ) {
					continue;
				}

				// The trailing space keeps "single" from matching "single-large".
				$like = '%' . $wpdb->esc_like( '<!-- wp:' . $name . ' ' ) . '%';

				// phpcs:ignore WordPress.DB.DirectDatabaseQuery -- One-off scan, cached in a transient.
				$rows = $wpdb->get_results(
					$wpdb->prepare(
						"SELECT ID, post_title, post_type FROM {$wpdb->posts}
						WHERE post_content LIKE %s
						AND post_type NOT IN ( 'revision', 'customize_changeset' )
						AND post_status NOT IN ( 'trash', 'auto-draft', 'inherit' )
						ORDER BY post_modified DESC",
						$like
					)
				);

				$posts = array();
				foreach ( array_slice( $rows, 0, $shown ) as $row ) {
					$type    = get_post_type_object( $row->post_type );
					$posts[] = array(
						'id'    => (int) $row->ID,
						'title' => '' !== $row->post_title ? $row->post_title : __( '(no title)', 'affiliate-reviews' ),
						'type'  => $type ? $type->labels->singular_name : $row->post_type,
						'edit'  => (string) get_edit_post_link( $row->ID, 'raw' ),
					);
				}

				$usage[ $name ] = array(
					'count' => count( $rows ),
					'posts' => $posts,
				);
			}

			set_transient( 'affreviews_legacy_usage', $usage, HOUR_IN_SECONDS );
		}

		return rest_ensure_response( $usage );
	}

	/**
	 * Register the JavaScript for the editor.
	 *
	 * @since    1.0.0
	 */
	public function enqueue_editor_scripts() {

		$script_dependencies = array(
			'dependencies' => null,
			'version'      => null,
		);

		// Admin Editor
		if ( file_exists( __DIR__ . '/assets/editor/build/editor.asset.php' ) ) {
			$script_dependencies = require __DIR__ . '/assets/editor/build/editor.asset.php';
		}
		wp_enqueue_script( $this->plugin_name . '-editor', plugin_dir_url( __FILE__ ) . 'assets/editor/build/editor.js', $script_dependencies['dependencies'], $script_dependencies['version'], true );

	}

		/**
	 * Undocumented function
	 *
	 * @return void
	 */
	public function register_cpt() {

		$settings = get_option( 'affreviews_general_settings' );

		//The Review Custom Post Type
		$labels = array(
			'name'               => _x( 'Reviews', 'post type general name', 'affiliate-reviews' ),
			'add_new'            => _x( 'Add New Review', 'member', 'affiliate-reviews' ),
			'add_new_item'       => __( 'Add New Review', 'affiliate-reviews' ),
			'edit_item'          => __( 'Edit', 'affiliate-reviews' ),
			'new_item'           => __( 'New Review', 'affiliate-reviews' ),
			'view_item'          => __( 'View', 'affiliate-reviews' ),
			'search_items'       => __( 'Search Reviews', 'affiliate-reviews' ),
			'not_found'          => __( 'No Reviews found!', 'affiliate-reviews' ),
			'not_found_in_trash' => __( 'No Reviews in the trash!', 'affiliate-reviews' ),
			'parent_item_colon'  => '',
		);

		$args = array(
			'labels'             => $labels,
			'public'             => false,
			'publicly_queryable' => false,
			'show_ui'            => true,
			'capability_type'    => 'post',
			'show_in_nav_menus'  => false,
			'show_in_menu'       => true,
			'menu_icon'          => self::menu_icon(),
			'hierarchical'       => false,
			// custom-fields exposes the review meta in REST for the block editor panel.
			'supports'           => array( 'title', 'thumbnail', 'custom-fields' ),
			'has_archive'        => false,
			'show_in_rest'       => true,
		);

		if ( isset( $settings['reviews_visibility'] ) && 'visible' === $settings['reviews_visibility'] ) {
			$args['public']             = true;
			$args['publicly_queryable'] = true;
			$args['supports']           = array( 'title', 'thumbnail', 'editor', 'custom-fields' );
		}

		if ( isset( $settings['reviews_slug'] ) && 'visible' === $settings['reviews_visibility'] ) {
			$args['rewrite'] = array( 'slug' => $settings['reviews_slug'] );
		}

		register_post_type( AFFREVIEWS_CPT, $args );

		//also add a taxonomy for prp_reviews
		register_taxonomy(
			AFFREVIEWS_TAX,
			array( AFFREVIEWS_CPT ),
			array(
				'hierarchical'      => true,
				'public'            => false,
				'show_admin_column' => true,
				'show_ui'           => true,
				'query_var'         => true,
				'show_in_nav_menus' => true,
				'show_in_rest'      => true,
				'rewrite'           => array( 'slug' => 'reviews_list' ),
			)
		);
	}

	public function create_thumb_sizes() {
		add_image_size( 'affreviews-product', 400, 999999, false );
		add_image_size( 'affreviews-logo', 200, 999999, false );
	}

	/**
	 * Register custom fields metaboxes
	 *
	 * @return void
	 */
	public function register_metaboxes() {

		$affreviews_fields = new_cmb2_box(
			array(
				'id'               => 'affreviews_review_metabox',
				'title'            => esc_html__( 'Affiliate Fields', 'affiliate-reviews' ),
				'object_types'     => array( AFFREVIEWS_CPT ),
				// Classic screen only; the block editor uses the "Review details" panel.
				'mb_callback_args' => array( '__back_compat_meta_box' => true ),
			)
		);

		$affreviews_fields->add_field(
			array(
				'name'       => esc_html__( 'Rating', 'affiliate-reviews' ),
				'desc'       => esc_html__( 'The rating for this review.', 'affiliate-reviews' ),
				'id'         => 'affreviews_rating',
				'type'       => 'text',
				'attributes' => array(
					'type' => 'number',
					'min'  => '0',
					'max'  => '5',
					'step' => '0.1',
				),
			)
		);

		$affreviews_fields->add_field(
			array(
				'name' => esc_html__( 'Bonus', 'affiliate-reviews' ),
				'desc' => esc_html__( 'The bonus/discount of the review. (You can use <strong> tag to emphasize the price)', 'affiliate-reviews' ),
				'id'   => 'affreviews_bonus',
				'type' => 'textarea_small',
			)
		);

		$affreviews_fields->add_field(
			array(
				'name'            => esc_html__( 'Affiliate link', 'affiliate-reviews' ),
				'desc'            => esc_html__( 'The affiliate link of the review.', 'affiliate-reviews' ),
				'id'              => 'affreviews_afflink',
				'type'            => 'text',
				'sanitization_cb' => array( $this, 'sanitize_review_url' ),
			)
		);

		$cloaking = affreviews_get_link_cloaking_settings();
		if ( $cloaking['enabled'] ) {
			$affreviews_fields->add_field(
				array(
					'name'            => esc_html__( 'Link slug', 'affiliate-reviews' ),
					'desc'            => esc_html(
						sprintf(
							/* translators: %s: example cloaked URL. */
							__( 'Affiliate buttons link to %s, which redirects to the affiliate link. Leave empty to link to the affiliate link directly.', 'affiliate-reviews' ),
							affreviews_get_cloaked_url( 'your-slug' )
						)
					),
					'id'              => 'affreviews_link_slug',
					'type'            => 'text',
					'sanitization_cb' => array( $this, 'sanitize_link_slug_field' ),
				)
			);
		}

		$affreviews_fields->add_field(
			array(
				'name'            => esc_html__( 'Review link', 'affiliate-reviews' ),
				'desc'            => esc_html__( 'The review link of the review when post type visibility is set to hidden.', 'affiliate-reviews' ),
				'id'              => 'affreviews_review_link',
				'type'            => 'text',
				'sanitization_cb' => array( $this, 'sanitize_review_url' ),
			)
		);

		$affreviews_fields->add_field(
			array(
				'name'    => 'Logo background color',
				'id'      => 'affreviews_logo_background_color',
				'type'    => 'colorpicker',
				'default' => '',
				'desc'    => esc_html__(
					'This is used only in "logo" image type defined on plugins settings.',
					'affiliate-reviews'
				),
			),
		);

		//Positives repeatable text field.
		$affreviews_fields->add_field(
			array(
				'name'       => esc_html__( 'Positives', 'affiliate-reviews' ),
				'desc'       => esc_html__( 'The positives of the review.', 'affiliate-reviews' ),
				'id'         => 'affreviews_positives',
				'type'       => 'text',
				'repeatable' => true,
			)
		);

		//Negatives repeatable text field.
		$affreviews_fields->add_field(
			array(
				'name'       => esc_html__( 'Negatives', 'affiliate-reviews' ),
				'desc'       => esc_html__( 'The negatives of the review.', 'affiliate-reviews' ),
				'id'         => 'affreviews_negatives',
				'type'       => 'text',
				'repeatable' => true,
			)
		);

		$affreviews_fields->add_field(
			array(
				'name' => esc_html__( 'Description', 'affiliate-reviews' ),
				'desc' => esc_html__( 'Small description about the review.', 'affiliate-reviews' ),
				'id'   => 'affreviews_description',
				'type' => 'textarea_small',
			)
		);

		$affreviews_fields->add_field(
			array(
				'name' => esc_html__( 'Tag text', 'affiliate-reviews' ),
				'desc' => esc_html__( 'The tag is displayed over review logo.', 'affiliate-reviews' ),
				'id'   => 'affreviews_tag_text',
				'type' => 'text',
			)
		);

		$affreviews_fields->add_field(
			array(
				'name'    => 'Tag background color',
				'id'      => 'affreviews_tag_background_color',
				'type'    => 'colorpicker',
				'default' => '',
				'desc'    => esc_html__(
					'The background color of the tag.',
					'affiliate-reviews'
				),
			),
		);

		// Info list repeatable group
		$affreviews_fields_info_group = $affreviews_fields->add_field(
			array(
				'id'          => 'affreviews_group_info_list',
				'type'        => 'group',
				'description' => esc_html__( 'Information list', 'affiliate-reviews' ),
				'options'     => array(
					'group_title'   => esc_html__( 'Information list entry {#}', 'affiliate-reviews' ), // {#} gets replaced by row number
					'add_button'    => esc_html__( 'Add Another Entry', 'affiliate-reviews' ),
					'remove_button' => esc_html__( 'Remove Entry', 'affiliate-reviews' ),
					'sortable'      => true,
				),
			)
		);

		$affreviews_fields->add_group_field(
			$affreviews_fields_info_group,
			array(
				'name'            => esc_html__( 'Title', 'affiliate-reviews' ),
				'id'              => 'title',
				'type'            => 'text',
				'row_classes'     => 'cmb2-col-6 cmb2-col-first',
				'sanitization_cb' => array( $this, 'affreviews_sanitize_cmb2_html_text_field' ),
			)
		);

		$affreviews_fields->add_group_field(
			$affreviews_fields_info_group,
			array(
				'name'            => esc_html__( 'Value', 'affiliate-reviews' ),
				'id'              => 'value',
				'type'            => 'text',
				'row_classes'     => 'cmb2-col-6 cmb2-col-last',
				'sanitization_cb' => array( $this, 'affreviews_sanitize_cmb2_html_text_field' ),
			)
		);

		$affreviews_fields->add_field(
			array(
				'name' => esc_html__( 'Terms and conditions', 'affiliate-reviews' ),
				'desc' => esc_html__( 'You can add any terms that are required to be visible along with affiliate link in some countries.', 'affiliate-reviews' ),
				'id'   => 'affreviews_terms',
				'type' => 'textarea',
			)
		);

	}

	/**
	 * Sanitize CMB2 field in order to allow HTML inside
	 *
	 * @return void
	 */
	public function affreviews_sanitize_cmb2_html_text_field( $value, $field_args, $field ) {
		$value = strip_tags( $value, '<p><a><br><br/><strong>' );
		return $value;
	}

	/**
	 * Expose the review fields in REST so the block editor panel can edit them.
	 *
	 * No 'default' is registered on purpose: it would change what
	 * get_post_meta() returns for reviews without the field, and the legacy
	 * templates rely on that being empty.
	 *
	 * @return void
	 */
	public function register_review_meta() {

		foreach ( self::REVIEW_TEXT_META as $meta_key => $sanitize ) {
			register_post_meta(
				AFFREVIEWS_CPT,
				$meta_key,
				array(
					'type'              => 'string',
					'single'            => true,
					'show_in_rest'      => true,
					'sanitize_callback' => array( $this, 'sanitize_review_meta' ),
					'auth_callback'     => array( $this, 'can_edit_review_meta' ),
				)
			);
		}

		foreach ( self::REVIEW_LIST_META as $meta_key ) {
			register_post_meta(
				AFFREVIEWS_CPT,
				$meta_key,
				array(
					'type'              => 'array',
					'single'            => true,
					'show_in_rest'      => array(
						'schema' => array(
							'type'  => 'array',
							'items' => array( 'type' => 'string' ),
						),
					),
					'sanitize_callback' => array( $this, 'sanitize_review_meta' ),
					'auth_callback'     => array( $this, 'can_edit_review_meta' ),
				)
			);
		}

		register_post_meta(
			AFFREVIEWS_CPT,
			self::REVIEW_INFO_LIST_META,
			array(
				'type'              => 'array',
				'single'            => true,
				'show_in_rest'      => array(
					'schema' => array(
						'type'  => 'array',
						'items' => array(
							'type'       => 'object',
							'properties' => array(
								'title' => array( 'type' => 'string' ),
								'value' => array( 'type' => 'string' ),
							),
						),
					),
				),
				'sanitize_callback' => array( $this, 'sanitize_review_meta' ),
				'auth_callback'     => array( $this, 'can_edit_review_meta' ),
			)
		);
	}

	/**
	 * Meta auth callback: anyone who can edit the review can edit its fields.
	 *
	 * @return bool
	 */
	public function can_edit_review_meta( $allowed, $meta_key, $post_id ) {
		return current_user_can( 'edit_post', $post_id );
	}

	/**
	 * Sanitize review fields, the same way CMB2 does.
	 *
	 * Runs on every save, not only REST: the fields can also be written
	 * through the Custom Fields endpoints and XML-RPC. CMB2 values pass
	 * through here after CMB2 sanitized them with the same functions, so they
	 * are stored unchanged.
	 *
	 * @return mixed
	 */
	public function sanitize_review_meta( $value, $meta_key ) {

		if ( isset( self::REVIEW_TEXT_META[ $meta_key ] ) ) {
			$sanitize = self::REVIEW_TEXT_META[ $meta_key ];
			$value    = is_scalar( $value ) ? (string) $value : '';

			return method_exists( $this, $sanitize ) ? $this->$sanitize( $value ) : call_user_func( $sanitize, $value );
		}

		if ( ! is_array( $value ) ) {
			return array();
		}

		if ( in_array( $meta_key, self::REVIEW_LIST_META, true ) ) {
			$items = array_map( 'sanitize_text_field', array_filter( $value, 'is_scalar' ) );
			return array_values( array_filter( $items, 'strlen' ) );
		}

		// Info list: drop rows left completely empty, as CMB2 does.
		$rows = array();
		foreach ( $value as $row ) {
			$title = isset( $row['title'] ) ? $this->affreviews_sanitize_cmb2_html_text_field( (string) $row['title'], null, null ) : '';
			$val   = isset( $row['value'] ) ? $this->affreviews_sanitize_cmb2_html_text_field( (string) $row['value'], null, null ) : '';
			if ( '' !== $title || '' !== $val ) {
				$rows[] = array(
					'title' => $title,
					'value' => $val,
				);
			}
		}

		return $rows;
	}

	/**
	 * CMB2 colorpicker sanitization, limited to what a CSS value may hold:
	 * the color is printed in a style attribute.
	 *
	 * @param string $value Color.
	 * @return string
	 */
	private function sanitize_meta_color( $value ) {
		return ! $value || '#' === $value ? '' : affreviews_sanitize_css_value( esc_attr( $value ) );
	}

	/**
	 * Sanitize the affiliate and review links (CMB2 and REST).
	 *
	 * sanitize_text_field() strips percent-encoded characters, which broke
	 * links such as ?url=https%3A%2F%2F…
	 *
	 * @param string $value Link.
	 * @return string
	 */
	public function sanitize_review_url( $value ) {
		return is_string( $value ) ? esc_url_raw( trim( $value ) ) : '';
	}

	/**
	 * Sanitize the link slug on the classic screen (CMB2), unique per review.
	 *
	 * @param string     $value      Slug.
	 * @param array      $field_args Field arguments.
	 * @param CMB2_Field $field      Field.
	 * @return string
	 */
	public function sanitize_link_slug_field( $value, $field_args, $field ) {
		return Affreviews_Links::unique_slug( is_string( $value ) ? $value : '', $field->object_id );
	}

	/**
	 * Keep the raw affiliate link out of REST responses for users who can't
	 * edit the review. Cloaked links exist to hide it, and the block editor
	 * reads it as a user who can.
	 *
	 * @param WP_REST_Response $response REST response.
	 * @param WP_Post          $post     Review.
	 * @return WP_REST_Response
	 */
	public function hide_rest_affiliate_link( $response, $post ) {
		if ( isset( $response->data['meta']['affreviews_afflink'] ) && ! current_user_can( 'edit_post', $post->ID ) ) {
			unset( $response->data['meta']['affreviews_afflink'] );
		}

		return $response;
	}

	/**
	 * Keep hidden reviews out of the REST API for users who can't edit posts.
	 *
	 * The post type stays in REST for the block editor, but while reviews are
	 * hidden (the default) nobody else has a reason to read them.
	 *
	 * @param WP_REST_Response|WP_Error|mixed $response Response to replace the handler's, if any.
	 * @param array                           $handler  Route handler.
	 * @param WP_REST_Request                 $request  Request.
	 * @return WP_REST_Response|WP_Error|mixed
	 */
	public function restrict_hidden_reviews_rest( $response, $handler, $request ) {
		$route = '/wp/v2/' . AFFREVIEWS_CPT;

		if ( $route !== $request->get_route() && 0 !== strpos( $request->get_route(), $route . '/' ) ) {
			return $response;
		}

		$settings = get_option( 'affreviews_general_settings' );
		if ( ( isset( $settings['reviews_visibility'] ) && 'visible' === $settings['reviews_visibility'] ) || current_user_can( 'edit_posts' ) ) {
			return $response;
		}

		return new WP_Error( 'rest_forbidden', __( 'Sorry, you are not allowed to do that.', 'affiliate-reviews' ), array( 'status' => rest_authorization_required_code() ) );
	}

	/**
	 * Remove review fields that a REST save left empty.
	 *
	 * CMB2 deletes a field instead of storing an empty value, and the legacy
	 * templates rely on that: an empty list stored as a:0:{} would still print
	 * its wrapper markup.
	 *
	 * @param WP_Post         $post    Saved review.
	 * @param WP_REST_Request $request Request.
	 * @return void
	 */
	public function delete_empty_review_meta( $post, $request ) {

		$meta = $request->get_param( 'meta' );
		if ( ! is_array( $meta ) ) {
			return;
		}

		$meta_keys = array_merge( array_keys( self::REVIEW_TEXT_META ), self::REVIEW_LIST_META, array( self::REVIEW_INFO_LIST_META ) );

		foreach ( $meta_keys as $meta_key ) {
			if ( ! array_key_exists( $meta_key, $meta ) ) {
				continue;
			}

			$stored = get_post_meta( $post->ID, $meta_key, true );
			if ( '' === $stored || array() === $stored ) {
				delete_post_meta( $post->ID, $meta_key );
			}
		}
	}

	/**
	 * Keep the core "Custom Fields" box off the review screens.
	 *
	 * The post type supports custom-fields only so the meta shows in REST; the
	 * box would list the review fields a second time.
	 *
	 * @return void
	 */
	public function remove_custom_fields_box() {
		remove_meta_box( 'postcustom', AFFREVIEWS_CPT, 'normal' );
	}

	/**
	 * Load the "Review details" panel on the review block editor.
	 *
	 * @return void
	 */
	public function enqueue_review_details_panel() {

		$screen = get_current_screen();
		if ( ! $screen || AFFREVIEWS_CPT !== $screen->post_type || ! $screen->is_block_editor() ) {
			return;
		}

		$asset_file = __DIR__ . '/assets/review-details/build/review-details.asset.php';
		if ( ! file_exists( $asset_file ) ) {
			return;
		}

		$asset    = require $asset_file;
		$settings = get_option( 'affreviews_general_settings' );
		$handle   = $this->plugin_name . '-review-details';

		wp_enqueue_script( $handle, plugin_dir_url( __FILE__ ) . 'assets/review-details/build/review-details.js', $asset['dependencies'], $asset['version'], true );
		wp_set_script_translations( $handle, 'affiliate-reviews' );

		if ( file_exists( __DIR__ . '/assets/review-details/build/review-details.css' ) ) {
			wp_enqueue_style( $handle, plugin_dir_url( __FILE__ ) . 'assets/review-details/build/review-details.css', array( 'wp-components' ), $asset['version'] );
		}

		$cloaking = affreviews_get_link_cloaking_settings();
		// Cloaked URL around the slug, e.g. "https://example.com/go/" and "/".
		$url_parts = explode( 'affr-slug', affreviews_get_cloaked_url( 'affr-slug' ), 2 );

		$data = array(
			'postType'       => AFFREVIEWS_CPT,
			'reviewsVisible' => isset( $settings['reviews_visibility'] ) && 'visible' === $settings['reviews_visibility'],
			'linkCloaking'   => $cloaking['enabled'] ? array(
				'base'   => $url_parts[0],
				'suffix' => $url_parts[1],
			) : false,
		);

		wp_add_inline_script( $handle, 'var affreviewsReviewDetails = ' . wp_json_encode( $data ) . ';', 'before' );
	}

	/**
	 * Settings page
	 *
	 * @return void
	 */
	public function options_page() {

		add_menu_page(
			__( 'Affiliate Reviews', 'affiliate-reviews' ),
			__( 'Affiliate Reviews', 'affiliate-reviews' ),
			'manage_options', // Settings are saved through /wp/v2/settings, which requires it.
			'affreviews-settings',
			array( $this, 'page_settings' ),
			self::menu_icon(),
			99
		);
	}

	/**
	 * The plugin logo as an admin menu icon.
	 *
	 * One color and fill-only, so WordPress can repaint it to match the admin
	 * color scheme. Keep the paths in sync with LogoGlyph in
	 * blocks/src/helpers/logo.js.
	 *
	 * @return string SVG data URI.
	 */
	public static function menu_icon() {
		$star = 'M0 -50 L12.9 -17.8 L47.6 -15.5 L20.9 6.8 L29.4 40.5 L0 22 L-29.4 40.5 L-20.9 6.8 L-47.6 -15.5 L-12.9 -17.8 Z';
		$svg  = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="128 128 256 256">'
			. '<path fill="black" fill-rule="evenodd" d="M256 138a118 118 0 1 0 0 236a118 118 0 1 0 0-236zm0 56a62 62 0 1 1 0 124a62 62 0 1 1 0-124z"/>'
			. '<rect fill="black" x="318" y="138" width="56" height="236" rx="28"/>'
			. '<path fill="black" transform="translate(256 258) scale(0.86)" d="' . $star . '"/>'
			. '</svg>';

		// phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_encode -- Menu icons take a base64 data URI.
		return 'data:image/svg+xml;base64,' . base64_encode( $svg );
	}

	/**
	 * Plugin's tables builder
	 *
	 * @since 1.0.0
	 */
	public function page_settings() {

		affreviews_get_template( 'admin/page-visual-settings.php', true, true, null );

	}

	/**
	 * Plugin's usage admin page builder
	 *
	 * @since 1.0.0
	 */
	public function page_visual_settings() {

		affreviews_get_template( 'admin/page-visual-settings.php', true, true, null );

	}

	/**
	 * Extend kses CSS filters
	 *
	 * @param [type] $styles
	 * @return void
	 */
	public function kses_extend_css_filters( $styles ) {

		$styles[] = '--affr-logo-background-color';
		return $styles;
	}

	/**
	 * Register option settings
	 *
	 * @since 1.0.0
	 */
	public function register_settings() {

		register_setting(
			'affreviews_settings_group',
			'affreviews_visual_settings',
			array(
				'type'              => 'object',
				'sanitize_callback' => array( $this, 'sanitize_visual_settings' ),
				'default'           => array(
					'button_color'       => '#e02928',
					'button_text_color'  => '#fff',
					'button_radius'      => '5px',
					'button_padding'     => array(
						'top'    => '12px',
						'right'  => '12px',
						'bottom' => '12px',
						'left'   => '12px',
					),
					'button_font_weight' => '700',
					'button_font_size'   => '1.25rem',
					'thumbnail_style'    => 'logo-box',
					'secondary_color'    => '#4dbc24',
					'rating_color'       => '#e02928',
					'link_color'         => '#e02928',
					'box_bg_color'       => '#f9f9f9',
					'text_color'         => '#000000',
				),
				'show_in_rest'      => array(
					'schema' => array(
						'type'       => 'object',
						'properties' => array(
							'button_color'       => array(
								'type' => 'string',
							),
							'button_text_color'  => array(
								'type' => 'string',
							),
							'button_radius'      => array(
								'type' => 'string',
							),
							'button_padding'     => array(
								'type'       => 'object',
								'properties' => array(
									'top'    => array(
										'type' => 'string',
									),
									'right'  => array(
										'type' => 'string',
									),
									'bottom' => array(
										'type' => 'string',
									),
									'left'   => array(
										'type' => 'string',
									),
								),
							),
							'button_font_weight' => array(
								'type' => 'string',
							),
							'button_font_size'   => array(
								'type' => 'string',
							),
							'thumbnail_style'    => array(
								'type' => 'string',
							),
							'secondary_color'    => array(
								'type' => 'string',
							),
							'rating_color'       => array(
								'type' => 'string',
							),
							'link_color'         => array(
								'type' => 'string',
							),
							'box_bg_color'       => array(
								'type' => 'string',
							),
							'text_color'         => array(
								'type' => 'string',
							),
						),
					),
				),
			)
		);

		register_setting(
			'affreviews_settings_group',
			'affreviews_general_settings',
			array(
				'type'              => 'object',
				'sanitize_callback' => array( $this, 'sanitize_general_settings' ),
				'default'           => array(
					'reviews_visibility' => 'hidden',
					'reviews_slug'       => esc_attr__( 'review', 'affiliate-reviews' ),
					'aff_link_rel'       => 'nofollow',
					'aff_link_new_tab'   => true,
					'link_cloaking'      => false,
					'link_prefix'        => 'go',
				),
				'show_in_rest'      => array(
					'schema' => array(
						'type'       => 'object',
						'properties' => array(
							'reviews_visibility' => array(
								'type' => 'string',
							),
							'reviews_slug'       => array(
								'type' => 'string',
							),
							'aff_link_rel'       => array(
								'type' => 'string',
							),
							'aff_link_new_tab'   => array(
								'type' => 'boolean',
							),
							'link_cloaking'      => array(
								'type' => 'boolean',
							),
							'link_prefix'        => array(
								'type' => 'string',
							),
						),
					),
				),
			)
		);

	}

	/**
	 * Sanitize the visual settings. They are printed as CSS variables, so a
	 * value that could end the declaration or the <style> tag is dropped.
	 *
	 * @param mixed $value Visual settings.
	 * @return array
	 */
	public function sanitize_visual_settings( $value ) {
		$value = is_array( $value ) ? $value : array();
		$clean = array();

		foreach ( array( 'button_color', 'button_text_color', 'button_radius', 'button_font_weight', 'button_font_size', 'secondary_color', 'rating_color', 'link_color', 'box_bg_color', 'text_color' ) as $key ) {
			if ( isset( $value[ $key ] ) ) {
				$clean[ $key ] = affreviews_sanitize_css_value( $value[ $key ] );
			}
		}

		if ( isset( $value['button_padding'] ) && is_array( $value['button_padding'] ) ) {
			foreach ( array( 'top', 'right', 'bottom', 'left' ) as $side ) {
				if ( isset( $value['button_padding'][ $side ] ) ) {
					$clean['button_padding'][ $side ] = affreviews_sanitize_css_value( $value['button_padding'][ $side ] );
				}
			}
		}

		if ( isset( $value['thumbnail_style'] ) ) {
			$clean['thumbnail_style'] = sanitize_key( $value['thumbnail_style'] );
		}

		// In the order they came in, so a resave stores the same option.
		return array_intersect_key( array_replace( $value, $clean ), $clean );
	}

	/**
	 * Sanitize the General settings.
	 *
	 * @param mixed $value General settings.
	 * @return array
	 */
	public function sanitize_general_settings( $value ) {
		$value = is_array( $value ) ? $value : array();
		$clean = array();

		if ( isset( $value['reviews_visibility'] ) ) {
			$clean['reviews_visibility'] = 'visible' === $value['reviews_visibility'] ? 'visible' : 'hidden';
		}

		if ( isset( $value['reviews_slug'] ) ) {
			// Characters a URL path segment may hold. Not sanitize_title(), which
			// would change translated slugs (accents) and so the review URLs.
			$clean['reviews_slug'] = trim( (string) preg_replace( '#[^\p{L}\p{N}_/-]#u', '', (string) $value['reviews_slug'] ), '/' );
		}

		if ( isset( $value['aff_link_rel'] ) ) {
			$tokens                = preg_split( '/\s+/', strtolower( (string) $value['aff_link_rel'] ), -1, PREG_SPLIT_NO_EMPTY );
			$clean['aff_link_rel'] = implode( ' ', array_intersect( $tokens, array( 'sponsored', 'nofollow', 'noopener' ) ) );
		}

		foreach ( array( 'aff_link_new_tab', 'link_cloaking' ) as $key ) {
			if ( isset( $value[ $key ] ) ) {
				$clean[ $key ] = (bool) $value[ $key ];
			}
		}

		if ( isset( $value['link_prefix'] ) ) {
			$clean['link_prefix'] = sanitize_title( $value['link_prefix'] );
		}

		return array_intersect_key( array_replace( $value, $clean ), $clean );
	}

}