<?php
// Standard WP check if direct
defined( 'ABSPATH' ) || exit;


// get wp-config.php file path
function inspry_get_wp_config() {

    $config_path = '';

    if ( file_exists( ABSPATH . 'wp-config.php' ) ) {
        /** The config file resides in ABSPATH */
        $config_path  = ABSPATH . 'wp-config.php';
    } elseif ( @file_exists( dirname( ABSPATH ) . '/wp-config.php' ) && ! @file_exists( dirname( ABSPATH ) . '/wp-settings.php' ) ) {
        /** The config file resides one level above ABSPATH but is not part of another installation */
        $config_path  =  dirname( ABSPATH ) . '/wp-config.php';
    }

    // if writeable
    if (!empty($config_path)) {
        return $config_path;
    }

    // return empty if no path found
    return ;
}


// Write code to wp-config.php file
function inspry_write_wp_config($file, $contents) {

    //Cannot save the config file with empty contents.
    if ( ! trim( $contents ) ) {
       return false;
    }

    $result = file_put_contents( $file, $contents, LOCK_EX );

    //Failed to update the config file.
    if ( false === $result ) {
        return false;
    }
    return true;
}

/**
 * Whether .htaccess rules take effect on this server.
 *
 * Only Apache and LiteSpeed read .htaccess; WordPress sets $is_apache for both.
 * On nginx hosts (Pressable, BigScoots) and under WP-CLI it is false, and a
 * rule written there would do nothing.
 *
 * @return bool
 */
function inspry_toolkit_htaccess_applies() {
	global $is_apache;
	return ! empty( $is_apache );
}

/**
 * The site's .htaccess contents, or an empty string when there is none.
 *
 * @return string
 */
function inspry_toolkit_htaccess_read() {
	$path = ABSPATH . '.htaccess';
	if ( ! is_readable( $path ) ) {
		return '';
	}
	$contents = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents -- local file.
	return false === $contents ? '' : $contents;
}

/**
 * Append a rule to the site's .htaccess, creating the file if needed.
 *
 * @param string $rule Text to append.
 * @return bool Whether the rule was written.
 */
function inspry_toolkit_htaccess_append( $rule ) {
	$path = ABSPATH . '.htaccess';
	if ( file_exists( $path ) ) {
		// A file that can be written but not read cannot be checked for the rule,
		// so every request would append it again. Refuse; the caller shows the
		// permissions error.
		$writable = is_readable( $path ) && is_writable( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_is_writable -- local file.
	} else {
		$writable = is_writable( ABSPATH ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_is_writable -- local file.
	}
	if ( ! $writable ) {
		return false;
	}
	// LOCK_EX: two requests appending at once must not interleave their rules.
	return false !== file_put_contents( $path, $rule, FILE_APPEND | LOCK_EX ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents -- local file.
}

/**
 * Remove a toolkit rule block from the site's .htaccess.
 *
 * Matches by pattern, not exact text: the blocks have been written in more than
 * one form (the wp-config rule's syntax, the site URL inside the enumeration
 * rule), and an exact-text match that misses leaves the rule behind forever.
 * Writes only when something was removed.
 *
 * @param string $pattern PCRE pattern for the whole block.
 * @return bool Whether the file was changed.
 */
function inspry_toolkit_htaccess_remove( $pattern ) {
	$path     = ABSPATH . '.htaccess';
	$contents = inspry_toolkit_htaccess_read();
	if ( '' === $contents ) {
		return false;
	}
	$updated = preg_replace( $pattern, '', $contents );
	if ( null === $updated || $updated === $contents || ! is_writable( $path ) ) { // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_is_writable -- local file.
		return false;
	}
	return false !== file_put_contents( $path, $updated, LOCK_EX ); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents -- local file.
}

/*
 * The two toolkit rule blocks. Each pattern matches ONLY the lines this plugin
 * writes, in every form it has written them since 1.0.1, plus exactly the
 * newlines it put in front of the block (one for the wp-config rule, two for
 * the user enumeration rule). Removing more would take the file's own last
 * newline with it; removing less leaves blank lines behind on every on/off
 * cycle. A looser "marker to the next closing tag" match could delete the
 * site's own rules from a hand-edited file, so a block that does not match is
 * left alone.
 */

/**
 * Remove the Secure wp-config rule from .htaccess.
 *
 * @return bool Whether the file was changed.
 */
function inspry_toolkit_htaccess_remove_config_rule() {
	return inspry_toolkit_htaccess_remove(
		'/\R?# AGENCY TOOLKIT - SECURE WP CONFIG\R<files wp-config\.php>\R'
		. '(?:(?:<IfModule !?mod_authz_core\.c>|<\/IfModule>|Require all denied|order allow,deny|deny from all)\h*\R)+'
		. '<\/files>/i'
	);
}

/**
 * Remove the Stop User Enumeration rule from .htaccess, whatever site URL it
 * was written with (an exact-text match stopped matching after an http to
 * https change, and the rule then stayed with the setting off).
 *
 * @return bool Whether the file was changed.
 */
function inspry_toolkit_htaccess_remove_user_enum_rule() {
	return inspry_toolkit_htaccess_remove(
		'/\R?\R?# AGENCY TOOLKIT - STOP USER ENUM\R<IfModule mod_rewrite\.c>\R'
		. 'RewriteCond %\{REQUEST_URI\}\h+\^\/\$\h*\R'
		. 'RewriteCond %\{QUERY_STRING\}\h+\^\/\?author=\(\[0-9\]\*\)\h*\R'
		. 'RewriteRule \^\(\.\*\)\$ [^\r\n]*\R'
		. '<\/IfModule>/i'
	);
}

/**
 * Remove every toolkit rule from .htaccess. Runs on deactivation and
 * uninstall: the rules are the plugin's behaviour, so they go when it does.
 * Settings are kept, so reactivating writes them back on the next request.
 * It also means deactivating the plugin clears a rule that a server rejects.
 */
function inspry_toolkit_htaccess_remove_rules() {
	inspry_toolkit_htaccess_remove_config_rule();
	inspry_toolkit_htaccess_remove_user_enum_rule();
}