<?php
/**
 * CodePeople Session.
 *
 * Standardizes WordPress session data using database-backed options for storage.
 * for storing user session information.
 */

// phpcs:disable WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
// phpcs:disable WordPress.NamingConventions.ValidVariableName.PropertyNotSnakeCase
// phpcs:disable Squiz.Commenting.FunctionComment.Missing
// phpcs:disable Squiz.Commenting.VariableComment.Missing
// phpcs:disable Squiz.Commenting.VariableComment.MissingVar

if ( ! defined( 'CP_COOKIE_NAME' ) ) {
	define( 'CP_COOKIE_NAME', 'CP5XKN6QLDFWUC' );
}

if ( ! class_exists( 'CP_SESSION' ) ) {
	class CP_SESSION {

		private static $CP_COOKIE_NAME = CP_COOKIE_NAME;

		/************** STATIC PROPERTIES **************/
		private static $instance = false;

		/************** INSTANCE PROPERTIES **************/
		private $session_id;
		private $expiration;
		private $cleaned_expired_vars = false;
		private $expiration_interval  = 86400; // 24 Hours.

		/************** CONSTRUCT **************/
		private function __construct() {
			if ( ! is_admin() ) {
				return;
			}
			if ( session_id() == '' && ! headers_sent() ) {
				@session_start();
			}

			if ( isset( $_SESSION[ self::$CP_COOKIE_NAME ] ) || isset( $_COOKIE[ self::$CP_COOKIE_NAME ] ) ) {
				$cookie = sanitize_text_field( wp_unslash( ( isset( $_SESSION[ self::$CP_COOKIE_NAME ] ) ) ? $_SESSION[ self::$CP_COOKIE_NAME ] : $_COOKIE[ self::$CP_COOKIE_NAME ] ) );

				$cookie_crumbs = explode( '||', $cookie );

				$this->session_id = $cookie_crumbs[0];
				$this->expiration = $cookie_crumbs[1];
			} else {
				$this->session_id = $this->_generate_session_id();
				$this->expiration = $this->expiration_interval;
				$this->_set_cookie();
			}
		}

		/************** PRIVATE INSTANCE METHODS **************/
		private function _generate_session_id() {
			require_once ABSPATH . 'wp-includes/class-phpass.php';
			$hash = new PasswordHash( 8, false );

			return md5( $hash->get_random_bytes( 32 ) );
		}

		private function _set_cookie() {
			try {
				$_SESSION[ self::$CP_COOKIE_NAME ] = $this->session_id . '||' . $this->expiration;
				if ( ! headers_sent() ) {
					@setcookie( self::$CP_COOKIE_NAME, $this->session_id . '||' . $this->expiration, 0, '/' );
				}
			} catch ( Exception $err ) {
				error_log( $err->getMessage() );
			}
		}

		private function _get_var_name( $name ) {
			return self::$CP_COOKIE_NAME . '_' . $this->session_id . '_' . $name;
		}

		private function _set_var( $name, $value ) {
			$_SESSION[ $name ] = $value;
			$transient         = $this->_get_var_name( $name );
			set_transient( $transient, $value, $this->expiration );
		}

		private function _get_var( $name ) {
			if ( isset( $_SESSION[ $name ] ) ) {
				return $_SESSION[ $name ]; // phpcs:ignore
			}
			$transient = $this->_get_var_name( $name );
			return get_transient( $transient );
		}

		private function _unset_var( $name ) {
			if ( isset( $_SESSION[ $name ] ) ) {
				unset( $_SESSION[ $name ] );
			}
			$transient = $this->_get_var_name( $name );
			delete_transient( $transient );
		}

		private function _clean_expired_vars() {
			if ( $this->cleaned_expired_vars ) {
				return;
			}
			$this->cleaned_expired_vars = true;

			global $wpdb;

			$expiration = time() - $this->expiration_interval;
			try {
				$transients = $wpdb->get_col(
					$wpdb->prepare( "SELECT REPLACE(option_name, '_transient_timeout_', '') AS transient_name FROM {$wpdb->options} WHERE option_name LIKE %s AND option_value < %s", '_transient_timeout_' . $wpdb->esc_like( self::$CP_COOKIE_NAME ) . '%', $expiration )
				);

				$options_names = array();
				foreach ( $transients as $transient ) {
					if ( strpos( $transient, $this->session_id ) === false ) {
						$options_names[] = '_transient_' . $transient;
						$options_names[] = '_transient_timeout_' . $transient;
					}
				}

				if ( ! empty( $options_names ) ) {
					$options_names = array_map( 'esc_sql', $options_names );
					$options_names = "'" . implode( "','", $options_names ) . "'";
					$result        = $wpdb->query( "DELETE FROM {$wpdb->options} WHERE option_name IN ({$options_names})" ); // phpcs:ignore

				}
			} catch ( Exception $err ) {
				error_log( $err->getMassage() );
			}
		}

		/************** PUBLIC INSTANCE METHODS **************/

		/************** PRIVATE STATIC METHODS **************/
		private static function _get_instance() {
			if ( ! self::$instance ) {
				self::$instance = new self();
			}
			self::$instance->_clean_expired_vars();
			return self::$instance;
		}

		/************** PUBLIC STATIC METHODS **************/
		public static function session_start() {
			$instance = self::_get_instance();
		}

		public static function session_id() {
			$instance = self::_get_instance();
			return $instance->session_id;
		}

		public static function set_var( $name, $value ) {
			$instance = self::_get_instance();
			$instance->_set_var( $name, $value );
		}

		public static function get_var( $name ) {
			$instance = self::_get_instance();
			return $instance->_get_var( $name );
		}

		public static function unset_var( $name ) {
			 $instance = self::_get_instance();
			$instance->_unset_var( $name );
		}

		/**
		 * Special methods for registering and recovering the forms submissions.
		 *
		 * @param number $eventid event id.
		 * @param number $formid form id.
		 */
		public static function register_event( $eventid, $formid ) {
			$cp_cff_form_data = self::get_var( 'cp_cff_form_data' );
			if ( empty( $cp_cff_form_data ) || ! is_array( $cp_cff_form_data ) ) {
				$cp_cff_form_data = array();
			}

			$cp_cff_form_data[ $formid ] = $eventid;
			$cp_cff_form_data['latest']  = $formid;

			self::set_var( 'cp_cff_form_data', $cp_cff_form_data );
		}

		public static function registered_events() {
			return self::get_var( 'cp_cff_form_data' );
		}
	} // End clss.
}