<?php

if (!defined('ABSPATH')) {
	exit; // Exit if accessed directly
}

class AIOWPSecurity_List_Comment_Spammer_IP extends AIOWPSecurity_List_Table {

	public function __construct() {
		global $status, $page;
		
		//Set parent defaults
		parent::__construct(array(
			'singular'  => 'item',  // singular name of the listed records
			'plural'    => 'items', // plural name of the listed records
			'ajax'      => false    // does this table support ajax?
		) );
		
	}

	public function column_default($item, $column_name) {
		return $item[$column_name];
	}
		
	public function column_comment_author_IP($item) {
		$tab = strip_tags($_REQUEST['tab']);
		//Build row actions
		if (!is_main_site()) {
			//Suppress the block link if site is a multi site AND not the main site
			$actions = array(); //blank array
		} else {
			$block_url = sprintf('admin.php?page=%s&tab=%s&action=%s&spammer_ip=%s', AIOWPSEC_SPAM_MENU_SLUG, $tab, 'block_spammer_ip', $item['comment_author_IP']);
			//Add nonce to block URL
			$block_url_nonce = wp_nonce_url($block_url, "block_spammer_ip", "aiowps_nonce");
			
			$actions = array(
				'block' => '<a href="'.$block_url_nonce.'" onclick="return confirm(\'Are you sure you want to permanently block this IP address?\')">Block</a>',
			);
		}
		
		//Return the user_login contents
		return sprintf('%1$s <span style="color:silver"></span>%2$s',
			/*$1%s*/ $item['comment_author_IP'],
			/*$2%s*/ $this->row_actions($actions)
		);
	}

	
	public function column_cb($item) {
		return sprintf(
			'<input type="checkbox" name="%1$s[]" value="%2$s" />',
			/*$1%s*/ $this->_args['singular'],  //Let's simply repurpose the table's singular label
			/*$2%s*/ esc_attr($item['comment_author_IP']) //The value of the checkbox should be the record's id
		);
	}
	
	public function get_columns() {
		$columns = array(
			'cb' => '<input type="checkbox" />', //Render a checkbox
			'comment_author_IP' => __('Spammer IP', 'all-in-one-wp-security-and-firewall'),
			'amount' => __('Number of spam comments from this IP', 'all-in-one-wp-security-and-firewall'),
			'status' => __('Status', 'all-in-one-wp-security-and-firewall'),
		);
		return $columns;
	}
	
	public function get_sortable_columns() {
		$sortable_columns = array(
			'comment_author_IP' => array('comment_author_IP',false),
			'amount' => array('amount',false),
			'status' => array('status',false),
		);
		return $sortable_columns;
	}
	
	public function get_bulk_actions() {
		if (!is_main_site()) {
			//Suppress the block link if site is a multi site AND not the main site
			$actions = array(); //blank array
		} else {
			$actions = array(
				'block' => __('Block', 'all-in-one-wp-security-and-firewall')
			);
		}
		return $actions;
	}

	private function process_bulk_action() {
		if (empty($_REQUEST['_wpnonce']) || !wp_verify_nonce($_REQUEST['_wpnonce'], 'bulk-items')) return;
		
		global $aio_wp_security;
		if ('block' === $this->current_action()) {
			//Process block bulk actions
			if (!isset($_REQUEST['item'])) {
				$error_msg = '<div id="message" class="error"><p><strong>';
				$error_msg .= __('Please select some records using the checkboxes','all-in-one-wp-security-and-firewall');
				$error_msg .= '</strong></p></div>';
				_e($error_msg);
			} else {
				$this->block_spammer_ip_records(($_REQUEST['item']));
			}
		}
	}
	
	
	
	/*
	 * This function will add the selected IP addresses to the blacklist.
	 * The function accepts either an array of IDs or a single ID
	 */
	public function block_spammer_ip_records($entries) {
		global $wpdb, $aio_wp_security;
		if (is_array($entries)) {
			if (isset($_REQUEST['_wp_http_referer'])) {
				//Bulk selection using checkboxes were used
				foreach ($entries as $ip_add) {
					AIOWPSecurity_Blocking::add_ip_to_block_list($ip_add, 'spam');
				}
			}
		} else if ($entries != NULL) {
			$nonce = isset($_GET['aiowps_nonce']) ? $_GET['aiowps_nonce'] : '';
			if (!isset($nonce) || !wp_verify_nonce($nonce, 'block_spammer_ip')) {
				$aio_wp_security->debug_logger->log_debug("Nonce check failed for delete selected blocked IP operation!",4);
				die(__('Nonce check failed for delete selected blocked IP operation!','all-in-one-wp-security-and-firewall'));
			}

			//individual entry where "block" link was clicked
			AIOWPSecurity_Blocking::add_ip_to_block_list($entries, 'spam');
		}

		AIOWPSecurity_Admin_Menu::show_msg_updated_st(__('The selected IP addresses are now permanently blocked!','all-in-one-wp-security-and-firewall'));
	}

	/*
	 * (Old function which uses .htaccess blacklist - replaced by new method which uses php blocking code)
	 * This function will add the selected IP addresses to the .htaccess blacklist.
	 * The function accepts either an array of IDs or a single ID
	 */
	public function block_spammer_ip_records_old($entries) {
		global $wpdb, $aio_wp_security;
		$raw_banned_ip_list = $aio_wp_security->configs->get_value('aiowps_banned_ip_addresses');
		$currently_banned_ips = explode(PHP_EOL, $aio_wp_security->configs->get_value('aiowps_banned_ip_addresses'));
		if (is_array($entries)) {
			if (isset($_REQUEST['_wp_http_referer'])) {
				//Bulk selection using checkboxes were used
				foreach ($entries as $ip_add) {
					if (!empty($currently_banned_ips) && !(sizeof($currently_banned_ips) == 1 && trim($currently_banned_ips[0]) == '')) {
						//Check if the IP address is already in the blacklist. If not add it to the list.
						if (!in_array($ip_add, $currently_banned_ips)) {
							$raw_banned_ip_list .= PHP_EOL.$ip_add;
						}
					} else {
						//if blacklist is currently empty just add all IP addresses to the list regardless 
						$raw_banned_ip_list .= PHP_EOL.$ip_add;
					}
				}
			}
		} else if ($entries != NULL) {
			$nonce = isset($_GET['aiowps_nonce']) ? $_GET['aiowps_nonce'] : '';
			if (!isset($nonce) || !wp_verify_nonce($nonce, 'block_spammer_ip')) {
				$aio_wp_security->debug_logger->log_debug("Nonce check failed for delete selected blocked IP operation!",4);
				die(__('Nonce check failed for delete selected blocked IP operation!','all-in-one-wp-security-and-firewall'));
			}

			//individual entry where "block" link was clicked
			//Check if the IP address is already in the blacklist. If not add it to the list.
			if (!in_array($entries, $currently_banned_ips)) {
				$raw_banned_ip_list .= PHP_EOL.$entries;
			}
		}

		//Let's save the selected IP addresses to the blacklist config
		$aio_wp_security->configs->set_value('aiowps_banned_ip_addresses', $raw_banned_ip_list, true); // Save the blocked IP address config variable with the newly added addresses

		AIOWPSecurity_Admin_Menu::show_msg_updated_st(__('The selected IP addresses were saved in the blacklist configuration settings.','all-in-one-wp-security-and-firewall'));

		//Let's check if the Enable Blacklisting flag has been set - If so, we will write the new data to the .htaccess file.
		if ('1' == $aio_wp_security->configs->get_value('aiowps_enable_blacklisting')) {
			$write_result = AIOWPSecurity_Utility_Htaccess::write_to_htaccess();
			if ($write_result) {
				AIOWPSecurity_Admin_Menu::show_msg_updated_st(__('The .htaccess file was successfully modified to include the selected IP addresses.','all-in-one-wp-security-and-firewall'));
			} else {
				AIOWPSecurity_Admin_Menu::show_msg_error_st(__('The plugin was unable to write to the .htaccess file. Please edit file manually.','all-in-one-wp-security-and-firewall'));
				$aio_wp_security->debug_logger->log_debug("AIOWPSecurity_Blacklist_Menu - The plugin was unable to write to the .htaccess file.");
			}
		} else {
			$blacklist_settings_link = '<a href="admin.php?page='.AIOWPSEC_BLACKLIST_MENU_SLUG.'">Ban Users</a>';
			$info_msg = '<p>'.__('NOTE: The .htaccess file was not modified because you have disabled the "Enable IP or User Agent Blacklisting" check box.', 'all-in-one-wp-security-and-firewall').
						'<br />'.sprintf( __('To block these IP addresses you will need to enable the above flag in the %s menu', 'all-in-one-wp-security-and-firewall'), $blacklist_settings_link).'</p>';
			AIOWPSecurity_Admin_Menu::show_msg_updated_st($info_msg);
		}
	}

	public function prepare_items() {
		//First, lets decide how many records per page to show
		$per_page = 100;
		$columns = $this->get_columns();
		$hidden = array();
		$sortable = $this->get_sortable_columns();

		$this->_column_headers = array($columns, $hidden, $sortable);

		$this->process_bulk_action();

		global $wpdb;
		global $aio_wp_security;
		$minimum_comments_per_ip = $aio_wp_security->configs->get_value('aiowps_spam_ip_min_comments');
		if (empty($minimum_comments_per_ip)) {
			$minimum_comments_per_ip = 5;
		}
		/* -- Ordering parameters -- */
		//Parameters that are going to be used to order the result
		isset($_GET["orderby"]) ? $orderby = strip_tags($_GET["orderby"]) : $orderby = '';
		isset($_GET["order"]) ? $order = strip_tags($_GET["order"]) : $order = '';

		$orderby = !empty($orderby) ? esc_sql($orderby) : 'amount';
		$order = !empty($order) ? esc_sql($order) : 'DESC';

		$orderby = AIOWPSecurity_Utility::sanitize_value_by_array($orderby, $sortable);
		$order = AIOWPSecurity_Utility::sanitize_value_by_array($order, array('DESC' => '1', 'ASC' => '1'));

		// status is not a key in the database so we don't want to sort the database results, but sort the array later
		if ('status' == $orderby) {
			$sql = $wpdb->prepare("SELECT comment_author_IP, COUNT(*) AS amount
				FROM     $wpdb->comments 
				WHERE    comment_approved = 'spam'
				GROUP BY comment_author_IP
				HAVING   amount >= %d
				", $minimum_comments_per_ip);
		} else {
			$sql = $wpdb->prepare("SELECT comment_author_IP, COUNT(*) AS amount
				FROM     $wpdb->comments 
				WHERE    comment_approved = 'spam'
				GROUP BY comment_author_IP
				HAVING   amount >= %d
				ORDER BY $orderby $order
				", $minimum_comments_per_ip);
		}
		$data = $wpdb->get_results($sql, ARRAY_A);

		// Get all permamnetly blocked IP addresses
		$block_list = AIOWPSecurity_Blocking::get_list_blocked_ips();
		
		foreach ($data as $key => $value) {
			if (in_array($value['comment_author_IP'], $block_list)) {
				$data[$key]['status'] = 'blocked';
			} else {
				$data[$key]['status'] = 'not blocked';
			}
		}

		if ('status' == $orderby) {
			$keys = array_column($data, 'status');
			if ('asc' == $order) {
				array_multisort($keys, SORT_ASC, SORT_STRING, $data);
			} else {
				array_multisort($keys, SORT_DESC, SORT_STRING, $data);
			}
		}

		$current_page = $this->get_pagenum();
		$total_items = count($data);
		$data = array_slice($data, (($current_page - 1) * $per_page), $per_page);
		$this->items = $data;
		$this->set_pagination_args(array(
			'total_items' => $total_items,                  //WE have to calculate the total number of items
			'per_page' => $per_page,                     //WE have to determine how many items to show on a page
			'total_pages' => ceil($total_items / $per_page)   //WE have to calculate the total number of pages
		));
	}
}
