<?php
/**
 * Remove traces of plugin when uninstalling it.
 *
 * @package authorizer
 */

/**
 * Exit if uninstall not called from WordPress.
 */
if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
	exit();
}

/**
 * Delete options in database.
 */
delete_option( 'auth_settings' );
delete_option( 'auth_settings_recently_sent_emails' );
delete_option( 'auth_settings_advanced_login_error' );
delete_option( 'auth_settings_advanced_lockouts_time_last_failed' );
delete_option( 'auth_settings_advanced_lockouts_failed_attempts' );
delete_option( 'auth_settings_access_users_approved' );
delete_option( 'auth_settings_access_users_blocked' );
delete_option( 'auth_settings_access_users_pending' );
delete_option( 'auth_settings_advanced_public_notice' );
delete_option( 'auth_settings_advanced_admin_notice' );
delete_option( 'auth_version' );

/**
 * Delete multisite options.
 */
if ( is_multisite() ) {
	delete_blog_option( get_main_site_id( get_main_network_id() ), 'auth_multisite_settings' );
	delete_blog_option( get_main_site_id( get_main_network_id() ), 'auth_multisite_settings_access_users_approved' );
	delete_blog_option( get_main_site_id( get_main_network_id() ), 'auth_version' );
}

/**
 * For security, delete blocked users (since we can't enforce their blocked
 * status without this plugin enabled, which means they would be able to reset
 * their passwords and log in). If they have any content, reassign it to the
 * current user (the user uninstalling the plugin).
 */
if ( ! is_multisite() ) {
	$reassign_user = wp_get_current_user();
	$blocked_users = get_users( array(
		'meta_key'   => 'auth_blocked', // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_key
		'meta_value' => 'yes', // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_value
	) );
	foreach ( $blocked_users as $blocked_user ) {
		wp_delete_user( $blocked_user->ID, $reassign_user->ID );
	}
}