<?php
/**
 * class-groups-admin-users.php
 *
 * Copyright (c) 2012 "kento" Karim Rahimpur www.itthinx.com
 *
 * This code is released under the GNU General Public License.
 * See COPYRIGHT.txt and LICENSE.txt.
 *
 * This code is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * This header and all notices must be kept intact.
 *
 * @author Karim Rahimpur
 * @package groups
 * @since groups 1.0.0
 */

if ( !defined( 'ABSPATH' ) ) {
	exit;
}

// phpcs:disable PluginCheck.Security.DirectDB.UnescapedDBParameter, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching

/**
 * Users admin integration with Groups.
 */
class Groups_Admin_Users {

	/**
	 * Column key.
	 *
	 * @var string
	 */
	const GROUPS = 'groups_user_groups';

	/**
	 * Hooks into filters to add the Groups column to the users table.
	 */
	public static function init() {
		// we hook this on admin_init so that current_user_can() is available
		add_action( 'admin_init', array( __CLASS__, 'setup' ) );
	}

	/**
	 * Adds the filters and actions only for users who have the right Groups permissions.
	 */
	public static function setup() {
		if ( Groups_User::current_user_can( GROUPS_ACCESS_GROUPS ) ) {
			// filters to display the user's groups
			add_filter( 'manage_users_columns', array( __CLASS__, 'manage_users_columns' ) );
			// args: unknown, string $column_name, int $user_id
			add_filter( 'manage_users_custom_column', array( __CLASS__, 'manage_users_custom_column' ), 10, 3 );
		}
		if ( Groups_User::current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
			if ( !is_network_admin() ) {
				// scripts
				add_action( 'admin_enqueue_scripts', array( __CLASS__, 'admin_enqueue_scripts' ) );
				// styles
				// add_action( 'admin_head', array( __CLASS__, 'admin_head' ) );
				// allow to add or remove selected users to groups
				add_action( 'load-users.php', array( __CLASS__, 'load_users' ) );
				// add links to filter users by group
				add_filter( 'views_users', array( __CLASS__, 'views_users' ) );
				// modify query to filter users by group
				add_filter( 'pre_user_query', array( __CLASS__, 'pre_user_query' ) );
				// WP_Users_List_Table implements extra_tablenav() where the restrict_manage_users action is invoked.
				// As the extra_tablenav() method does not define a generic extension point, this is
				// the best shot we get at inserting our group actions block (currently we're at WordPress 3.6.1).
				// We choose to use our own group-actions block instead of re-using the existing bulk-actions,
				// to have a more explicit user interface which makes it clear that these actions
				// are directed at relating users and groups.
				add_action( 'restrict_manage_users', array( __CLASS__, 'restrict_manage_users' ), 0 );
			}
		}
	}

	/**
	 * Modify query to filter users by group.
	 *
	 * @param WP_User_Query $user_query
	 *
	 * @return WP_User_Query
	 */
	public static function pre_user_query( $user_query ) {
		global $pagenow, $wpdb;
		if ( ( $pagenow == 'users.php' ) && empty( groups_sanitize_get( 'page' ) ) ) {
			$filter_group_ids = groups_sanitize_request( 'filter_group_ids' );
			if ( is_array( $filter_group_ids ) ) {
				$group_ids = array();
				foreach ( $filter_group_ids as $group_id ) {
					$group_id = Groups_Utility::id( $group_id );
					if ( $group_id !== false ) {
						$group_ids[] = $group_id;
					}
				}
				$n = count( $group_ids );
				if ( $n > 0 ) {
					$user_group_table = _groups_get_tablename( 'user_group' );
					$group_ids = implode( ',', esc_sql( $group_ids ) );
					$conjunctive = !empty( groups_sanitize_request( 'filter_groups_conjunctive' ) );
					if ( !$conjunctive ) {
						$user_query->query_where .= " AND $wpdb->users.ID IN ( SELECT DISTINCT user_id FROM $user_group_table WHERE group_id IN ( $group_ids ) ) ";
					} else {
						$user_query->query_where .=
							" AND $wpdb->users.ID IN ( " .
							"SELECT user_id FROM ( " .
							"SELECT user_id, COUNT( group_id ) AS n FROM $user_group_table WHERE group_id IN ( $group_ids ) GROUP BY user_id " .
							") group_counts WHERE n = " . intval( $n ) .
							") ";
					}
				}
			}
		}
		return $user_query;
	}

	/**
	 * Enqueue scripts the group-actions.
	 */
	public static function admin_enqueue_scripts() {

		global $pagenow;

		if ( ( $pagenow == 'users.php' ) && empty( groups_sanitize_get( 'page' ) ) ) {
			Groups_UIE::enqueue( 'select' );
			wp_enqueue_style( 'groups_admin_user' );
		}
	}

	/**
	 * Adds the group add/remove buttons after the last action box.
	 */
	public static function admin_head() {

		global $pagenow;

		if ( ( $pagenow == 'users.php' ) && empty( groups_sanitize_get( 'page' ) ) ) {
			// @since 2.18.0 moved to groups_admin_user.css
		}
	}

	/**
	 * Renders group actions in the users table's extra_tablenav().
	 */
	public static function restrict_manage_users() {

		global $pagenow, $wpdb, $groups_select_user_groups_index;

		// We don't handle multiple instances so don't render another.
		if ( !isset( $groups_select_user_groups_index ) ) {
			$groups_select_user_groups_index = 0;
		} else {
			return '';
		}

		$output = '';

		if ( ( $pagenow == 'users.php' ) && empty( groups_sanitize_get( 'page' ) ) ) {
			// groups select
			$groups_table = _groups_get_tablename( 'group' );
			$groups = apply_filters( 'groups_admin_users_restrict_manage_users_groups', $wpdb->get_results( "SELECT * FROM $groups_table ORDER BY name" ) ); // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
			$groups_select = '';
			if ( $groups ) {
				$groups_select = sprintf(
					'<select id="user-groups" class="groups" name="group_ids[]" multiple="multiple" placeholder="%s" data-placeholder="%s">',
					esc_attr__( 'Choose groups &hellip;', 'groups' ),
					esc_attr__( 'Choose groups &hellip;', 'groups' )
				);
				foreach ( $groups as $group ) {
					$is_member = false;
					$groups_select .= sprintf(
						'<option value="%d" %s>%s</option>',
						Groups_Utility::id( $group->group_id ),
						$is_member ? ' selected="selected" ' : '',
						$group->name ? stripslashes( wp_filter_nohtml_kses( $group->name ) ) : ''
					);
				}
				$groups_select .= '</select>';
			}

			// group bulk actions added through extra_tablenav()
			$box = '<div id="group-bulk-actions" class="groups-bulk-container">';
			$box .= '<div class="groups-select-container">';
			$box .= $groups_select;
			$box .= '</div>';
			$box .= '<select class="groups-action" name="groups-action">';
			$box .= '<option selected="selected" value="-1">' . esc_html__( 'Group Actions', 'groups' ) . '</option>';
			$box .= '<option value="add-group">' . esc_html__( 'Add to group', 'groups' ) . '</option>';
			$box .= '<option value="remove-group">' . esc_html__( 'Remove from group', 'groups' ) . '</option>';
			$box .= '</select>';
			$box .= sprintf( '<input class="button" type="submit" name="groups" value="%s" />', esc_attr__( 'Apply', 'groups' ) );
			$box .= '</div>';
			$box = str_replace( '"', "'", $box );

			$nonce = wp_nonce_field( 'user-group', 'bulk-user-group-nonce', true, false );
			$nonce = str_replace( '"', "'", $nonce );
			$box .= $nonce;

			$box .= '<script type="text/javascript">';
			$box .= 'document.addEventListener( "DOMContentLoaded", function() {';
			$box .= 'if ( typeof jQuery !== "undefined" ) {';
			$box .= 'jQuery(".tablenav.top .alignleft.actions:last").after("<div id=\"groups-bulk-actions-block\" class=\"alignleft actions\"></div>");';
			$box .= 'jQuery("#group-bulk-actions").appendTo(jQuery("#groups-bulk-actions-block"));';
			$box .= '}'; // jQuery
			$box .= '} );'; // document....
			$box .= '</script>';

			$output .= $box;
			$output .= Groups_UIE::render_select( '#user-groups' );
		}
		echo $output; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
	}

	/**
	 * Hooked on filter in class-wp-list-table.php to filter by group.
	 *
	 * @param array $views
	 *
	 * @return array views
	 */
	public static function views_users( $views ) {
		global $pagenow, $wpdb;
		if ( ( $pagenow == 'users.php' ) && empty( groups_sanitize_get( 'page' ) ) ) {
			$output = '<form id="filter-groups-form" action="" method="get">';
			$output .= '<div class="groups-filter-container">';
			$output .= '<div class="groups-select-container">';
			$output .= sprintf(
				'<select id="filter-groups" class="groups" name="filter_group_ids[]" multiple="multiple" placeholder="%s" data-placeholder="%s">',
				esc_attr__( 'Choose groups &hellip;', 'groups' ),
				esc_attr__( 'Choose groups &hellip;', 'groups' )
			);
			$user_group_table = _groups_get_tablename( 'user_group' );
			$groups = apply_filters( 'groups_admin_users_views_users_groups', Groups_Group::get_groups( array( 'order_by' => 'name', 'order' => 'ASC' ) ) );
			$user_counts = array();
			$counts = apply_filters('groups_admin_users_views_users_counts', $wpdb->get_results( "SELECT COUNT(user_id) AS count, group_id FROM $user_group_table GROUP BY group_id" ) ); // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
			if ( !empty( $counts ) && is_array( $counts ) ) {
				foreach ( $counts as $count ) {
					if ( isset( $count->count ) && is_numeric( $count->count ) ) {
						$user_counts[$count->group_id] = max( 0, intval( $count->count ) );
					}
				}
			}
			$filter_group_ids = groups_sanitize_request( 'filter_group_ids' );
			if ( !is_array( $filter_group_ids ) ) {
				$filter_group_ids = array();
			}
			foreach ( $groups as $group ) {
				// Do not use $user_count = count( $group->users ); here,
				// as it creates a lot of unneccessary objects and can lead
				// to out of memory issues on large user bases.
				$user_count = isset( $user_counts[$group->group_id] ) ? $user_counts[$group->group_id] : 0;
				$selected = in_array( $group->group_id, $filter_group_ids );
				$output .= sprintf(
					'<option value="%d" %s>%s</option>',
					Groups_Utility::id( $group->group_id ),
					$selected ? ' selected="selected" ' : '',
					sprintf(
						'%s <span class="count">(%s)</span>',
						$group->name ? stripslashes( wp_filter_nohtml_kses( $group->name ) ) : '',
						esc_html( $user_count )
					)
				);
			}
			$output .= '</select>';
			$output .= '</div>'; // .groups-select-container
			$output .= '</div>'; // .groups-filter-container
			$conjunctive = !empty( groups_sanitize_request( 'filter_groups_conjunctive' ) );
			$output .= sprintf( '<label title="%s" style="margin-right: 4px;">', esc_html_x( 'Users must belong to all chosen groups', 'label title for conjunctive groups filter checkbox', 'groups' ) );
			$output .= sprintf( '<input class="filter-groups-conjunctive" name="filter_groups_conjunctive" type="checkbox" value="1" %s />', $conjunctive ? ' checked="checked" ' : '' );
			$output .= esc_html_x( '&cap;', 'label for conjunctive groups filter checkbox', 'groups' );
			$output .= '</label>';
			$output .= '<input class="button" style="vertical-align:middle" type="submit" value="' . esc_attr__( 'Filter', 'groups' ) . '"/>';
			$output .= '</form>';
			$output .= Groups_UIE::render_select( '#filter-groups' );
			$views['groups'] = $output;
		}
		return $views;
	}

	/**
	 * Adds or removes users to/from groups.
	 */
	public static function load_users() {
		if ( Groups_User::current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
			$users = groups_sanitize_request( 'users' );
			$action = null;
			if ( !empty( $_REQUEST['groups'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
				if ( groups_sanitize_get( 'groups-action' ) === 'add-group' ) {
					$action = 'add';
				} else if ( groups_sanitize_get( 'groups-action' ) === 'remove-group' ) {
					$action = 'remove';
				}
			}
			if ( $users !== null && $action !== null && is_array( $users ) ) {
				$users = array_map( 'intval', $users );
				if ( groups_verify_request_nonce( 'bulk-user-group-nonce', 'user-group' ) ) {
					foreach ( $users as $user_id ) {
						switch ( $action ) {
							case 'add':
								$group_ids = groups_sanitize_get( 'group_ids' );
								if ( $group_ids !== null && is_array( $group_ids ) ) {
									foreach ( $group_ids as $group_id ) {
										// Do NOT use Groups_User::user_is_member( ... ) here, as this must not be filtered:
										if ( !Groups_User_Group::read( $user_id, $group_id ) ) {
											Groups_User_Group::create(
												array(
													'user_id' => $user_id,
													'group_id' => $group_id
												)
											);
										}
									}
								}
								break;
							case 'remove':
								$group_ids = groups_sanitize_get( 'group_ids' );
								if ( $group_ids !== null && is_array( $group_ids ) ) {
									foreach ( $group_ids as $group_id ) {
										// Do NOT use Groups_User::user_is_member( ... ) here, as this must not be filtered:
										if ( Groups_User_Group::read( $user_id, $group_id ) ) {
											Groups_User_Group::delete( $user_id, $group_id );
										}
									}
								}
								break;
						}
					}
					$referer = wp_get_referer();
					if ( $referer ) {
						$redirect_to = remove_query_arg( array( 'action', 'action2', 'add-to-group', 'bulk-user-group-nonce', 'group_id', 'new_role', 'remove-from-group', 'users', 'update', 'id' ), $referer );
						wp_safe_redirect( $redirect_to );
						exit;
					}
				}
			}
		}
	}

	/**
	 * Adds a new column to the users table to show the groups that users belong to.
	 *
	 * @param array $column_headers
	 *
	 * @return array column headers
	 */
	public static function manage_users_columns( $column_headers ) {
		$column_headers[self::GROUPS] = _x( 'Groups', 'Column header (Users)', 'groups' );
		return $column_headers;
	}

	/**
	 * Renders custom column content.
	 *
	 * @param string $output
	 * @param string $column_name
	 * @param int $user_id
	 *
	 * @return string custom column content
	 */
	public static function manage_users_custom_column( $output, $column_name, $user_id ) {
		switch ( $column_name ) {
			case self::GROUPS :
				$groups_user = new Groups_User( $user_id );
				$groups = $groups_user->get_groups();
				if ( $groups !== null && count( $groups ) > 0 ) {
					usort( $groups, array( __CLASS__, 'by_group_name' ) );
					$output = '<ul>';
					foreach ( $groups as $group ) {
						$output .= '<li>';
						$output .= $group->get_name() ? stripslashes( wp_filter_nohtml_kses( $group->get_name() ) ) : '';
						$output .= '</li>';
					}
					$output .= '</ul>';
				} else {
					$output .= esc_html__( '--', 'groups' );
				}
				break;
		}
		return $output;
	}

	/**
	 * usort helper
	 *
	 * @param Groups_Group $o1
	 * @param Groups_Group $o2
	 *
	 * @return int strcmp result for group names
	 */
	public static function by_group_name( $o1, $o2 ) {
		return strcmp( $o1->get_name(), $o2->get_name() );
	}
}
Groups_Admin_Users::init();