<?php

class PeepSoResetPasswordShortcode {

    private static $_instance = NULL;

    public function __construct(){}

    public static function get_instance()
    {
        if (NULL === self::$_instance)
            self::$_instance = new self();
        return (self::$_instance);
    }

    public static function description() {
        return __('Displays a form for changing user’s password after using Password Recover form and clicking the confirmation link.','peepso-core');
    }

    public static function post_state() {
        return _x('PeepSo', 'Page listing', 'peepso-core') . ' - ' . __('Reset password', 'peepso-core');
    }
    /*
     * Callback function for the Recover Password shortcode
     * @param array $atts Attributes array
     * @param string $content The content within the shortcode
     */

    public function do_shortcode($atts, $content = '')
    {
        PeepSo::do_not_cache();

        PeepSo::set_current_shortcode('peepso_reset');
        $ret = PeepSoTemplate::get_before_markup();

        if (is_user_logged_in())
        {
            return PeepSoTemplate::exec_template('profile', 'already-registered', NULL, TRUE);
        }

        $attributes = array();
        $err = new WP_Error;
        if ( isset( $_REQUEST['login'] ) && isset( $_REQUEST['key'] ) && 'POST' !== $_SERVER['REQUEST_METHOD']) {
            $attributes['login'] = $_REQUEST['login'];
            $attributes['key'] = $_REQUEST['key'];

            $user = check_password_reset_key( $attributes['key'], $attributes['login'] );

	        if ( ! $user || is_wp_error( $user ) ) {
	            if ( $user && $user->get_error_code() === 'expired_key' ) {
	                $err->add('expired_key', __('<strong>ERROR</strong>: The password reset link you used is not valid anymore.', 'peepso-core'));
	            } else {
	                $err->add('invalid_key', __('<strong>ERROR</strong>: The password reset link you used is not valid anymore.', 'peepso-core'));
	            }
	        }

       	} else {
       		$err = new WP_Error('bad_form', __('<strong>ERROR</strong>: Invalid password reset link.', 'peepso-core'));
       	}

        if ('POST' === $_SERVER['REQUEST_METHOD'] && isset($_POST['pass1']))
        {
            $res = wp_verify_nonce($_POST['-form-id'], 'peepso-reset-password-form');
            if (1 !== $res)
                $err = new WP_Error('bad_form', __('<strong>ERROR</strong>: Invalid form contents, please resubmit', 'peepso-core'));
            else
                $err = $this->reset_password();

            if (PeepSo::get_option('site_registration_recaptcha_enable', 0))
            {
                $input = new PeepSoInput();

                
                $response = wp_remote_post( # Not a critical PeepSo.com call, DON'T use PeepSoCom_Connect()
                    'https://www.google.com/recaptcha/api/siteverify', [
                    'headers' => [
                        'Content-type' => 'application/x-www-form-urlencoded'
                    ],
                    'body' => [
                        'secret' => PeepSo::get_option('site_registration_recaptcha_secretkey', 0),
                        'response' => $input->value('g-recaptcha-response','',FALSE) // SQL safe
                    ]
                ]);
                
                $result = json_decode(wp_remote_retrieve_body($response));

                if ($result->success === FALSE)
                {
                    $err = new WP_Error('bad_form', __('Invalid captcha, please try again', 'peepso-core'));
                }
            }

            if (is_wp_error($err) && 'user_login_blocked' !== $err->get_error_code()) {
	            $ret .= PeepSoTemplate::exec_template('general', 'reset-password', array('attributes' => $attributes, 'error' => $err), TRUE);

                // Enqueue reset password script.
                wp_enqueue_script('peepso-reset-password', PeepSo::get_asset('js/reset-password.min.js'), array('peepso'), PeepSo::PLUGIN_VERSION, TRUE);

                // Enqueue recaptcha script.
                if (PeepSo::get_option('site_registration_recaptcha_enable', 0)) {
                    wp_enqueue_script('peepso-recaptcha');
                }
	        } else {
	            $ret .= PeepSoTemplate::exec_template('general', 'reset-password-success', NULL, TRUE);
	        }
        } else {
        	$ret .= PeepSoTemplate::exec_template('general', 'reset-password', array('attributes' => $attributes, 'error' => $err), TRUE);

            // Enqueue reset password script.
            wp_enqueue_script('peepso-reset-password', PeepSo::get_asset('js/reset-password.min.js'), array('peepso'), PeepSo::PLUGIN_VERSION, TRUE);

            // Enqueue recaptcha script.
            if (PeepSo::get_option('site_registration_recaptcha_enable', 0)) {
                wp_enqueue_script('peepso-recaptcha');
            }
        }

        $ret .= PeepSoTemplate::get_after_markup();

        wp_reset_query();

        // disable WP comments from displaying on page
//        global $wp_query;
//        $wp_query->is_single = FALSE;
//        $wp_query->is_page = FALSE;

        return ($ret);
    }

    public function reset_password()
    {
    	$input = new PeepSoInput();
        $errors = new WP_Error();

        $rp_key = $input->value('rp_key', '', FALSE); // SQL Safe
        $rp_login = $input->value('rp_login', '', FALSE); // SQL Safe

        $user = check_password_reset_key( $rp_key, $rp_login );

        if ( ! $user || is_wp_error( $user ) ) {
            if ( $user && $user->get_error_code() === 'expired_key' ) {
                $errors->add('expired_key', __('<strong>ERROR</strong>: The password reset link you used is not valid anymore.', 'peepso-core'));
            } else {
                $errors->add('invalid_key', __('<strong>ERROR</strong>: The password reset link you used is not valid anymore.', 'peepso-core'));
            }
        }

 		$pass1 = $input->value('pass1', FALSE, FALSE); // SQL Safe
        $pass2 = $input->value('pass2', FALSE, FALSE); // SQL Safe
         
        if ( empty($pass1) ) {
        	$errors->add('bad_form', __('<strong>ERROR</strong>: Invalid request.', 'peepso-core'));
        }

    	if ( $pass1 != $pass2 ) {
            // Passwords don't match
            $errors->add('password_reset_missmatch', __('<strong>ERROR</strong>: The two passwords you entered don\'t match.', 'peepso-core'));
        }

        $min_password_length = PeepSo::get_option('minimum_password_length', 10);
    	if ( strlen($pass1) < $min_password_length ) {
            // Passwords length
            $errors->add('invalid_length', sprintf(__('<strong>ERROR</strong>: The password should be at least %d characters.', 'peepso-core'), $min_password_length));
        }

 		if ($errors->get_error_code()) {
        	return ($errors);
 		}

        // Parameter checks OK, reset password
        reset_password( $user, $_POST['pass1'] );

        do_action('peepso_after_reset_password', $user);

    	return TRUE;

    }

}

// EOF