<?php

use iThemesSecurity\User_Groups\Upgrader;

class ITSEC_Strong_Passwords_Setup {

	public function __construct() {
		add_action( 'itsec_modules_do_plugin_upgrade', array( $this, 'execute_upgrade' ), 0 );
	}

	/**
	 * Execute module upgrade
	 *
	 * @param int $itsec_old_version
	 *
	 * @return void
	 */
	public function execute_upgrade( $itsec_old_version ) {

		if ( $itsec_old_version < 4000 ) {

			global $itsec_bwps_options;

			$current_options = get_site_option( 'itsec_strong_passwords' );

			// Don't do anything if settings haven't already been set, defaults exist in the module system and we prefer to use those
			if ( false !== $current_options ) {

				$current_options['enabled'] = isset( $itsec_bwps_options['st_enablepassword'] ) && $itsec_bwps_options['st_enablepassword'] == 1 ? true : false;
				$current_options['roll']    = isset( $itsec_bwps_options['st_passrole'] ) ? $itsec_bwps_options['st_passrole'] : 'administrator';

				update_site_option( 'itsec_strong_passwords', $current_options );
			}

		}

		if ( $itsec_old_version < 4041 ) {
			$current_options = get_site_option( 'itsec_strong_passwords' );

			// If there are no current options, go with the new defaults by not saving anything
			if ( is_array( $current_options ) ) {
				// Make sure the new module is properly activated or deactivated
				if ( $current_options['enabled'] ) {
					ITSEC_Modules::activate( 'strong-passwords' );
				} else {
					ITSEC_Modules::deactivate( 'strong-passwords' );
				}

				$settings = array( 'role' => $current_options['roll'] );

				ITSEC_Modules::set_settings( 'strong-passwords', $settings );
			}
		}

		if ( $itsec_old_version < 4096 ) {
			$active = get_site_option( 'itsec_active_modules', array() );

			if ( ! empty( $active['strong-passwords'] ) ) {
				$active_requirements             = ITSEC_Modules::get_setting( 'password-requirements', 'enabled_requirements' );
				$active_requirements['strength'] = true;
				ITSEC_Modules::set_setting( 'password-requirements', 'enabled_requirements', $active_requirements );
			}

			$requirement_settings                     = ITSEC_Modules::get_setting( 'password-requirements', 'requirement_settings' );
			$requirement_settings['strength']['role'] = ITSEC_Modules::get_setting( 'strong-passwords', 'role', 'administrator' );
			ITSEC_Modules::set_setting( 'password-requirements', 'requirement_settings', $requirement_settings );

			unset( $active['strong-passwords'] );

			// Need to do this directly to be able to remove a module from the list entirely.
			if ( is_multisite() ) {
				update_site_option( 'itsec_active_modules', $active );
			} else {
				update_option( 'itsec_active_modules', $active );
			}
		}

		if ( $itsec_old_version < 4117 ) {
			delete_site_option( 'itsec_strong_passwords' );
			$settings = ITSEC_Modules::get_setting( 'password-requirements', 'requirement_settings' );

			if ( isset( $settings['strength']['role'] ) ) {
				$settings['strength']['group'] = ITSEC_Modules::get_container()
				                                              ->get( Upgrader::class )
				                                              ->upgrade_from_min_role( $settings['strength']['role'] );
				unset( $settings['strength']['role'] );
			}

			ITSEC_Modules::set_setting( 'password-requirements', 'requirement_settings', $settings );
		}
	}
}

new ITSEC_Strong_Passwords_Setup();