<?php

class MainWP_Security {
	public static function fixAll() {
		MainWP_Security::remove_wp_version();
		MainWP_Security::remove_rsd();
		MainWP_Security::remove_wlw();
		//        MainWP_Security::remove_core_update();
		//        MainWP_Security::remove_plugin_update();
		//        MainWP_Security::remove_theme_update();
		MainWP_Security::remove_php_reporting();
		MainWP_Security::remove_scripts_version();
		MainWP_Security::remove_styles_version();
		MainWP_Security::remove_generator_version();
		MainWP_Security::remove_readme();

		add_filter( 'style_loader_src', array( 'MainWP_Security', 'remove_script_versions' ), PHP_INT_MAX );
		add_filter( 'style_loader_src', array( 'MainWP_Security', 'remove_theme_versions' ), PHP_INT_MAX );
		add_filter( 'script_loader_src', array( 'MainWP_Security', 'remove_script_versions' ), PHP_INT_MAX );
		add_filter( 'script_loader_src', array( 'MainWP_Security', 'remove_theme_versions' ), PHP_INT_MAX );
	}

	//Prevent listing wp-content, wp-content/plugins, wp-content/themes, wp-content/uploads
	private static $listingDirectories = null;

	private static function init_listingDirectories() {
		if ( null === MainWP_Security::$listingDirectories ) {
			$wp_upload_dir                      = wp_upload_dir();
			MainWP_Security::$listingDirectories = array(
				WP_CONTENT_DIR,
				WP_PLUGIN_DIR,
				get_theme_root(),
				$wp_upload_dir['basedir'],
			);
		}
	}

	public static function prevent_listing_ok() {
		MainWP_Security::init_listingDirectories();
		foreach ( MainWP_Security::$listingDirectories as $directory ) {
			$file = $directory . DIRECTORY_SEPARATOR . 'index.php';
			if ( ! file_exists( $file ) ) {
				return false;
			}
		}

		return true;
	}

	public static function prevent_listing() {
		MainWP_Security::init_listingDirectories();
		foreach ( MainWP_Security::$listingDirectories as $directory ) {
			$file = $directory . DIRECTORY_SEPARATOR . 'index.php';
			if ( ! file_exists( $file ) ) {
				$h = fopen( $file, 'w' );
				fwrite( $h, '<?php ' . "\n" );
				fwrite( $h, "header(\$_SERVER['SERVER_PROTOCOL'] . ' 403 Forbidden' );" . "\n" );
				fwrite( $h, "die( '403 Fordibben' );" . "\n" );
				fclose( $h );
			}
		}
	}

	public static function get_security_option( $option ) {
		$security = get_option( 'mainwp_security' );

		return ! empty( $security ) && isset( $security[ $option ] ) && ( true === $security[ $option ] );
	}

	//Removed wp-version
	public static function remove_wp_version_ok() {
		return ! ( has_action( 'wp_head', 'wp_generator' ) || has_filter( 'wp_head', 'wp_generator' ) );
	}

	public static function remove_wp_version( $force = false ) {
		if ( $force || self::get_security_option( 'wp_version' ) ) {
			remove_action( 'wp_head', 'wp_generator' );
			remove_filter( 'wp_head', 'wp_generator' );
		}
	}

	//Removed Really Simple Discovery meta tag
	public static function remove_rsd_ok() {
		return ( ! has_action( 'wp_head', 'rsd_link' ) );
	}

	public static function remove_rsd( $force = false ) {
		if ( $force || self::get_security_option( 'rsd' ) ) {
			remove_action( 'wp_head', 'rsd_link' );
		}
	}

	//Removed Windows Live Writer meta tag
	public static function remove_wlw_ok() {
		return ( ! has_action( 'wp_head', 'wlwmanifest_link' ) );
	}

	public static function remove_wlw( $force = false ) {
		if ( $force || self::get_security_option( 'wlw' ) ) {
			remove_action( 'wp_head', 'wlwmanifest_link' );
		}
	}

	//Removed core update information for non-admins
	//    public static function remove_core_update_ok()
	//    {
	//        return self::get_security_option('core_updates');
	//    }

	//    public static function remove_core_update($force = false)
	//    {
	//        if ($force || self::get_security_option('core_updates'))
	//        {
	//            if (!current_user_can('update_plugins'))
	//            {
	//                add_action('admin_init', create_function('$a', "remove_action( 'admin_notices', 'maintenance_nag' );"));
	//                add_action('admin_init', create_function('$a', "remove_action( 'admin_notices', 'update_nag', 3 );"));
	//                add_action('admin_init', create_function('$a', "remove_action( 'admin_init', '_maybe_update_core' );"));
	//                add_action('init', create_function('$a', "remove_action( 'init', 'wp_version_check' );"));
	//                add_filter('pre_option_update_core', create_function('$a', "return null;"));
	//                remove_action('wp_version_check', 'wp_version_check');
	//                remove_action('admin_init', '_maybe_update_core');
	//                add_filter('pre_transient_update_core', create_function('$a', "return null;"));
	//                add_filter('pre_site_transient_update_core', create_function('$a', "return null;"));
	//            }
	//        }
	//    }

	//Removed plugin-update information for non-admins
	//    public static function remove_plugin_update_ok()
	//    {
	//        return self:get_security_option('plugin_updates');
	//    }

	//    public static function remove_plugin_update($force = false)
	//    {
	//        if ($force || self::get_security_option('plugin_updates'))
	//        {
	//            if (!current_user_can('update_plugins'))
	//            {
	//                add_action('admin_init', create_function('$a', "remove_action( 'admin_init', 'wp_plugin_update_rows' );"), 2);
	//                add_action('admin_init', create_function('$a', "remove_action( 'admin_init', '_maybe_update_plugins' );"), 2);
	//                add_action('admin_menu', create_function('$a', "remove_action( 'load-plugins.php', 'wp_update_plugins' );"));
	//                add_action('admin_init', create_function('$a', "remove_action( 'admin_init', 'wp_update_plugins' );"), 2);
	//                add_action('init', create_function('$a', "remove_action( 'init', 'wp_update_plugins' );"), 2);
	//                add_filter('pre_option_update_plugins', create_function('$a', "return null;"));
	//                remove_action('load-plugins.php', 'wp_update_plugins');
	//                remove_action('load-update.php', 'wp_update_plugins');
	//                remove_action('admin_init', '_maybe_update_plugins');
	//                remove_action('wp_update_plugins', 'wp_update_plugins');
	//                remove_action('load-update-core.php', 'wp_update_plugins');
	//                add_filter('pre_transient_update_plugins', create_function('$a', "return null;"));
	//            }
	//        }
	//    }

	//Removed theme-update information for non-admins
	//    public static function remove_theme_update_ok()
	//    {
	//        return self::get_security_option('theme_updates');
	//    }

	//    public static function remove_theme_update($force = false)
	//    {
	//        if ($force || self::get_security_option('theme_updates'))
	//        {
	//            if (!current_user_can('edit_themes'))
	//            {
	//                remove_action('load-themes.php', 'wp_update_themes');
	//                remove_action('load-update.php', 'wp_update_themes');
	//                remove_action('admin_init', '_maybe_update_themes');
	//                remove_action('wp_update_themes', 'wp_update_themes');
	//                remove_action('load-update-core.php', 'wp_update_themes');
	//                add_filter('pre_transient_update_themes', create_function('$a', "return null;"));
	//            }
	//        }
	//    }

	//File permissions not secure
	private static $permission_checks = null;

	private static function init_permission_checks() {
		if ( null === MainWP_Security::$permission_checks ) {
			MainWP_Security::$permission_checks = array(
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . '../'            => '0755',
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . '../wp-includes' => '0755',
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . '../.htaccess'   => '0644',
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . 'index.php'      => '0644',
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . 'js/'            => '0755',
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . 'themes'         => '0755',
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . 'plugins'        => '0755',
				WP_CONTENT_DIR . DIRECTORY_SEPARATOR . '../wp-admin'    => '0755',
				WP_CONTENT_DIR                                          => '0755',
			);
		}
	}

	//    public static function fix_file_permissions_ok()
	//    {
	//        MainWP_Security::init_permission_checks();
	//
	//        $perms_issues = 0;
	//
	//        foreach (MainWP_Security::$permission_checks as $dir => $needed_perms)
	//        {
	//            if (!file_exists($dir)) continue;
	//
	//            $perms = substr(sprintf('%o', fileperms($dir)), -4);
	//            if ($perms != $needed_perms)
	//            {
	//                $perms_issues++;
	//            }
	//        }
	//        return ($perms_issues == 0);
	//    }

	//    public static function fix_file_permissions()
	//    {
	//        MainWP_Security::init_permission_checks();
	//        $success = true;
	//        foreach (MainWP_Security::$permission_checks as $dir => $needed_perms)
	//        {
	//            if (!file_exists($dir)) continue;
	//            $success == $success && chmod($dir, $needed_perms);
	//        }
	//        return $success;
	//    }

	//Database error reporting turned on/off
	public static function remove_database_reporting_ok() {
		global $wpdb;

		return ( false === $wpdb->show_errors );
	}

	public static function remove_database_reporting() {
		global $wpdb;

		$wpdb->hide_errors();
		$wpdb->suppress_errors();
	}

	//PHP error reporting turned on/off
	public static function remove_php_reporting_ok() {
		return ! ( ( ( 0 != ini_get( 'display_errors' ) ) && ( 'off' != ini_get( 'display_errors' ) ) ) || ( ( 0 != ini_get( 'display_startup_errors' ) ) && ( 'off' != ini_get( 'display_startup_errors' ) ) ) );
	}

	public static function remove_php_reporting( $force = false ) {
		if ( $force || self::get_security_option( 'php_reporting' ) ) {
			@error_reporting( 0 );
			@ini_set( 'display_errors', 'off' );
			@ini_set( 'display_startup_errors', 0 );
		}
	}

	//Removed version information for scripts/stylesheets
	public static function remove_scripts_version_ok() {
		return self::get_security_option( 'scripts_version' );

		//        global $wp_scripts;
		//        if (!is_a($wp_scripts, 'WP_Scripts'))
		//        {
		//            return true;
		//        }
		//        foreach ($wp_scripts->registered as $handle => $script)
		//        {
		//            if ($wp_scripts->registered[$handle]->ver != null)
		//            {
		//                return false;
		//            }
		//        }
		//        return true;
	}

	public static function remove_script_versions( $src ) {
		if ( self::get_security_option( 'scripts_version' ) ) {
			if ( strpos( $src, '?ver=' ) ) {
				$src = remove_query_arg( 'ver', $src );
			}

			return $src;
		}
//		else if ( false === strpos( $src, '?ver=' ) ) {
//			self::update_security_option('scripts_version', true);
//		}

		return $src;
	}


	public static function remove_generator_version_ok() {
		return self::get_security_option( 'generator_version' );
	}

	public static function remove_generator_version( $force = false ) {
		if ( $force || self::get_security_option( 'generator_version' ) ) {
			$types = array( 'html', 'xhtml', 'atom', 'rss2', 'rdf', 'comment', 'export' );
			foreach ( $types as $type ) {
				add_filter( 'get_the_generator_' . $type, array( 'MainWP_Security', 'custom_the_generator' ), 10, 2 );
			}
		}
	}

	public static function custom_the_generator( $generator, $type = '' ) {
		return '';
	}

	public static function remove_theme_versions( $src ) {
		if ( self::get_security_option( 'styles_version' ) ) {
			if ( strpos( $src, '?ver=' ) ) {
				$src = remove_query_arg( 'ver', $src );
			}

			return $src;
		}
//		else if ( false === strpos( $src, '?ver=' ) ) {
//			self::update_security_option('styles_version', true);
//		}

		return $src;
	}

	public static function remove_scripts_version( $force = false ) {
		if ( $force || self::get_security_option( 'scripts_version' ) ) {
			global $wp_scripts;
			if ( !( $wp_scripts instanceof WP_Scripts ) ) {
				return;
			}

			foreach ( $wp_scripts->registered as $handle => $script ) {
				$wp_scripts->registered[ $handle ]->ver = null;
			}
		}
	}

	public static function remove_readme( $force = false ) {
		if ( $force || self::get_security_option( 'readme' ) ) {
			if ( @file_exists( ABSPATH . 'readme.html' ) ) {
				if ( ! @unlink( ABSPATH . 'readme.html' ) ) {
					MainWP_Helper::getWPFilesystem();
					global $wp_filesystem;
					if ( ! empty( $wp_filesystem ) ) {
						$wp_filesystem->delete( ABSPATH . 'readme.html' );
						if ( @file_exists( ABSPATH . 'readme.html' ) ) {
							// prevent repeat delete
							self::update_security_option('readme', false);
						}
					}
				}
			}
		}
	}

	public static function remove_readme_ok() {
		return ! file_exists( ABSPATH . 'readme.html' );
	}

	public static function remove_styles_version_ok() {
		return self::get_security_option( 'styles_version' );

		//        global $wp_styles;
		//        if (!is_a($wp_styles, 'WP_Styles'))
		//        {
		//            return true;
		//        }
		//
		//        foreach ($wp_styles->registered as $handle => $style)
		//        {
		//            if ($wp_styles->registered[$handle]->ver != null)
		//            {
		//                return false;
		//            }
		//        }
		//        return true;
	}

	public static function remove_styles_version( $force = true ) {
		if ( $force || self::get_security_option( 'styles_version' ) ) {
			global $wp_styles;
			if ( !( $wp_styles instanceof WP_Styles ) ) {
				return;
			}

			foreach ( $wp_styles->registered as $handle => $style ) {
				$wp_styles->registered[ $handle ]->ver = null;
			}
		}
	}

	//Admin user name is not admin
	public static function admin_user_ok() {
		$user = get_user_by( 'login', 'admin' );
		if ( ! $user ) return true;

		if ( 10 !== $user->wp_user_level && ( ! isset( $user->user_level ) || 10 !== $user->user_level ) && ! user_can( $user, 'level_10' ) ) {
			return true;
		}

		return false;
	}

	public static function update_security_option( $key, $value ) {
		$security = get_option( 'mainwp_security' );
		if ( !empty($key) )
			$security[$key] = $value;
		MainWP_Helper::update_option( 'mainwp_security', $security, 'yes' );
	}
}