<?php
/**
 * Query Filters.
 *
 * These functions register the frontend query vars.
 *
 * @package     EDD
 * @subpackage  Functions
 * @copyright   Copyright (c) 2018, Easy Digital Downloads, LLC
 * @license     http://opensource.org/licenses/gpl-2.0.php GNU Public License
 * @since       1.0
 */

// Exit if accessed directly
defined( 'ABSPATH' ) || exit;

/**
 * Blocks access to download attachments.
 *
 * Only blocks files that are listed as downloadable files for the product.
 *
 * @since 1.2.2
 */
function edd_block_attachments() {

	// Bail if not an attachment.
	if ( ! is_attachment() ) {
		return;
	}

	$parent   = get_post_field( 'post_parent', get_the_ID() );
	$uri      = wp_get_attachment_url( get_the_ID() );
	$edd_dir  = edd_get_uploads_base_dir();
	$edd_file = strpos( $uri, '/' . $edd_dir . '/' );

	if ( ! $parent && false === $edd_file ) {
		return;
	}

	if ( 'download' !== get_post_type( $parent ) && false === $edd_file ) {
		return;
	}

	$files      = edd_get_download_files( $parent );
	$restricted = wp_list_pluck( $files, 'file' );

	if ( ! in_array( $uri, $restricted, true ) ) {
		return;
	}

	wp_die( esc_html__( 'You do not have permission to view this file.', 'easy-digital-downloads' ), esc_html__( 'Error', 'easy-digital-downloads' ), array( 'response' => 403 ) );
}
add_action( 'template_redirect', 'edd_block_attachments' );

/**
 * Removes our tracking query arg so as not to interfere with the WP query.
 *
 * @see https://core.trac.wordpress.org/ticket/25143
 *
 * @since 2.4.3
 *
 * @param WP_Query $query.
 */
function edd_unset_discount_query_arg( $query ) {
	if ( is_admin() || ! $query->is_main_query() || ! empty( $query->query_vars['edd-api'] ) ) {
		return;
	}

	$discount = $query->get( 'discount' );

	if ( ! empty( $discount ) ) {

		// Unset ref var from $wp_query.
		$query->set( 'discount', null );

		global $wp;

		// Unset ref var from $wp.
		unset( $wp->query_vars['discount'] );

		// If on home (because $wp->query_vars is empty) and 'show_on_front' is page
		if ( empty( $wp->query_vars ) && get_option( 'show_on_front' ) === 'page' ) {

			// Reset and re-parse query vars.
			$wp->query_vars['page_id'] = get_option( 'page_on_front' );
			$query->parse_query( $wp->query_vars );
		}
	}
}
add_action( 'pre_get_posts', 'edd_unset_discount_query_arg', 999999 );

/**
 * Filters on canonical redirects.
 *
 * @since 2.4.3
 *
 * @param string $redirect_url  Redirect URL.
 * @param string $requested_url Requested URL.
 *
 * @return string
 */
function edd_prevent_canonical_redirect( $redirect_url, $requested_url ) {

	if ( ! is_front_page() ) {
		return $redirect_url;
	}

	$discount = get_query_var( 'discount' );

	if ( ! empty( $discount ) || false !== strpos( $requested_url, 'discount' ) ) {
		$redirect_url = $requested_url;
	}

	return $redirect_url;
}
add_action( 'redirect_canonical', 'edd_prevent_canonical_redirect', 0, 2 );

/**
 * Auto flush permalinks wth a soft flush when a 404 error is detected on an
 * EDD page.
 *
 * @since 2.4.3
 *
 * @return string
 */
function edd_refresh_permalinks_on_bad_404() {
	global $wp;

	if ( ! is_404() ) {
		return;
	}

	if ( isset( $_GET['edd-flush'] ) ) { // WPCS: CSRF ok.
		return;
	}

	if ( false === get_transient( 'edd_refresh_404_permalinks' ) ) {
		$slug = defined( 'EDD_SLUG' )
			? EDD_SLUG
			: 'downloads';

		$parts = explode( '/', $wp->request );

		if ( $slug !== $parts[0] ) {
			return;
		}

		flush_rewrite_rules( false );

		set_transient( 'edd_refresh_404_permalinks', 1, HOUR_IN_SECONDS * 12 );

		edd_redirect( home_url( add_query_arg( array( 'edd-flush' => 1 ), $wp->request ) ) );
	}
}
add_action( 'template_redirect', 'edd_refresh_permalinks_on_bad_404' );