<?php

namespace GenieAi\App\Api;

class Store
{

    public $prefix  = '';
    public $param   = '';
    public $request = null;

    public function __construct()
    {
        add_action('rest_api_init', function () {
            register_rest_route('getgenie/v1/store', '(?P<post_id>[\d]+)/(?P<key>[\w-]+)', array(
                'methods'             => \WP_REST_Server::ALLMETHODS,
                'callback'            => [$this, 'action'],
                'permission_callback' => '__return_true',
            ));
        });
    }

    public function action($request)
    {
        if (!wp_verify_nonce($request->get_header('X-WP-Nonce'), 'wp_rest')) {
            return [
                'status'  => 'fail',
                'message' => ['Nonce mismatch.'],
            ];
        }

        $post_id = $request['post_id'];

        if (!is_user_logged_in() || !current_user_can('edit_post', $post_id)) {
            return [
                'status'  => 'fail',
                'message' => ['Access denied.'],
            ];
        }

        $data = $request->get_body();
        $key     = $request['key'];
        $prefix  = GETGENIE_BLOGWIZARD_PREFIX;

        if (!in_array($key, getgenie_blogwizard_store_objects())) {
            return [
                "status"  => "fail",
                "message" => [
                    "Invalid key",
                ],
            ];
        }
 
        if (!empty($key) && $key == 'serpData') {
            $data = json_decode($data);
            $serpData = json_decode(get_post_meta($post_id, $prefix . $key, true));
         
            if (!empty($serpData) && !empty($serpData->competitorData) && !empty($data->competitorData)) {

                array_push($serpData->competitorData, $data->competitorData[0]);
                $data->competitorData = $serpData->competitorData;
            }
            
            $serpData = (object) array_merge((array) $serpData, (array) $data);
            
            if (isset($data->competitorData) && empty($data->competitorData)) {
                $serpData->competitorData = "";
            }
            
            $data = json_encode($serpData);

        }

        // Sanitize the data to prevent XSS attacks
        $data = wp_kses_post($data);

        update_post_meta($post_id, $prefix . $key, wp_slash($data));

        return [
            "status"  => "success",
            "data" => get_post_meta($post_id, $prefix . $key, true),
            "message" => [
                "Successfully stored",
            ],
        ];
    }
}
