jw-core.php

<?php
/**
 * Plugin Name: JW Core
 * Description: Core functions for JW themes and plugins.
 * Version: 1.0.3
 * Author: Juzaweb
 * Author URI: https://juzaweb.com
 * Text Domain: jw-core
 *
 * @package jw_core
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly.
}

require_once __DIR__ . '/inc/helpers.php';

/**
 * Lazyload images with lazysizes
 */
function jw_core_lazyload_attachment_image_attributes( $attr ) {
	// Only apply lazysizes on the frontend, not in the admin dashboard (e.g., Media Library)
	if ( is_admin() || is_feed() || is_preview() || get_option( 'jw_core_enable_lazyload', '1' ) !== '1' ) {
		return $attr;
	}

	// Skip WooCommerce gallery images and specified classes
	if ( isset( $attr['class'] ) && (
		strpos( $attr['class'], 'woocommerce-product-gallery__image' ) !== false ||
		strpos( $attr['class'], 'skip-lazy' ) !== false ||
		strpos( $attr['class'], 'no-lazyload' ) !== false
	) ) {
		return $attr;
	}

	if ( isset( $attr['src'] ) ) {
		$attr['data-src'] = $attr['src'];
		$attr['src']      = 'data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==';
	}

	if ( isset( $attr['srcset'] ) ) {
		$attr['data-srcset'] = $attr['srcset'];
		unset( $attr['srcset'] );
	}

	if ( isset( $attr['sizes'] ) ) {
		$attr['data-sizes'] = $attr['sizes'];
		unset( $attr['sizes'] );
	}

	// Add lazysizes class
	$attr['class'] = isset( $attr['class'] ) ? $attr['class'] . ' lazyload' : 'lazyload';

	return $attr;
}
add_filter( 'wp_get_attachment_image_attributes', 'jw_core_lazyload_attachment_image_attributes' );

/**
 * Lazyload images in post content
 */
function jw_core_lazyload_content_images( $content ) {
	if ( is_admin() || is_feed() || is_preview() || get_option( 'jw_core_enable_lazyload', '1' ) !== '1' ) {
		return $content;
	}

	if ( function_exists( 'wp_filter_content_tags' ) ) {
		$content = preg_replace_callback(
			'/<img([^>]+)>/i',
			function ( $matches ) {
				$img_tag    = $matches[0];
				$attributes = $matches[1];

				// Skip if already has data-src or exclusion classes
				if ( stripos( $attributes, 'data-src' ) !== false ||
					stripos( $attributes, 'skip-lazy' ) !== false ||
					stripos( $attributes, 'no-lazyload' ) !== false ||
					stripos( $attributes, 'woocommerce-product-gallery__image' ) !== false
				) {
					return $img_tag;
				}

				// Replace src with placeholder and data-src
				$img_tag = preg_replace( '/\bsrc=(["\'])(.*?)\1/i', 'src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" data-src=$1$2$1', $img_tag );

				// Replace srcset and sizes
				$img_tag = preg_replace( '/\b(srcset|sizes)=/i', 'data-$1=', $img_tag );

				// Add lazyload class
				if ( preg_match( '/\bclass=(["\'])(.*?)\1/i', $img_tag, $class_matches ) ) {
					$img_tag = preg_replace( '/\bclass=(["\'])(.*?)\1/i', 'class=$1$2 lazyload$1', $img_tag );
				} else {
					$img_tag = str_replace( '<img', '<img class="lazyload"', $img_tag );
				}

				return $img_tag;
			},
			$content
		);
	}

	return $content;
}
add_filter( 'the_content', 'jw_core_lazyload_content_images', 99 );

/**
 * Enqueue scripts for JW Core
 */
function jw_core_enqueue_scripts() {
	// Enqueue lazysizes script
	if ( get_option( 'jw_core_enable_lazyload', '1' ) === '1' ) {
		wp_enqueue_script( 'lazysizes', plugin_dir_url( __FILE__ ) . 'assets/js/lazysizes.min.js', array(), '5.3.2', false );
	}

	// Enqueue reCAPTCHA script if enabled
	if ( get_option( 'jw_core_enable_recaptcha', '0' ) === '1' ) {
		$site_key = get_option( 'jw_core_recaptcha_site_key', '' );
		if ( ! empty( $site_key ) ) {
			wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, false );
			wp_add_inline_script( 'google-recaptcha', 'window.jwCoreRecaptchaSiteKey = "' . esc_js( $site_key ) . '";', 'before' );
		}
	}
}
add_action( 'wp_enqueue_scripts', 'jw_core_enqueue_scripts' );

/**
 * Output FCM initialization script in footer
 */
function jw_core_get_fcm_option( $option_name, $default = '' ) {
	if ( is_multisite() ) {
		return get_site_option( $option_name, $default );
	}
	return get_option( $option_name, $default );
}

/**
 * Output FCM initialization script in footer
 */
function jw_core_fcm_footer_script() {
	$enable_fcm = jw_core_get_fcm_option( 'jw_core_enable_fcm', '0' );
	$fcm_config = jw_core_get_fcm_option( 'jw_core_fcm_config', '' );

	if ( $enable_fcm !== '1' || empty( $fcm_config ) ) {
		return;
	}

	$ajax_url = admin_url( 'admin-ajax.php' );
	$fcm_nonce = wp_create_nonce( 'jw_core_fcm_nonce' );
	?>
	<script src="https://www.gstatic.com/firebasejs/8.10.1/firebase-app.js"></script>
	<script src="https://www.gstatic.com/firebasejs/8.10.1/firebase-messaging.js"></script>
	<script>
	(function() {
		if (!firebase.apps.length) {
			const firebaseConfig = JSON.parse('{<?php echo wp_kses_post( $fcm_config ); ?>}');
			firebase.initializeApp(firebaseConfig);
		}

		const messaging = firebase.messaging();

		// Request permission and get token
		if ('Notification' in window) {
			Notification.requestPermission().then(function(permission) {
				if (permission === 'granted') {
					console.log('Notification permission granted.');

					messaging.getToken().then((currentToken) => {
						if (currentToken) {
							fetch('<?php echo esc_url( $ajax_url ); ?>', {
								method: 'POST',
								headers: {
									'Content-Type': 'application/x-www-form-urlencoded',
								},
								body: new URLSearchParams({
									action: 'jw_core_fcm_save_token',
									token: currentToken,
									nonce: '<?php echo esc_js( $fcm_nonce ); ?>'
								})
							}).catch(err => console.error('Error sending token to server', err));
						} else {
							console.log('No Instance ID token available. Request permission to generate one.');
						}
					}).catch((err) => {
						console.log('An error occurred while retrieving token. ', err);
					});
				} else {
					console.log('Unable to get permission to notify.');
				}
			});
		}

		// Handle foreground messages
		messaging.onMessage((payload) => {
			console.log('Message received in foreground. ', payload);

			fetch('<?php echo esc_url( $ajax_url ); ?>', {
				method: 'POST',
				headers: {
					'Content-Type': 'application/x-www-form-urlencoded',
				},
				body: new URLSearchParams({
					action: 'jw_core_fcm_message',
					payload: JSON.stringify(payload),
					nonce: '<?php echo esc_js( $fcm_nonce ); ?>'
				})
			}).catch(err => console.error('Error forwarding foreground message to server', err));
		});
	})();
	</script>
	<?php
}
add_action( 'wp_footer', 'jw_core_fcm_footer_script', 100 );

/**
 * Output Google Analytics script in header
 */
function jw_core_google_analytics_script() {
	$ga_id = get_option( 'jw_core_google_analytics_id', '' );
	if ( empty( $ga_id ) ) {
		return;
	}
	?>
	<!-- Google tag (gtag.js) -->
	<script async src="https://www.googletagmanager.com/gtag/js?id=<?php echo esc_attr( $ga_id ); ?>"></script>
	<script>
		window.dataLayer = window.dataLayer || [];
		function gtag(){dataLayer.push(arguments);}
		gtag('js', new Date());

		gtag('config', '<?php echo esc_attr( $ga_id ); ?>');
	</script>
	<?php
}
add_action( 'wp_head', 'jw_core_google_analytics_script', 20 );

/**
 * Output Custom Header Code.
 */
function jw_core_custom_header_code_output() {
	$custom_code = get_option( 'jw_core_custom_header_code', '' );
	if ( ! empty( $custom_code ) ) {
		echo $custom_code; // Output directly (intended to be raw HTML/JS/CSS)
	}
}
add_action( 'wp_head', 'jw_core_custom_header_code_output', 20 );

/**
 * Settings Page
 */
function jw_core_admin_menu() {
	add_menu_page(
		__( 'Juzaweb Settings', 'jw-core' ),
		__( 'Juzaweb', 'jw-core' ),
		'manage_options',
		'jw-core-settings',
		'jw_core_settings_page',
		'dashicons-admin-generic',
		99
	);

	add_submenu_page(
		'jw-core-settings',
		__( 'Juzaweb Settings', 'jw-core' ),
		__( 'Settings', 'jw-core' ),
		'manage_options',
		'jw-core-settings',
		'jw_core_settings_page'
	);

	add_submenu_page(
		'jw-core-settings',
		__( 'SMTP Settings', 'jw-core' ),
		__( 'SMTP Setup', 'jw-core' ),
		'manage_options',
		'jw-core-smtp',
		'jw_core_smtp_settings_page'
	);
}
add_action( 'admin_menu', 'jw_core_admin_menu' );

function jw_core_network_admin_menu() {
	add_menu_page(
		__( 'Juzaweb Settings', 'jw-core' ),
		__( 'Juzaweb', 'jw-core' ),
		'manage_network_options',
		'jw-core-network-settings',
		'jw_core_network_settings_page',
		'dashicons-admin-generic',
		99
	);
}
add_action( 'network_admin_menu', 'jw_core_network_admin_menu' );

/**
 * Sanitize SMTP Password to allow leaving blank without overwriting.
 *
 * @param string $input The new password.
 * @return string
 */
function jw_core_sanitize_smtp_password( $input ) {
	if ( empty( $input ) ) {
		return get_option( 'jw_core_smtp_password' );
	}
	return sanitize_text_field( $input );
}

function jw_core_register_settings() {
	register_setting( 'jw_core_settings_group', 'jw_core_enable_lazyload' );

	// SMTP Settings
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_enable' );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_host' );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_port' );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_encryption' );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_auth' );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_username' );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_password', array( 'sanitize_callback' => 'jw_core_sanitize_smtp_password' ) );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_from_email', array( 'sanitize_callback' => 'sanitize_email' ) );
	register_setting( 'jw_core_smtp_settings_group', 'jw_core_smtp_from_name', array( 'sanitize_callback' => 'sanitize_text_field' ) );
	register_setting( 'jw_core_settings_group', 'jw_core_enable_fcm' );
	register_setting( 'jw_core_settings_group', 'jw_core_enable_email_verification' );
	register_setting( 'jw_core_settings_group', 'jw_core_enable_recaptcha' );
	register_setting( 'jw_core_settings_group', 'jw_core_custom_header_code' );
	register_setting( 'jw_core_settings_group', 'jw_core_recaptcha_site_key', array( 'sanitize_callback' => 'sanitize_text_field' ) );
	register_setting( 'jw_core_settings_group', 'jw_core_recaptcha_secret_key', array( 'sanitize_callback' => 'sanitize_text_field' ) );
	register_setting( 'jw_core_settings_group', 'jw_core_show_admin_bar_user' );
	register_setting( 'jw_core_settings_group', 'jw_core_show_admin_bar_admin' );
	register_setting(
		'jw_core_settings_group',
		'jw_core_fcm_config',
		array(
			'sanitize_callback' => 'jw_core_sanitize_fcm_config',
		)
	);
	register_setting(
		'jw_core_settings_group',
		'jw_core_google_analytics_id',
		array(
			'sanitize_callback' => 'sanitize_text_field',
		)
	);
}
add_action( 'admin_init', 'jw_core_register_settings' );

/**
 * Sanitize and validate FCM config JSON.
 */
function jw_core_sanitize_fcm_config( $input ) {
	if ( empty( trim( $input ) ) ) {
		return '';
	}

	$unslashed_input = wp_unslash( $input );

	// Try parsing as JSON by wrapping it in { }
	$json_test = '{' . $unslashed_input . '}';
	$decoded   = json_decode( $json_test );

	if ( json_last_error() !== JSON_ERROR_NONE ) {
		add_settings_error(
			'jw_core_fcm_config',
			'invalid_fcm_config',
			__( 'Invalid Firebase Config format. It must be valid JSON content inside the braces.', 'jw-core' )
		);
		return get_option( 'jw_core_fcm_config', '' );
	}

	return $unslashed_input;
}

/**
 * Handle writing/deleting firebase-messaging-sw.js
 */
function jw_core_handle_fcm_sw_file( $old_value, $new_value ) {
	$enable_fcm = jw_core_get_fcm_option( 'jw_core_enable_fcm', '0' );
	$fcm_config = jw_core_get_fcm_option( 'jw_core_fcm_config', '' );

	// Check which option is being saved based on the current action hook
	$current_filter = current_filter();
	if ( strpos( $current_filter, 'jw_core_enable_fcm' ) !== false ) {
		$enable_fcm = $new_value;
	} elseif ( strpos( $current_filter, 'jw_core_fcm_config' ) !== false ) {
		$fcm_config = $new_value;
	}

	$file_path = ABSPATH . 'firebase-messaging-sw.js';
	$ajax_url  = admin_url( 'admin-ajax.php' );

	if ( $enable_fcm === '1' && ! empty( $fcm_config ) ) {
		$sw_content = <<<EOD
importScripts('https://www.gstatic.com/firebasejs/8.10.1/firebase-app.js');
importScripts('https://www.gstatic.com/firebasejs/8.10.1/firebase-messaging.js');

firebase.initializeApp({
{$fcm_config}
});

const messaging = firebase.messaging();

messaging.onBackgroundMessage((payload) => {
  console.log('[firebase-messaging-sw.js] Received background message ', payload);

  // Forward to server
  fetch('{$ajax_url}', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/x-www-form-urlencoded',
    },
    body: new URLSearchParams({
      action: 'jw_core_fcm_message',
      payload: JSON.stringify(payload)
    })
  });
});
EOD;
		file_put_contents( $file_path, $sw_content );
	} elseif ( file_exists( $file_path ) ) {
			unlink( $file_path );
	}
}

add_action( 'update_option_jw_core_enable_fcm', 'jw_core_handle_fcm_sw_file', 10, 2 );
add_action( 'add_option_jw_core_enable_fcm', 'jw_core_handle_fcm_sw_file', 10, 2 );

add_action( 'update_option_jw_core_fcm_config', 'jw_core_handle_fcm_sw_file', 10, 2 );
add_action( 'add_option_jw_core_fcm_config', 'jw_core_handle_fcm_sw_file', 10, 2 );

add_action( 'update_site_option_jw_core_enable_fcm', 'jw_core_handle_fcm_sw_file', 10, 2 );
add_action( 'add_site_option_jw_core_enable_fcm', 'jw_core_handle_fcm_sw_file', 10, 2 );

add_action( 'update_site_option_jw_core_fcm_config', 'jw_core_handle_fcm_sw_file', 10, 2 );
add_action( 'add_site_option_jw_core_fcm_config', 'jw_core_handle_fcm_sw_file', 10, 2 );

/**
 * Handle FCM message AJAX request
 */
function jw_core_fcm_message_handler() {
	check_ajax_referer( 'jw_core_fcm_nonce', 'nonce' );

	$payload = isset( $_POST['payload'] ) ? json_decode( wp_unslash( $_POST['payload'] ), true ) : array();

	if ( ! empty( $payload ) ) {
		// Sanitize payload data
		$sanitized_payload = array_map( function( $item ) {
			return is_array( $item ) ? $item : sanitize_text_field( $item );
		}, $payload );

		do_action( 'jw_fcm_message_received', $sanitized_payload );
	}

	wp_send_json_success();
}
add_action( 'wp_ajax_jw_core_fcm_message', 'jw_core_fcm_message_handler' );
add_action( 'wp_ajax_nopriv_jw_core_fcm_message', 'jw_core_fcm_message_handler' );

/**
 * Handle FCM token saving AJAX request
 */
function jw_core_fcm_save_token_handler() {
	check_ajax_referer( 'jw_core_fcm_nonce', 'nonce' );

	$token = isset( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : '';

	if ( ! empty( $token ) ) {
		global $wpdb;
		$table_name = $wpdb->prefix . 'jw_notification_subscribers';

		$ip = isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '127.0.0.1';

		$wpdb->replace(
			$table_name,
			array(
				'driver'     => 'fcm',
				'identifier' => $ip,
				'token'      => $token,
			),
			array(
				'%s',
				'%s',
				'%s',
			)
		);

		do_action( 'jw_fcm_token_received', $token );
	}

	wp_send_json_success();
}
add_action( 'wp_ajax_jw_core_fcm_save_token', 'jw_core_fcm_save_token_handler' );
add_action( 'wp_ajax_nopriv_jw_core_fcm_save_token', 'jw_core_fcm_save_token_handler' );

function jw_core_network_settings_page() {
	if ( ! current_user_can( 'manage_network_options' ) ) {
		return;
	}

	if ( isset( $_POST['jw_core_network_settings_nonce'] ) && wp_verify_nonce( wp_unslash( $_POST['jw_core_network_settings_nonce'] ), 'jw_core_network_settings_action' ) ) {
		$enable_fcm = isset( $_POST['jw_core_enable_fcm'] ) ? '1' : '0';
		$fcm_config = isset( $_POST['jw_core_fcm_config'] ) ? jw_core_sanitize_fcm_config( wp_unslash( $_POST['jw_core_fcm_config'] ) ) : '';

		update_site_option( 'jw_core_enable_fcm', $enable_fcm );
		update_site_option( 'jw_core_fcm_config', $fcm_config );

		echo '<div class="notice notice-success is-dismissible"><p>' . esc_html__( 'Settings saved.', 'jw-core' ) . '</p></div>';
	}

	$default_fcm_config = <<<'EOD'
  "apiKey": "YOUR_API_KEY",
  "projectId": "YOUR_PROJECT_ID",
  "messagingSenderId": "YOUR_SENDER_ID",
  "appId": "YOUR_APP_ID"
EOD;

	$fcm_config = get_site_option( 'jw_core_fcm_config', $default_fcm_config );
	?>
	<div class="wrap">
		<h1><?php esc_html_e( 'Juzaweb Network Settings', 'jw-core' ); ?></h1>
		<form method="post" action="">
			<?php wp_nonce_field( 'jw_core_network_settings_action', 'jw_core_network_settings_nonce' ); ?>
			<table class="form-table">
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Enable Firebase Cloud Messaging (FCM)', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_enable_fcm" value="0" />
						<input type="checkbox" name="jw_core_enable_fcm" value="1" <?php checked( '1', get_site_option( 'jw_core_enable_fcm', '0' ) ); ?> />
						<p class="description"><?php esc_html_e( 'Turn on/off FCM integration. When enabled, the service worker with the config below will be generated in the root folder.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Firebase Config (JSON format)', 'jw-core' ); ?></th>
					<td>
						<textarea name="jw_core_fcm_config" rows="10" class="large-text code"><?php echo esc_textarea( $fcm_config ); ?></textarea>
						<p class="description">
							<?php
							printf(
								/* translators: %s: Code snippet */
								esc_html__( 'Enter the contents inside %s here. Do not include the outer curly braces.', 'jw-core' ),
								'<code>firebase.initializeApp({ ... })</code>'
							);
							?>
						</p>
					</td>
				</tr>
			</table>
			<?php submit_button(); ?>
		</form>
	</div>
	<?php
}

function jw_core_smtp_settings_page() {
	if ( ! current_user_can( 'manage_options' ) ) {
		return;
	}
	?>
	<div class="wrap">
		<h1><?php esc_html_e( 'SMTP Settings', 'jw-core' ); ?></h1>
		<form method="post" action="options.php">
			<?php settings_fields( 'jw_core_smtp_settings_group' ); ?>
			<table class="form-table">
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Enable SMTP', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_smtp_enable" value="0" />
						<input type="checkbox" name="jw_core_smtp_enable" value="1" <?php checked( '1', get_option( 'jw_core_smtp_enable', '0' ) ); ?> />
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'SMTP Host', 'jw-core' ); ?></th>
					<td><input type="text" name="jw_core_smtp_host" value="<?php echo esc_attr( get_option( 'jw_core_smtp_host' ) ); ?>" class="regular-text" /></td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'SMTP Port', 'jw-core' ); ?></th>
					<td><input type="number" name="jw_core_smtp_port" value="<?php echo esc_attr( get_option( 'jw_core_smtp_port', '587' ) ); ?>" class="small-text" /></td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Encryption', 'jw-core' ); ?></th>
					<td>
						<select name="jw_core_smtp_encryption">
							<option value="none" <?php selected( 'none', get_option( 'jw_core_smtp_encryption', 'none' ) ); ?>><?php esc_html_e( 'None', 'jw-core' ); ?></option>
							<option value="ssl" <?php selected( 'ssl', get_option( 'jw_core_smtp_encryption', 'none' ) ); ?>><?php esc_html_e( 'SSL', 'jw-core' ); ?></option>
							<option value="tls" <?php selected( 'tls', get_option( 'jw_core_smtp_encryption', 'none' ) ); ?>><?php esc_html_e( 'TLS', 'jw-core' ); ?></option>
						</select>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'SMTP Authentication', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_smtp_auth" value="0" />
						<input type="checkbox" name="jw_core_smtp_auth" value="1" <?php checked( '1', get_option( 'jw_core_smtp_auth', '1' ) ); ?> />
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'SMTP Username', 'jw-core' ); ?></th>
					<td><input type="text" name="jw_core_smtp_username" value="<?php echo esc_attr( get_option( 'jw_core_smtp_username' ) ); ?>" class="regular-text" /></td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'SMTP Password', 'jw-core' ); ?></th>
					<td>
						<input type="password" name="jw_core_smtp_password" value="" class="regular-text" placeholder="<?php echo get_option( 'jw_core_smtp_password' ) ? '********' : ''; ?>" />
						<p class="description"><?php esc_html_e( 'Leave blank to keep the current password.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'From Email', 'jw-core' ); ?></th>
					<td><input type="email" name="jw_core_smtp_from_email" value="<?php echo esc_attr( get_option( 'jw_core_smtp_from_email' ) ); ?>" class="regular-text" /></td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'From Name', 'jw-core' ); ?></th>
					<td><input type="text" name="jw_core_smtp_from_name" value="<?php echo esc_attr( get_option( 'jw_core_smtp_from_name' ) ); ?>" class="regular-text" /></td>
				</tr>
			</table>
			<?php submit_button(); ?>
		</form>

		<hr>

		<h2><?php esc_html_e( 'Test Send Email', 'jw-core' ); ?></h2>
		<p><?php esc_html_e( 'Enter an email address to send a test email. Make sure to save the settings above first.', 'jw-core' ); ?></p>
		<table class="form-table">
			<tr valign="top">
				<th scope="row"><?php esc_html_e( 'Test Email Address', 'jw-core' ); ?></th>
				<td>
					<input type="email" id="jw-core-test-email" class="regular-text" />
					<button type="button" class="button button-secondary" id="jw-core-test-email-btn"><?php esc_html_e( 'Send Test Email', 'jw-core' ); ?></button>
					<span class="spinner" id="jw-core-test-email-spinner"></span>
					<p class="description" id="jw-core-test-email-msg" style="margin-top: 5px;"></p>
				</td>
			</tr>
		</table>
		<script type="text/javascript">
		jQuery(document).ready(function($) {
			$('#jw-core-test-email-btn').on('click', function() {
				var email = $('#jw-core-test-email').val();
				var btn = $(this);
				var spinner = $('#jw-core-test-email-spinner');
				var msg = $('#jw-core-test-email-msg');

				if (!email) {
					alert('<?php esc_html_e( 'Please enter an email address.', 'jw-core' ); ?>');
					return;
				}

				btn.prop('disabled', true);
				spinner.addClass('is-active');
				msg.text('<?php esc_html_e( 'Sending...', 'jw-core' ); ?>').css('color', '');

				$.ajax({
					url: ajaxurl,
					type: 'POST',
					data: {
						action: 'jw_core_test_smtp',
						email: email,
						nonce: '<?php echo wp_create_nonce( 'jw_core_test_smtp_nonce' ); ?>'
					},
					success: function(response) {
						btn.prop('disabled', false);
						spinner.removeClass('is-active');

						if (response.success) {
							msg.text(response.data.message).css('color', 'green');
						} else {
							msg.text(response.data.message).css('color', 'red');
						}
					},
					error: function() {
						btn.prop('disabled', false);
						spinner.removeClass('is-active');
						msg.text('<?php esc_html_e( 'An error occurred during the AJAX request.', 'jw-core' ); ?>').css('color', 'red');
					}
				});
			});
		});
		</script>
	</div>
	<?php
}

function jw_core_settings_page() {
	if ( ! current_user_can( 'manage_options' ) ) {
		return;
	}

	$default_fcm_config = <<<'EOD'
  "apiKey": "YOUR_API_KEY",
  "projectId": "YOUR_PROJECT_ID",
  "messagingSenderId": "YOUR_SENDER_ID",
  "appId": "YOUR_APP_ID"
EOD;

	$fcm_config = get_option( 'jw_core_fcm_config', $default_fcm_config );
	?>
	<div class="wrap">
		<h1><?php esc_html_e( 'Juzaweb Settings', 'jw-core' ); ?></h1>
		<form method="post" action="options.php">
			<?php settings_fields( 'jw_core_settings_group' ); ?>
			<table class="form-table">
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Enable Image Lazyload (Lazysizes)', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_enable_lazyload" value="0" />
						<input type="checkbox" name="jw_core_enable_lazyload" value="1" <?php checked( '1', get_option( 'jw_core_enable_lazyload', '1' ) ); ?> />
						<p class="description"><?php esc_html_e( 'Turn on/off lazy loading for images on the frontend.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<?php if ( ! is_multisite() ) : ?>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Enable Firebase Cloud Messaging (FCM)', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_enable_fcm" value="0" />
						<input type="checkbox" name="jw_core_enable_fcm" value="1" <?php checked( '1', get_option( 'jw_core_enable_fcm', '0' ) ); ?> />
						<p class="description"><?php esc_html_e( 'Turn on/off FCM integration. When enabled, the service worker with the config below will be generated in the root folder.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<?php endif; ?>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Enable Email Verification', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_enable_email_verification" value="0" />
						<input type="checkbox" name="jw_core_enable_email_verification" value="1" <?php checked( '1', get_option( 'jw_core_enable_email_verification', '0' ) ); ?> />
						<p class="description"><?php esc_html_e( 'If enabled, users must verify their email after registration to access features.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Enable reCAPTCHA v2 Invisible', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_enable_recaptcha" value="0" />
						<input type="checkbox" name="jw_core_enable_recaptcha" value="1" <?php checked( '1', get_option( 'jw_core_enable_recaptcha', '0' ) ); ?> />
						<p class="description"><?php esc_html_e( 'If enabled, users must pass reCAPTCHA to subscribe email.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'reCAPTCHA Site Key', 'jw-core' ); ?></th>
					<td>
						<input type="text" name="jw_core_recaptcha_site_key" value="<?php echo esc_attr( get_option( 'jw_core_recaptcha_site_key', '' ) ); ?>" class="regular-text" />
						<p class="description"><?php esc_html_e( 'Enter your reCAPTCHA v2 Invisible Site Key.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'reCAPTCHA Secret Key', 'jw-core' ); ?></th>
					<td>
						<input type="text" name="jw_core_recaptcha_secret_key" value="<?php echo esc_attr( get_option( 'jw_core_recaptcha_secret_key', '' ) ); ?>" class="regular-text" />
						<p class="description"><?php esc_html_e( 'Enter your reCAPTCHA v2 Invisible Secret Key.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Show Admin Bar for Users', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_show_admin_bar_user" value="0" />
						<input type="checkbox" name="jw_core_show_admin_bar_user" value="1" <?php checked( '1', get_option( 'jw_core_show_admin_bar_user', '0' ) ); ?> />
						<p class="description"><?php esc_html_e( 'Turn on/off admin bar for regular users on the frontend.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Show Admin Bar for Admins', 'jw-core' ); ?></th>
					<td>
						<input type="hidden" name="jw_core_show_admin_bar_admin" value="0" />
						<input type="checkbox" name="jw_core_show_admin_bar_admin" value="1" <?php checked( '1', get_option( 'jw_core_show_admin_bar_admin', '1' ) ); ?> />
						<p class="description"><?php esc_html_e( 'Turn on/off admin bar for administrators on the frontend.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<?php if ( ! is_multisite() ) : ?>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Firebase Config (JSON format)', 'jw-core' ); ?></th>
					<td>
						<textarea name="jw_core_fcm_config" rows="10" class="large-text code"><?php echo esc_textarea( $fcm_config ); ?></textarea>
						<p class="description">
							<?php
							printf(
								/* translators: %s: Code snippet */
								esc_html__( 'Enter the contents inside %s here. Do not include the outer curly braces.', 'jw-core' ),
								'<code>firebase.initializeApp({ ... })</code>'
							);
							?>
						</p>
					</td>
				</tr>
				<?php endif; ?>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Google Analytics ID', 'jw-core' ); ?></th>
					<td>
						<input type="text" name="jw_core_google_analytics_id" value="<?php echo esc_attr( get_option( 'jw_core_google_analytics_id', '' ) ); ?>" class="regular-text" />
						<p class="description"><?php esc_html_e( 'Enter your Google Analytics Measurement ID (e.g., G-XXXXXXXXXX).', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Custom Header Code', 'jw-core' ); ?></th>
					<td>
						<textarea name="jw_core_custom_header_code" rows="10" class="large-text code"><?php echo esc_textarea( get_option( 'jw_core_custom_header_code', '' ) ); ?></textarea>
						<p class="description"><?php esc_html_e( 'Enter your custom code (HTML/JS/CSS) to be injected into the theme\'s <head>.', 'jw-core' ); ?></p>
					</td>
				</tr>
				<tr valign="top">
					<th scope="row"><?php esc_html_e( 'Create Missing Template Pages', 'jw-core' ); ?></th>
					<td>
						<button type="button" class="button button-secondary" id="jw-core-create-pages-btn">
							<?php esc_html_e( 'Create Pages', 'jw-core' ); ?>
						</button>
						<span class="spinner" id="jw-core-create-pages-spinner"></span>
						<p class="description" id="jw-core-create-pages-msg" style="margin-top: 5px;"></p>
					</td>
				</tr>
			</table>
			<?php submit_button(); ?>
		</form>
	</div>

	<script type="text/javascript">
	jQuery(document).ready(function($) {
		$('#jw-core-create-pages-btn').on('click', function() {
			var btn = $(this);
			var spinner = $('#jw-core-create-pages-spinner');
			var msg = $('#jw-core-create-pages-msg');

			btn.prop('disabled', true);
			spinner.addClass('is-active');
			msg.text('Creating pages...').css('color', '');

			$.ajax({
				url: ajaxurl,
				type: 'POST',
				data: {
					action: 'jw_core_create_template_pages',
					_ajax_nonce: '<?php echo wp_create_nonce( 'jw_core_create_pages_nonce' ); ?>'
				},
				success: function(response) {
					if (response.success) {
						msg.text(response.data.message).css('color', 'green');
					} else {
						msg.text(response.data.message || 'An error occurred.').css('color', 'red');
					}
				},
				error: function() {
					msg.text('An error occurred.').css('color', 'red');
				},
				complete: function() {
					btn.prop('disabled', false);
					spinner.removeClass('is-active');
				}
			});
		});
	});
	</script>
	<?php
}

/**
 * Handle AJAX request to create missing template pages.
 */
function jw_core_create_template_pages_ajax() {
    // phpcs:ignore WordPress.Security.NonceVerification.Missing
	if ( ! isset( $_POST['_ajax_nonce'] ) || ! wp_verify_nonce( sanitize_key( $_POST['_ajax_nonce'] ), 'jw_core_create_pages_nonce' ) ) {
		wp_send_json_error( array( 'message' => __( 'Security check failed.', 'jw-core' ) ) );
		return;
	}

	if ( ! current_user_can( 'manage_options' ) ) {
		wp_send_json_error( array( 'message' => __( 'You do not have permission to do this.', 'jw-core' ) ) );
		return;
	}

	$templates = wp_get_theme()->get_page_templates();

	if ( empty( $templates ) ) {
		wp_send_json_error( array( 'message' => __( 'No templates found in the active theme.', 'jw-core' ) ) );
		return;
	}

	$created  = 0;
	$existing = 0;

	foreach ( $templates as $file => $name ) {
		$pages = get_pages(
			array(
				'meta_key'   => '_wp_page_template',
				'meta_value' => $file,
				'number'     => 1,
			)
		);

		if ( ! empty( $pages ) ) {
			++$existing;
			continue;
		}

		$post_content = '';

		if ( stripos( $file, 'contact' ) !== false || stripos( $name, 'contact' ) !== false ) {
			$cf7_forms = get_posts(
				array(
					'post_type'      => 'wpcf7_contact_form',
					'posts_per_page' => 1,
					'post_status'    => 'publish',
				)
			);

			if ( ! empty( $cf7_forms ) ) {
				$cf7_form     = $cf7_forms[0];
				$post_content = sprintf( '[contact-form-7 id="%1$d" title="%2$s"]', $cf7_form->ID, $cf7_form->post_title );
			}
		}

		$page_id = wp_insert_post(
			array(
				'post_title'    => sanitize_text_field( $name ),
				'post_status'   => 'publish',
				'post_type'     => 'page',
				'post_content'  => $post_content,
				'page_template' => sanitize_text_field( $file ),
			)
		);

		if ( ! is_wp_error( $page_id ) ) {
			++$created;

			if ( stripos( $file, 'home' ) !== false || stripos( $name, 'home' ) !== false ) {
				update_option( 'show_on_front', 'page' );
				update_option( 'page_on_front', $page_id );
			}

			do_action( 'jw_core_after_create_template_page', $page_id, $file, $name );
		}
	}

	/* translators: 1: number of created pages, 2: number of existing pages */
	$message = sprintf( __( 'Created %1$d new pages. %2$d pages already existed.', 'jw-core' ), $created, $existing );
	wp_send_json_success( array( 'message' => $message ) );
}
add_action( 'wp_ajax_jw_core_create_template_pages', 'jw_core_create_template_pages_ajax' );

/**
 * Create JW Notifications Table
 */
function jw_core_create_notification_table() {
	global $wpdb;
	$table_name      = $wpdb->prefix . 'jw_notifications';
	$charset_collate = $wpdb->get_charset_collate();

	$sql = "CREATE TABLE $table_name (
        id bigint(20) NOT NULL AUTO_INCREMENT,
        title varchar(255) NOT NULL,
        driver varchar(50) NOT NULL,
        body text NOT NULL,
        image varchar(255) DEFAULT '' NOT NULL,
        status varchar(20) DEFAULT 'pending' NOT NULL,
        created_at datetime DEFAULT CURRENT_TIMESTAMP NOT NULL,
        PRIMARY KEY  (id)
    ) $charset_collate;";

	$table_subscribers = $wpdb->prefix . 'jw_notification_subscribers';
	$sql_subscribers   = "CREATE TABLE $table_subscribers (
        id bigint(20) NOT NULL AUTO_INCREMENT,
        driver varchar(50) NOT NULL,
        identifier varchar(255) NOT NULL,
        token text DEFAULT NULL,
        created_at datetime DEFAULT CURRENT_TIMESTAMP NOT NULL,
        PRIMARY KEY  (id),
        UNIQUE KEY driver_identifier (driver, identifier)
    ) $charset_collate;";

	$table_queue = $wpdb->prefix . 'jw_notification_queue';
	$sql_queue   = "CREATE TABLE $table_queue (
        id bigint(20) NOT NULL AUTO_INCREMENT,
        notification_id bigint(20) NOT NULL,
        subscriber_id bigint(20) NOT NULL,
        status varchar(20) DEFAULT 'pending' NOT NULL,
        created_at datetime DEFAULT CURRENT_TIMESTAMP NOT NULL,
        PRIMARY KEY  (id),
        KEY notification_id (notification_id),
        KEY status (status)
    ) $charset_collate;";

	$table_user_notifications = $wpdb->prefix . 'jw_user_notifications';
	$sql_user_notifications   = "CREATE TABLE $table_user_notifications (
        id bigint(20) NOT NULL AUTO_INCREMENT,
        user_id bigint(20) NOT NULL,
        title varchar(255) NOT NULL,
        body text NOT NULL,
        image varchar(255) DEFAULT '' NOT NULL,
        is_read tinyint(1) DEFAULT 0 NOT NULL,
        created_at datetime DEFAULT CURRENT_TIMESTAMP NOT NULL,
        PRIMARY KEY  (id),
        KEY user_id (user_id)
    ) $charset_collate;";

	require_once ABSPATH . 'wp-admin/includes/upgrade.php';
	dbDelta( $sql );
	dbDelta( $sql_subscribers );
	dbDelta( $sql_queue );
	dbDelta( $sql_user_notifications );
}
register_activation_hook( __FILE__, 'jw_core_create_notification_table' );

/**
 * Register Cron Schedules
 */
function jw_core_cron_schedules( $schedules ) {
	if ( ! isset( $schedules['every_minute'] ) ) {
		$schedules['every_minute'] = array(
			'interval' => 60,
			'display'  => __( 'Every Minute', 'jw-core' ),
		);
	}
	return $schedules;
}
add_filter( 'cron_schedules', 'jw_core_cron_schedules' );

/**
 * Process Notification Queue
 */
function jw_core_process_notification_queue_handler() {
	global $wpdb;

	$queue_table         = $wpdb->prefix . 'jw_notification_queue';
	$notifications_table = $wpdb->prefix . 'jw_notifications';
	$subscribers_table   = $wpdb->prefix . 'jw_notification_subscribers';

	// Get up to 50 pending tasks
    // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
	$tasks = $wpdb->get_results( "SELECT * FROM {$queue_table} WHERE status = 'pending' ORDER BY id ASC LIMIT 50" );

	if ( empty( $tasks ) ) {
		// Unschedule the cron job if everything is done
        // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
		$total_pending = $wpdb->get_var( "SELECT COUNT(id) FROM {$queue_table} WHERE status = 'pending' OR status = 'processing'" );
		if ( $total_pending == 0 ) {
			$timestamp = wp_next_scheduled( 'jw_core_process_notification_queue' );
			if ( $timestamp ) {
				wp_unschedule_event( $timestamp, 'jw_core_process_notification_queue' );
			}
		}

		return;
	}

	$task_ids        = wp_list_pluck( $tasks, 'id' );
	$ids_placeholder = implode( ',', array_fill( 0, count( $task_ids ), '%d' ) );

	// Mark as processing to avoid race condition
	$wpdb->query(
        // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
		$wpdb->prepare( "UPDATE {$queue_table} SET status = 'processing' WHERE id IN ($ids_placeholder)", ...$task_ids )
	);

	// Process tasks
	$fcm_config_str = get_option( 'jw_core_fcm_config', '' );
	$fcm_server_key = '';

	// Note: FCM sending usually requires a server key which might not be in the public config.
	// For this implementation, we will mock the FCM send if we don't have a valid way to send it,
	// or log it. Ideally, you need a Server Key or Service Account.

	foreach ( $tasks as $task ) {
        // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
		$subscriber = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM {$subscribers_table} WHERE id = %d", $task->subscriber_id ) );
        // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
		$notification = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM {$notifications_table} WHERE id = %d", $task->notification_id ) );

		if ( ! $subscriber || ! $notification ) {
			$wpdb->update( $queue_table, array( 'status' => 'failed' ), array( 'id' => $task->id ), array( '%s' ), array( '%d' ) );
			continue;
		}

		$success = false;

		if ( $subscriber->driver === 'mail' ) {
			$subject = $notification->title;
			$message = $notification->body;
			if ( ! empty( $notification->image ) ) {
				$message .= '<br><img src="' . esc_url( $notification->image ) . '" />';
			}

			$headers = array( 'Content-Type: text/html; charset=UTF-8' );
			$success = wp_mail( $subscriber->identifier, $subject, $message, $headers );

		} elseif ( $subscriber->driver === 'fcm' ) {
			// Placeholder for FCM sending logic.
			// In a real scenario, this would use wp_remote_post to https://fcm.googleapis.com/fcm/send
			// with an Authorization header containing a server key.
			// Since we only have the client config, we mark it as sent for now to clear the queue.
			$success = true;
		}

		$wpdb->update(
			$queue_table,
			array( 'status' => $success ? 'sent' : 'failed' ),
			array( 'id' => $task->id ),
			array( '%s' ),
			array( '%d' )
		);

		if ( $success ) {
			$user = get_user_by( 'email', $subscriber->identifier );
			if ( $user ) {
				$user_notifications_table = $wpdb->prefix . 'jw_user_notifications';
				$wpdb->insert(
					$user_notifications_table,
					array(
						'user_id' => $user->ID,
						'title'   => $notification->title,
						'body'    => $notification->body,
						'image'   => $notification->image,
						'is_read' => 0,
					),
					array( '%d', '%s', '%s', '%s', '%d' )
				);
			}
		}
	}

	// Check if we need to mark notifications as sent
    // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
	$sending_notifications = $wpdb->get_col( "SELECT id FROM {$notifications_table} WHERE status = 'sending'" );

	foreach ( $sending_notifications as $notification_id ) {
        // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
		$pending_count = $wpdb->get_var( $wpdb->prepare( "SELECT COUNT(id) FROM {$queue_table} WHERE notification_id = %d AND status IN ('pending', 'processing')", $notification_id ) );
		if ( $pending_count == 0 ) {
			$wpdb->update(
				$notifications_table,
				array( 'status' => 'sent' ),
				array( 'id' => $notification_id ),
				array( '%s' ),
				array( '%d' )
			);
		}
	}
}
add_action( 'jw_core_process_notification_queue', 'jw_core_process_notification_queue_handler' );


/**
 * Register Admin Menu for Notifications
 */
function jw_core_notification_admin_menu() {
	$hook = add_submenu_page(
		'jw-core-settings',
		__( 'Notifications', 'jw-core' ),
		__( 'Notifications', 'jw-core' ),
		'manage_options',
		'jw-notifications',
		'jw_core_notification_admin_page'
	);

	$subscribers_hook = add_submenu_page(
		'jw-core-settings',
		__( 'Subscribers', 'jw-core' ),
		__( 'Subscribers', 'jw-core' ),
		'manage_options',
		'jw-notification-subscribers',
		'jw_core_notification_subscribers_admin_page'
	);

	add_action( "load-$hook", 'jw_core_notification_admin_page_load' );
	add_action( "load-$subscribers_hook", 'jw_core_notification_subscribers_admin_page_load' );
}
add_action( 'admin_menu', 'jw_core_notification_admin_menu' );

function jw_core_notification_admin_page_load() {
	// Load list table if needed before output
    // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	if ( ! isset( $_GET['action'] ) || ( $_GET['action'] !== 'add' && $_GET['action'] !== 'edit' ) ) {
		require_once plugin_dir_path( __FILE__ ) . 'class-jw-notification-list-table.php';
		global $jw_notification_list_table;
		$jw_notification_list_table = new JW_Notification_List_Table();
		$jw_notification_list_table->process_bulk_action();
	}
}

function jw_core_notification_subscribers_admin_page_load() {
	require_once plugin_dir_path( __FILE__ ) . 'class-jw-notification-subscriber-list-table.php';
	global $jw_notification_subscriber_list_table;
	$jw_notification_subscriber_list_table = new JW_Notification_Subscriber_List_Table();
	$jw_notification_subscriber_list_table->process_bulk_action();
}

function jw_core_notification_admin_page() {
	require_once plugin_dir_path( __FILE__ ) . 'admin-notification-page.php';
}

function jw_core_notification_subscribers_admin_page() {
	require_once plugin_dir_path( __FILE__ ) . 'admin-notification-subscriber-page.php';
}

function jw_core_notification_admin_scripts( $hook ) {
	if ( $hook !== 'toplevel_page_jw-notifications' ) {
		return;
	}
	wp_enqueue_media();
}
add_action( 'admin_enqueue_scripts', 'jw_core_notification_admin_scripts' );

/**
 * Handle Notification Subscription.
 */
function jw_core_notification_subscribe() {
	check_ajax_referer( 'jw_notification_subscribe_nonce', 'nonce' );

	$driver = isset( $_POST['driver'] ) ? sanitize_text_field( wp_unslash( $_POST['driver'] ) ) : '';
	$email  = isset( $_POST['email'] ) ? sanitize_email( wp_unslash( $_POST['email'] ) ) : '';

	if ( $driver !== 'mail' || ! is_email( $email ) ) {
		wp_send_json_error( array( 'message' => __( 'Invalid driver or email.', 'jw-core' ) ) );
		return;
	}

	// Verify reCAPTCHA if enabled.
	$recaptcha_verify = jw_core_verify_recaptcha_request();
	if ( is_wp_error( $recaptcha_verify ) ) {
		wp_send_json_error( array( 'message' => $recaptcha_verify->get_error_message() ) );
		return;
	}

	// Generate token.
	$token = wp_generate_password( 20, false );

	// Set transient for 24 hours.
	set_transient( 'jw_sub_' . $token, $email, 24 * HOUR_IN_SECONDS );

	// Send email with verification link.
	$verify_link = add_query_arg( 'jw_verify_sub', $token, home_url( '/' ) );
	$subject     = __( 'Verify your subscription', 'jw-core' );
	/* translators: %s: Verification link */
	$message = sprintf( __( 'Click the following link to verify your subscription: %s', 'jw-core' ), esc_url_raw( $verify_link ) );

	wp_mail( $email, $subject, $message );

	wp_send_json_success( array( 'message' => __( 'Verification email sent. Please check your inbox.', 'jw-core' ) ) );
}
add_action( 'wp_ajax_jw_notification_subscribe', 'jw_core_notification_subscribe' );
add_action( 'wp_ajax_nopriv_jw_notification_subscribe', 'jw_core_notification_subscribe' );

/**
 * Verify reCAPTCHA request.
 *
 * @return true|WP_Error
 */
function jw_core_verify_recaptcha_request() {
	if ( get_option( 'jw_core_enable_recaptcha', '0' ) === '1' ) {
		$secret_key = get_option( 'jw_core_recaptcha_secret_key', '' );
		if ( ! empty( $secret_key ) ) {
			// phpcs:ignore WordPress.Security.NonceVerification.Missing
			$recaptcha_response = isset( $_POST['g-recaptcha-response'] ) ? sanitize_text_field( wp_unslash( $_POST['g-recaptcha-response'] ) ) : '';
			if ( empty( $recaptcha_response ) ) {
				return new WP_Error( 'recaptcha_error', __( 'Please verify that you are not a robot.', 'jw-core' ) );
			}

			$verify_url = 'https://www.google.com/recaptcha/api/siteverify';
			$response   = wp_remote_post(
				$verify_url,
				array(
					'body' => array(
						'secret'   => $secret_key,
						'response' => $recaptcha_response,
					),
				)
			);

			if ( is_wp_error( $response ) ) {
				return new WP_Error( 'recaptcha_error', __( 'Failed to verify reCAPTCHA. Please try again.', 'jw-core' ) );
			}

			$body = wp_remote_retrieve_body( $response );
			$data = json_decode( $body );

			if ( ! $data || ! $data->success ) {
				return new WP_Error( 'recaptcha_error', __( 'reCAPTCHA verification failed. You appear to be a robot.', 'jw-core' ) );
			}
		}
	}

	return true;
}
add_action( 'wp_ajax_jw_notification_subscribe', 'jw_core_notification_subscribe' );
add_action( 'wp_ajax_nopriv_jw_notification_subscribe', 'jw_core_notification_subscribe' );

/**
 * Handle Subscription Verification Link
 */
function jw_core_verify_subscription() {
    // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	if ( isset( $_GET['jw_verify_sub'] ) && ! empty( $_GET['jw_verify_sub'] ) ) {
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$token = sanitize_text_field( wp_unslash( $_GET['jw_verify_sub'] ) );
		$email = get_transient( 'jw_sub_' . $token );

		if ( $email ) {
			global $wpdb;
			$table_name = $wpdb->prefix . 'jw_notification_subscribers';

			// Check if already exists.
			$existing = $wpdb->get_var(
				$wpdb->prepare(
                // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
					"SELECT id FROM {$table_name} WHERE driver = %s AND identifier = %s",
					'mail',
					$email
				)
			);

			if ( ! $existing ) {
				$wpdb->insert(
					$table_name,
					array(
						'driver'     => 'mail',
						'identifier' => $email,
						'token'      => '',
					),
					array(
						'%s',
						'%s',
						'%s',
					)
				);
			}

			// Delete transient after use.
			delete_transient( 'jw_sub_' . $token );

			wp_die( esc_html__( 'Subscription verified successfully! You will now receive notifications.', 'jw-core' ), esc_html__( 'Success', 'jw-core' ), array( 'response' => 200 ) );
		} else {
			wp_die( esc_html__( 'Invalid or expired verification token.', 'jw-core' ), esc_html__( 'Error', 'jw-core' ), array( 'response' => 400 ) );
		}
	}
}
add_action( 'template_redirect', 'jw_core_verify_subscription' );

/**
 * Handle Email Verification on User Registration
 *
 * @param int $user_id The user ID.
 */
function jw_core_handle_user_registration( $user_id ) {
	if ( '1' !== get_option( 'jw_core_enable_email_verification', '0' ) ) {
		return;
	}

	// Skip for admins creating users.
	if ( current_user_can( 'manage_options' ) ) {
		return;
	}

	$user = get_userdata( $user_id );
	if ( ! $user ) {
		return;
	}

	// Generate verification token.
	$token = wp_generate_password( 20, false );

	update_user_meta( $user_id, 'jw_core_email_verified', '0' );
	update_user_meta( $user_id, 'jw_core_email_verify_token', $token );

	// Send verification email.
	$verify_link = add_query_arg(
		array(
			'jw_verify_email' => $token,
			'user'            => $user_id,
		),
		home_url( '/' )
	);

	$subject = __( 'Verify Your Email Address', 'jw-core' );
	$message = sprintf(
		/* translators: 1: user login, 2: verification link */
		__( "Hello %1\$s,\n\nPlease click the following link to verify your email address:\n\n%2\$s", 'jw-core' ),
		$user->user_login,
		esc_url_raw( $verify_link )
	);

	wp_mail( $user->user_email, $subject, $message );
}
add_action( 'user_register', 'jw_core_handle_user_registration', 10, 1 );

/**
 * Block Login if Email is not Verified
 *
 * @param WP_User|WP_Error $user     The user object.
 * @param string           $password The user password.
 */
/**
 * SMTP Configuration
 *
 * @param object $phpmailer The PHPMailer instance.
 */
function jw_core_phpmailer_init( $phpmailer ) {
	if ( '1' !== get_option( 'jw_core_smtp_enable', '0' ) ) {
		return;
	}

	$phpmailer->isSMTP();
	$phpmailer->Host     = get_option( 'jw_core_smtp_host' );
	$phpmailer->Port     = get_option( 'jw_core_smtp_port', '587' );
	$phpmailer->SMTPAuth = '1' === get_option( 'jw_core_smtp_auth', '1' );

	if ( $phpmailer->SMTPAuth ) {
		$phpmailer->Username = get_option( 'jw_core_smtp_username' );
		$phpmailer->Password = get_option( 'jw_core_smtp_password' );
	}

	$encryption = get_option( 'jw_core_smtp_encryption', 'none' );
	if ( 'ssl' === $encryption || 'tls' === $encryption ) {
		$phpmailer->SMTPSecure = $encryption;
	} else {
		$phpmailer->SMTPSecure  = '';
		$phpmailer->SMTPAutoTLS = false;
	}
}
add_action( 'phpmailer_init', 'jw_core_phpmailer_init' );

/**
 * Set SMTP from email.
 *
 * @param string $email The from email address.
 * @return string
 */
function jw_core_wp_mail_from( $email ) {
	if ( '1' === get_option( 'jw_core_smtp_enable', '0' ) ) {
		$from_email = get_option( 'jw_core_smtp_from_email' );
		if ( ! empty( $from_email ) && is_email( $from_email ) ) {
			return $from_email;
		}
	}
	return $email;
}
add_filter( 'wp_mail_from', 'jw_core_wp_mail_from' );

/**
 * Set SMTP from name.
 *
 * @param string $name The from name.
 * @return string
 */
function jw_core_wp_mail_from_name( $name ) {
	if ( '1' === get_option( 'jw_core_smtp_enable', '0' ) ) {
		$from_name = get_option( 'jw_core_smtp_from_name' );
		if ( ! empty( $from_name ) ) {
			return $from_name;
		}
	}
	return $name;
}
add_filter( 'wp_mail_from_name', 'jw_core_wp_mail_from_name' );

/**
 * Handle Test SMTP Email AJAX
 */
function jw_core_test_smtp_ajax() {
	if ( ! current_user_can( 'manage_options' ) ) {
		wp_send_json_error( array( 'message' => __( 'Unauthorized', 'jw-core' ) ) );
	}

	check_ajax_referer( 'jw_core_test_smtp_nonce', 'nonce' );

	$email = isset( $_POST['email'] ) ? sanitize_email( wp_unslash( $_POST['email'] ) ) : '';

	if ( ! is_email( $email ) ) {
		wp_send_json_error( array( 'message' => __( 'Invalid email address.', 'jw-core' ) ) );
	}

	$subject = __( 'Test Email from Juzaweb', 'jw-core' );
	$message = __( 'This is a test email to verify your SMTP settings. If you received this, your SMTP configuration is working correctly.', 'jw-core' );

	// We need to capture phpmailer errors if wp_mail fails
	global $phpmailer;
	$sent = wp_mail( $email, $subject, $message );

	if ( $sent ) {
		wp_send_json_success( array( 'message' => __( 'Test email sent successfully.', 'jw-core' ) ) );
	} else {
		$error_message = __( 'Failed to send test email. Check your SMTP settings.', 'jw-core' );
		if ( isset( $phpmailer->ErrorInfo ) && ! empty( $phpmailer->ErrorInfo ) ) {
			$error_message .= ' Error: ' . $phpmailer->ErrorInfo;
		}
		wp_send_json_error( array( 'message' => $error_message ) );
	}
}
add_action( 'wp_ajax_jw_core_test_smtp', 'jw_core_test_smtp_ajax' );

function jw_core_authenticate_user( $user, $password ) {
	if ( '1' !== get_option( 'jw_core_enable_email_verification', '0' ) ) {
		return $user;
	}

	if ( is_wp_error( $user ) ) {
		return $user;
	}

	$is_verified = get_user_meta( $user->ID, 'jw_core_email_verified', true );
	if ( '0' === $is_verified ) {
		return new WP_Error( 'email_not_verified', __( 'Your email address has not been verified. Please check your inbox for the verification link.', 'jw-core' ) );
	}

	return $user;
}
add_filter( 'wp_authenticate_user', 'jw_core_authenticate_user', 10, 2 );

/**
 * Handle Email Verification Link.
 */
function jw_core_verify_user_email() {
    // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	if ( isset( $_GET['jw_verify_email'] ) && isset( $_GET['user'] ) ) {
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$token = sanitize_text_field( wp_unslash( $_GET['jw_verify_email'] ) );
        // phpcs:ignore WordPress.Security.NonceVerification.Recommended
		$user_id = intval( wp_unslash( $_GET['user'] ) );

		$saved_token = get_user_meta( $user_id, 'jw_core_email_verify_token', true );

		if ( $saved_token && $saved_token === $token ) {
			update_user_meta( $user_id, 'jw_core_email_verified', '1' );
			delete_user_meta( $user_id, 'jw_core_email_verify_token' );

			$redirect_url = apply_filters( 'jw_core_email_verified_redirect_url', home_url( '/' ), $user_id );
			wp_safe_redirect( $redirect_url );
			exit;
		} else {
			wp_die( esc_html__( 'Invalid or expired verification link.', 'jw-core' ), esc_html__( 'Error', 'jw-core' ), array( 'response' => 400 ) );
		}
	}
}
add_action( 'template_redirect', 'jw_core_verify_user_email' );

/**
 * Filter show_admin_bar based on JW Core settings.
 */
function jw_core_show_admin_bar_filter( $show ) {
	if ( ! is_user_logged_in() ) {
		return false;
	}

	if ( current_user_can( 'manage_options' ) ) {
		return '1' === get_option( 'jw_core_show_admin_bar_admin', '1' );
	} else {
		return '1' === get_option( 'jw_core_show_admin_bar_user', '0' );
	}
}
add_filter( 'show_admin_bar', 'jw_core_show_admin_bar_filter', 99 );

/**
 * Handle reCAPTCHA for WP Login & AJAX Login
 *
 * @param WP_User|WP_Error $user     User object or error.
 * @param string           $username Username.
 * @param string           $password Password.
 * @return WP_User|WP_Error
 */
function jw_core_authenticate_recaptcha( $user, $username, $password ) {
	// Don't check recaptcha if no credentials provided (e.g., initial page load).
	if ( empty( $username ) || empty( $password ) ) {
		return $user;
	}

	// Bypass if it's not a POST request, or if it's an XML-RPC request, or REST API request.
	if ( $_SERVER['REQUEST_METHOD'] !== 'POST' || defined( 'XMLRPC_REQUEST' ) || defined( 'REST_REQUEST' ) ) {
		return $user;
	}

	$verify = jw_core_verify_recaptcha_request();
	if ( is_wp_error( $verify ) ) {
		return $verify;
	}

	return $user;
}
add_filter( 'authenticate', 'jw_core_authenticate_recaptcha', 9, 3 );

/**
 * Handle reCAPTCHA for WP Registration
 *
 * @param WP_Error $errors               A WP_Error object containing any errors encountered during registration.
 * @param string   $sanitized_user_login User's username after it has been sanitized.
 * @param string   $user_email           User's email.
 * @return WP_Error
 */
function jw_core_registration_errors_recaptcha( $errors, $sanitized_user_login, $user_email ) {
	if ( $_SERVER['REQUEST_METHOD'] !== 'POST' || defined( 'XMLRPC_REQUEST' ) || defined( 'REST_REQUEST' ) ) {
		return $errors;
	}

	$verify = jw_core_verify_recaptcha_request();
	if ( is_wp_error( $verify ) ) {
		$errors->add( 'recaptcha_error', $verify->get_error_message() );
	}
	return $errors;
}
add_filter( 'registration_errors', 'jw_core_registration_errors_recaptcha', 10, 3 );

/**
 * Handle reCAPTCHA for Forgot Password
 *
 * @param bool|WP_Error $allow   Whether to allow the password reset.
 * @param int           $user_id The ID of the user attempting to reset a password.
 * @return bool|WP_Error
 */
function jw_core_allow_password_reset_recaptcha( $allow, $user_id ) {
	if ( is_wp_error( $allow ) ) {
		return $allow;
	}

	if ( $_SERVER['REQUEST_METHOD'] !== 'POST' || defined( 'XMLRPC_REQUEST' ) || defined( 'REST_REQUEST' ) ) {
		return $allow;
	}

	$verify = jw_core_verify_recaptcha_request();
	if ( is_wp_error( $verify ) ) {
		return $verify;
	}

	return $allow;
}
add_filter( 'allow_password_reset', 'jw_core_allow_password_reset_recaptcha', 10, 2 );

/**
 * Handle reCAPTCHA for Comments
 *
 * @param int $comment_post_id Post ID.
 */
function jw_core_pre_comment_on_post_recaptcha( $comment_post_id ) {
	// Only require reCAPTCHA for non-logged in users.
	if ( ! is_user_logged_in() ) {
		if ( $_SERVER['REQUEST_METHOD'] !== 'POST' || defined( 'XMLRPC_REQUEST' ) || defined( 'REST_REQUEST' ) ) {
			return;
		}

		$verify = jw_core_verify_recaptcha_request();
		if ( is_wp_error( $verify ) ) {
			wp_die( $verify->get_error_message() );
		}
	}
}
add_action( 'pre_comment_on_post', 'jw_core_pre_comment_on_post_recaptcha', 10, 1 );

/**
 * Handle reCAPTCHA for Custom AJAX endpoints (e.g., theme's _ajax_register)
 *
 * Some custom endpoints bypass standard WP hooks (like wp_create_user).
 */
function jw_core_ajax_recaptcha_check() {
	if ( ! defined( 'DOING_AJAX' ) || ! DOING_AJAX ) {
		return;
	}

	$action = isset( $_REQUEST['action'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['action'] ) ) : '';

	// Intercept actions ending with _ajax_register, _ajax_login, _ajax_forgot_password, _ajax_forgot, _ajax_reset_password
	if ( strpos( $action, '_ajax_register' ) !== false ||
		strpos( $action, '_ajax_login' ) !== false ||
		strpos( $action, '_ajax_forgot_password' ) !== false ||
		strpos( $action, '_ajax_forgot' ) !== false ||
		strpos( $action, '_ajax_reset_password' ) !== false ) {

		$verify = jw_core_verify_recaptcha_request();
		if ( is_wp_error( $verify ) ) {
			wp_send_json_error( array( 'message' => $verify->get_error_message() ) );
		}
	}
}
// Run early during AJAX init to intercept requests
add_action( 'admin_init', 'jw_core_ajax_recaptcha_check', 1 );

/**
 * Enqueue reCAPTCHA script on login, register, forgot password, and comment forms.
 * Support standard WP forms and bind Invisible reCAPTCHA to form submits.
 */
function jw_core_frontend_recaptcha_scripts() {
	if ( get_option( 'jw_core_enable_recaptcha', '0' ) === '1' ) {
		$site_key = get_option( 'jw_core_recaptcha_site_key', '' );
		if ( ! empty( $site_key ) ) {
			// This will be added via wp_footer or login_footer
			?>
			<script>
				document.addEventListener('DOMContentLoaded', function() {
					if (typeof grecaptcha === 'undefined') return;

					var forms = document.querySelectorAll('form#loginform, form#registerform, form#lostpasswordform, form#commentform, form#login-form, form#register-form, form#forgot-form');

					forms.forEach(function(form) {
						var submitBtn = form.querySelector('button[type="submit"], input[type="submit"]');
						if (!submitBtn) return;

						// Add a hidden div for recaptcha
						var recaptchaDiv = document.createElement('div');
						var divId = 'recaptcha-' + Math.random().toString(36).substring(2, 9);
						recaptchaDiv.id = divId;
						form.appendChild(recaptchaDiv);

						var widgetId = null;

						grecaptcha.ready(function() {
							try {
								widgetId = grecaptcha.render(recaptchaDiv.id, {
									'sitekey': '<?php echo esc_js( $site_key ); ?>',
									'size': 'invisible',
									'callback': function(token) {
										form.dataset.recaptchaPassed = 'true';
										var event = new Event('submit', { cancelable: true, bubbles: true });
										var allowed = form.dispatchEvent(event);
										if (allowed) {
											// Fallback for native form submission if not handled by AJAX
											form.submit();
										}
									}
								});
							} catch (e) {
								console.error('reCAPTCHA render error:', e);
							}
						});

						form.addEventListener('submit', function(e) {
							if (form.dataset.recaptchaPassed === 'true') {
								form.dataset.recaptchaPassed = 'false';
								return; // allow submission
							}

							e.preventDefault();
							e.stopImmediatePropagation();

							if (widgetId !== null) {
								grecaptcha.reset(widgetId);
								grecaptcha.execute(widgetId);
							}
						}, true); // Use capture phase to intercept before jQuery handlers
					});
				});
			</script>
			<?php
		}
	}
}

// Attach to standard frontend and login screens
add_action( 'wp_footer', 'jw_core_frontend_recaptcha_scripts' );
add_action( 'login_footer', 'jw_core_frontend_recaptcha_scripts' );

// Also make sure the external script is loaded on login and frontend
function jw_core_auth_enqueue_scripts() {
	if ( get_option( 'jw_core_enable_recaptcha', '0' ) === '1' ) {
		$site_key = get_option( 'jw_core_recaptcha_site_key', '' );
		if ( ! empty( $site_key ) ) {
			wp_enqueue_script( 'google-recaptcha', 'https://www.google.com/recaptcha/api.js', array(), null, false );
		}
	}
}
add_action( 'login_enqueue_scripts', 'jw_core_auth_enqueue_scripts' );
add_action( 'wp_enqueue_scripts', 'jw_core_auth_enqueue_scripts' );