<?php

if ( ! isset( $_GET['wpf_action'] ) ) {
    wp_die( 'No action specified.' );
}

$full_path    = getcwd();
$ar           = explode( 'wp-', $full_path );
$wp_root_path = $ar[0];

define( 'SHORTINIT', true ); // load the minumum files required to get to the database.

require $wp_root_path . DIRECTORY_SEPARATOR . 'wp-load.php';

// WordPress is available now.

// Try to find the contact ID in the URL.

$contact_id = false;

if ( isset( $_REQUEST['contact']['id'] ) ) {
    $contact_id = absint( $_REQUEST['contact']['id'] ); // ActiveCampaign.
}

if ( isset( $_REQUEST['contactId'] ) ) {
    $contact_id = absint( $_REQUEST['contactId'] ); // Infusionsoft.
}

if ( isset( $_REQUEST['contact_id'] ) ) {
    $contact_id = sanitize_text_field( wp_unslash( $_REQUEST['contact_id'] ) ); // Default.
}

if ( ! $contact_id ) {
    wp_die( 'No contact ID specified.' );
}

$settings = get_option( 'wpf_options' );

if ( ! isset( $_GET['access_key'] ) || $_GET['access_key'] !== $settings['access_key'] ) {
    wp_die( 'Invalid access key' );
}

$action = sanitize_text_field( wp_unslash( $_GET['wpf_action'] ) );

// Now create the action to perform based on the wpf_action parameter.

if ( 'update' === $action || 'update_tags' === $action ) {

    $user_id = wp_cache_get( "wpf_cid_{$contact_id}" ); // try to get it from the cache.

    if ( false === $user_id ) {

        global $wpdb;

        // Update and Update Tags require a user ID.

        $sql     = $wpdb->prepare( "SELECT user_id FROM $wpdb->usermeta WHERE meta_key = %s AND meta_value = %d", "{$settings['crm']}_contact_id", $contact_id );
        $user_id = $wpdb->get_var( $sql );

        if ( null === $user_id ) {
            wp_die( 'No matching user found', 'Not Found', 200 );
        }

        wp_cache_set( "wpf_cid_{$contact_id}", $user_id );

    }

    $data = array(
        array(
            'users_tags_sync',
            array( $user_id ),
        ),
    );

    if ( 'update' === $action ) {

        $data[] = array(
            'pull_users_meta',
            array( $user_id ),
        );

    }
} elseif ( 'add' === $action ) {


    if ( is_numeric( $contact_id ) ) {
        // Most platforms use numeric IDs but Drip, Mailchimp, and Salesforce use alphanumeric hashes.
        $contact_id = absint( $contact_id );
    }

    $data = array(
        array(
            'import_users',
            array(
                $contact_id,
                array(
                    'role'              => isset( $_GET['role'] ) ? sanitize_text_field( wp_unslash( $_GET['role'] ) ) : false,
                    'send_notification' => isset( $_GET['send_notification'] ) && 'true' === $_GET['send_notification'] ? true : false,
                ),
            ),
        ),
    );

} else {
    wp_die( 'Invalid action' );
}

// We have our data, now save it to the options table so the background worker can find it.

$unique  = md5( microtime() . rand() );
$prepend = 'wpf_background_process_';

$key = substr( $prepend . $unique, 0, 48 );

update_site_option( $key, $data );

// Make sure that the cron task is enabled.

if ( empty( $settings['enable_cron'] ) ) {
    $settings['enable_cron'] = true;
    update_option( 'wpf_options', $settings );
}

// All done!

wp_die( 'Success. Saved <code>' . $key . '</code> with <pre>' . print_r( $data, true ) . '</pre>', 'Success', 200 );