tuts.php

<?php
/*
Plugin Name: Shy's Tutorials & Handbooks
Description: Create, manage, and restrict access to tutorials and handbooks, with features for manual user assignment and private content sharing.
Version: 1.6
License: GPLv2
Author: HackTheDev
Text Domain: shys-tutorials-handbooks
*/

require 'PayPalLibrary.php';

if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly 

// Register Custom Post Type
function stahp_register_custom_post_type() {

    
    $labels = array(
        'name'               => 'Tutorials & Handbooks',
        'singular_name'      => 'Tutorial & Handbook',
        'menu_name'          => 'Tutorials & Handbooks',
        'name_admin_bar'     => 'Tutorials & Handbooks',
        'add_new'            => 'Add New',
        'add_new_item'       => 'Add New Tutorial',
        'new_item'           => 'New Tutorial',
        'edit_item'          => 'Edit Tutorial',
        'view_item'          => 'View Tutorial',
        'all_items'          => 'All Tutorials',
        'search_items'       => 'Search Tutorials',
        'not_found'          => 'No tutorials found.',
        'not_found_in_trash' => 'No tutorials found in Trash.',
    );

    $args = array(
        'labels'             => $labels,
        'public'             => true,
        'publicly_queryable'  => true,
        'show_ui'            => true,
        'show_in_menu'       => true,
        'query_var'          => true,
        'rewrite'            => array('slug' => 'tutorials'),
        'capability_type'    => 'post',
        'has_archive'        => false,
        'hierarchical'       => false,
        'supports'           => array('title', 'editor', 'thumbnail'),
        'show_in_rest'       => true, // Important for block editor and REST API support
    );

    register_post_type('shy_tut_book', $args);
}
add_action('init', 'stahp_register_custom_post_type');




// Function to output meta description based on tutorial's short description
function stahp_add_meta_description() {
    if (is_singular('shy_tut_book')) {
        global $post;

        // Retrieve the custom short description
        $description = get_post_meta($post->ID, '_stahp_description', true);

        // Use the post excerpt if no short description is set
        if (empty($description)) {
            $description = get_the_excerpt($post);
        }

        // Fallback to a generic description if all else fails
        if (empty($description)) {
            $description = 'Read this tutorial to learn more.';
        }

        // Output the meta description tag
        echo '<meta name="description" content="' . esc_attr($description) . '">' . "\n";
    }
}
add_action('wp_head', 'stahp_add_meta_description');





// Add a meta box for marking a tutorial as paid/locked
function stahp_add_paid_meta_box() {
    add_meta_box(
        'stahp_paid_meta_box',
        'Paid Tutorial',
        'stahp_paid_meta_box_callback',
        'shy_tut_book',
        'side'
    );
}
add_action('add_meta_boxes', 'stahp_add_paid_meta_box');

function stahp_paid_meta_box_callback($post) {
    
    wp_nonce_field('stahp_save_paid_meta_box', 'stahp_paid_meta_nonce');
    $is_paid = get_post_meta($post->ID, '_is_paid', true);
    ?>
    <label for="stahp_is_paid">Post can only be accessed if paid</label>
    <input type="checkbox" name="stahp_is_paid" id="stahp_is_paid" value="1" <?php checked($is_paid, '1'); ?> />
    <?php
}

function stahp_save_paid_meta_box($post_id) {
    if (isset($_POST['stahp_is_paid']) && check_admin_referer('stahp_save_paid_meta_box', 'stahp_paid_meta_nonce')) {
        update_post_meta($post_id, '_is_paid', '1');
    } else {
        update_post_meta($post_id, '_is_paid', '0');
    }
}
add_action('save_post', 'stahp_save_paid_meta_box');

// Add a meta box for tutorial price
function stahp_add_price_meta_box() {
    add_meta_box(
        'stahp_price_meta_box',
        'Tutorial Price',
        'stahp_price_meta_box_callback',
        'shy_tut_book', // Ensure this matches your custom post type
        'side',
        'high' // Position it high up in the sidebar
    );
}
add_action('add_meta_boxes', 'stahp_add_price_meta_box');

function stahp_price_meta_box_callback($post) {
    wp_nonce_field('stahp_save_price_meta_box', 'stahp_price_meta_nonce');
    $price = get_post_meta($post->ID, '_stahp_tutorial_price', true);
    ?>
    <label for="stahp_tutorial_price">Price ($):</label>
    <input type="text" name="stahp_tutorial_price" id="stahp_tutorial_price" value="<?php echo esc_attr($price); ?>" />
    <?php
}

function stahp_save_price_meta_box($post_id) {
    if (isset($_POST['stahp_tutorial_price']) && check_admin_referer('stahp_save_price_meta_box', 'stahp_price_meta_nonce')) {
        $price = sanitize_text_field($_POST['stahp_tutorial_price']);
        
        // Replace comma with a period if used as a decimal separator
        $price = str_replace(',', '.', $price);
        
        // Validate the price to ensure it is a valid number
        if (is_numeric($price) && $price >= 0) {
            update_post_meta($post_id, '_stahp_tutorial_price', $price);
        } else {
            // Handle invalid price (optional)
            // You might want to display an error message or set a default value
        }
    }
}
add_action('save_post', 'stahp_save_price_meta_box');


// Generate nested toc
function stahp_generate_toc($content) {
    global $post;

    if ($post->post_type === 'shy_tut_book') {
        $matches = array();
        preg_match_all('/<h([2-6])[^>]*>([^<]+)<\/h[2-6]>/', $content, $matches);

        if (count($matches[0]) > 0) {
            $toc = '<div class="toc-content-container">';
            $toc .= '<aside class="toc-widget">';
            $toc .= '<h2>Table of Contents</h2><ul class="toc-list">';
            
            // To track the nesting level
            $current_level = 2;
            $open_lists = 0; // Track the number of open <ul> tags

            foreach ($matches[2] as $key => $heading) {
                $heading_level = (int)$matches[1][$key];
                $anchor = sanitize_title($heading);

                if ($heading_level > $current_level) {
                    while ($heading_level > $current_level) {
                        $toc .= '<ul>';
                        $open_lists++;
                        $current_level++;
                    }
                } elseif ($heading_level < $current_level) {
                    while ($heading_level < $current_level && $open_lists > 0) {
                        $toc .= '</ul>';
                        $open_lists--;
                        $current_level--;
                    }
                }

                $toc .= '<li><a href="#' . $anchor . '">' . $heading . '</a></li>';
                $content = str_replace($matches[0][$key], '<h' . $heading_level . ' id="' . $anchor . '">' . $heading . '</h' . $heading_level . '>', $content);
            }

            // Close any remaining open lists
            while ($open_lists > 0) {
                $toc .= '</ul>';
                $open_lists--;
            }

            $toc .= '</ul></aside>';
            $toc .= '<div class="post-content">';
            $toc .= '<h1 class="tutorial_page_title">' . get_the_title($post->ID) . '</h1>'; // Include the post title in the content area
            $toc .= $content;

            // Author info
            $toc .= '<div class="post-meta">
                        <hr>
                        <div style="">
                            <div class="author-info">
                                ' . get_avatar(get_the_author_meta('ID'), 48) . '
                                <label><strong>Author:</strong> ' . get_the_author() . '</label>
                            </div>
                            <div style="float: right;">
                                <label><strong>Release Date:</strong> ' . get_the_date() . '</label><br>
                                <label><strong>Last Updated:</strong> ' . get_the_modified_date() . '</label>
                            </div>
                        </div>
                    </div>';
            $toc .= '</div></div>';

            return $toc;
        }
    }

    return '<div class="post-content"><h1 class="tutorial_page_title">' . get_the_title($post->ID) . '</h1>' . $content . '</div>';
}
add_filter('the_content', 'stahp_generate_toc');





// Add a meta box for hiding a tutorial from general listing
function stahp_add_hide_meta_box() {
    add_meta_box(
        'stahp_hide_meta_box',
        'Hide from General Listing',
        'stahp_hide_meta_box_callback',
        'shy_tut_book',
        'side'
    );
}
add_action('add_meta_boxes', 'stahp_add_hide_meta_box');

function stahp_hide_meta_box_callback($post) {
    $hide_from_general = get_post_meta($post->ID, '_hide_from_general', true);
    ?>
    <label for="stahp_hide_from_general">Hide this post from general listing</label>
    <input type="checkbox" name="stahp_hide_from_general" id="stahp_hide_from_general" value="1" <?php checked($hide_from_general, '1'); ?> />
    <?php
}

function stahp_save_hide_meta_box($post_id) {
    if (isset($_POST['stahp_hide_from_general'])) {
        update_post_meta(wp_unslash($post_id), '_hide_from_general', '1');
    } else {
        update_post_meta(wp_unslash($post_id), '_hide_from_general', '0');
    }
}
add_action('save_post', 'stahp_save_hide_meta_box');


// Add a meta box for the post description
function stahp_add_description_meta_box() {
    add_meta_box(
        'stahp_description_meta_box', // ID
        'Post Description', // Title
        'stahp_description_meta_box_callback', // Callback
        'shy_tut_book', // Post type
        'normal', // Context
        'high' // Priority
    );
}
add_action('add_meta_boxes', 'stahp_add_description_meta_box');

// Meta box display callback
function stahp_description_meta_box_callback($post) {
    // Add a nonce field so we can check for it later.
    wp_nonce_field('stahp_save_description', 'stahp_description_nonce');

    // Use get_post_meta to retrieve an existing value from the database.
    $value = get_post_meta($post->ID, '_stahp_description', true);

    // Display the form, using the current value.
    echo '<textarea style="width:100%; height:100px;" id="stahp_description" name="stahp_description">' . esc_textarea($value) . '</textarea>';
    echo '<p class="description">Enter a brief description of what this post will be about. This will be displayed on the listing page.</p>';
}

// Save the meta box data
function stahp_save_description_meta_box($post_id) {
    // Check if our nonce is set.
    if (!isset($_POST['stahp_description_nonce'])) {
        return;
    }

    // Verify that the nonce is valid.
    if (!wp_verify_nonce(wp_unslash($_POST['stahp_description_nonce']), 'stahp_save_description')) {
        return;
    }

    // If this is an autosave, our form has not been submitted, so we don't want to do anything.
    if (defined('DOING_AUTOSAVE') && DOING_AUTOSAVE) {
        return;
    }

    // Check the user's permissions.
    if (isset($_POST['post_type']) && $_POST['post_type'] === 'shy_tut_book') {
        if (!current_user_can('edit_post', wp_unslash($post_id))) {
            return;
        }
    }

    // Sanitize user input.
    if (isset($_POST['stahp_description'])) {
        $description_data = sanitize_text_field($_POST['stahp_description']);

        // Update the meta field in the database.
        update_post_meta(wp_unslash($post_id), '_stahp_description', $description_data);
    }
}
add_action('save_post', 'stahp_save_description_meta_box');

// Add a meta box for internal memo
function stahp_add_memo_meta_box() {
    add_meta_box(
        'stahp_memo_meta_box', // ID
        'Internal Memo', // Title
        'stahp_memo_meta_box_callback', // Callback
        'shy_tut_book', // Post type
        'normal', // Context
        'high' // Priority
    );
}
add_action('add_meta_boxes', 'stahp_add_memo_meta_box');

// Meta box display callback
function stahp_memo_meta_box_callback($post) {
    // Add a nonce field so we can check for it later.
    wp_nonce_field('stahp_save_memo', 'stahp_memo_nonce');

    // Use get_post_meta to retrieve an existing value from the database.
    $memo_value = get_post_meta($post->ID, '_stahp_memo', true);

    // Display the form, using the current value.
    echo '<textarea style="width:100%; height:100px;" id="stahp_memo" name="stahp_memo">' . esc_textarea($memo_value) . '</textarea>';
    echo '<p class="description">This memo is for internal use only and will not be visible to the public.</p>';
}

// Save the meta box data
function stahp_save_memo_meta_box($post_id) {
    // Check if our nonce is set.
    if (!isset($_POST['stahp_memo_nonce'])) {
        return;
    }

    // Verify that the nonce is valid.
    if (!wp_verify_nonce(wp_unslash($_POST['stahp_memo_nonce']), 'stahp_save_memo')) {
        return;
    }

    // If this is an autosave, our form has not been submitted, so we don't want to do anything.
    if (defined('DOING_AUTOSAVE') && DOING_AUTOSAVE) {
        return;
    }

    // Check the user's permissions.
    if (isset($_POST['post_type']) && $_POST['post_type'] === 'shy_tut_book') {
        if (!current_user_can('edit_post', wp_unslash($post_id))) {
            return;
        }
    }

    // Sanitize user input.
    if (isset($_POST['stahp_memo'])) {
        $memo_data = sanitize_text_field($_POST['stahp_memo']);

        // Update the meta field in the database.
        update_post_meta(wp_unslash($post_id), '_stahp_memo', $memo_data);
    }
}
add_action('save_post', 'stahp_save_memo_meta_box');

// Enqueue styles for TOC
function stahp_enqueue_toc_styles() {
    global $post;

    // Check if the post is of type 'shy_tut_book' or if it contains the shortcodes
    if (
        is_singular('shy_tut_book') ||
        (isset($post->post_content) && (has_shortcode($post->post_content, 'shy_tutorials') || has_shortcode($post->post_content, 'shy_private_tutorials')))
    ) {
        wp_enqueue_style('stahp_toc_styles', plugin_dir_url(__FILE__) . 'style.css', array(), filemtime(plugin_dir_path(__FILE__) . 'style.css'));
    }
}
add_action('wp_enqueue_scripts', 'stahp_enqueue_toc_styles');

// Access Control - Assign users to specific tutorials (simplified example)
function stahp_add_meta_boxes() {
    add_meta_box('stahp_access_control', 'Access Control', 'stahp_access_control_callback', 'shy_tut_book', 'side');
}
add_action('add_meta_boxes', 'stahp_add_meta_boxes');

function stahp_access_control_callback($post) {
    $users = get_users();
    $assigned_users = get_post_meta($post->ID, '_assigned_users', true) ?: array();

    echo '<ul>';
    foreach ($users as $user) {
        $checked = in_array($user->ID, $assigned_users) ? 'checked' : '';
        echo '<li><label><input type="checkbox" name="assigned_users[]" value="' . esc_attr($user->ID) . '" ' . esc_attr($checked) . '> ' . esc_attr($user->display_name) . '</label></li>';
    }
    echo '</ul>';
}

function stahp_save_post($post_id) {
    if (isset($_POST['assigned_users'])) {
        update_post_meta(wp_unslash($post_id), '_assigned_users', wp_unslash($_POST['assigned_users']));
    } else {
        delete_post_meta(wp_unslash($post_id), '_assigned_users');
    }
}
add_action('save_post', 'stahp_save_post');

function stahp_restrict_access($content) {
    if (get_post_type() === 'shy_tut_book') {
        $is_paid = get_post_meta(get_the_ID(), '_is_paid', true); // Check if the post is marked as paid

        if ($is_paid) {
            $assigned_users = get_post_meta(get_the_ID(), '_assigned_users', true);

            // Ensure $assigned_users is an array
            if (!is_array($assigned_users)) {
                $assigned_users = []; // Convert to an empty array if it's not an array
            }

            if (!in_array(get_current_user_id(), $assigned_users)) {
                return 'You do not have permission to view this content.';
            }
        }
    }
    return $content;
}
add_filter('the_content', 'stahp_restrict_access');

// Register the shortcode
function shy_assigned_articles_shortcode($atts) {
    ob_start(); // Start output buffering

    ?>
    <div class="assigned-articles-container">
        <h2 class="assigned-articles-title" style="text-align: center;"><?php echo esc_html(get_the_title()); ?></h2>
        <div class="articles-list">

            <style>
                .post-content h1 {
                    display: none !important;
                }
            </style>

            <?php
            // Query for all posts in the 'shy_tut_book' post type
            $args = array('post_type' => 'shy_tut_book', 'posts_per_page' => -1);
            $query = new WP_Query($args);

            if ($query->have_posts()) {
                $user_id = get_current_user_id();
                $found_articles = false;

                while ($query->have_posts()) : $query->the_post();
                    $post_id = get_the_ID();
                    $assigned_users = get_post_meta($post_id, '_assigned_users', true); // Check who has access

                    // Ensure $assigned_users is an array
                    if (!is_array($assigned_users)) {
                        $assigned_users = []; // Convert to an empty array if it's not an array
                    }

                    // Only show posts assigned to the current user
                    if (in_array($user_id, $assigned_users)) {
                        $found_articles = true;
                        $is_paid = get_post_meta($post_id, '_is_paid', true); // Check if the article is paid
                        $description = get_post_meta($post_id, '_stahp_description', true); // Get the custom description
                        
                        // Use the common rendering function
                        echo wp_kses_post(stahp_render_single_article($post_id, $is_paid, true, $description));
                    }

                endwhile;

                if (!$found_articles) :
                    echo '<p>No articles assigned to you.</p>';
                endif;

            } 
            else {
                echo "<p>No articles found</p>";
            
            } // <-- Correctly closes the if statement
            wp_reset_postdata(); ?>
        </div>
    </div>
    <?php

    return ob_get_clean(); // Return the buffered content
}
add_shortcode('shy_private_tutorials', 'shy_assigned_articles_shortcode');
                      




// Register the shortcode
function shy_knowledge_base_shortcode($atts) {
    ob_start(); // Start output buffering

    ?>
    <div class="knowledge-base-container">

        <style>            
        .post-content h1 {
            display: none !important;
        }
        </style>
        <h2 class="knowledge-base-title"><?php echo esc_html(get_the_title()); ?></h2>
        
        <!-- Search Bar -->
        <div class="search-bar">
            <input type="text" id="search-input" placeholder="Search articles..." />
        </div>

        <!-- Articles List -->
        <div class="articles-list">

            <?php
            // Query for all posts in the 'shy_tut_book' post type
            $args = array('post_type' => 'shy_tut_book', 'posts_per_page' => -1);
            $query = new WP_Query($args);

            if ($query->have_posts()) :
                while ($query->have_posts()) : $query->the_post();
                    $post_id = get_the_ID();
                    $is_paid = get_post_meta($post_id, '_is_paid', true); // Check if the article is paid
                    $hide_from_general = get_post_meta($post_id, '_hide_from_general', true); // Check if the article is hidden
                    $assigned_users = get_post_meta($post_id, '_assigned_users', true); // Check who has access
                    $description = get_post_meta($post_id, '_stahp_description', true); // Get the custom description

                    // Ensure $assigned_users is an array
                    if (!is_array($assigned_users)) {
                        $assigned_users = []; // Convert to an empty array if it's not an array
                    }

                    // Skip posts that are marked as hidden from general listing
                    if ($hide_from_general) {
                        continue;
                    }

                    $user_has_access = in_array(get_current_user_id(), $assigned_users);

                    // Render each article with a specific class for filtering
                    ?>
                    <div class="article-item" data-title="<?php echo esc_attr(get_the_title()); ?>" data-description="<?php echo esc_attr($description); ?>">
                        <?php echo wp_kses_post(stahp_render_single_article($post_id, $is_paid, $user_has_access, $description)); ?>
                    </div>
                    <?php

                endwhile;
            else : ?>
                <p>No articles found</p>
            <?php 
            endif;
            wp_reset_postdata(); ?>
        </div>
    </div>

    <!-- JavaScript for Filtering -->
    <script>
        document.addEventListener('DOMContentLoaded', function () {
            const searchInput = document.getElementById('search-input');
            const articles = document.querySelectorAll('.article-item');

            searchInput.addEventListener('input', function () {
                const searchTerm = searchInput.value.toLowerCase();

                articles.forEach(article => {
                    const title = article.getAttribute('data-title').toLowerCase();
                    const description = article.getAttribute('data-description').toLowerCase();

                    if (title.includes(searchTerm) || description.includes(searchTerm)) {
                        article.style.display = '';
                    } else {
                        article.style.display = 'none';
                    }
                });
            });
        });
    </script>

    <?php

    return ob_get_clean(); // Return the buffered content
}
add_shortcode('shy_tutorials', 'shy_knowledge_base_shortcode');



// Add PayPal Settings submenu
function stahp_add_paypal_settings_submenu() {
    add_submenu_page(
        'edit.php?post_type=shy_tut_book', // Parent slug
        'PayPal Settings',                           // Page title
        'PayPal Settings',                           // Menu title
        'manage_options',                            // Capability
        'stahp_paypal_settings',                       // Menu slug
        'stahp_paypal_settings_page_callback'          // Callback function
    );
}
add_action('admin_menu', 'stahp_add_paypal_settings_submenu');

// Register PayPal settings
function stahp_register_paypal_settings() {
    register_setting('stahp_paypal_settings_group', 'stahp_paypal_client_id');
    register_setting('stahp_paypal_settings_group', 'stahp_paypal_secret');
    register_setting('stahp_paypal_settings_group', 'stahp_paypal_currency');
    register_setting('stahp_paypal_settings_group', 'stahp_paypal_webhook_id'); // Register webhook ID

    add_settings_section(
        'stahp_paypal_main_section',
        'PayPal Configuration',
        'stahp_paypal_main_section_callback',
        'stahp_paypal_settings'
    );

    add_settings_field(
        'stahp_paypal_client_id',
        'PayPal Client ID',
        'stahp_paypal_client_id_callback',
        'stahp_paypal_settings',
        'stahp_paypal_main_section'
    );

    add_settings_field(
        'stahp_paypal_secret',
        'PayPal Secret',
        'stahp_paypal_secret_callback',
        'stahp_paypal_settings',
        'stahp_paypal_main_section'
    );

    add_settings_field(
        'stahp_paypal_currency',
        'Currency',
        'stahp_paypal_currency_callback',
        'stahp_paypal_settings',
        'stahp_paypal_main_section'
    );

    add_settings_field(
        'stahp_paypal_webhook_id', // Field for webhook ID
        'PayPal Webhook ID',
        'stahp_paypal_webhook_id_callback',
        'stahp_paypal_settings',
        'stahp_paypal_main_section'
    );
}
add_action('admin_init', 'stahp_register_paypal_settings');
// Section description callback
function stahp_paypal_main_section_callback() {
    echo '<p>Enter your PayPal API credentials below.</p>';
}

// Webhook ID field callback
function stahp_paypal_webhook_id_callback() {
    $webhook_id = get_option('stahp_paypal_webhook_id');
    echo '<input type="text" name="stahp_paypal_webhook_id" value="' . esc_attr($webhook_id) . '" style="width: 100%;" />';
}

// Client ID field callback
function stahp_paypal_client_id_callback() {
    $client_id = get_option('stahp_paypal_client_id');
    echo '<input type="text" name="stahp_paypal_client_id" value="' . esc_attr($client_id) . '" style="width: 100%;" />';
}

// Secret field callback
function stahp_paypal_secret_callback() {
    $secret = get_option('stahp_paypal_secret');
    echo '<input type="password" name="stahp_paypal_secret" value="' . esc_attr($secret) . '" style="width: 100%;" />';
}

// Currency field callback
function stahp_paypal_currency_callback() {
    $currency = get_option('stahp_paypal_currency', 'USD'); // Default to USD
    echo '<input type="text" name="stahp_paypal_currency" value="' . esc_attr($currency) . '" style="width: 100%;" />';
    echo '<p class="description">Enter the currency code (e.g., USD, EUR).</p>';
}
// Settings page display callback
function stahp_paypal_settings_page_callback() {
    ?>
    <div class="wrap">
        <h1>PayPal Settings</h1>
        <form method="post" action="options.php">
            <?php
                settings_fields('stahp_paypal_settings_group');
                do_settings_sections('stahp_paypal_settings');
                submit_button();
            ?>
        </form>
    </div>
    <?php
}



// Modify the single article rendering to include the PayPal purchase link
function stahp_render_single_article($post_id, $is_paid, $user_has_access, $description) {
    ob_start();

    if ($user_has_access || !$is_paid) {
        // Get the full content of the post
        $post = get_post($post_id);
        if ($post) {
            $content = apply_filters('the_content', $post->post_content);
        }
    } else {
        // If the user doesn't have access, we won't generate the TOC, just show the description.
        $content = '<p>This content is locked. Please purchase access to view it.</p>';
    }

    ?>
    <div class="article-item <?php echo $is_paid ? 'locked' : ''; ?>">
        <div class="article-header">
            <?php if ($is_paid && !$user_has_access) : ?>
                <span class="lock-icon">&#x1f512;</span>
            <?php endif; ?>
            <h2 class="article-title">
                <?php if (!$is_paid || $user_has_access) : ?>
                    <a href="<?php echo esc_html(get_permalink($post_id)); ?>"><?php echo esc_html(get_the_title($post_id)); ?></a>
                <?php else : ?>
                    <?php echo esc_html(get_the_title($post_id)); ?>
                <?php endif; ?>
            </h2>
        </div>
        <div class="article-meta">
            <span class="article-date">Published on <?php echo get_the_date('', $post_id); ?></span>
            <?php if ($is_paid && !$user_has_access) : ?>
                <span class="article-status">Locked</span>
            <?php endif; ?>
        </div>
        <div class="article-description">
            <p><?php echo esc_html($description); ?></p>
        </div>

        <?php if ($is_paid && !$user_has_access) : ?>
            <div class="article-locked">
                <?php if (is_user_logged_in()): ?>
                    <p>This post is locked. Please purchase access to view it.</p>
                    <?php 
                        $paypal_link = stahp_generate_paypal_link($post_id); 

                        stahp_log_error('Generated PayPal link: "'.$paypal_link.'"');

                        if ($paypal_link): ?>
                        <a href="<?php echo esc_url($paypal_link); ?>" class="button">Purchase for $<?php echo esc_html(get_post_meta($post_id, '_stahp_tutorial_price', true)); ?></a>
                    <?php endif; ?>
                <?php else: ?>
                    <p>Please <a href="<?php echo esc_url(wp_login_url(get_permalink($post_id))); ?>">login</a> or <a href="<?php echo esc_url(wp_registration_url()); ?>">register</a> to purchase access.</p>
                <?php endif; ?>
            </div>
        <?php endif; ?>
    </div>
    <?php
    return ob_get_clean();
}

/* Logs */
function stahp_register_logs_page() {
    add_submenu_page(
        'edit.php?post_type=shy_tut_book', // Parent slug
        'Logs',                           // Page title
        'Logs',                           // Menu title
        'manage_options',                       // Capability
        'stahp-error-logs',                       // Menu slug
        'stahp_display_logs_page'                 // Function to display the page
    );
}
add_action('admin_menu', 'stahp_register_logs_page');



// usage: stahp_log_error('PayPal link generation failed.');
function stahp_log_error($message) {
    // Ensure message is a string and sanitize it
    $message = sanitize_text_field($message);

    // Add a timestamp to the log message
    $timestamp = gmdate('Y-m-d H:i:s');
    $log_entry = "{$timestamp} - {$message}";

    // Get existing logs, or initialize an empty array if none exist
    $logs = get_option('stahp_error_logs', array());

    // Add the new log entry
    $logs[] = $log_entry;

    // Limit logs to the last 50 entries
    if (count($logs) > 50) {
        $logs = array_slice($logs, -50);
    }

    // Save the logs back to the database
    update_option('stahp_error_logs', $logs);
}



function stahp_display_logs_page() {
    // Handle the log clearing action
    if (isset($_POST['stahp_clear_logs']) && check_admin_referer('stahp_clear_logs_action', 'stahp_clear_logs_nonce')) {
        update_option('stahp_error_logs', array());
        echo '<div class="updated"><p>Logs cleared.</p></div>';
    }

    // Retrieve the logs
    $logs = get_option('stahp_error_logs', array());

    ?>
    <div class="wrap">
        <h2>Logs</h2>
        <div style="background: #fff; padding: 20px; border: 1px solid #ccc; max-height: 400px; overflow-y: scroll;">
            <?php if (!empty($logs)) : ?>
                <ul style="list-style-type: none; padding: 0;">
                    <?php foreach (array_reverse($logs) as $log) : ?>
                        <li><?php echo esc_html($log); ?></li>
                    <?php endforeach; ?>
                </ul>
            <?php else : ?>
                <p>No logs available.</p>
            <?php endif; ?>
        </div>

        <form method="post">
            <?php wp_nonce_field('stahp_clear_logs_action', 'stahp_clear_logs_nonce'); ?>
            <input type="hidden" name="stahp_clear_logs" value="1">
            <?php submit_button('Clear Logs'); ?>
        </form>
    </div>
    <?php
}







// Generate a PayPal payment link using the PayPalLibrary
function stahp_generate_paypal_link($post_id) {
    $client_id = get_option('stahp_paypal_client_id');
    $secret = get_option('stahp_paypal_secret');
    $currency = get_option('stahp_paypal_currency');
    $price = get_post_meta($post_id, '_stahp_tutorial_price', true);

    if (!$client_id || !$secret || !$price || !$currency) {
        return false; // Missing essential data
    }

    $paypal = new PayPalPayment($client_id, $secret);
    $description = get_the_title($post_id);
    $return_url = add_query_arg(
        array(
            'action' => 'execute_payment',
            'post_id' => $post_id,
        ),
        get_permalink($post_id)
    );
    $cancel_url = get_permalink($post_id);

    try {
        $payment = $paypal->createPayment($price, $currency, $return_url, $cancel_url);
        return $payment->getApprovalLink();
    } catch (Exception $e) {
        stahp_log_error('PayPal link generation failed: ' . $e->getMessage());
        return false;
    }
}




function stahp_execute_paypal_payment() {
    if (isset($_GET['action']) && $_GET['action'] === 'execute_payment' && isset($_GET['paymentId']) && isset($_GET['PayerID']) && isset($_GET['post_id'])) {

        $paymentId = wp_unslash($_GET['paymentId']);
        $payerId = wp_unslash($_GET['PayerID']);
        $post_id = wp_unslash(intval($_GET['post_id']));

        $client_id = get_option('stahp_paypal_client_id');
        $secret = get_option('stahp_paypal_secret');

        if (!$client_id || !$secret) {
            stahp_log_error('Missing PayPal API credentials.');
            return;
        }

        $paypal = new PayPalPayment($client_id, $secret);

        try {
            $result = $paypal->executePayment($paymentId, $payerId);

            if ($result->getState() === 'approved') {
                stahp_mark_tutorial_as_purchased(get_current_user_id(), $post_id);
                wp_redirect(get_permalink($post_id) . '?payment=success');
                exit();
            } else {
                wp_redirect(get_permalink($post_id) . '?payment=failed');
                exit();
            }
        } catch (Exception $e) {
            stahp_log_error('Payment execution failed: ' . $e->getMessage());
            wp_redirect(get_permalink($post_id) . '?payment=error');
            exit();
        }
    }
}
add_action('template_redirect', 'stahp_execute_paypal_payment');






function stahp_mark_tutorial_as_purchased($user_id, $post_id) {
    // Log the action for debugging
    stahp_log_error("Marking post $post_id as purchased for user $user_id.");

    // Add the post ID to the user's purchased tutorials list (stored as user meta)
    $purchased_tutorials = get_user_meta($user_id, '_purchased_tutorials', true);

    if (!is_array($purchased_tutorials)) {
        $purchased_tutorials = array();
    }

    if (!in_array($post_id, $purchased_tutorials)) {
        $purchased_tutorials[] = $post_id;
        update_user_meta($user_id, '_purchased_tutorials', $purchased_tutorials);
        stahp_log_error("User $user_id granted access to post $post_id in purchased tutorials.");
    } else {
        stahp_log_error("User $user_id already has access to post $post_id in purchased tutorials.");
    }

    // Now add the user to the post's assigned users list
    $assigned_users = get_post_meta($post_id, '_assigned_users', true);

    if (!is_array($assigned_users)) {
        $assigned_users = array();
    }

    if (!in_array($user_id, $assigned_users)) {
        $assigned_users[] = $user_id;
        update_post_meta($post_id, '_assigned_users', $assigned_users);
        stahp_log_error("User $user_id assigned to post $post_id in assigned users.");
    } else {
        stahp_log_error("User $user_id is already assigned to post $post_id.");
    }
}






/* Webhook code */
// Register the custom endpoint for PayPal webhook
function stahp_register_webhook_endpoint() {
    add_rewrite_rule(
        '^paypal-webhook/?$', // The custom endpoint
        'index.php?paypal_webhook=1', // The query variable
        'top'
    );
}
add_action('init', 'stahp_register_webhook_endpoint');

// Add the webhook query variable
function stahp_add_webhook_query_var($vars) {
    $vars[] = 'paypal_webhook';
    return $vars;
}
add_filter('query_vars', 'stahp_add_webhook_query_var');

// Handle the PayPal webhook
function stahp_handle_paypal_webhook() {
    global $wp_query;

    if (isset($wp_query->query_vars['paypal_webhook'])) {
        stahp_log_error('Webhook function triggered.');

        $client_id = get_option('stahp_paypal_client_id');
        $secret = get_option('stahp_paypal_secret');
        $currency = get_option('stahp_paypal_currency');
        $webhook_id = get_option('stahp_paypal_webhook_id');

        if (!$client_id || !$secret || !$webhook_id) {
            stahp_log_error('Missing PayPal API credentials or Webhook ID.');
            return;
        }

        $paypal = new PayPalPayment($client_id, $secret);

        try {
            $event = $paypal->verifyWebhook();
            stahp_log_error('Event Type: ' . $event->event_type);

            switch ($event->event_type) {
                case 'PAYMENT.SALE.COMPLETED':
                    $resource = $event->resource;
                    $custom_data = json_decode($resource->custom, true);

                    $user_id = $custom_data['user_id'] ?? null;
                    $post_id = $custom_data['post_id'] ?? null;

                    if ($user_id && $post_id) {
                        //stahp_save_transaction($user_id, $post_id, $resource->id, $resource->amount->total, $resource->amount->currency, $resource->payer->payer_info->email);
                        stahp_mark_tutorial_as_purchased($user_id, $post_id);
                    } else {
                        stahp_log_error('Custom data (user_id, post_id) missing from the PayPal event.');
                    }
                    break;

                default:
                    stahp_log_error('Unhandled Event Type: ' . $event->event_type);
                    break;
            }

        } catch (Exception $e) {
            stahp_log_error('Webhook verification failed: ' . $e->getMessage());
        }

        status_header(200);
        exit();
    }
}

add_action('template_redirect', 'stahp_handle_paypal_webhook');




/*
// Register the Transactions custom post type under Tutorials & Handbooks menu
function stahp_register_transaction_post_type() {
    $labels = array(
        'name'               => 'Transactions',
        'singular_name'      => 'Transaction',
        'menu_name'          => 'Transactions',
        'name_admin_bar'     => 'Transaction',
        'add_new'            => 'Add New',
        'add_new_item'       => 'Add New Transaction',
        'new_item'           => 'New Transaction',
        'edit_item'          => 'Edit Transaction',
        'view_item'          => 'View Transaction',
        'all_items'          => 'All Transactions',
        'search_items'       => 'Search Transactions',
        'parent_item_colon'  => 'Parent Transactions:',
        'not_found'          => 'No transactions found.',
        'not_found_in_trash' => 'No transactions found in Trash.',
    );

    $args = array(
        'labels'             => $labels,
        'public'             => false,
        'publicly_queryable' => false,
        'show_ui'            => true,
        'show_in_menu'       => 'edit.php?post_type=shy_tut_book',  // Make it a sub-menu
        'query_var'          => true,
        'capability_type'    => 'post',
        'has_archive'        => false,
        'hierarchical'       => false,
        'menu_position'      => 20,
        'supports'           => array('title', 'custom-fields'),
    );

    register_post_type('transaction', $args);
}
add_action('init', 'stahp_register_transaction_post_type');


function stahp_save_transaction($user_id, $post_id, $transaction_id, $amount, $currency, $payer_email) {
    $transaction_data = array(
        'user_id' => $user_id,
        'post_id' => $post_id,
        'transaction_id' => $transaction_id,
        'amount' => $amount,
        'currency' => $currency,
        'payer_email' => $payer_email,
        'date' => current_time('mysql')
    );

    // Create a new transaction post
    $transaction_post_id = wp_insert_post(array(
        'post_type' => 'transaction',
        'post_title' => 'Transaction for ' . get_the_title($post_id),
        'post_status' => 'publish',
        'meta_input' => $transaction_data,
    ));

    // Log the transaction post ID for debugging
    stahp_log_error("Transaction post ID created: " . $transaction_post_id);

    if (is_wp_error($transaction_post_id)) {
        stahp_log_error("Failed to save transaction: " . $transaction_post_id->get_error_message());
    } else {
        stahp_log_error("Transaction saved successfully for post ID: " . $post_id);
    }
}

*/