<?php

/*
Plugin Name: Nextend Facebook Connect
Plugin URI: https://nextendweb.com/
Description: This plugins helps you create Facebook login and register buttons. The login and register process only takes one click.
Version: 2.0.2
Author: Nextendweb
License: GPL2
*/

/*  Copyright 2012  Roland Soos - Nextend  (email : roland@nextendweb.com)

This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License, version 2, as
published by the Free Software Foundation.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
*/
global $new_fb_settings;
define('NEW_FB_LOGIN', 1);
if (!defined('NEW_FB_LOGIN_PLUGIN_BASENAME')) define('NEW_FB_LOGIN_PLUGIN_BASENAME', plugin_basename(__FILE__));
$new_fb_settings = maybe_unserialize(get_option('nextend_fb_connect'));

if (!function_exists('nextend_uniqid')) {
    function nextend_uniqid() {
        if (isset($_COOKIE['nextend_uniqid'])) {
            if (get_site_transient('n_' . $_COOKIE['nextend_uniqid']) !== false) {
                return $_COOKIE['nextend_uniqid'];
            }
        }
        $_COOKIE['nextend_uniqid'] = uniqid('nextend', true);
        setcookie('nextend_uniqid', $_COOKIE['nextend_uniqid'], time() + 3600, '/', '', false, true);
        set_site_transient('n_' . $_COOKIE['nextend_uniqid'], 1, 3600);

        return $_COOKIE['nextend_uniqid'];
    }
}

/*
Loading style for buttons
*/

function nextend_fb_connect_stylesheet() {

    wp_register_style('nextend_fb_connect_stylesheet', plugins_url('buttons/facebook-btn.css', __FILE__));
    wp_enqueue_style('nextend_fb_connect_stylesheet');
}

if (!isset($new_fb_settings['fb_load_style'])) $new_fb_settings['fb_load_style'] = 1;
if ($new_fb_settings['fb_load_style']) {
    add_action('wp_enqueue_scripts', 'nextend_fb_connect_stylesheet');
    add_action('login_enqueue_scripts', 'nextend_fb_connect_stylesheet');
    add_action('admin_enqueue_scripts', 'nextend_fb_connect_stylesheet');
}

/*
Creating the required table on installation
*/

function nextend_fb_connect_install() {

    global $wpdb;
    $table_name = $wpdb->prefix . "social_users";
    $sql        = "CREATE TABLE $table_name (
    `ID` int(11) NOT NULL,
    `type` varchar(20) NOT NULL,
    `identifier` varchar(100) NOT NULL,
    KEY `ID` (`ID`,`type`)
  );";
    require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
    dbDelta($sql);
}

register_activation_hook(__FILE__, 'nextend_fb_connect_install');

/*
Adding query vars for the WP parser
*/

function new_fb_add_query_var() {

    global $wp;
    $wp->add_query_var('editProfileRedirect');
    $wp->add_query_var('loginFacebook');
    $wp->add_query_var('loginFacebookdoauth');
}

add_filter('init', 'new_fb_add_query_var');

/* -----------------------------------------------------------------------------
Main function to handle the Sign in/Register/Linking process
----------------------------------------------------------------------------- */

/*
Compatibility for older versions
*/

function new_fb_login_compat() {

    global $wp;
    if ($wp->request == 'loginFacebook' || isset($wp->query_vars['loginFacebook'])) {
        new_fb_login_action();
    }
}

add_action('parse_request', 'new_fb_login_compat');

/*
For login page
*/

function new_fb_login() {

    if (isset($_REQUEST['loginFacebook']) && $_REQUEST['loginFacebook'] == '1') {
        new_fb_login_action();
    }
}

add_action('login_init', 'new_fb_login');

function new_fb_login_action() {

    global $wp, $wpdb, $new_fb_settings;
    if (isset($_GET['action']) && $_GET['action'] == 'unlink') {
        $user_info = wp_get_current_user();
        if ($user_info->ID) {
            $wpdb->query($wpdb->prepare('DELETE FROM ' . $wpdb->prefix . 'social_users
          WHERE ID = %d
          AND type = \'fb\'', $user_info->ID));
            set_site_transient($user_info->ID . '_new_fb_admin_notice', __('Your Facebook profile is successfully unlinked from your account.', 'nextend-facebook-connect'), 3600);
        }
        new_fb_redirect();
    }

    if (is_user_logged_in() && new_fb_is_user_connected()) {
        new_fb_redirect();
        exit;
    }

    if (!class_exists('Facebook')) {
        require(dirname(__FILE__) . '/Facebook/autoload.php');
    }

    $settings = maybe_unserialize(get_option('nextend_fb_connect'));

    if (defined('NEXTEND_FB_APP_ID')) $settings['fb_appid'] = NEXTEND_FB_APP_ID;
    if (defined('NEXTEND_FB_APP_SECRET')) $settings['fb_secret'] = NEXTEND_FB_APP_SECRET;

    $fb = new Facebook\Facebook(array(
        'app_id'                  => $settings['fb_appid'],
        'app_secret'              => $settings['fb_secret'],
        'persistent_data_handler' => new Facebook\PersistentData\FacebookWordPressPersistentDataHandler(nextend_uniqid())
    ));

    if (isset($_REQUEST['code'])) {
        $helper = $fb->getRedirectLoginHelper();
        try {
            $accessToken = $helper->getAccessToken(new_fb_login_url());
        } catch (Facebook\Exceptions\FacebookResponseException $e) {
            // When Graph returns an error
            echo 'Graph returned an error: ' . $e->getMessage();
            exit;
        } catch (Facebook\Exceptions\FacebookSDKException $e) {
            // When validation fails or other local issues
            echo 'Facebook SDK returned an error: ' . $e->getMessage();
            exit;
        }

        if (!isset($accessToken)) {
            if ($helper->getError()) {
                header('HTTP/1.0 401 Unauthorized');
                echo "Error: " . $helper->getError() . "\n";
                echo "Error Code: " . $helper->getErrorCode() . "\n";
                echo "Error Reason: " . $helper->getErrorReason() . "\n";
                echo "Error Description: " . $helper->getErrorDescription() . "\n";
            } else {
                header('HTTP/1.0 400 Bad Request');
                echo 'Bad request';
            }
            exit;
        }

        // The OAuth 2.0 client handler helps us manage access tokens
        $oAuth2Client = $fb->getOAuth2Client();

        if (!$accessToken->isLongLived()) {
            // Exchanges a short-lived access token for a long-lived one
            try {
                $accessToken = $oAuth2Client->getLongLivedAccessToken($accessToken);
            } catch (Facebook\Exceptions\FacebookSDKException $e) {
                echo "<p>Error getting long-lived access token: " . $helper->getMessage() . "</p>\n\n";
                exit;
            }
        }

        $response     = $fb->get('/me?fields=id,name,email,first_name,last_name', $accessToken);
        $user_profile = $response->getGraphUser();

        $ID = $wpdb->get_var($wpdb->prepare('
        SELECT ID FROM ' . $wpdb->prefix . 'social_users WHERE type = "fb" AND identifier = "%d"
      ', $user_profile['id']));
        if (!get_user_by('id', $ID)) {
            $wpdb->query($wpdb->prepare('
          DELETE FROM ' . $wpdb->prefix . 'social_users WHERE ID = "%d"
        ', $ID));
            $ID = null;
        }
        if (!is_user_logged_in()) {
            if ($ID == NULL) { // Register

                if (!isset($user_profile['email'])) $user_profile['email'] = $user_profile['id'] . '@facebook.com';
                $ID = email_exists($user_profile['email']);
                if ($ID == false) { // Real register

                    require_once(ABSPATH . WPINC . '/registration.php');
                    $random_password = wp_generate_password($length = 12, $include_standard_special_chars = false);
                    if (!isset($new_fb_settings['fb_user_prefix'])) $new_fb_settings['fb_user_prefix'] = 'facebook-';

                    $username             = strtolower($user_profile['first_name'] . $user_profile['last_name']);
                    $sanitized_user_login = sanitize_user($new_fb_settings['fb_user_prefix'] . $username);
                    if (!validate_username($sanitized_user_login)) {
                        $sanitized_user_login = sanitize_user('facebook' . $user_profile['id']);
                    }
                    $defaul_user_name = $sanitized_user_login;
                    $i                = 1;
                    while (username_exists($sanitized_user_login)) {
                        $sanitized_user_login = $defaul_user_name . $i;
                        $i++;
                    }
                    $ID = wp_create_user($sanitized_user_login, $random_password, $user_profile['email']);
                    if (!is_wp_error($ID)) {
                        wp_new_user_notification($ID, $random_password);
                        $user_info = get_userdata($ID);
                        wp_update_user(array(
                            'ID'           => $ID,
                            'display_name' => $user_profile['name'],
                            'first_name'   => $user_profile['first_name'],
                            'last_name'    => $user_profile['last_name']
                        ));

                        //update_user_meta( $ID, 'new_fb_default_password', $user_info->user_pass);
                        do_action('nextend_fb_user_registered', $ID, $user_profile, $fb);
                    } else {
                        return;
                    }
                }
                if ($ID) {
                    $wpdb->insert($wpdb->prefix . 'social_users', array(
                        'ID'         => $ID,
                        'type'       => 'fb',
                        'identifier' => $user_profile['id']
                    ), array(
                        '%d',
                        '%s',
                        '%s'
                    ));
                }
                if (isset($new_fb_settings['fb_redirect_reg']) && $new_fb_settings['fb_redirect_reg'] != '' && $new_fb_settings['fb_redirect_reg'] != 'auto') {
                    set_site_transient(nextend_uniqid() . '_fb_r', $new_fb_settings['fb_redirect_reg'], 3600);
                }
            }
            if ($ID) { // Login

                $secure_cookie = is_ssl();
                $secure_cookie = apply_filters('secure_signon_cookie', $secure_cookie, array());
                global $auth_secure_cookie; // XXX ugly hack to pass this to wp_authenticate_cookie

                $auth_secure_cookie = $secure_cookie;
                wp_set_auth_cookie($ID, true, $secure_cookie);
                $user_info = get_userdata($ID);
                update_user_meta($ID, 'fb_profile_picture', 'https://graph.facebook.com/' . $user_profile['id'] . '/picture?type=large');
                do_action('wp_login', $user_info->user_login, $user_info);
                update_user_meta($ID, 'fb_user_access_token', $accessToken);
                do_action('nextend_fb_user_logged_in', $ID, $user_profile, $fb);
            }
        } else {
            $current_user = wp_get_current_user();
            if ($current_user->ID == $ID) {

                // It was a simple login

            } elseif ($ID === NULL) { // Let's connect the accout to the current user!

                $wpdb->insert($wpdb->prefix . 'social_users', array(
                    'ID'         => $current_user->ID,
                    'type'       => 'fb',
                    'identifier' => $user_profile['id']
                ), array(
                    '%d',
                    '%s',
                    '%s'
                ));
                update_user_meta($current_user->ID, 'fb_user_access_token', (string) $accessToken);
                do_action('nextend_fb_user_account_linked', $ID, $user_profile, $fb);
                $user_info = wp_get_current_user();
                set_site_transient($user_info->ID . '_new_fb_admin_notice', __('Your Facebook profile is successfully linked with your account. Now you can sign in with Facebook easily.', 'nextend-facebook-connect'), 3600);
            } else {
                $user_info = wp_get_current_user();
                set_site_transient($user_info->ID . '_new_fb_admin_notice', __('This Facebook profile is already linked with other account. Linking process failed!', 'nextend-facebook-connect'), 3600);
            }
        }
        new_fb_redirect();
    } else {
        $helper = $fb->getRedirectLoginHelper();

        $permissions = apply_filters('nextend_fb_permissions', array('email'));
        $loginUrl    = $helper->getLoginUrl(new_fb_login_url(), $permissions);

        if (isset($new_fb_settings['fb_redirect']) && $new_fb_settings['fb_redirect'] != '' && $new_fb_settings['fb_redirect'] != 'auto') {
            $_GET['redirect'] = $new_fb_settings['fb_redirect'];
        }
        if (isset($_GET['redirect'])) {
            set_site_transient(nextend_uniqid() . '_fb_r', $_GET['redirect'], 3600);
        }
        $redirect = get_site_transient(nextend_uniqid() . '_fb_r');
        if ($redirect == '' || $redirect == new_fb_login_url()) {
            set_site_transient(nextend_uniqid() . '_fb_r', site_url(), 3600);
        }

        header('Location: ' . $loginUrl);
        exit;
    }
}

/*
Is the current user connected the Facebook profile?
*/

function new_fb_is_user_connected() {

    global $wpdb;
    $current_user = wp_get_current_user();
    $ID           = $wpdb->get_var($wpdb->prepare('
    SELECT identifier FROM ' . $wpdb->prefix . 'social_users WHERE type = "fb" AND ID = "%d"
  ', $current_user->ID));
    if ($ID === NULL) return false;

    return $ID;
}

function new_fb_get_user_access_token($id) {

    return get_user_meta($id, 'fb_user_access_token', true);
}

/*
Connect Field in the Profile page
*/

function new_add_fb_connect_field() {

    global $new_is_social_header;

    //if(new_fb_is_user_connected()) return;
    if ($new_is_social_header === NULL) {
        ?>
        <h3>Social connect</h3>
        <?php
        $new_is_social_header = true;
    }
    ?>
    <table class="form-table">
    <tbody>
      <tr>	
        <th>
        </th>	
        <td>
          <?php
          if (new_fb_is_user_connected()) {
              echo new_fb_unlink_button();
          } else {
              echo new_fb_link_button();
          }
          ?>
        </td>
      </tr>
    </tbody>
  </table>
    <?php
}

add_action('profile_personal_options', 'new_add_fb_connect_field');

function new_add_fb_login_form() {

    ?>
    <script type="text/javascript">
  if (jQuery.type(has_social_form) === "undefined") {
      var has_social_form = false;
      var socialLogins = null;
  }
  jQuery(document).ready(function () {
      (function ($) {
          if (!has_social_form) {
              has_social_form = true;
              var loginForm = $('#loginform,#registerform,#front-login-form,#setupform');
              socialLogins = $('<div class="newsociallogins" style="text-align: center;"><div style="clear:both;"></div></div>');
              if (loginForm.find('input').length > 0)
                  loginForm.prepend("<h3 style='text-align:center;'><?php _e('OR'); ?></h3>");
              loginForm.prepend(socialLogins);
              socialLogins = loginForm.find('.newsociallogins');
          }
          if (!window.fb_added) {
              socialLogins.prepend('<?php echo addslashes(preg_replace('/^\s+|\n|\r|\s+$/m', '', new_fb_sign_button())); ?>');
              window.fb_added = true;
          }
      }(jQuery));
  });
  </script>
    <?php
}

add_action('login_form', 'new_add_fb_login_form');
add_action('register_form', 'new_add_fb_login_form');
add_action('bp_sidebar_login_form', 'new_add_fb_login_form');
add_filter('get_avatar', 'new_fb_insert_avatar', 5, 5);

function new_fb_insert_avatar($avatar = '', $id_or_email, $size = 96, $default = '', $alt = false) {

    $id = 0;
    if (is_numeric($id_or_email)) {
        $id = $id_or_email;
    } else if (is_string($id_or_email)) {
        $u  = get_user_by('email', $id_or_email);
        $id = $u->id;
    } else if (is_object($id_or_email)) {
        $id = $id_or_email->user_id;
    }
    if ($id == 0) return $avatar;
    $pic = get_user_meta($id, 'fb_profile_picture', true);
    if (!$pic || $pic == '') return $avatar;
    $avatar = preg_replace('/src=("|\').*?("|\')/i', 'src=\'' . $pic . '\'', $avatar);

    return $avatar;
}

add_filter('bp_core_fetch_avatar', 'new_fb_bp_insert_avatar', 3, 5);

function new_fb_bp_insert_avatar($avatar = '', $params, $id) {
    if (!is_numeric($id) || strpos($avatar, 'gravatar') === false) return $avatar;
    $pic = get_user_meta($id, 'fb_profile_picture', true);
    if (!$pic || $pic == '') return $avatar;
    $avatar = preg_replace('/src=("|\').*?("|\')/i', 'src=\'' . $pic . '\'', $avatar);

    return $avatar;
}

/*
Options Page
*/
require_once(trailingslashit(dirname(__FILE__)) . "nextend-facebook-settings.php");
if (class_exists('NextendFBSettings')) {
    $nextendfbsettings = new NextendFBSettings();
    if (isset($nextendfbsettings)) {
        add_action('admin_menu', array(
            &$nextendfbsettings,
            'NextendFB_Menu'
        ), 1);
    }
}
add_filter('plugin_action_links', 'new_fb_plugin_action_links', 10, 2);

function new_fb_plugin_action_links($links, $file) {

    if ($file != NEW_FB_LOGIN_PLUGIN_BASENAME) return $links;
    $settings_link = '<a href="' . esc_url(menu_page_url('nextend-facebook-connect', false)) . '">' . esc_html(__('Settings', 'nextend-facebook-connect')) . '</a>';
    array_unshift($links, $settings_link);

    return $links;
}

/* -----------------------------------------------------------------------------
Miscellaneous functions
----------------------------------------------------------------------------- */

function new_fb_sign_button() {

    global $new_fb_settings;

    return '<a href="' . esc_url(new_fb_login_url() . (isset($_GET['redirect_to']) ? '&redirect=' . $_GET['redirect_to'] : '')) . '" rel="nofollow">' . $new_fb_settings['fb_login_button'] . '</a><br />';
}

function new_fb_link_button() {

    global $new_fb_settings;

    return '<a href="' . esc_url(new_fb_login_url() . '&redirect=' . new_fb_curPageURL()) . '">' . $new_fb_settings['fb_link_button'] . '</a><br />';
}

function new_fb_unlink_button() {

    global $new_fb_settings;

    return '<a href="' . esc_url(new_fb_login_url() . '&action=unlink&redirect=' . new_fb_curPageURL()) . '">' . $new_fb_settings['fb_unlink_button'] . '</a><br />';
}

function new_fb_curPageURL() {
    global $wp;
    return home_url(add_query_arg(array(),$wp->request));
}

function new_fb_login_url() {

    return site_url('wp-login.php') . '?loginFacebook=1';
}

function new_fb_redirect() {

    $redirect = get_site_transient(nextend_uniqid() . '_fb_r');

    if (!$redirect || $redirect == '' || $redirect == new_fb_login_url()) {
        if (isset($_GET['redirect'])) {
            $redirect = $_GET['redirect'];
        } else {
            $redirect = site_url();
        }
    }
    $redirect = wp_sanitize_redirect($redirect);
    $redirect = wp_validate_redirect($redirect, site_url());
    header('LOCATION: ' . $redirect);
    delete_site_transient(nextend_uniqid() . '_fb_r');
    exit;
}

function new_fb_edit_profile_redirect() {

    global $wp;
    if (isset($wp->query_vars['editProfileRedirect'])) {
        if (function_exists('bp_loggedin_user_domain')) {
            header('LOCATION: ' . bp_loggedin_user_domain() . 'profile/edit/group/1/');
        } else {
            header('LOCATION: ' . self_admin_url('profile.php'));
        }
        exit;
    }
}

add_action('parse_request', 'new_fb_edit_profile_redirect');

function new_fb_jquery() {

    wp_enqueue_script('jquery');
}

add_action('login_form_login', 'new_fb_jquery');
add_action('login_form_register', 'new_fb_jquery');

/*
Session notices used in the profile settings
*/

function new_fb_admin_notice() {
    $user_info = wp_get_current_user();
    $notice    = get_site_transient($user_info->ID . '_new_fb_admin_notice');
    if ($notice !== false) {
        echo '<div class="updated">
       <p>' . $notice . '</p>
    </div>';
        delete_site_transient($user_info->ID . '_new_fb_admin_notice');
    }
}

add_action('admin_notices', 'new_fb_admin_notice');