<?php
/**
 * Class: Custom DB Class
 *
 * Test the DB connection.
 * It uses wpdb WordPress DB Class.
 *
 * @package wsal
 */

namespace WSAL\Entities\DBConnection;

// Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

if ( ! class_exists( '\WSAL\Entities\DBConnection\MySQL_Connection' ) ) {
	/**
	 * Test the DB connection.
	 * It uses wpdb WordPress DB Class.
	 *
	 * @package wsal
	 *
	 * @phpcs:disable PEAR.NamingConventions.ValidClassName.StartWithCapital
	 */
	class MySQL_Connection extends \wpdb {

		/**
		 * Holds the database connection error string
		 *
		 * @var string
		 *
		 * @since 4.6.0
		 */
		public static $error_string = null;

		/**
		 * Overwrite wpdb class for set $allow_bail to false
		 * and hide the print of the error
		 *
		 * @global string $wp_version
		 * @param string $dbuser          - MySQL database user.
		 * @param string $dbpassword      - MySQL database password.
		 * @param string $dbname          - MySQL database name.
		 * @param string $dbhost          - MySQL database host.
		 * @param bool   $is_ssl          - Set if connection is SSL encrypted.
		 * @param bool   $is_cc           - Set if connection has client certificates.
		 * @param string $ssl_ca          - Certificate Authority.
		 * @param string $ssl_cert        - Client Certificate.
		 * @param string $ssl_key         - Client Key.
		 */
		public function __construct( $dbuser, $dbpassword, $dbname, $dbhost, $is_ssl, $is_cc, $ssl_ca, $ssl_cert, $ssl_key ) {

			if ( WP_DEBUG && WP_DEBUG_DISPLAY ) {
				$this->show_errors();
			}

			if ( function_exists( 'mysqli_connect' ) ) {
				if ( defined( 'WP_USE_EXT_MYSQL' ) ) {
					$this->use_mysqli = ! \WP_USE_EXT_MYSQL;
				} elseif ( version_compare( phpversion(), '5.5', '>=' ) || ! function_exists( 'mysql_connect' ) ) {
					$this->use_mysqli = true;
				} elseif ( false !== strpos( $GLOBALS['wp_version'], '-' ) ) {
					$this->use_mysqli = true;
				}
			}

			$this->dbuser     = $dbuser;
			$this->dbpassword = $dbpassword;
			$this->dbname     = $dbname;
			$this->dbhost     = $dbhost;

			// wp-config.php creation will manually connect when ready.
			if ( defined( 'WP_SETUP_CONFIG' ) ) {
				return;
			}

			if ( $is_ssl && ! defined( 'MYSQL_CLIENT_FLAGS' ) ) {
				define( 'MYSQL_CLIENT_FLAGS', MYSQLI_CLIENT_SSL | MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT );
			}

			if ( $is_cc ) {
				if ( ! empty( $ssl_key ) && is_file( $ssl_key ) && ! defined( 'MYSQL_SSL_KEY' ) ) {
					define( 'MYSQL_SSL_KEY', $ssl_key );
				}
				if ( ! empty( $ssl_cert ) && is_file( $ssl_cert ) && ! defined( 'MYSQL_SSL_CERT' ) ) {
					define( 'MYSQL_SSL_CERT', $ssl_cert );
				}
				if ( ! empty( $ssl_ca ) && is_file( $ssl_ca ) && ! defined( 'MYSQL_SSL_CA' ) ) {
					define( 'MYSQL_SSL_CA', $ssl_ca );
				}
			}

			$this->db_connect( false );
		}

		/**
		 * Connect to and select database.
		 *
		 * If $allow_bail is false, the lack of database connection will need
		 * to be handled manually.
		 *
		 * @param bool $allow_bail Optional. Allows the function to bail. Default true.
		 *
		 * @return bool True with a successful connection, false on failure.
		 * @since 3.0.0
		 * @since 3.9.0 $allow_bail parameter added.
		 */
		public function db_connect( $allow_bail = true ) {
			$this->is_mysql = true;
			$client_flags   = defined( 'MYSQL_CLIENT_FLAGS' ) ? MYSQL_CLIENT_FLAGS : 0;
			if ( $this->use_mysqli ) {
				/*
				* Set the MySQLi error reporting off because WordPress handles its own.
				* This is due to the default value change from `MYSQLI_REPORT_OFF`
				* to `MYSQLI_REPORT_ERROR|MYSQLI_REPORT_STRICT` in PHP 8.1.
				*/
				mysqli_report( MYSQLI_REPORT_OFF ); // phpcs:ignore -- Direct DB access

				$this->dbh = mysqli_init(); // phpcs:ignore

				// mysqli_real_connect doesn't support the host param including a port or socket
				// like mysql_connect does. This duplicates how mysql_connect detects a port and/or socket file.
				$port           = null;
				$socket         = null;
				$host           = $this->dbhost;
				$port_or_socket = strstr( $host, ':' );
				if ( ! empty( $port_or_socket ) ) {
					$host           = substr( $host, 0, strpos( $host, ':' ) );
					$port_or_socket = substr( $port_or_socket, 1 );
					if ( 0 !== strpos( $port_or_socket, '/' ) ) {
						$port         = intval( $port_or_socket );
						$maybe_socket = strstr( $port_or_socket, ':' );
						if ( ! empty( $maybe_socket ) ) {
							$socket = substr( $maybe_socket, 1 );
						}
					} else {
						$socket = $port_or_socket;
					}
				}

				// Set SSL certs if we want to use secure DB connections.
				$ssl_opts     = array(
					'KEY'     => ( defined( 'MYSQL_SSL_KEY' ) && is_file( MYSQL_SSL_KEY ) ) ? MYSQL_SSL_KEY : null,
					'CERT'    => ( defined( 'MYSQL_SSL_CERT' ) && is_file( MYSQL_SSL_CERT ) ) ? MYSQL_SSL_CERT : null,
					'CA'      => ( defined( 'MYSQL_SSL_CA' ) && is_file( MYSQL_SSL_CA ) ) ? MYSQL_SSL_CA : null,
					'CA_PATH' => ( defined( 'MYSQL_SSL_CA_PATH' ) && is_dir( \MYSQL_SSL_CA_PATH ) ) ? \MYSQL_SSL_CA_PATH : null,
					'CIPHER'  => ( defined( 'MYSQL_SSL_CIPHER' ) ) ? \MYSQL_SSL_CIPHER : null,
				);
				$ssl_opts_set = false;
				foreach ( $ssl_opts as $ssl_opt_val ) {
					if ( ! is_null( $ssl_opt_val ) ) {
						$ssl_opts_set = true;
						break;
					}
				}
				if ( MYSQLI_CLIENT_SSL !== ( $client_flags & MYSQLI_CLIENT_SSL ) ) {
					$ssl_opts_set = false;
				}
				if ( $ssl_opts_set ) {
					mysqli_ssl_set( // phpcs:ignore
						$this->dbh,
						$ssl_opts['KEY'],
						$ssl_opts['CERT'],
						$ssl_opts['CA'],
						$ssl_opts['CA_PATH'],
						$ssl_opts['CIPHER']
					);
				}

				if ( WP_DEBUG ) {
					mysqli_real_connect( $this->dbh, $host, $this->dbuser, $this->dbpassword, null, $port, $socket, $client_flags ); // phpcs:ignore
				} else {
					@mysqli_real_connect( $this->dbh, $host, $this->dbuser, $this->dbpassword, null, $port, $socket, $client_flags ); // phpcs:ignore
				}

				if ( $this->dbh->connect_errno ) {
					if ( 2002 === (int) $this->dbh->connect_errno ) {
						self::$error_string = __( 'The plugin detected connectivity issues coming from your external database connection. Please check the status of your external database connection and try again!', 'wp-security-audit-log' );
					}
				}

				if ( $this->dbh->connect_errno ) {
					$this->dbh = null;

					/**
					 * It's possible ext/mysqli is misconfigured. Fall back to ext/mysql if:
					 *  - We haven't previously connected, and
					 *  - WP_USE_EXT_MYSQL isn't set to false, and
					 *  - ext/mysql is loaded.
					 */
					$attempt_fallback = true;

					if ( $this->has_connected
					|| ( defined( 'WP_USE_EXT_MYSQL' ) && ! \WP_USE_EXT_MYSQL )
					|| ( ! function_exists( 'mysql_connect' ) ) ) {
						$attempt_fallback = false;
					}

					if ( $attempt_fallback ) {
						$this->use_mysqli = false;
						return $this->db_connect( $allow_bail );
					}
				}
			}

			if ( ! $this->dbh && $allow_bail ) {
				return false;
			} elseif ( $this->dbh ) {
				if ( ! $this->has_connected ) {
					$this->init_charset();
				}

				$this->has_connected = true;

				$this->set_charset( $this->dbh );

				$this->ready = true;
				$this->set_sql_mode();
				$this->select( $this->dbname, $this->dbh );

				return true;
			}

			return false;
		}

		/**
		 * Selects a database using the current database connection.
		 *
		 * The database name will be changed based on the current database
		 * connection. On failure, the execution will bail and display an DB error.
		 *
		 * @since 0.71
		 *
		 * @param string        $db  MySQL database name.
		 * @param resource|null $dbh Optional link identifier.
		 */
		public function select( $db, $dbh = null ) {
			if ( is_null( $dbh ) ) {
				$dbh = $this->dbh;
			}

			if ( $this->use_mysqli ) {
				$success = mysqli_select_db( $dbh, $db ); // phpcs:ignore
			} else {
				$success = mysql_select_db( $db, $dbh ); // phpcs:ignore
			}

			if ( ! $success ) {
				$this->ready           = false;
				$this->db_select_error = true;
			}
		}
	}
}