<?php
/**
 * @brief		Member filter extension: Two Factor Authentication
 * @since		22 Mar 2017
 */

namespace IPS\core\extensions\core\MemberFilter;

/* To prevent PHP errors (extending class does not exist) revealing path */
if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
{
	header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
	exit;
}

/**
 * @brief	Member filter: Two Factor Authentication
 */
class _Twofactor
{
	/**
	 * Determine if the filter is available in a given area
	 *
	 * @param	string	$area	Area to check
	 * @return	bool
	 */
	public function availableIn( $area )
	{
		return \in_array( $area, array( 'bulkmail', 'passwordreset' ) );
	}

	/**
	 * Get Setting Field
	 *
	 * @param	mixed	$criteria	Value returned from the save() method
	 * @return	array 	Array of form elements
	 */
	public function getSettingField( $criteria )
	{
		$options = array( 'any' => 'any', 'active' => 'mf_two_factor_active', 'inactive' => 'mf_two_factor_inactive' );

		return array(
			new \IPS\Helpers\Form\Radio( 'mf_two_factor', isset( $criteria['two_factor'] ) ? $criteria['two_factor'] : 'any', FALSE, array( 'options' => $options ) ),
		);
	}

	/**
	 * Save the filter data
	 *
	 * @param	array	$post	Form values
	 * @return	mixed			False, or an array of data to use later when filtering the members
	 * @throws \LogicException
	 */
	public function save( $post )
	{
		return ( isset( $post['mf_two_factor'] ) and \in_array( $post['mf_two_factor'], array( 'active', 'inactive' ) ) ) ? array( 'two_factor' => $post['mf_two_factor'] ) : FALSE;
	}

	/**
	 * Get where clause to add to the member retrieval database query
	 *
	 * @param	mixed				$data	The array returned from the save() method
	 * @return	array|NULL			Where clause - must be a single array( "clause" )
	 */
	public function getQueryWhereClause( $data )
	{
		if ( isset( $data['two_factor'] ) )
		{
			switch ( $data['two_factor'] )
			{
				case 'active':
					return array( "mfa_details IS NOT NULL AND mfa_details !=  '[]' " );
					break;
				case 'inactive':
					return array( "( mfa_details IS NULL OR mfa_details = '[]')" );
					break;
			}
		}

		return NULL;
	}
}