<?php

declare(strict_types=1);

namespace PhpMyAdmin;

use function closelog;
use function date;
use function error_log;
use function function_exists;
use function openlog;
use function syslog;

use const LOG_AUTHPRIV;
use const LOG_NDELAY;
use const LOG_PID;
use const LOG_WARNING;

/**
 * Logging functionality for webserver.
 *
 * This includes web server specific code to log some information.
 */
class Logging
{
    /**
     * Get authentication logging destination
     */
    public static function getLogDestination(string $authLog): string
    {
        $logFile = $authLog;

        /* Autodetect */
        if ($logFile === 'auto') {
            if (function_exists('syslog')) {
                $logFile = 'syslog';
            } elseif (function_exists('error_log')) {
                $logFile = 'php';
            } else {
                $logFile = '';
            }
        }

        return $logFile;
    }

    /**
     * Generate log message for authentication logging
     *
     * @param string $user   user name
     * @param string $status status message
     */
    public static function getLogMessage(string $user, string $status): string
    {
        if ($status === 'ok') {
            return 'user authenticated: ' . $user . ' from ' . Core::getIp();
        }

        return 'user denied: ' . $user . ' (' . $status . ') from ' . Core::getIp();
    }

    /**
     * Logs user information to webserver logs.
     *
     * @param string $user   user name
     * @param string $status status message
     */
    public static function logUser(Config $config, string $user, string $status = 'ok'): void
    {
        if (function_exists('apache_note')) {
            /** @psalm-suppress UnusedFunctionCall */
            apache_note('userID', $user);
            /** @psalm-suppress UnusedFunctionCall */
            apache_note('userStatus', $status);
        }

        $settings = $config->getSettings();

        /* Do not log successful authentications */
        if (! $settings->authLogSuccess && $status === 'ok') {
            return;
        }

        $logFile = self::getLogDestination($settings->authLog);
        if ($logFile === '') {
            return;
        }

        $message = self::getLogMessage($user, $status);
        if ($logFile === 'syslog') {
            if (function_exists('syslog')) {
                @openlog('phpMyAdmin', LOG_NDELAY | LOG_PID, LOG_AUTHPRIV);
                @syslog(LOG_WARNING, $message);
                closelog();
            }
        } elseif ($logFile === 'php') {
            @error_log($message);
        } elseif ($logFile === 'sapi') {
            @error_log($message, 4);
        } else {
            @error_log(
                date('M d H:i:s') . ' phpmyadmin: ' . $message . "\n",
                3,
                $logFile,
            );
        }
    }
}