<?php
/**
 * Erstellt/aktualisiert die englischen (en) Übersetzungen aller Kerninhalte
 * und verknüpft sie via Polylang mit der deutschen Version. Idempotent.
 * Aufruf: wp eval-file.
 */

if ( ! function_exists( 'pll_save_post_translations' ) ) { echo "pll fehlt\n"; return; }
if ( ! defined( 'SMI_I18N_BULK' ) ) { define( 'SMI_I18N_BULK', true ); }
$home = home_url();

/**
 * EN-Übersetzung eines DE-Beitrags anlegen/aktualisieren + verknüpfen.
 */
function mk_en( $slug, $type, $f ) {
	$de = get_page_by_path( $slug, OBJECT, $type );
	if ( ! $de ) { echo "  MISS $type/$slug\n"; return 0; }
	$tr  = pll_get_post_translations( $de->ID );
	$eid = ! empty( $tr['en'] ) ? (int) $tr['en'] : 0;

	$data = array(
		'post_type'    => $type,
		'post_status'  => 'publish',
		'post_title'   => $f['title'],
		'post_content' => $f['content'] ?? '',
		'post_excerpt' => $f['excerpt'] ?? '',
		'post_name'    => $f['name'] ?? sanitize_title( $f['title'] ),
		'menu_order'   => $de->menu_order,
	);
	if ( $eid ) { $data['ID'] = $eid; wp_update_post( $data ); }
	else { $eid = wp_insert_post( $data ); pll_set_post_language( $eid, 'en' ); }

	$tr['de'] = $de->ID; $tr['en'] = $eid;
	pll_save_post_translations( $tr );

	foreach ( array( '_wp_page_template','logo','rating','price','per','badge','highlight','affiliate_url','_thumbnail_id' ) as $mk ) {
		$mv = get_post_meta( $de->ID, $mk, true );
		if ( '' !== $mv ) { update_post_meta( $eid, $mk, $mv ); }
	}
	if ( isset( $f['tool_slug'] ) ) { update_post_meta( $eid, 'smi_tool_slug', $f['tool_slug'] ); }
	if ( isset( $f['meta_desc'] ) ) { update_post_meta( $eid, '_smi_meta_desc', $f['meta_desc'] ); }
	if ( isset( $f['features'] ) ) { update_post_meta( $eid, 'features', $f['features'] ); }
	if ( isset( $f['note'] ) ) { update_post_meta( $eid, 'note', $f['note'] ); }
	if ( isset( $f['faq'] ) ) { update_post_meta( $eid, '_smi_faq', wp_json_encode( $f['faq'] ) ); }
	if ( isset( $f['reviewed'] ) ) { update_post_meta( $eid, '_smi_reviewed', $f['reviewed'] ); }
	delete_post_meta( $eid, '_smi_needs_translation' );
	if ( function_exists( 'smi_i18n_copy_terms' ) ) { smi_i18n_copy_terms( $de->ID, $eid, 'en' ); }
	echo "  EN $type/$slug -> $eid\n";
	return $eid;
}

/** Baustein-Helfer für Tool-Content. */
function tool_html( $title, $intro, $steps, $uses ) {
	$h = "<p>$intro</p><h2>How to use $title</h2><ol>";
	foreach ( $steps as $s ) { $h .= "<li>$s</li>"; }
	$h .= '</ol><h2>When is this useful?</h2><ul>';
	foreach ( $uses as $u ) { $h .= "<li>$u</li>"; }
	return $h . '</ul>';
}

/* ============ Seiten (Template-getrieben, Text via .mo) ============ */
mk_en( 'startseite', 'page', array( 'title' => 'Home', 'name' => 'home', 'excerpt' => 'Free security tools, guides and trusted recommendations: passwords, VPN, data breaches, websites & network – protect your internet, identity and privacy with SafeMyIdent.' ) );
mk_en( 'vpn', 'page', array( 'title' => 'VPN: Stay Anonymous and Secure Online', 'name' => 'vpn', 'excerpt' => 'Right now anyone can see what you do online. Protect yourself with a VPN – today at up to 82% off. 31-day money-back guarantee.' ) );
mk_en( 'checkliste', 'page', array( 'title' => 'Security Checklist', 'name' => 'checkliste', 'excerpt' => 'Free interactive security checklist: passwords, devices, accounts, backups and more. Tick off what you have done – your progress is saved locally.' ) );
mk_en( 'ratgeber', 'page', array( 'title' => 'Guides', 'name' => 'ratgeber', 'excerpt' => 'Evergreen guides on IT security, privacy and identity protection.' ) );
mk_en( 'impressum', 'page', array( 'title' => 'Imprint', 'name' => 'imprint' ) );
mk_en( 'datenschutz', 'page', array( 'title' => 'Privacy Policy', 'name' => 'privacy-policy' ) );
mk_en( 'agb', 'page', array( 'title' => 'Terms', 'name' => 'terms' ) );

/* ============ Pillar + Spokes ============ */
mk_en( 'passwort', 'page', array(
	'title' => 'Password Security: The Complete Guide', 'name' => 'passwords',
	'excerpt' => 'Create, manage and protect secure passwords: the complete guide to password security, password managers and two-factor authentication – with free tools.',
	'meta_desc' => 'The complete guide to password security: create strong passwords, password managers, 2FA – incl. a free password generator and strength test.',
	'content' => <<<HTML
<p>Passwords are the key to your digital life – to email, online banking, social media and online shops. That is exactly why they are the number one target. In this guide you will learn <strong>everything you need to know about secure passwords</strong>: what makes them strong, which mistakes to avoid, and which tools protect you in minutes.</p>
<h2>Why weak passwords are so dangerous</h2>
<p>Billions of stolen credentials are traded online every day. Attackers test them automatically on other services – this is called <em>credential stuffing</em>. If you reuse the same password, a single breach can compromise several accounts at once.</p>
<h2>What makes a strong password</h2>
<ul>
<li><strong>Length over complexity:</strong> at least 16 characters.</li>
<li><strong>Randomness:</strong> no names, birthdays or patterns. Use a <a href="{$home}/en/tools/password-generator/">password generator</a>.</li>
<li><strong>Uniqueness:</strong> a different password for every account.</li>
</ul>
<p>Check how strong your current password is with our <a href="{$home}/en/tools/password-strength/">password strength test</a> – your input stays in your browser.</p>
<h2>Password managers: the only practical solution</h2>
<p>Nobody can remember dozens of unique 16-character passwords – and you don't have to. A password manager generates, stores and fills them in for you. You only remember <strong>one</strong> strong master password. More in our guide <a href="{$home}/ratgeber/password-manager-why/">"Password managers: why everyone needs one"</a>.</p>
<h2>Two-factor authentication as a second line of defence</h2>
<p>Even the best password can leak. With two-factor authentication (2FA), the password alone is no longer enough – an additional code or hardware key is required. Enable 2FA everywhere.</p>
HTML,
) );
mk_en( 'sicheres-passwort-erstellen', 'post', array(
	'title' => 'How to Create a Secure Password (With Examples)', 'name' => 'create-secure-password',
	'excerpt' => 'How to create a truly secure password – with simple rules, concrete examples and a free generator. Explained step by step.',
	'reviewed' => wp_date( 'M j, Y' ),
	'content' => <<<HTML
<p>Creating a secure password is easier than most people think. You don't need to memorise cryptic strings – just the right principles and the right tool.</p>
<h2>The three basic rules</h2>
<ol><li><strong>Long:</strong> at least 16 characters.</li><li><strong>Random:</strong> no words, names or keyboard patterns.</li><li><strong>Unique:</strong> a different password for each account.</li></ol>
<h2>Method 1: password generator (recommended)</h2>
<p>The fastest and safest way is our <a href="{$home}/en/tools/password-generator/">password generator</a>. Set length and characters, generate, save it in your password manager – done. Then check the strength with the <a href="{$home}/en/tools/password-strength/">strength test</a>.</p>
<h2>Method 2: the passphrase</h2>
<p>If you must remember a password (e.g. your master password), use a passphrase of four to five random words, e.g. <em>Brick-Coffee-Northwind-42-Sail</em>. Easy to remember, hard to crack.</p>
<p>For more context, see the full <a href="{$home}/en/passwords/">password security guide</a>.</p>
HTML,
) );
mk_en( 'passwort-manager-warum', 'post', array(
	'title' => 'Password Managers: Why Everyone Needs One', 'name' => 'password-manager-why',
	'excerpt' => 'A password manager generates, stores and fills strong passwords automatically – you only remember one. Why it is the most important security decision.',
	'reviewed' => wp_date( 'M j, Y' ),
	'content' => <<<HTML
<p>The advice "use a unique, long password for every account" fails in practice for one reason: no one can remember that many. The solution is a <strong>password manager</strong>.</p>
<h2>What a password manager does</h2>
<p>It generates strong passwords, stores them encrypted and fills them in automatically. You only remember one strong master password.</p>
<h2>The key benefits</h2>
<ul><li>A unique password for every account – without memorising.</li><li>Alerts for leaked or reused passwords.</li><li>Secure sync across all devices.</li></ul>
<p>Create your first strong password with our <a href="{$home}/en/tools/password-generator/">password generator</a>. Overview in the <a href="{$home}/en/passwords/">password security guide</a>.</p>
HTML,
) );

/* ============ Produkte (VPN) ============ */
$prod = array(
	array( 'purevpn', 'PureVPN', '6,000+ servers in 65+ countries|WireGuard, kill switch, split tunneling|10 devices at once|31-day money-back guarantee', '82% off + 3 months free' ),
	array( 'nordvpn', 'NordVPN', 'Browse anonymously|Hide your location|Protection on public Wi-Fi', '+ 3 months free' ),
	array( 'surfshark', 'Surfshark', 'Unlimited devices|Ad blocker & CleanWeb|24/7 support', '+ 2 months free' ),
	array( 'proton-vpn', 'Proton VPN', 'Based in Switzerland|No-logs, audited|Secure Core & Tor', 'EU · Privacy' ),
	array( 'expressvpn', 'ExpressVPN', '94 countries|TrustedServer (RAM only)|Very high speed', '+ 3 months free' ),
	array( 'cyberghost', 'CyberGhost', '11,000+ servers|Streaming-optimised|7 devices at once', '45-day money-back' ),
);
foreach ( $prod as $p ) {
	mk_en( $p[0], 'smi_product', array( 'title' => $p[1], 'name' => $p[0], 'excerpt' => $p[1] . ' – provider recommendation.', 'features' => $p[2], 'note' => $p[3] ) );
}

/* ============ Tools ============ */
$tools = array();
$tools[] = array( 'passwortgenerator','passwortgenerator','password-generator','Password Generator',
	'Free password generator: create a strong, random password in your browser – adjustable length and characters, with a strength meter. Nothing is transmitted.',
	'Weak or reused passwords are the number one cause of hacked accounts. This <strong>password generator</strong> creates a strong, truly random password in seconds, generated with a cryptographically secure source right in your browser.',
	array('Set the desired length (16+ characters recommended).','Choose character types: upper, lower, digits, symbols.','Optionally exclude ambiguous characters (l, I, 1, O, 0).','Copy the password and store it in a password manager.'),
	array('Create new online accounts securely','Replace existing weak passwords','Generate Wi-Fi or database passwords'),
	array(array('Are my passwords stored or transmitted?','No. Everything runs 100% locally in your browser. Nothing is sent to a server – no one but you sees the password.'),array('How long should a secure password be?','At least 16 characters with mixed character types. From about 80 bits of entropy a password is considered strong – the meter helps.')) );
$tools[] = array( 'passwort-staerke','passwort-staerke','password-strength','Password Strength Test',
	'Password strength test: instantly see how secure your password is – including entropy in bits. Your input stays entirely in your browser.',
	'How secure is your password really? This <strong>password strength test</strong> estimates resilience from length and character variety and shows the entropy in bits – locally in your browser.',
	array('Enter your password in the field.','Watch the strength meter and entropy value.','Follow the tips to close weaknesses.'),
	array('Evaluate existing passwords','Understand what makes a password strong','Check before setting a new password'),
	array(array('Is it safe to enter my real password?','Yes. The analysis happens only locally in your browser. Nothing is sent, stored or logged.'),array('What does entropy in bits mean?','Entropy measures unpredictability. The higher the value, the more attempts an attacker needs. Under 40 bits is weak, over 80 bits is strong.')) );
$tools[] = array( 'hash-generator','hash-generator','hash-generator','Hash Generator',
	'Online hash generator: compute SHA-256, SHA-1, SHA-384 and SHA-512 from any text – right in your browser, no upload.',
	'This <strong>hash generator</strong> computes cryptographic checksums (SHA-256, SHA-1, SHA-384, SHA-512) from any text using your browser\'s Web Crypto API – your input stays local.',
	array('Enter text in the field.','Choose a hash algorithm (default: SHA-256).','Copy the generated hash.'),
	array('Compare file/text integrity with checksums','Generate values for development and testing','Understand how hashing works'),
	array(array('What is a hash?','A hash is a unique fixed-length "fingerprint" of arbitrary data. Even a tiny change to the input produces a completely different hash.'),array('Can a hash be reversed?','No. Cryptographic hash functions are one-way – the original text cannot be recovered from the hash.')) );
$tools[] = array( 'base64','base64','base64','Base64 Encoder & Decoder',
	'Base64 encoder & decoder: convert text to Base64 and back – fast, free and entirely in your browser.',
	'This <strong>Base64 encoder/decoder</strong> converts text to and from Base64 – entirely in your browser. Ideal for developers who need to encode data or quickly decode a Base64 string.',
	array('Paste text or Base64 into the field.','Choose "Encode" or "Decode".','Copy the result.'),
	array('Encode data for APIs or data URLs','Make Base64 strings readable','Debugging in web development'),
	array(array('Is Base64 encryption?','No. Base64 is only an encoding, not encryption. Anyone can reverse it – it offers no protection.')) );
$tools[] = array( 'jwt-decoder','jwt-decoder','jwt-decoder','JWT Decoder',
	'JWT decoder: split JSON Web Tokens into header and payload and check the expiry – without transmission, without signature verification.',
	'The <strong>JWT decoder</strong> splits a JSON Web Token into its parts – header and payload – and shows the expiry. Handy for developing and debugging APIs and logins. Decoding happens locally in your browser.',
	array('Paste the token into the field.','Header and payload are shown instantly.','Check the expiry (exp).'),
	array('Inspect API tokens while developing','Check a token\'s validity/expiry','Debug login problems'),
	array(array('Does the tool verify the signature?','No. It only decodes header and payload. The cryptographic signature is not validated – never enter production secrets.')) );
$tools[] = array( 'uuid-generator','uuid-generator','uuid-generator','UUID Generator',
	'UUID generator (version 4): create random, unique IDs with a cryptographically secure source – free, in your browser.',
	'This <strong>UUID generator</strong> creates random version-4 UUIDs using your browser\'s secure random source. UUIDs are practically unique identifiers for records, objects or sessions.',
	array('Click "New UUID".','Copy the UUID.','Repeat as often as needed.'),
	array('Unique IDs for databases and APIs','Generate test and sample data','Session or transaction IDs'),
	array(array('Are the UUIDs really unique?','Version-4 UUIDs are generated from 122 random bits – the probability of a collision is vanishingly small and practically negligible.')) );
$tools[] = array( 'dns-lookup','dns-lookup','dns-lookup','DNS Lookup',
	'Online DNS lookup: query A, AAAA, MX, TXT, NS and CNAME records of a domain – ideal for quickly diagnosing reachability and email setup.',
	'With the <strong>DNS lookup</strong> you query the DNS records of any domain – A, AAAA, MX, TXT, NS and CNAME. In seconds you see where a domain points and how its email is configured.',
	array('Enter a domain (e.g. example.com).','Choose a record type or leave "ALL".','Click "Query" and review the results.'),
	array('Check a domain\'s reachability and migrations','Verify MX and TXT records for email','Track DNS changes (propagation)'),
	array(array('What does TTL mean?','Time-to-live indicates how long a DNS record may be cached (in seconds) before it is queried again.'),array('What is an MX record?','The MX record defines which server receives email for the domain.')) );
$tools[] = array( 'ssl-checker','ssl-checker','ssl-checker','SSL/TLS Checker',
	'SSL/TLS checker: check a domain\'s certificate – issuer, validity and expiry date – so your site never shows as "not secure".',
	'The <strong>SSL/TLS checker</strong> establishes a secure connection to a domain and reads its certificate: issuer, validity period and days remaining until expiry. Avoid embarrassing "connection not secure" warnings.',
	array('Enter a domain (e.g. example.com).','Click "Query".','Check the expiry date and issuer.'),
	array('Spot expiring certificates in time','Verify after setting up HTTPS','Test other sites for valid SSL'),
	array(array('Why should I check my SSL certificate?','An expired certificate blocks visitors with a security warning and hurts trust and rankings. Checking in time prevents outages.')) );
$tools[] = array( 'http-header','http-header','http-header','HTTP Header Checker',
	'HTTP header checker: show status code, redirects and response headers of any URL – including security headers at a glance.',
	'The <strong>HTTP header checker</strong> fetches a URL and shows the status code, redirects and all response headers. Spot misconfigurations, missing security headers and wrong redirects.',
	array('Enter a URL (e.g. https://example.com).','Click "Query".','Check status, target and headers.'),
	array('Verify redirects (301/302)','Check security headers such as HSTS','Analyse server and cache behaviour'),
	array(array('Which security headers matter?','Among others Strict-Transport-Security (HSTS), Content-Security-Policy, X-Content-Type-Options and Referrer-Policy.')) );
$tools[] = array( 'whois','whois','whois','WHOIS Lookup',
	'Online WHOIS lookup: find registrar, registration and expiry date, name servers and status of a domain – fast and modern via RDAP.',
	'The <strong>WHOIS lookup</strong> reveals who is behind a domain: registrar, registration and expiry date, name servers and status. We use the modern RDAP protocol for structured, up-to-date data.',
	array('Enter a domain (e.g. example.com).','Click "Query".','Check registrar, dates and name servers.'),
	array('Check a domain\'s expiry date','Estimate availability','Verify name servers and registrar'),
	array(array('Why can\'t I see owner details?','Since the GDPR, personal registrant data for many domains (e.g. .de) is no longer public. Only what the registry releases is shown.')) );
$tools[] = array( 'webrtc-leak','webrtc-leak','webrtc-leak-test','WebRTC Leak Test',
	'WebRTC leak test: check whether your browser reveals your real IP despite a VPN – entirely in your browser, without external servers.',
	'Even with an active VPN, your browser can reveal your real IP address via WebRTC. This <strong>WebRTC leak test</strong> checks – right in your browser – which IP addresses WebRTC exposes, without sending data to external servers.',
	array('Click "Start leak test".','Wait for the result (a few seconds).','If there is a leak, use a VPN with WebRTC protection.'),
	array('Check your VPN for leaks','Verify your anonymity online','Test browser privacy'),
	array(array('What is a WebRTC leak?','WebRTC enables real-time communication in the browser – but can expose your real IP address, even with a VPN active.'),array('How do I protect myself?','Use a VPN with WebRTC leak protection or disable WebRTC. Our <a href="'.home_url('/en/vpn/').'">VPN recommendation</a> helps.')) );
$tools[] = array( 'ip-check','ip-check','ip-address-check','IP Address Check',
	'IP address check: see your public IP address and hostname that every website sees – and how a VPN hides it.',
	'Every website and server sees your public IP address. This <strong>IP check</strong> shows exactly that IP plus the hostname (reverse DNS) – revealing the traces you leave online.',
	array('The page shows your IP automatically.','Refresh with "Check again".','With a VPN the IP is replaced by a VPN server\'s.'),
	array('Quickly find your own IP address','Verify your VPN connection','Raise your privacy awareness'),
	array(array('What does my IP reveal about me?','Your approximate location and internet provider can be derived from the IP. Websites can link your behaviour over time.'),array('How do I hide my IP address?','Most reliably with a VPN: it replaces your real IP with a VPN server\'s. See our <a href="'.home_url('/en/vpn/').'">VPN recommendation</a>.')) );
$tools[] = array( 'mail-security','mail-security','spf-dkim-dmarc-checker','SPF/DKIM/DMARC Checker',
	'SPF/DKIM/DMARC checker: check whether your domain is protected against email spoofing – SPF, DKIM and DMARC at a glance.',
	'Without SPF, DKIM and DMARC practically anyone can send email in your domain\'s name – a gateway for phishing and reputation damage. This <strong>SPF/DKIM/DMARC checker</strong> checks all three protections of your domain at once.',
	array('Enter a domain (e.g. your-company.com).','Optionally provide a DKIM selector.','Click "Check" and review the three results.'),
	array('Improve email deliverability','Protect your domain from spoofing/phishing','Check a client\'s mail setup'),
	array(array('What are SPF, DKIM and DMARC?','SPF defines which servers may send for your domain. DKIM signs emails cryptographically. DMARC ties both together and defines how to handle forged mail.'),array('What happens without these records?','Attackers can send email in your name (spoofing), your mail lands in spam more often and your reputation suffers.')) );

foreach ( $tools as $t ) {
	list( $de_slug, $reg, $en_slug, $en_title, $desc, $intro, $steps, $uses, $faq ) = $t;
	mk_en( $de_slug, 'smi_tool', array(
		'title'     => $en_title,
		'name'      => $en_slug,
		'tool_slug' => $reg,
		'excerpt'   => $desc,
		'meta_desc' => $desc,
		'content'   => tool_html( $en_title, $intro, $steps, $uses ),
		'faq'       => $faq,
	) );
}

echo "EN-Content fertig.\n";