uninstall.php

<?php
/**
 * LW Firewall — Uninstall
 *
 * Cleans up options and removes the MU-plugin worker.
 *
 * @package LightweightPlugins\Firewall
 */

declare(strict_types=1);

if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) {
	exit;
}

// Remove log data only — keep settings for reinstall.
delete_option( 'lw_firewall_log' );

// Remove the known-administrator snapshot used by the new-admin alert.
delete_option( 'lw_firewall_admin_baseline' );
delete_option( 'lw_firewall_bans' );
delete_option( 'lw_firewall_alert_queue' );
delete_transient( 'lw_firewall_admin_alert_mail_error' );

// Remove the administrator scan cron event.
$lw_firewall_scan_event = wp_next_scheduled( 'lw_firewall_admin_scan' );
if ( $lw_firewall_scan_event ) {
	wp_unschedule_event( $lw_firewall_scan_event, 'lw_firewall_admin_scan' );
}

// Remove MU-plugin worker.
$lw_firewall_worker = WPMU_PLUGIN_DIR . '/lw-firewall-worker.php';
if ( file_exists( $lw_firewall_worker ) ) {
	wp_delete_file( $lw_firewall_worker );
}

// Remove the file storage cache directory, including the geo sub-directory —
// a flat glob left it behind, so rmdir() failed and the whole tree survived.
$lw_firewall_cache_dir = WP_CONTENT_DIR . '/cache/lw-firewall/';

/**
 * Delete a directory and everything under it.
 *
 * @param string $dir Absolute path.
 * @return void
 */
function lw_firewall_remove_tree( string $dir ): void {
	$entries = glob( rtrim( $dir, '/' ) . '/*' );

	if ( is_array( $entries ) ) {
		foreach ( $entries as $entry ) {
			if ( is_dir( $entry ) ) {
				lw_firewall_remove_tree( $entry );
				continue;
			}

			wp_delete_file( $entry );
		}
	}

	if ( is_dir( $dir ) ) {
		// phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_rmdir, WordPress.PHP.NoSilencedErrors.Discouraged -- A non-empty or unwritable directory is not worth failing an uninstall over.
		@rmdir( $dir );
	}
}

if ( is_dir( $lw_firewall_cache_dir ) ) {
	lw_firewall_remove_tree( $lw_firewall_cache_dir );
}

// Remove every schedule the plugin owns.
foreach ( [ 'lw_firewall_admin_scan', 'lw_firewall_geo_update' ] as $lw_firewall_hook ) {
	wp_clear_scheduled_hook( $lw_firewall_hook );
}