    $is_authorized = !empty($auth_data) && $auth_data->status == 1;
    $expire_date   = !empty($auth_data->expire_date) ? date('Y-m-d', strtotime($auth_data->expire_date)) : '永久';

    if ($is_authorized) {
        // 已授权状态
        $html = sprintf('
        <div class="zib-widget zhx-auth-card zhx-auth-authorized">
            <div class="flex jc">
                <div class="flex0">
                    <i class="fa fa-check-circle fa-3x" style="color:#28a745;"></i>
                </div>
                <div class="flex1 ml10">
                    <h4 class="m0">授权验证通过</h4>
                    <p class="m0 muted-2-color mt5">站点：%s | 到期：%s</p>
                </div>
            </div>
        </div>', esc_html($site_name), esc_html($expire_date));
    } else {
        // 未授权状态
        $html = sprintf('
        <div class="zib-widget zhx-auth-card zhx-auth-unauthorized">
            <div class="flex jc">
                <div class="flex0">
                    <i class="fa fa-exclamation-triangle fa-3x" style="color:#dc3545;"></i>
                </div>
                <div class="flex1 ml10">
                    <h4 class="m0">未获得授权</h4>
                    <p class="m0 muted-2-color mt5">%s</p>
                    <a href="%s" class="but c-red mt10">购买授权</a>
                </div>
            </div>
        </div>', esc_html($unauth_msg), esc_url($buy_link));
    }

    echo $html;
}

/**
 * 授权验证表单（输入密钥）
 */
add_action('zib_user_center_end', 'zhx_render_verify_form');
function zhx_render_verify_form() {
    $auth = zhx_get_current_auth();
    if (!empty($auth) && $auth->status == 1) return; // 已授权不显示

    $html = '
    <div class="zib-widget zhx-verify-form">
        <h4 class="title-h4"><i class="fa fa-key"></i> 授权密钥验证</h4>
        <div class="mt10">
            <input type="text" id="zhx-key-input" class="form-control" placeholder="请输入您的授权密钥">
        </div>
        <div class="mt10">
            <button id="zhx-verify-btn" class="but c-blue">
                <span class="zhx-btn-text">验证授权</span>
                <span class="zhx-btn-load" style="display:none;"><i class="fa fa-spinner fa-spin"></i> 验证中...</span>
            </button>
        </div>
        <div id="zhx-verify-msg" class="mt10" style="display:none;"></div>
    </div>';

    echo $html;

    // 加载前端 JS
    wp_enqueue_script('zhx-frontend-js', ZHX_URL . 'js/frontend.js', ['jquery'], ZHX_VER, true);
    wp_localize_script('zhx-frontend-js', 'zhx_front', [
        'ajax_url' => admin_url('admin-ajax.php'),
        'nonce'    => wp_create_nonce('zhx_frontend_nonce'),
        'site_url' => home_url(),
    ]);
}

/**
 * 前端 AJAX 验证处理
 */
add_action('wp_ajax_zhx_frontend_verify', 'zhx_handle_frontend_verify');
function zhx_handle_frontend_verify() {
    check_ajax_referer('zhx_frontend_nonce', 'nonce');

    if (!is_user_logged_in()) {
        wp_send_json_error(['message' => '请先登录后再验证']);
    }

    $key = sanitize_text_field($_POST['key'] ?? '');
    if (empty($key)) {
        wp_send_json_error(['message' => '请输入授权密钥']);
    }

    $result = zhx_verify_key($key, home_url());

    if ($result['success']) {
        zhx_set_auth($result['data']);
        wp_send_json_success(['message' => '授权验证成功！']);
    } else {
        wp_send_json_error(['message' => $result['message']]);
    }
}
?><?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="https://zhihuoi.fun/wp-sitemap-index.xsl" ?>
<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><sitemap><loc>https://zhihuoi.fun/wp-sitemap-posts-post-1.xml</loc></sitemap><sitemap><loc>https://zhihuoi.fun/wp-sitemap-posts-page-1.xml</loc></sitemap><sitemap><loc>https://zhihuoi.fun/wp-sitemap-taxonomies-category-1.xml</loc></sitemap><sitemap><loc>https://zhihuoi.fun/wp-sitemap-taxonomies-post_tag-1.xml</loc></sitemap><sitemap><loc>https://zhihuoi.fun/wp-sitemap-users-1.xml</loc></sitemap></sitemapindex>
