<?php
declare(strict_types=1);

// Registering an Action Hook (Executes side-effects at specific lifecycle events)
add_action('init', function(): void {
    register_post_type('enterprise_case', [
        'public' => true,
        'label'  => 'Enterprise Case Studies',
        'show_in_rest' => true, // Enables Gutenberg Editor & REST API endpoints!
        'supports' => ['title', 'editor', 'thumbnail', 'custom-fields']
    ]);
}, 10);

// Registering a Filter Hook (Transforms data in-flight before output)
add_filter('the_content', function(string $content): string {
    if (is_singular('enterprise_case')) {
        $badge = '<div class="verified-badge">✓ Verified Production Architecture</div>';
        return $badge . $content;
    }
    return $content;
}, 20);

// block.json - Native Gutenberg Block Specification
{
  "$schema": "https://schemas.wp.org/trunk/block.json",
  "apiVersion": 3,
  "name": "enterprise/metric-card",
  "title": "Metric Counter Card",
  "category": "widgets",
  "attributes": {
    "count": { "type": "number", "default": 100 },
    "label": { "type": "string", "default": "Requests / Sec" }
  },
  "editorScript": "file:./index.js",
  "style": "file:./style-index.css"
}

// Fetching WordPress Posts via WPGraphQL in Next.js App Router
export async function getCaseStudies() {
    const res = await fetch('https://cms.helloaihub.com/graphql', {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({
            query: `
                query AllCaseStudies {
                    posts(where: { categoryName: "Architecture" }, first: 10) {
                        nodes {
                            id
                            title
                            slug
                            excerpt
                            featuredImage { node { sourceUrl } }
                        }
                    }
                }
            `
        }),
        next: { tags: ['wordpress-posts'], revalidate: 3600 } // Incremental Static Regeneration!
    });
    const { data } = await res.json();
    return data.posts.nodes;
}

<?php
// CSRF Nonce Verification & Input Sanitization
if (!isset($_POST['app_nonce']) || !wp_verify_nonce($_POST['app_nonce'], 'update_settings_action')) {
    wp_die('Unauthorized Security Token Expired', 'Forbidden', ['response' => 403]);
}

$clean_title = sanitize_text_field($_POST['custom_title'] ?? '');

// Late Output Escaping (Mandatory for XSS Prevention!)
?>
<h2><?php echo esc_html($clean_title); ?></h2>
<a href="<?php echo esc_url($redirect_url); ?>" class="btn">Proceed</a>