btcpayserver/BTCPayServer/Views/UIStores/PayButtonEnable.cshtml

@{
	ViewData.SetActivePage(StoreNavPages.PayButton, "Pay Button", Context.GetStoreData().Id);
}

<partial name="_StatusMessage" />
<h2 class="mt-1 mb-4">@ViewData["Title"]</h2>

<div class="row">
	<div class="col-md-10">
        <div class="alert alert-warning alert-dismissible mb-4" role="alert">
            <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close">
                <vc:icon symbol="close" />
            </button>
            <p><strong>Warning:</strong> This feature should not be activated on a BTCPay Server store processing commercial transactions.</p>
            <p class="mb-0">By activating this feature, a malicious user can trick you into thinking an order has been processed by creating a new invoice, reusing the same Order Id of another valid order but different amount or currency.</p>
        </div>
		<p>
			To start using Pay Button, you need to enable this feature explicitly.
			Once you do so, anyone could create an invoice on your store (via API, for example).
		</p>
		<form method="post">
			@Html.Hidden("EnableStore", true)
			<button name="command" id="enable-pay-button" type="submit" value="save" class="btn btn-primary">
				Enable
			</button>
		</form>
	</div>
</div>