From c5c5bdb287eedd5a476d44d06f5e771662b4d0fd Mon Sep 17 00:00:00 2001
From: pseudozach <git@pseudozach.com>
Date: Wed, 30 Dec 2020 17:06:30 -0800
Subject: [PATCH] payment hash added to captcha for server-side verification

---
 lnbits/extensions/captcha/static/js/captcha.js           | 4 ++++
 lnbits/extensions/captcha/templates/captcha/display.html | 2 ++
 lnbits/extensions/captcha/templates/captcha/index.html   | 3 ++-
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/lnbits/extensions/captcha/static/js/captcha.js b/lnbits/extensions/captcha/static/js/captcha.js
index 0b09c0f4b..6d86e865a 100644
--- a/lnbits/extensions/captcha/static/js/captcha.js
+++ b/lnbits/extensions/captcha/static/js/captcha.js
@@ -44,6 +44,10 @@ document.addEventListener("DOMContentLoaded", function() {
 });
 
 function receiveMessage(event){
+   if (event.data.includes("paymenthash")){
+        // console.log("paymenthash received: ", event.data);
+        document.getElementById("captchapayhash").value = event.data.split("_")[1];
+   }
    if (event.data.includes("removetheiframe")){
       if (event.data.includes("nok")){
         //invoice was NOT paid
diff --git a/lnbits/extensions/captcha/templates/captcha/display.html b/lnbits/extensions/captcha/templates/captcha/display.html
index 08ee2a2e8..af40ff4a2 100644
--- a/lnbits/extensions/captcha/templates/captcha/display.html
+++ b/lnbits/extensions/captcha/templates/captcha/display.html
@@ -143,6 +143,8 @@
                       )
                     }
 
+                    parent.window.postMessage("paymenthash_"+response.data.payment_hash, "*");
+
                     self.$q.notify({
                       type: 'positive',
                       message: 'Payment received!',
diff --git a/lnbits/extensions/captcha/templates/captcha/index.html b/lnbits/extensions/captcha/templates/captcha/index.html
index 5fb50513a..a83e1029a 100644
--- a/lnbits/extensions/captcha/templates/captcha/index.html
+++ b/lnbits/extensions/captcha/templates/captcha/index.html
@@ -365,7 +365,8 @@
 
         var captchasnippet = '<!-- Captcha Checkbox Start -->\n'
           + '<input type="checkbox" id="captchacheckbox">\n'
-          + '<label for="captchacheckbox">I\'m not a robot</label>\n'
+          + '<label for="captchacheckbox">I\'m not a robot</label><br/>\n'
+          + '<input type="text" id="captchapayhash" style="display: none;"/>\n'
           + '<script type="text/javascript" src="'+ locationPath +'static/js/captcha.js" id="captchascript" data-captchaid="'+ captchaId +'">\n'
           + '<\/script>\n'
           + '<!-- Captcha Checkbox End -->';