<?php
  $creds = json_decode(file_get_contents('/etc/menlo/conf/test_page_secrets', false), true);
  $site_key = $creds['cloudflare_managed']['site_key'];
?>
<html>
  <head>
    <title>Cloudflare Turnstile managed: Programmatically bind to a div</title>
    <!-- See https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/ -->
    <script>
      function onloadCallback() {
        turnstile.render("#turnstile_div", {
          sitekey: "<?php echo $site_key ?>",
          callback: onTurnstileComplete
        });
      }

      function onTurnstileComplete(token) {
        document.getElementById("submit").disabled = false;
      }
    </script>
  </head>
  <body>
    <form id="demo-form" action="verify_token.php" method="POST">
      <div id="turnstile_div"></div>
      <input id="submit" type="submit" value="Submit" disabled/>
    </form>
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit&onload=onloadCallback" async defer></script>
  </body>
</html>
