<?php
  $creds = json_decode(file_get_contents('/etc/menlo/conf/test_page_secrets', false), true);
  $site_key = $creds['cloudflare_noninteractive']['site_key'];
?>
<html>
  <head>
    <title>Cloudflare Turnstile managed: Automatically bind to a div</title>
    <!-- See https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/ -->
    <script>
      function onTurnstileComplete(token) {
        document.getElementById("submit").disabled = false;
      }
    </script>
  </head>
  <body>
    <form id="demo-form" action="verify_token.php" method="POST">
      <!-- Using class="cf-turnstile" on the div causes Turnstile to
        automatically bind to it. -->
      <div class="cf-turnstile"
           data-sitekey="<?php echo $site_key ?>"
           data-callback="onTurnstileComplete"></div>
      <input id="submit" type="submit" value="Submit" disabled/>
    </form>
    <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  </body>
</html>
