From 59aeab43a94250d7dc9e587a144a218cd3143d31 Mon Sep 17 00:00:00 2001
From: Blake Ridgway <blake@blakeridgway.com>
Date: Sat, 29 Nov 2025 20:52:46 -0600
Subject: [PATCH] add temp captcha to contact form

---
 go.mod                        |   1 +
 go.sum                        |   2 +
 internal/handlers/handlers.go |   3 +-
 templates/contact.html        | 129 +++++++++++++++++++++++++---------
 4 files changed, 98 insertions(+), 37 deletions(-)

diff --git a/go.mod b/go.mod
index 500d254..c607b7e 100644
--- a/go.mod
+++ b/go.mod
@@ -8,6 +8,7 @@ require (
 )
 
 require (
+	github.com/altcha-org/altcha-lib-go v0.2.2 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
diff --git a/go.sum b/go.sum
index c0d6ef5..7e98b6a 100644
--- a/go.sum
+++ b/go.sum
@@ -1,3 +1,5 @@
+github.com/altcha-org/altcha-lib-go v0.2.2 h1:KY7a7jFUf6tFKZF6MzuZMhSWuGMv0MtVkK/Kj4Oas38=
+github.com/altcha-org/altcha-lib-go v0.2.2/go.mod h1:I8ESLVWR9C58uvGufB/AJDPhaSU4+4Oh3DLpVtgwDAk=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
diff --git a/internal/handlers/handlers.go b/internal/handlers/handlers.go
index 2a5c087..0b9857c 100644
--- a/internal/handlers/handlers.go
+++ b/internal/handlers/handlers.go
@@ -422,7 +422,6 @@ func (h *Handler) handleContactSubmission(w http.ResponseWriter, r *http.Request
   // If subscribe checkbox is checked, add to subscribers
   if subscribe {
     if err := h.db.AddSubscriber(r.Context(), email); err != nil {
-      // Log but don't fail the contact submission
       h.logger.Printf(
         "ℹ Subscriber %s already exists or failed to add: %v",
         email,
@@ -463,7 +462,7 @@ func (h *Handler) handleContactSubmission(w http.ResponseWriter, r *http.Request
     }
   }
 
-  // Save contact message to database (optional - add to your DB interface)
+  // Save contact message to database
   if err := h.db.AddContactMessage(r.Context(), name, email, subject, message); err != nil {
     h.logger.Printf(
       "⚠ Failed to save contact message: %v",
diff --git a/templates/contact.html b/templates/contact.html
index d923b8b..a31972e 100644
--- a/templates/contact.html
+++ b/templates/contact.html
@@ -95,6 +95,23 @@
         </label>
       </div>
 
+      <!-- Simple Addition CAPTCHA -->
+      <div class="form-group">
+        <label for="captcha">
+          Quick Math Check <span class="required">*</span>
+        </label>
+        <div id="captchaQuestion" style="font-weight: bold; margin-bottom: 8px; color: #333; font-size: 16px;"></div>
+        <input
+          type="text"
+          id="captcha"
+          name="captcha"
+          required
+          placeholder="Enter the answer"
+          autocomplete="off"
+          inputmode="numeric"
+        />
+      </div>
+
       <button type="submit" class="form-submit">
         <i class="fas fa-paper-plane"></i>
         Send Message
@@ -126,46 +143,88 @@
 </div>
 
 <script>
-  document.getElementById('contactForm').addEventListener(
-    'submit',
-    async (e) => {
-      e.preventDefault();
-      const form = e.target;
-      const formData = new FormData(form);
+  let currentCaptcha = null;
 
-      console.log('Form submitted');
-      console.log('Form data:', Object.fromEntries(formData));
+  // Generate simple addition CAPTCHA (easier)
+  function generateCaptcha() {
+    const num1 = Math.floor(Math.random() * 20) + 1;  // 1-20
+    const num2 = Math.floor(Math.random() * 20) + 1;  // 1-20
+    const answer = num1 + num2;
+    
+    return {
+      question: `${num1} + ${num2} = ?`,
+      answer: answer.toString()
+    };
+  }
 
-      try {
-        const response = await fetch('/contact', {
-          method: 'POST',
-          headers: {
-            'Content-Type': 'application/x-www-form-urlencoded',
-          },
-          body: new URLSearchParams(formData),
-        });
+  // Initialize CAPTCHA on page load
+  function initCaptcha() {
+    currentCaptcha = generateCaptcha();
+    document.getElementById('captchaQuestion').textContent = currentCaptcha.question;
+    document.getElementById('captcha').value = '';
+    document.getElementById('captcha').focus();
+  }
 
-        console.log('Response status:', response.status);
-        const data = await response.json();
-        console.log('Response data:', data);
+  // Initialize on load
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', initCaptcha);
+  } else {
+    initCaptcha();
+  }
 
-        if (response.ok) {
-          document.getElementById('successMessage')
-            .classList.add('show');
-          form.reset();
-          setTimeout(() => {
-            document.getElementById('successMessage')
-              .classList.remove('show');
-          }, 5000);
-        } else {
-          alert('Error: ' + (data.error || 'Failed to send message'));
-        }
-      } catch (error) {
-        console.error('Error:', error);
-        alert('Failed to send message: ' + error.message);
-      }
+  document.getElementById('contactForm').addEventListener('submit', async (e) => {
+    e.preventDefault();
+
+    // Validate CAPTCHA
+    const userAnswer = document.getElementById('captcha').value.trim();
+    if (userAnswer !== currentCaptcha.answer) {
+      alert('Incorrect answer. Please try again.');
+      currentCaptcha = generateCaptcha();
+      document.getElementById('captchaQuestion').textContent = currentCaptcha.question;
+      document.getElementById('captcha').value = '';
+      document.getElementById('captcha').focus();
+      return;
     }
-  );
+
+    const form = e.target;
+    const formData = new FormData(form);
+    
+    // Don't send the captcha answer to server
+    formData.delete('captcha');
+
+    console.log('Form submitted');
+
+    try {
+      const response = await fetch('/contact', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/x-www-form-urlencoded',
+        },
+        body: new URLSearchParams(formData),
+      });
+
+      console.log('Response status:', response.status);
+      const data = await response.json();
+      console.log('Response data:', data);
+
+      if (response.ok) {
+        document.getElementById('successMessage').classList.add('show');
+        form.reset();
+        initCaptcha();
+        
+        setTimeout(() => {
+          document.getElementById('successMessage').classList.remove('show');
+        }, 5000);
+      } else {
+        alert('Error: ' + (data.error || 'Failed to send message'));
+        initCaptcha();
+      }
+    } catch (error) {
+      console.error('Error:', error);
+      alert('Failed to send message: ' + error.message);
+      initCaptcha();
+    }
+  });
 </script>
 
 {{end}}
\ No newline at end of file