From 85e23f618fb4270c4d30f7d683837e9e159cb02d Mon Sep 17 00:00:00 2001
From: Myron Blair <myronblair@outlook.com>
Date: Mon, 1 Jun 2026 03:26:15 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20bypass=20Cloudflare=20Rocket=20Loader=20?=
 =?UTF-8?q?on=20admin=20script=20=E2=80=94=20doLogin=20was=20undefined=20a?=
 =?UTF-8?q?t=20click=20time?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

data-cfasync=false prevents Rocket Loader from deferring the main script block.
Also added try/catch + button feedback to doLogin so errors show visibly.
---
 public_html/admin/index.php | 25 ++++++++++++++++---------
 1 file changed, 16 insertions(+), 9 deletions(-)

diff --git a/public_html/admin/index.php b/public_html/admin/index.php
index bd538d3..1c77120 100644
--- a/public_html/admin/index.php
+++ b/public_html/admin/index.php
@@ -943,7 +943,7 @@ select.filter-sel:focus{border-color:var(--cyan)}
 
 <div id="toast"></div>
 
-<script>
+<script data-cfasync="false">
 // ── UTILS ─────────────────────────────────────────────────────────────────────
 let _alertFilter = 'active';
 let _modalCb = null;
@@ -993,15 +993,22 @@ function statusBadge(s) {
 
 // ── AUTH ──────────────────────────────────────────────────────────────────────
 async function doLogin() {
+  const btn=document.querySelector('#loginBox .btn');
+  const err=document.getElementById('loginErr');
   const u=document.getElementById('lu').value.trim(), p=document.getElementById('lp').value;
-  const fd=new FormData(); fd.append('action','login'); fd.append('username',u); fd.append('password',p);
-  const r = await fetch(location.href,{method:'POST',body:fd});
-  const d = await r.json();
-  if (d.error) { document.getElementById('loginErr').textContent=d.error; return; }
-  document.getElementById('loginWrap').style.display='none';
-  document.getElementById('app').style.display='flex';
-  document.getElementById('adminUser').textContent = (d.name||u).toUpperCase();
-  initApp();
+  if (!u||!p){err.textContent='Enter username and password';return;}
+  btn.disabled=true; btn.textContent='AUTHENTICATING...'; err.textContent='';
+  try {
+    const fd=new FormData(); fd.append('action','login'); fd.append('username',u); fd.append('password',p);
+    const r = await fetch(location.href,{method:'POST',body:fd});
+    const d = await r.json();
+    if (d.error) { err.textContent=d.error; return; }
+    document.getElementById('loginWrap').style.display='none';
+    document.getElementById('app').style.display='flex';
+    document.getElementById('adminUser').textContent = (d.name||u).toUpperCase();
+    initApp();
+  } catch(e) { err.textContent='Connection error — try again'; }
+  finally { btn.disabled=false; btn.textContent='AUTHENTICATE'; }
 }
 
 async function doLogout() {