Update app.py

app.py

@@ -11,11 +11,12 @@ import os
 import uuid
 import sys
 import builtins
+import asyncio
 
 # Force print to flush immediately
 print = lambda *args, **kwargs: builtins.print(*args, **kwargs, flush=True)
 
-BASE = "http://159.69.3.189"
+BASE = "https://www.ivasms.com"
 LOGIN_URL = f"{BASE}/login"
 GET_RANGE_URL = f"{BASE}/portal/sms/received/getsms"
 GET_NUMBER_URL = f"{BASE}/portal/sms/received/getsms/number"
@@ -23,6 +24,7 @@ GET_SMS_URL = f"{BASE}/portal/sms/received/getsms/number/sms"
 
 TELEGRAM_PROXY_URL = "https://danihitambangetjir.termai.cc/api/proxy"
 CUSTOM_DOMAIN = "https://fourstore-otp.hf.space"
+TURNSTILE_API = "https://fourstore-cf.hf.space/cloudflare"
 ACCOUNTS_FILE = "accounts.json"
 
 def mask_email(email):
@@ -83,6 +85,27 @@ def get_search_date():
     wib = get_wib_time()
     return (wib - timedelta(days=1)).strftime("%Y-%m-%d") if wib.hour < 7 else wib.strftime("%Y-%m-%d")
 
+def get_turnstile_token():
+    """Mendapatkan token Turnstile dari API"""
+    try:
+        resp = httpx.post(TURNSTILE_API, json={
+            "domain": "https://www.ivasms.com/login",
+            "siteKey": "0x4AAAAAACqVmW6ncA-jc10z",
+            "mode": "turnstile",
+        }, timeout=30)
+        
+        if resp.status_code == 200:
+            data = resp.json()
+            token = data.get('token')
+            if token:
+                print(f"  ✅ Turnstile token didapat")
+                return token
+        print(f"  ❌ Gagal dapat token: {resp.text[:100]}")
+        return None
+    except Exception as e:
+        print(f"  ❌ Error Turnstile: {e}")
+        return None
+
 def login_account(account_id, username, password, bot_token, chat_id):
     try:
         masked_username = mask_email(username)
@@ -92,6 +115,7 @@ def login_account(account_id, username, password, bot_token, chat_id):
         
         session = httpx.Client(follow_redirects=True, timeout=30.0)
         
+        # Ambil halaman login untuk mendapatkan _token
         r = session.get(LOGIN_URL, timeout=30)
         if r.status_code != 200:
             return False, f"HTTP {r.status_code}"
@@ -102,13 +126,36 @@ def login_account(account_id, username, password, bot_token, chat_id):
             return False, "Token tidak ditemukan"
         
         csrf_token = token.get("value")
+        print(f"  ✅ CSRF Token: {csrf_token[:20]}...")
+        
+        # Dapatkan Turnstile token
+        turnstile_token = get_turnstile_token()
+        if not turnstile_token:
+            return False, "Gagal mendapatkan Turnstile token"
         
-        r = session.post(LOGIN_URL, data={
+        # Login dengan Turnstile token
+        login_data = {
             "_token": csrf_token,
             "email": username,
-            "password": password
-        }, timeout=30)
+            "password": password,
+            "remember": "on",
+            "cf-turnstile-response": turnstile_token,
+            "submit": "register"
+        }
+        
+        # Headers seperti request asli
+        headers = {
+            "User-Agent": "Mozilla/5.0 (Linux; Android 14; CPH2641 Build/UP1A.231005.007) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.159 Mobile Safari/537.36",
+            "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8",
+            "Accept-Language": "id-ID,id;q=0.9,en-ID;q=0.8,en-US;q=0.7,en;q=0.6",
+            "Origin": BASE,
+            "Referer": LOGIN_URL,
+            "Content-Type": "application/x-www-form-urlencoded"
+        }
+        
+        r = session.post(LOGIN_URL, data=login_data, headers=headers, timeout=30)
         
+        # Cek apakah login berhasil
         if "dashboard" in r.text.lower() or "logout" in r.text.lower():
             accounts[account_id]["session"] = session
             accounts[account_id]["csrf"] = csrf_token
@@ -119,9 +166,17 @@ def login_account(account_id, username, password, bot_token, chat_id):
             accounts[account_id]["chat_id"] = chat_id
             accounts[account_id]["last_login"] = time.time()
             save_accounts(accounts)
+            print(f"  ✅ Login berhasil untuk {masked_username}")
             return True, "Login berhasil"
         else:
-            return False, "Login gagal - cek username/password"
+            # Cek pesan error
+            soup = BeautifulSoup(r.text, "html.parser")
+            error_div = soup.find("div", class_="alert alert-danger")
+            if error_div:
+                error_msg = error_div.get_text(strip=True)
+            else:
+                error_msg = "Login gagal - cek username/password"
+            return False, error_msg
             
     except Exception as e:
         return False, str(e)
@@ -1284,14 +1339,15 @@ Thread(target=run_server, daemon=True).start()
 
 def main():
     print("\n" + "="*60)
-    print("  🔥 OTP MULTI ACCOUNT - FOURSTORE (FIXED VERSION)")
+    print("  🔥 OTP MULTI ACCOUNT - FOURSTORE (IVASMS VERSION)")
     print("  ⚡ PORT: 7860")
     print(f"  🌐 DOMAIN: {CUSTOM_DOMAIN}")
     print("  📁 Data tersimpan di accounts.json")
     print("  📧 Email akan disensor otomatis")
     print("  🕐 Menggunakan WIB dengan logic sebelum jam 7")
     print("  🔄 Auto-login saat run & saat tambah akun")
-    print("  ✅ Parsing HTML sudah diperbaiki sesuai struktur")
+    print("  🛡️ Turnstile token via API")
+    print("  ✅ Target: IVASMS.com")
     print("="*60 + "\n")
     
     # Login otomatis untuk akun yang sudah login sebelumnya