From 754ac460175a2a81db10cfa12ee20090c7e7d175 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Benjamin=20Beganovi=C4=87?= <k1pstabug@gmail.com>
Date: Thu, 5 Aug 2021 13:45:59 +0200
Subject: [PATCH] Require integer & min:1 on ACH verification fields

---
 app/PaymentDrivers/Stripe/ACH.php                |  6 +++++-
 .../gateways/stripe/ach/verify.blade.php         | 16 ++++++++++++++--
 2 files changed, 19 insertions(+), 3 deletions(-)

diff --git a/app/PaymentDrivers/Stripe/ACH.php b/app/PaymentDrivers/Stripe/ACH.php
index 1e4a3653050d..86d6d4ec6bc0 100644
--- a/app/PaymentDrivers/Stripe/ACH.php
+++ b/app/PaymentDrivers/Stripe/ACH.php
@@ -95,8 +95,12 @@ class ACH
         return render('gateways.stripe.ach.verify', $data);
     }
 
-    public function processVerification($request, ClientGatewayToken $token)
+    public function processVerification(Request $request, ClientGatewayToken $token)
     {
+        $request->validate([
+            'transactions.*' => ['integer', 'min:1'],
+        ]);
+
         if (isset($token->meta->state) && $token->meta->state === 'authorized') {
             return redirect()
                 ->route('client.payment_methods.show', $token->hashed_id)
diff --git a/resources/views/portal/ninja2020/gateways/stripe/ach/verify.blade.php b/resources/views/portal/ninja2020/gateways/stripe/ach/verify.blade.php
index 46afb0bd3d9a..fa4465b2e701 100644
--- a/resources/views/portal/ninja2020/gateways/stripe/ach/verify.blade.php
+++ b/resources/views/portal/ninja2020/gateways/stripe/ach/verify.blade.php
@@ -11,11 +11,23 @@
         <input type="hidden" name="source" value="{{ $token->token }}">
 
         @component('portal.ninja2020.components.general.card-element', ['title' => '#1 ' . ctrans('texts.amount_cents')])
-            <input type="text" name="transactions[]" class="w-full input" required dusk="verification-1st">
+            <input type="text" name="transactions[]" class="w-full input" required dusk="verification-1st" value="{{ old('transactions.0') }}">
+
+            @error('transactions.0')
+                <div class="validation validation-fail">
+                    {{ $message }}
+                </div>
+            @enderror
         @endcomponent
 
         @component('portal.ninja2020.components.general.card-element', ['title' => '#2 ' . ctrans('texts.amount_cents')])
-            <input type="text" name="transactions[]" class="w-full input" required dusk="verification-2nd">
+            <input type="text" name="transactions[]" class="w-full input" required dusk="verification-2nd" value="{{ old('transactions.1') }}">
+
+            @error('transactions.1')
+                <div class="validation validation-fail">
+                    {{ $message }}
+                </div>
+            @enderror
         @endcomponent
 
         @component('portal.ninja2020.gateways.includes.pay_now', ['type' => 'submit'])