ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.4.24

Path:root/home/users/r/rum44/domains/parser24.ru/

Name	Size	Perm	Actions
📁 assets	-	0755	🗑️ 🏷️
📁 wordpress	-	0755	🗑️ 🏷️
📁 wp-admin	-	0755	🗑️ 🏷️
📁 wp-content	-	0555	🗑️ 🏷️
📁 wp-includes	-	0755	🗑️ 🏷️
📄 .htaccess	0.63 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 fail.php	0.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 index.php	0.4 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 license.txt	19.44 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 ok.php	0.25 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 readme.html	7.23 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 send.php	4.02 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 send2.php	1.76 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 send_hide.php	4.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wordpress-6.8.3-ru_RU.zip	35251.59 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	7.54 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-blog-header.php	0.34 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-comments-post.php	2.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config-sample.php	3.26 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-config.php	3.55 KB	0666	🗑️ 🏷️ ⬇️ ✏️
📄 wp-cron.php	5.49 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-links-opml.php	2.43 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-load.php	3.84 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-login.php	51.3 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-mail.php	8.52 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-settings.php	32.38 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-signup.php	34.26 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 wp-trackback.php	5.27 KB	0644	🗑️ 🏷️ ⬇️ ✏️
📄 xmlrpc.php	3.13 KB	0644	🗑️ 🏷️ ⬇️ ✏️

Edit: send_hide.php

<?php
header('Content-Type: application/json; charset=UTF-8');
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: POST, GET, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type");

// Обработка preflight-запроса CORS
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit();
}

// 1️⃣ Получаем и парсим JSON
$input = file_get_contents('php://input');
$data = json_decode($input, true);

if (json_last_error() !== JSON_ERROR_NONE) {
    http_response_code(400);
    echo json_encode(['success' => false, 'errors' => ['Некорректный JSON']]);
    exit();
}

// 2️⃣ Honeypot-защита
if (!empty($data['website']) && trim($data['website']) !== '') {
    http_response_code(400);
    echo json_encode(['success' => false, 'errors' => ['Bot detected']]);
    exit();
}

// 3️⃣ Извлекаем данные из JSON (а не из $_POST!)
$category      = trim($data['category'] ?? '');
$subCategory   = trim($data['subCategory'] ?? '');
$name          = trim($data['name'] ?? '');
$contactMethod = trim($data['contactMethod'] ?? '');
$contactValue  = trim($data['contactValue'] ?? '');
$message       = trim($data['message'] ?? '');

// Дополнительные поля (если используются)
$services      = $data['services'] ?? [];
$form_name     = $data['formName'] ?? $category; // fallback на category
$totalPrice    = (int)($data['totalPrice'] ?? 0);
$messageText   = $message; // или $data['messageText'] ?? ''

// 4️⃣ Валидация
$errors = [];
if (empty($contactValue)) {
    $errors[] = "Контактные данные не указаны";
}
if (empty($name)) {
    $errors[] = "Имя не указано";
}

if (!empty($errors)) {
    http_response_code(400);
    echo json_encode(['success' => false, 'errors' => $errors]);
    exit();
}

// 5️⃣ Экранирование HTML для Telegram (parse_mode=HTML)
function escapeHtml($text) {
    return htmlspecialchars($text, ENT_NOQUOTES | ENT_HTML5, 'UTF-8');
}

$now = date('d.m.Y H:i');

// Преобразуем услуги в список
if (is_string($services)) {
    $services = array_map('trim', explode(',', $services));
}
$serviceList = '';
if (!empty($services)) {
    $serviceList = implode("\n", array_map(fn($s) => "– " . escapeHtml($s), (array)$services));
}

// 6️⃣ Формируем сообщение
$text = "🧮 Новая заявка со скрытой формы калькулятора ({$now})\n\n";
$text .= "Категория: " . escapeHtml($form_name) . "\n";
if (!empty($subCategory)) {
 $text .= "Подкатегория: " . escapeHtml($subCategory) . "\n";
}
if (!empty($serviceList)) {
 $text .= "Услуги:\n{$serviceList}\n";
}
if ($totalPrice > 0) {
 $text .= "Сумма: ~" . number_format($totalPrice, 0, '', ' ') . " руб.\n\n";
} else {
 $text .= "\n";
}
$text .= "Имя: " . escapeHtml($name) . "\n";
$text .= "Способ связи: " . escapeHtml($contactMethod) . "\n";
$text .= "Контакт: " . escapeHtml($contactValue) . "\n";
if (!empty($messageText)) {
 $text .= "Сообщение: " . escapeHtml($messageText) . "\n";
}
$text .= "━━━━━━━━━━━━━━━━\n{$now}";

// 7️⃣ Отправка в Telegram
$botToken = '7277395348:AAGQmdyTT_aJQbkAJYsm0YmZBp8gNrZPSXs';
$chatId = '-1002953198412';
$url = "https://api.telegram.org/bot{$botToken}/sendMessage"; // ⚠️ Был пробел — удалён!

$params = [
    'chat_id' => $chatId,
    'text' => $text,
    'parse_mode' => 'HTML'
];

$context = stream_context_create([
    'http' => [
        'method' => 'POST',
        'header' => "Content-Type: application/x-www-form-urlencoded\r\n",
        'content' => http_build_query($params)
    ]
]);

$result = file_get_contents($url, false, $context);

// 8️⃣ Ответ клиенту
if ($result === false) {
    error_log("Telegram send failed: " . $text);
    echo json_encode(['success' => false, 'errors' => ['Ошибка отправки в Telegram']]);
} else {
    $response = json_decode($result, true);
    if (isset($response['ok']) && $response['ok']) {
        echo json_encode(['success' => true]);
    } else {
        $errorMsg = $response['description'] ?? 'Неизвестная ошибка Telegram';
        error_log("Telegram API error: " . $errorMsg);
        echo json_encode(['success' => false, 'errors' => [$errorMsg]]);
    }
}

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.4.24

Edit: send_hide.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.4.24