.-.-.-.-.-

<?php

if (!isset($_REQUEST['mfPath']))
    die('Restricted access');

header('Content-Type: text/html; charset=utf-8', true);
session_start();

require_once 'config.php';
$config = new ExformConfig;

$fieldValue = $fieldClass = array(
    'name' => '',
    'phone' => '',
    'email' => '',
    'message' => ''
);

$totalErrors = 0;

$themePathName = 'themes/' . $_REQUEST['mfTheme'] . '/';
if (file_exists($themePathName . 'config.php'))
    require $themePathName . 'config.php';

if (isset($_REQUEST['initForm'])) {
    $_SESSION['mfPath'] = $_REQUEST['mfPath'];

require $themePathName . 'form.php';
}

//Получение данных по капчи для exform.js.
if (isset($_REQUEST['getYandexCaptchaData'])) {
    $result = [
        'enableYandexCaptcha' => $config->enableYandexCaptcha, //Передаём информацию, есть капча или нет.
        'dataYandexCaptcha' => $config->dataYandexCaptcha //Передаём данные по капчи.
    ];
    echo json_encode($result);
}

// function senMail()
// {
//     require 'helpers/validator.php';

//     if (!$totalErrors) {
//         require $themePathName . 'mail.php';
//         require 'helpers/sendmail.php';
//         if (!$mailStatus)
//             $config->finalMessage = $config->errorMail;
//         require $themePathName . 'final_msg.php';
//     } else {
//         require $themePathName . 'form.php';
//     }
// }

//Отправка
if (isset($_REQUEST['send'])) {
    //Если задана капча
    if ($config->enableYandexCaptcha) {
        if (isset($_REQUEST['smart-token'])) {
            define('SMARTCAPTCHA_SERVER_KEY', $config->dataYandexCaptcha['serverKey']);

function check_captcha($token)
            {
                $ch = curl_init("https://smartcaptcha.yandexcloud.net/validate");
                $args = [
                    "secret" => SMARTCAPTCHA_SERVER_KEY,
                    "token" => $token,
                    "ip" => $_SERVER['REMOTE_ADDR'],
                ];
                curl_setopt($ch, CURLOPT_TIMEOUT, 1);
                curl_setopt($ch, CURLOPT_POST, true);
                curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($args));
                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

$server_output = curl_exec($ch);
                $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
                curl_close($ch);

if ($httpcode !== 200) {
                    echo "Allow access due to an error: code=$httpcode; message=$server_output\n";
                    return true;
                }

$resp = json_decode($server_output);
                return $resp->status === "ok";
            }

$token = $_POST['smart-token'];
            if (check_captcha($token)) {
                require 'helpers/validator.php';

if (!$totalErrors) {
                    require $themePathName . 'mail.php';
                    require 'helpers/sendmail.php';
                    if (!$mailStatus)
                        $config->finalMessage = $config->errorMail;
                    require $themePathName . 'final_msg.php';
                } else {
                    require $themePathName . 'form.php';
                }
            } else {
                echo "Ошибка\n";
            }
        } else {
            echo "Ошибка\n";
        }
    } else {
        require 'helpers/validator.php';

/var/www/rustam/data/www/almaz-koldun.com/../www.kran-balka.com/exform/exform.php