Hacked By AnonymousFox

<?php
/**
 * This file contains AJAX request function handlers.
 *
 * @author Pexeto
 */


add_action('wp_ajax_pexeto_send_email', 'pexeto_ajax_send_email');
add_action('wp_ajax_nopriv_pexeto_send_email', 'pexeto_ajax_send_email');


/*******************************************************************************
 *   SEND EMAIL
 ******************************************************************************/

if(!function_exists('pexeto_ajax_send_email')){

	/**
	 * Sends an emal. Requires the GET request to contain the following parameters:
	 * - name - the name of the sender
	 * - email - the email of the sender
	 * - question - the content of the email
	 * Echoes back a json object containg a "success" key which is true when the 
	 * email is sent successfully and false if it is not.
	 */
	function pexeto_ajax_send_email(){
		$res = array();

		$validated = true;

		if(!PexetoRecaptcha::validate_response()){
			$res['success']=false;
			$res['captcha_failed']=true;
			$validated = false;
		}

		if($validated){
			if(isset($_POST['name']) && $_POST['name'] && isset($_POST['email']) 
				&& $_POST['email'] && isset($_POST['question']) && $_POST['question']){
				
				$name=urldecode(stripcslashes($_POST['name']));
				$subject = "A message from ".$name;
				
				$notes = urldecode(stripcslashes($_POST['question']));
				$from = $_POST['email'];
				$email_recepient=pexeto_option('email');

				$sender = pexeto_option('email_from');
				$original_sender = false;
				if(empty($sender)){
					if(strpos($from, 'yahoo')!==false && strpos($email_recepient, 'yahoo')===false){
					//the visitor's email address is on Yahoo, set the recepient address as sender
						$sender = $email_recepient;
					}else{
						$original_sender = true;
						$sender = $from;
					}
				}
				
				$message = __('From', 'pexeto').": $name, ".__('e-mail address', 'pexeto').
					": $from \r\n";

				//privacy consent
				if( pexeto_option('contact_privacy_checkbox') === true){
					$consent_given = __('no', 'pexeto');
					if(isset($_POST['privacy_consent']) && $_POST['privacy_consent'] == 'accepted'){
						$consent_given = __('yes', 'pexeto');
					}

					$message .= __('Privacy consent given', 'pexeto').": $consent_given \r\n";
				}
					
				$message .=	__('Message', 'pexeto').": $notes \r\n";
				
				$headers = array();
				if($original_sender){
					$headers[] = 'From: '.$name.' <'.$sender.'>';
				}else{
					$headers[] = 'From: '.$sender;
				}
				$headers[] = 'Reply-To: '.$name.' <'.$from.'>';
				$mail_res=wp_mail($email_recepient, $subject, $message, $headers);
				$res['success']=$mail_res;
			}
		}

		$json_res = json_encode($res);
		echo($json_res);
		exit();
	}
}