FM / public

/home/simp499cl/public_html

Name	Size	Mode	Actions
.well-known/	-	0755	rm
amc/	-	0755	rm
apex_v1/	-	0755	rm
app.simplesystems.cl/	-	0750	rm
bipmpsimplesystems.cl/	-	0750	rm
blog/	-	0755	rm
canchaprosimplesystems.cl/	-	0750	rm
cgi-bin/	-	0755	rm
collectgroupsimplesystems.cl/	-	0750	rm
css/	-	0755	rm
dondevamos/	-	0755	rm
dondevamos_public_html/	-	0750	rm
dv_public_html/	-	0750	rm
images/	-	0755	rm
js/	-	0755	rm
licitasimple/	-	0755	rm
licitasimple.simplesystems.cl/	-	0750	rm
lucy/	-	0755	rm
mrpadeltour.simplesystems.cl/	-	0750	rm
nekosushiSimplesystems.cl/	-	0750	rm
notas-prechequeo/	-	0755	rm
open/	-	0755	rm
p/	-	0755	rm
pmc/	-	0755	rm
portal-automotora.simplesystems.cl/	-	0750	rm
portal-automotoras/	-	0755	rm
prechequeo/	-	0755	rm
prechequeo_v1/	-	0755	rm
prechequeo_vxxx/	-	0755	rm
propuesta_auto/	-	0755	rm
reservaSimple/	-	0755	rm
resp_page_construcction/	-	0755	rm
servicios/	-	0755	rm
test.simplesystems.cl/	-	0750	rm
test_template/	-	0755	rm
washbe/	-	0755	rm
washbe_v2/	-	0755	rm
web_v2/	-	0755	rm
.htaccess	1262	0644	edit dl rm
.htacces_25032026	888	0644	edit dl rm
.well-known.zip	764	0644	edit dl rm
404.html	2226	0644	edit dl rm
1201222.png	10554	0644	edit dl rm
agenda_prechequeo.png	78476	0644	edit dl rm
amc.zip	20726399	0644	edit dl rm
amcapp.png	2015372	0644	edit dl rm
apex.zip	18182398	0644	edit dl rm
apple-app-site-association	178	0644	edit dl rm
Brockmann-Bold-Bqm_WZiN.otf	42308	0644	edit dl rm
Brockmann-BoldItalic-uHRyPLGQ.otf	37632	0644	edit dl rm
Brockmann-Medium-DWnaEPVI.otf	41108	0644	edit dl rm
Brockmann-MediumItalic-DSDwWLpS.otf	37368	0644	edit dl rm
Brockmann-Regular-CFBdZhjj.otf	40164	0644	edit dl rm
Brockmann-RegularItalic-BjX_eTP2.otf	36656	0644	edit dl rm
Brockmann-SemiBold-DN9dX72F.otf	42172	0644	edit dl rm
Brockmann-SemiBoldItalic-Cucq5YBT.otf	38012	0644	edit dl rm
contact.html	14134	0644	edit dl rm
contact.php	92	0644	edit dl rm
contact_03062026.html	13859	0644	edit dl rm
css2-1.css	3954	0644	edit dl rm
css2.css	7478	0644	edit dl rm
dondevamosapp.png	2559818	0644	edit dl rm
index.html	94834	0644	edit dl rm
index_10062026.html	92246	0644	edit dl rm
inspeccion_macanica.png	326381	0644	edit dl rm
licitasimple.zip	130867	0644	edit dl rm
logo.png	3440	0644	edit dl rm
lucy-master.zip	2023077	0644	edit dl rm
main-CEzTNzgH.css	371878	0644	edit dl rm
main.a894a370.css	79997	0644	edit dl rm
mefaltaunoapp.png	2654288	0644	edit dl rm
monaco-editor-BetWCQm5.css	127171	0644	edit dl rm
paddle.css	4564	0644	edit dl rm
photo-1521737711867-e3b97375f902.jpg	10531685	0644	edit dl rm
photo-1521737852567-6949f3f9f2b5.jpg	6172480	0644	edit dl rm
photo-1568952433726-3896e3881c65.jpg	2117808	0644	edit dl rm
photo-1581091226825-a6a2a5aee158.jpg	9443894	0644	edit dl rm
photo-1595675024853-0f3ec9098ac7.jpg	1203221	0644	edit dl rm
photo-1633250391894-397930e3f5f2.jpg	2783958	0644	edit dl rm
plugins.zip	467592	0644	edit dl rm
pmcapp.png	2000889	0644	edit dl rm
portalautomotoras-bimi.svg	14297	0644	edit dl rm
prechequeo_v1.zip	5566784	0644	edit dl rm
prechequeo_v2.zip	5615060	0644	edit dl rm
robots.txt.txt	76	0644	edit dl rm
send_email.php	2439	0644	edit dl rm
send_email_03062026.php	1229	0644	edit dl rm
shngv6t9_logo.png	3440	0644	edit dl rm
sitemap.xml	3242	0644	edit dl rm
tkczgbgt.php	7317	0644	edit dl rm
tr-1.txt	0	0644	edit dl rm
tr.txt	0	0644	edit dl rm
update_app.png	27035	0644	edit dl rm
wipqdmgs.php	19513	0644	edit dl rm

Edit: /home/simp499cl/public_html/send_email.php (2439B)

<?php
function redirect_contact($success) {
    header('Location: contact.html?success=' . ($success ? '1' : '0'));
    exit();
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    redirect_contact(false);
}

// Cloudflare Turnstile: usa variable de entorno para no exponer el secret en el código.
// En cPanel/hosting puedes reemplazar getenv('TURNSTILE_SECRET_KEY') por tu secret key, pero no la publiques en HTML.
$turnstileSecret = '0x4AAAAAADeU_jdBuiobda-EuIO2B0XcUPM';
$turnstileToken = $_POST['cf-turnstile-response'] ?? '';

if (empty($turnstileSecret) || empty($turnstileToken)) {
    redirect_contact(false);
}

$verifyUrl = 'https://challenges.cloudflare.com/turnstile/v0/siteverify';
$verifyData = http_build_query([
    'secret' => $turnstileSecret,
    'response' => $turnstileToken,
    'remoteip' => $_SERVER['REMOTE_ADDR'] ?? null,
]);

$ch = curl_init($verifyUrl);
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => $verifyData,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => 10,
    CURLOPT_HTTPHEADER => ['Content-Type: application/x-www-form-urlencoded'],
]);

$verifyResponse = curl_exec($ch);
$curlError = curl_errno($ch);
curl_close($ch);

if ($curlError || !$verifyResponse) {
    redirect_contact(false);
}

$turnstileResult = json_decode($verifyResponse, true);
if (empty($turnstileResult['success'])) {
    redirect_contact(false);
}

$name = trim($_POST['name'] ?? '');
$email = trim($_POST['email'] ?? '');
$subjectInput = trim($_POST['subject'] ?? 'Contacto desde Simple Systems');
$message = trim($_POST['message'] ?? '');

if ($name === '' || $email === '' || $message === '' || !filter_var($email, FILTER_VALIDATE_EMAIL)) {
    redirect_contact(false);
}

// Evita inyección de headers en mail().
$name = str_replace(["\r", "\n"], ' ', $name);
$email = str_replace(["\r", "\n"], '', $email);
$subjectInput = str_replace(["\r", "\n"], ' ', $subjectInput);

$to = 'contacto@simplesystems.cl';
$subject = 'Contacto Web: ' . $subjectInput;

$body = "Nombre: {$name}\n";
$body .= "Correo: {$email}\n";
$body .= "Asunto: {$subjectInput}\n\n";
$body .= "Mensaje:\n{$message}\n";

$headers = [];
$headers[] = 'From: Simple Systems <contacto@simplesystems.cl>';
$headers[] = 'Reply-To: ' . $email;
$headers[] = 'Content-Type: text/plain; charset=UTF-8';

if (mail($to, $subject, $body, implode("\r\n", $headers))) {
    redirect_contact(true);
}

redirect_contact(false);
?>

cmd: