OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/04/2025 08:32:49 AM	rwxr-xr-x
📄 .browserslistrc	208 bytes	03/03/2025 08:18:55 AM	rw-r--r--
📄 .gitignore	42 bytes	03/03/2025 08:18:55 AM	rw-r--r--
📄 .htaccess	803 bytes	03/03/2025 08:18:55 AM	rw-r--r--
📄 .htaccess.swp	12 KB	03/03/2025 08:18:55 AM	rw-r--r--
📄 .travis.yml	199 bytes	03/03/2025 08:18:55 AM	rw-r--r--
📄 addList.php	4.7 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 allTemplates.php	5 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 bbsns_subscribe.php	5.14 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 bcreateList.php	9.61 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 blacklist.php	14.09 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 bounceViewList.php	5.86 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 bounce_handler.php	9.87 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 bprocess_emails.php	6.73 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 checkNotificationTopics.php	5.11 KB	05/19/2025 10:07:15 AM	rw-r--r--
📁 check_identity	-	05/19/2025 10:07:15 AM	rwxr-xr-x
📄 checknotif.php	1.01 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 ckeditor.php	2.14 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 click_handler.php	1.75 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 combined.php	11.23 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 complaintsViewList.php	5.72 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 complaints_handler.php	2.89 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 composer.json	200 bytes	03/03/2025 08:18:56 AM	rw-r--r--
📄 composer.lock	39.12 KB	03/03/2025 08:18:56 AM	rw-r--r--
📄 createList.php	10.05 KB	05/19/2025 10:07:15 AM	rw-r--r--
📁 credentials	-	03/03/2025 08:25:28 AM	rwxr-xr-x
📄 csv.php	10.1 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 db.php	1000 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📄 delete_list.php	509 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📄 deliveryViewList.php	5.71 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 delivery_handler.php	3.25 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 download_Complaints.php	974 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📄 download_bounces.php	1007 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📄 download_delivered.php	971 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📄 download_unique_open.php	1.6 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 edit_list.php	8.39 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 feedback.php	1.66 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 footer.php	4.71 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 housekeeping.php	9.97 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 index.php	8.12 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 insert_list.php	2.64 KB	05/19/2025 10:07:15 AM	rw-r--r--
📁 log	-	05/19/2025 10:07:15 AM	rwxr-xr-x
📄 navbar.php	1.64 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 newCompaign.php	5.94 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 open_handler.php	1.75 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 process_emails.php	10.21 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 real-recipients.csv	39.48 KB	03/03/2025 08:18:56 AM	rw-r--r--
📄 sample.csv	55 bytes	03/03/2025 08:18:56 AM	rw-r--r--
📄 send_email.php	987 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📄 send_email_campaignGraph.php	2.24 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 sendgrid.php	3.62 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 showListMembers.php	4.54 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 showcase.php	7.93 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 sidebar.php	3.11 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 sns_subscribe.php	5.25 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 submit_form.php	2.48 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 test-mail.csv	337 bytes	03/03/2025 08:18:56 AM	rw-r--r--
📄 test.php	969 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📄 test_process_emails.php	1.91 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 upload_image.php	606 bytes	05/19/2025 10:07:15 AM	rw-r--r--
📁 uploads	-	03/03/2025 08:25:38 AM	rwxr-xr-x
📁 vendor	-	05/19/2025 10:07:15 AM	rwxr-xr-x
📄 verify.html	486 bytes	03/03/2025 08:18:56 AM	rw-r--r--
📄 verify.php	3.12 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 verify_email.php	5.12 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 viewCampaign.php	13.05 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 viewList.php	8.47 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 zsidebar.php	3.27 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 zviewCampaign.php	8.94 KB	05/19/2025 10:07:15 AM	rw-r--r--
📄 zzprocess_emails.php	10.07 KB	05/19/2025 10:07:15 AM	rw-r--r--

Editing: showcase.php

<!doctype html>
<?
include 'inc/config.php';

$id = isset($_GET["id"]) ? $_GET["id"] : '';
$domain = isset($_GET["domain"]) ? $_GET["domain"] : '';

$sql = '';
if ($id <> '') $sql = "SELECT id,full_name,company,website,news_title,news_logo,subdomain,is_side_panel,side_panel_content FROM user WHERE id=$id";
if ($domain <> '') $sql = "SELECT id,full_name,company,website,news_title,news_logo,subdomain,is_side_panel,side_panel_content FROM user WHERE subdomain='$domain'";

if ($sql <> '') {
 $result = mysqli_query($db, $sql);
 $row = $result->fetch_assoc();
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) die();

$serverName = $_SERVER['SERVER_NAME'];
 $id = $row['id'];
 $user = $row['full_name'];
 $companyName = $row['company'];
 $website = strtolower($row['website']);
 $newsTitle = $row['news_title'];
 $newsLogo = $row['news_logo'];
 $userSubdomain = $row['subdomain'];
 $userSidePanel = $row['is_side_panel'];
 $userSidePanelContent = $row['side_panel_content'];
 $userSidePanelContent = str_replace('<img src="data/','<img src="https://' . $serverName . '/data/',$userSidePanelContent);
 if (strpos($website, 'http') === false) $website = "http://$website";

$currSubdomain = explode('.', $_SERVER['HTTP_HOST'])[0];
 if ($currSubdomain <> 'knoblycream' && $currSubdomain <> 'www' && $currSubdomain <> 'localhost') {
  if ($userSubdomain <> $currSubdomain) {
   echo '<br><br><center>You are not allowed to acccess this resource!</center>';
   die();
  }
 }
?>
<html lang="en">
<head>
<title><?=$companyName?></title>
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />

<meta property="og:url" content="https://<?=$serverName?>/" />
<meta property="og:type" content="website" />
<meta property="og:title" content="<?=$companyName?>" />
<meta property="og:description" content="" />
<meta property="og:image:secure-url" itemprop="image" content="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" />

<meta property="twitter:url" content="https://<?=$serverName?>/" />
<meta name="twitter:card" content="summary" />
<meta name="twitter:title" content="<?=$companyName?>" />
<meta name="twitter:description" content="" />
<meta name="twitter:image" content="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" />

}
.boxItem {
	margin: 15px 0;
	padding: 20px;
	border-color: 1px rgba(0, 0, 0, 0.75) solid;
	border-radius: 8px;
	box-shadow: 0px 1px 3px rgba(0, 0, 0, 0.2);
	background-color: #fff;
}
.panelContent img {
	width: auto;
	height: auto;
	max-width: 100%;
}
</style>
</head>
<body>
<div class="container">

<header class="blog-header py-3 border-bottom">
 <div class="row flex-nowrap justify-content-between align-items-center">
  <div class="col-8 pt-1">
<? if ($newsLogo <> '') { ?>
   <a class="text-muted" href="<?=$website?>"><img class="mx-auto" width="256px" src="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" /></a>
<? } ?>
   <h6 class="mt-1" style="color:#9e9e9e"><?=$user?> | <?=$companyName?></h6>
  </div>
  <div class="col-4 text-right">
  </div>
 </div>
</header>

<? 
 // For KBKB
 if ($userSubdomain == 'kbkb') {
?>
  <iframe width="300" height="260" src="https://liveindex.org/widget/300-light.php" frameborder="0" hspace="0" vspace="0" scrolling="0" style="background:transparent" ></iframe>
<? } ?>

<? 
 // For KBKB
 if ($userSubdomain == 'kannadanaadu') {
?>
  <iframe width="640" height="360" src="https://www.youtube.com/embed/kzK4zmQQSoc" title="Karnataka Legislative Assembly Session Day 05 Live: ಕರ್ನಾಟಕ ವಿಧಾನಸಭೆ ಅಧಿವೇಶನ ನೇರಪ್ರಸಾರ" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
<? } ?>

<?
 $sql = "SELECT * FROM user_landing WHERE user_id=$id ORDER BY date_created DESC";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) {
  echo '<div class="p-2">Nothing to show here!</div>';
 } else {
  while($row = mysqli_fetch_assoc($result)) {
   $userId = $row['user_id'];
   $articleId = $row['article_id'];
   $articleDate = $row['date_created'];

$sql = "SELECT full_name FROM user WHERE id=$userId";
   $resultInner = mysqli_query($db, $sql);
   $rowInner = mysqli_fetch_assoc($resultInner);
   $articleAuthor = $rowInner['full_name'];

$sql = "SELECT * FROM user_collection WHERE id=$articleId";
   $resultInner = mysqli_query($db, $sql);
   $numRowsInner = mysqli_num_rows($resultInner);
   if ($numRowsInner > 0) {
    $rowInner = mysqli_fetch_assoc($resultInner);
    $artId = $rowInner['id'];
    $artTitle = $rowInner['title'];
    $artURL = 'view/' . $artId . '/' . createArticleURL($artTitle);
    $artDesc = $rowInner['description'];
    $artDesc = str_replace('<img src="data/posts/', '<img src="https://www.knoblycream.com/data/posts/', $artDesc);
    $artCoverImg = $rowInner['cover_img'];
    $artDate = $rowInner['date_added'];

$countReads = 0;
    $sql = "SELECT count(article_id) AS countReads FROM metrics WHERE article_id=$articleId";
    $resultCount = mysqli_query($db, $sql);
    $rowCount = mysqli_fetch_assoc($resultCount);
    $countReads = $rowCount['countReads'];

$collectionURL = $rowInner['url'];
    $collectionPublisher = substr($collectionURL, strpos($collectionURL, ".") + 1);
    $collectionPublisher = ucfirst(strtok($collectionPublisher, '.'));
    if ($collectionPublisher == '') $collectionPublisher = 'Cream';
?>
 <div class="row mx-3 mx-lg-0">
  <div class="col-12 boxItem">
<?
    if ($artCoverImg <> '') {
?>
   <div style="padding-bottom:10px"><a href="<?=$artURL?>" target="_blank"><img src="https://www.knoblycream.com/data/covers/<?=$artCoverImg?>" class="img-fluid" /></a></div>
<?
    }
?>
   <div style="padding-bottom:10px;font-size:18px;"><a href="<?=$artURL?>" target="_blank"><strong><?=$artTitle?></strong></a></div>

<? if ($collectionPublisher <> 'Cream') { ?>
   <div class="mt-1"><?=$artDesc?></div>
<? } ?>

<div style="margin-top:10px;font-size:13px;color:#888;">
    <div class="float-left">Date: <?=date('M d, Y', strtotime($artDate))?></div>
<? if ($countReads > 10) { ?>
    <div class="float-right"><?=$countReads?> reads</div>
<? } ?>
   </div>
  </div>
 </div>
<?
   }
  }
 }
?>

<? 
 // For KBKB
 if ($userSubdomain == 'kbkb') {
?>
  <div class="my-3" style="font-size:13px">
   <b>Disclaimer:</b><br>
   This is a news and data aggregation service and do not represent the views and opinions of the publisher. This is published only as a central repo for relevant information for an investor and a trader. Users are advised to use their own analysis and discretion before taking any action. The publisher is not liable for any kind of loss arising out of any action taken based on the content of this service.<br>
  </div>
<? } ?>

</div>

<? if ($userSidePanel == 1) { ?>
 <div style="width:300px;"><?=$userSidePanelContent?></div>
<? } ?>
</div>

</div>

<div class="container fixed-bottom pb-3" style="background-color:#fff">
 <div class="row no-gutters" style="border-top:1px solid #eb5e31">
  <div class="col mt-2 text-right">
   <small>Powered by</small> <a href="https://www.knoblycream.com/" target="_blank"><img src="/grfx/logo.png" width="100" /></a>
  </div>
 </div>
</div>

</body>
</html>
<? } ?>