OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	06/17/2025 10:17:24 AM	rwxrwxr-x
📄 account.php	48.19 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 analytics.php	35.05 KB	05/19/2025 10:07:13 AM	rw-r--r--
📁 assets	-	03/06/2025 05:37:05 AM	rwxr-xr-x
📄 channel.php	35.98 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 create.php	44.27 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 dashboard.php	55.6 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 featured_channels.php	32.57 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 featured_topics.php	26.63 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 follow_dash.php	33.51 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 footer.php	1.14 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 index.php	9.56 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 main.css	1.3 KB	03/05/2025 07:59:27 AM	rw-r--r--
📄 my_collection.php	152.65 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 navbar_menu.php	1.8 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 newCompaign.php	16.1 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 newsletter.php	24.66 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 request_article.php	23.34 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 saved.php	33.64 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 search_bar.php	18.97 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 settings.php	81.52 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 sidebar.php	19.1 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 social_navbar.php	25.03 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 stream.css	13.53 KB	03/06/2025 05:19:46 AM	rw-r--r--
📄 stream.php	66.21 KB	05/19/2025 10:07:13 AM	rw-r--r--
📄 styles.css	7.59 KB	03/06/2025 05:45:03 AM	rw-r--r--
📁 updated_files	-	05/19/2025 10:07:13 AM	rwxr-xr-x

Editing: newsletter.php

<?
// Cream: Newsletter

require_once 'assets/php/validate.logged.php';
require_once 'assets/php/function.php';
require_once 'inc/config.php';
include 'inc/function.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Send Newsletter
if ($act == 'sendNewsletter') {
    $newsId = isset($_POST['newsId']) ? $_POST['newsId'] : '';
    $sendGridSenderId = isset($_POST['sendGridSenderId']) ? $_POST['sendGridSenderId'] : '';
    $sendGridListId = isset($_POST['sendGridListId']) ? $_POST['sendGridListId'] : '';
    $sendGridSubject = isset($_POST['sendGridSubject']) ? $_POST['sendGridSubject'] : '';
    if ($newsId != '' && $sendGridSenderId != '' && $sendGridListId != '' && $sendGridSubject != '') {
        $newsletterBody = buildNewsletter($newsId)['html_data'];
        $newsletterBody = str_replace('"', '\"', $newsletterBody);
        $newsletterBody = str_replace(array("\r\n", "\n\r", "\n", "\r"), "", $newsletterBody);

$sql = "SELECT send_grid_key,send_grid_suppression_id FROM user WHERE id=$gUserId";
        $result = mysqli_query($db, $sql);
        $row = mysqli_fetch_assoc($result);
        $userSendGridKey = $row['send_grid_key'];
        $userSendGridSuppressionId = $row['send_grid_suppression_id'];
        $curl = curl_init();
        curl_setopt_array($curl, array(
            CURLOPT_URL => "https://api.sendgrid.com/v3/marketing/singlesends",
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_CUSTOMREQUEST => "POST",
            CURLOPT_POSTFIELDS => "{\"name\":\"Sent from Knobly Cream\",\"send_to\":{\"list_ids\":[\"$sendGridListId\"]},\"email_config\":{\"sender_id\":$sendGridSenderId,\"suppression_group_id\":$userSendGridSuppressionId,\"subject\":\"$sendGridSubject\",\"html_content\":\"$newsletterBody\"}}",
            CURLOPT_HTTPHEADER => array(
                "authorization: Bearer $userSendGridKey",
                "content-type: application/json"
            ),
        ));
        $response = curl_exec($curl);
        $err = curl_error($curl);
        if ($err) {
        } else {
            $arrResponse = json_decode($response, true);
            if (array_key_exists("id", $arrResponse)) {
                $sendId = $arrResponse['id'];
                curl_setopt_array($curl, array(
                    CURLOPT_URL => "https://api.sendgrid.com/v3/marketing/singlesends/$sendId/schedule",
                    CURLOPT_RETURNTRANSFER => true,
                    CURLOPT_CUSTOMREQUEST => "PUT",
                    CURLOPT_POSTFIELDS => "{\"send_at\":\"now\"}",
                    CURLOPT_HTTPHEADER => array(
                        "authorization: Bearer $userSendGridKey",
                        "content-type: application/json"
                    ),
                ));
                $response = curl_exec($curl);
                $sql = "INSERT INTO user_blast(user_id,newsletter_id,blast_provider,blast_subject,blast_id,blast_key,date_created) VALUES($gUserId,$newsId,'SendGrid','$sendGridSubject','$sendId','$userSendGridKey',Now())";
                mysqli_query($db, $sql);
                echo 'OK';
            }
        }
        curl_close($curl);
    }
}

// Delete Newsletter
if ($act == 'deleteNewsletter') {
    $newsletterId = isset($_POST['delId']) ? $_POST['delId'] : '';
    if ($newsletterId != '') {
        $sql = "DELETE FROM user_newsletter WHERE id=$newsletterId AND user_id=$gUserId";
        mysqli_query($db, $sql);
        echo "OK";
    }
}

// Show Delete Newsletter
if ($act == 'delNewsletter') {
    $newsletterId = isset($_POST['id']) ? $_POST['id'] : '';
?>
    <div class="widget">
        <form id="frmDel" name="frmDel">
            <div class="card">
                <div class="card-header bg-dark">
                    <h5 class="mb-0 text-light">Delete Newsletter</h5>
                </div>
            </div>
            <div id="widget_B" style="padding: 15px 25px;">
                <p>You are about to delete this Newsletter from your account!</p>
            </div>
            <div id="widget_F" style="border-top: 1px solid #ebedf2; padding: 20px 10px;">
                <div class="col">
                    <button type="button" class="btn btn-primary " onclick="return chkDelNewsletter()">Confirm</button>
                </div>
            </div>
            
            <input type="hidden" id="delId" name="delId" value="<?= $newsletterId ?>" />
            <input type="hidden" id="act" name="act" value="deleteNewsletter" />
        </form>
    </div>
<?
}

// Default
if ($act == '') {

if ($gUserPlan == 1) {
        $htmlSendGridListId = '';
        $htmlSendGridSenderId = '';
        $sql = "SELECT send_grid_key FROM user WHERE id=$gUserId";
        $result = mysqli_query($db, $sql);
        $row = mysqli_fetch_assoc($result);
        $userSendGridKey = $row['send_grid_key'];

if ($userSendGridKey <> '') {
            $curl = curl_init();
            curl_setopt_array($curl, array(
                CURLOPT_URL => "https://api.sendgrid.com/v3/marketing/lists?page_size=50",
                CURLOPT_SSL_VERIFYPEER => false,
                CURLOPT_RETURNTRANSFER => true,
                CURLOPT_CUSTOMREQUEST => "GET",
                CURLOPT_POSTFIELDS => "{}",
                CURLOPT_HTTPHEADER => array(
                    "authorization: Bearer $userSendGridKey",
                    "content-type: application/json"
                ),
            ));
            $response = curl_exec($curl);
            $err = curl_error($curl);
            if ($err) {
                echo "cURL Error #:" . $err;
            } else {
                $arrResponse = json_decode($response, true);
                if (array_key_exists("result", $arrResponse)) {
                    $arrList = $arrResponse['result'];
                    foreach ($arrList as &$value) {
                        $htmlSendGridListId .= "<option value='" . $value['id'] . "'>" . $value['name'] . "</option>";
                    }
                    curl_setopt_array($curl, array(
                        CURLOPT_URL => "https://api.sendgrid.com/v3/verified_senders",
                        CURLOPT_SSL_VERIFYPEER => false,
                        CURLOPT_RETURNTRANSFER => true,
                        CURLOPT_CUSTOMREQUEST => "GET",
                        CURLOPT_POSTFIELDS => "{}",
                        CURLOPT_HTTPHEADER => array(
                            "authorization: Bearer $userSendGridKey",
                            "content-type: application/json"
                        ),
                    ));
                    $response = curl_exec($curl);
                    $arrResponse = json_decode($response, true);
                    if (array_key_exists("results", $arrResponse)) {
                        $arrList = $arrResponse['results'];
                        foreach ($arrList as &$value) {
                            $htmlSendGridSenderId .= "<option value='" . $value['id'] . "'>" . $value['nickname'] . "</option>";
                        }
                    }
                }
            }
        }
    }
?>

<!DOCTYPE html>
    <html lang="en">

<head>

<title>Newsletter | Knobly Cream</title>
        
        <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>

.modal-content {
                background-color: #fefefe;
                margin: 5% auto;
                padding: 20px;
                border: 1px solid #888;
                width: 60%;
                /* Could be more or less */
            }

.close {
                color: #aaa;
                float: right;
                font-size: 28px;
                font-weight: bold;
            }

.close:hover,
            .close:focus {
                color: black;
                text-decoration: none;
                cursor: pointer;
            }
        </style>
        <script>
            function chkDelNewsletter() {
                $('#panelStatus').html('');
                $.ajax({
                        method: 'POST',
                        url: '',
                        data: $('#frmDel').serializeArray()
                    })
                    .done(function(response) {
                        if (response == 'OK') {
                            $('#widget_B').html('Newsletter has been deleted!');
                            $('#widget_F').hide();
                            location.reload();
                        } else {
                            $('#panelStatus').html('<small>Error: Could not delete Newsletter!</small>');
                        }
                    });
                return false;
            }
            $(function() {
                // Attach a click event handler to elements with the class .delRow
                $('.delRow').on('click', function() {
                    // Get the id from the data-id attribute of the clicked element
                    var postData = {
                        act: 'delNewsletter',
                        id: $(this).data('id')
                    };

// Perform the AJAX request
                    $.ajax({
                        method: 'POST',
                        url: '', // Specify the URL here
                        data: postData,
                        success: function(response) {
                            // Insert the response data into the modal
                            $('#modalContent').html(response);

// Show the modal
                            $('#delModal').css('display', 'block');

// Optional: You can add code to remove the row from the UI if needed
                            // For example:
                            // $(this).closest('tr').remove();
                        },
                        error: function(xhr, status, error) {
                            // Handle error response here
                            console.error('Error deleting the newsletter', status, error);
                            $('#modalContent').html('An error occurred while deleting the newsletter.');
                            $('#delModal').css('display', 'block');
                        }
                    });
                });

// Close the modal when the user clicks on the "x"
                $('.close').on('click', function() {
                    $('#delModal').css('display', 'none');
                });

// Close the modal if the user clicks outside the modal content
                $(window).on('click', function(event) {
                    if (event.target == $('#delModal')[0]) {
                        $('#delModal').css('display', 'none');
                    }
                });
            });
        </script>

// Store the data in localStorage
                    localStorage.setItem('newsletterContent', newsContent);
                    localStorage.setItem('campaignName', campaignName);

// Open the email sender interface
                    window.open('Xpress/index.php', '_blank');
                } catch (error) {
                    console.error('Error fetching newsletter content:', error);
                }
            }
        </script>

.newsroll-dropbtn {
                border: none;
                color: rgba(255, 255, 255, 0.5);
                background-color: #212529;
            }

.newsroll-dropbtn:focus {
                border: none;
                outline: none;

}

.newsroll-dropdown-content {
                display: none;
                outline: none;
                position: relative;
                background-color: #212529;
                min-width: 160px;
                /* box-shadow: 0px 8px 16px 0px rgba(0, 0, 0, 0.2); */
                /* z-index: 1; */
            }

.newsroll-dropdown-content a {
                color: white;
                padding: 12px 16px;
                text-decoration: none;
                display: block;
            }

.show {
                display: block;
            }

.footer {
                text-align: center;
                padding: 20px;
                background-color: var(--footer-bg-dark) !important;
                color: #777;
                position: fixed;
                bottom: 0;
                width: 100%;
            }

.breadcrumb {
                display: -ms-flexbox;
                display: flex;
                -ms-flex-wrap: wrap;
                flex-wrap: wrap;
                padding: .75rem 1rem;
                margin-bottom: 1rem;
                list-style: none;
                background-color: transparent !important;
                border-radius: .25rem;
            }

style attribute {
                padding-top: 40px;
                padding-bottom: 20px;
                font-family: Georgia, serif;
                font-size: 16px;
                line-height: 1.5em;
                color: black;
            }

@media screen and (min-width:768px) {

.container-fluid,
                .container-lg,
                .container-md,
                .container-sm,
                .container-xl {
                    width: 75% !important;
                    padding-right: 15px;
                    padding-left: 15px;
                    margin-right: auto;
                    margin-left: auto;
                }

}

style attribute {
                padding-top: 40px;
                padding-bottom: 20px;
                font-family: Georgia, serif;
                font-size: 16px;
                line-height: 1.5em;
                /* color: #000000; */
            }

.container-fluid {
                /* padding: 7rem 2%; */
            }

/* Container Padding */
            @media screen and (max-width: 768px) {
                .container-fluid {
                
                    max-width: 1400px;
                    margin: 0 auto;

}

}
        </style>
        <style>
            .sideWithMainContainer {
                display: flex;
                flex-direction: row;
                gap: 10px;
                overflow-x: hidden;
            
            }
            .sideMaincontent{
                height: 100vh;
                overflow-y: scroll;
                padding: 30px 0;
            }

@media (min-width: 768px) {
                .col-md-2 {
                   padding: 0px !important;
                }

}
            @media (max-width: 768px) {
                .col-md-2 {
                   display: none !important;
                }

}
        </style>
    </head>

<div class="sideWithMainContainer">
            <div class="col-md-2">
                <? include 'assets/php/sidebar.php' ?>
            </div>
            <main class="col-sm-12 col-md-10 sideMaincontent">
                <div id="panelContent" class="container-fluid">
                    <ol class="breadcrumb my-3">
                        <li class="breadcrumb-item">
                            <h4 class="m-0">Newsletter</h4>
                        </li>
                    </ol>
                    <?php
                    $sql = "SELECT id,date_created FROM user_newsletter WHERE user_id=$gUserId ORDER BY id DESC";
                    $result = mysqli_query($db, $sql);
                    $numRows = mysqli_num_rows($result);
                    if ($numRows == 0) {
                    ?>
                        <div class="px-3">You have not created any newsletters!</div>
                    <?php
                    } else {
                    ?>
                        <div class="row mb-4">
                            <div class="col">
                                <div class="accordion" id="accordionNewletter">
                                    <?php
                                    $numNewsletter = 1;
                                    while ($row = mysqli_fetch_assoc($result)) {
                                        $newsId = $row['id'];
                                        $newsDate = date('M d, Y', strtotime($row['date_created']));
                                    ?>
                                        
                                        <div class="card">
                                            <div class="card-header m-0 p-0 py-1" id="heading<?php echo $numNewsletter; ?>">
                                                <div class="float-left">
                                                    <a class="btn btn-link" type="button" data-toggle="collapse" data-target="#collapse<?php echo $numNewsletter; ?>" aria-expanded="true" aria-controls="collapse<?php echo $numNewsletter; ?>">
                                                        <?php echo $newsDate; ?>
                                                    </a>
                                                </div>
                                                <div class="float-right pt-2 pr-3">
                                                    <?php if ($gUserSubdomain <> '') { ?>
                                                        <a href="https://<?php echo $gUserSubdomain; ?>.knoblycream.com/view_newsletter.php?id=<?php echo $newsId; ?>" title="Publish Newsletter" target="_blank">
                                                            <i class="fas fa-upload fa-sm text-muted pr-2"></i>
                                                        </a>
                                                    <?php } else { ?>
                                                        <a href="view_newsletter.php?id=<?php echo $newsId; ?>" title="Publish Newsletter" target="_blank">
                                                            <i class="fas fa-upload fa-sm text-muted pr-2"></i>
                                                        </a>
                                                    <?php } ?>
                                                    <a href="#" title="Delete Newsletter">
                                                        <i data-id="<?php echo $newsId; ?>" class="delRow far fa-trash-alt fa-sm text-muted"></i>
                                                    </a>
                                                </div>
                                            </div>
                                            <div id="collapse<?php echo $numNewsletter; ?>" class="collapse<?php if ($numNewsletter == 1) { ?> show<?php } ?>" aria-labelledby="heading<?php echo $numNewsletter; ?>" data-parent="#accordionNewletter">
                                                <div id="panelNewsletter<?php echo $numNewsletter; ?>" class="card-body p-0" align="center">
                                                    <?php echo buildNewsletter($newsId)['html_data']; ?>

<?php if ($gUserPlan == 0) { ?>
                                                        <div class="alert alert-success" role="alert">
                                                            Sending of Newsletter feature is only available in <b>Pro</b> plan! Go to My Account to upgrade.
                                                        </div>
                                                    <?php } else { ?>
                                                        <button class="btn btn-primary mb-4" onclick="fetchNewsletterContent($('#panelNewsletter<?php echo $numNewsletter; ?> table')[0].outerHTML, '<?php echo fetchNewsLetterHeading($db, $gUserId); ?>')">Send Email</button>
                                                    <?php } ?>
                                                </div>
                                            </div>
                                        </div>
                                    <?php
                                        $numNewsletter += 1;
                                    }
                                    ?>
                                </div>
                            </div>
                        </div>
                    <?php
                    }
                    ?>

</main>
        </div>

<main>

</main>
        <? include 'assets/php/bottom_navbar.php' ?>
        <? include 'assets/php/footer.php' ?>

<div id="delModal" class="modal">
            <div class="modal-content">
                <span class="close">&times;</span>
                <div id="modalContent"></div>
            </div>
        </div>
    </body>

</html>
<? } ?>