OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	01/27/2024 09:01:23 AM	rwxr-xr-x
📄 bootstrap.min.css	155.78 KB	02/05/2023 11:00:53 AM	rwxr-xr-x
📄 bootstrap.min.js	58.6 KB	03/30/2020 06:30:00 PM	rwxr-xr-x
📄 common.js	1.65 KB	01/14/2024 04:36:33 PM	rwxr-xr-x
📄 config.php	4.12 KB	01/27/2024 08:56:10 AM	rw-r--r--
📁 fontawesome	-	01/14/2024 11:47:16 AM	rwxr-xr-x
📄 footer.php	1.95 KB	01/13/2024 08:46:07 AM	rwxr-xr-x
📄 greeting.js	498 bytes	01/14/2024 04:41:21 PM	rw-r--r--
📄 header.php	4.44 KB	01/14/2024 05:06:05 PM	rw-r--r--
📄 jquery-3.6.0.min.js	87.4 KB	12/18/2021 03:52:00 AM	rwxr-xr-x
📄 moment.min.js	52.07 KB	10/14/2020 06:30:00 PM	rwxr-xr-x
📄 side.php	1.39 KB	07/15/2023 04:28:24 PM	rwxr-xr-x
📄 style.css	2.33 KB	01/14/2024 05:05:56 PM	rwxr-xr-x
📄 track.download.php	1.31 KB	11/29/2021 12:11:00 AM	rwxr-xr-x

Editing: track.download.php

<?
// Current Science: Track Downloads

include 'config.php';

$volumeNum = isset($_POST["volumeNum"]) ? $_POST["volumeNum"] : '';
$issueNum = isset($_POST["issueNum"]) ? $_POST["issueNum"] : '';
$pageNum = isset($_POST["pageNum"]) ? $_POST["pageNum"] : '';

if ($volumeNum != '' && $issueNum != '' && $pageNum != '') {
 $ip = getenv('HTTP_CLIENT_IP')?:getenv('HTTP_X_FORWARDED_FOR')?:getenv('HTTP_X_FORWARDED')?:getenv('HTTP_FORWARDED_FOR')?:getenv('HTTP_FORWARDED')?:getenv('REMOTE_ADDR');
 $response = unserialize(file_get_contents('http://www.geoplugin.net/php.gp?ip='.$ip));
 if ($response === false) {
  $downloadCountry = '';
 } else {
  $downloadCountry = $response['geoplugin_countryName'];
 }
 $sql = "SELECT article_id FROM articles WHERE volume_num=$volumeNum AND issue_num=$issueNum AND page_num=$pageNum";
 $result = mysqli_query($dbpro, $sql);
 $hasResult = mysqli_num_rows($result);
 if ($hasResult > 0) {
  $row = mysqli_fetch_assoc($result);
  $articleId = $row['article_id'];
  $sql = "UPDATE articles SET article_downloads=article_downloads+1 WHERE article_id=$articleId";
  mysqli_query($dbpro, $sql);
  $sql = "INSERT INTO article_downloads(article_id,country,date_downloaded) VALUES($articleId,'$downloadCountry',Now())";
  mysqli_query($dbpro, $sql);
 }
 mysqli_free_result($result);
}