OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	08/21/2024 10:01:16 AM	rwxr-xr-x
📄 _get.section.collection.php	58.55 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 _get.section.create.php	21.82 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 _get.section.general.php	8.06 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 autoload.php	771 bytes	08/21/2024 10:01:14 AM	rw-r--r--
📁 aws	-	08/21/2024 10:01:20 AM	rwxr-xr-x
📁 bin	-	08/21/2024 10:01:17 AM	rwxr-xr-x
📄 bounceViewList.php	5.86 KB	08/21/2024 10:01:14 AM	rw-r--r--
📄 chk.logged.in.php	1.16 KB	08/21/2024 10:01:14 AM	rw-r--r--
📄 chk.login.php	1.31 KB	08/21/2024 10:01:14 AM	rw-r--r--
📁 composer	-	08/21/2024 10:01:18 AM	rwxr-xr-x
📄 d_get.section.collection.php	57.93 KB	08/21/2024 10:01:14 AM	rw-r--r--
📄 d_get.section.create.php	21.87 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.account.php	8.47 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.analytics.php	11.46 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.collection.php	58.52 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.community.php	5.89 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.curated.php	5.07 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.feed.php	6.87 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.general.php	9.31 KB	08/21/2024 10:01:15 AM	rw-r--r--
📄 get.section.newsletter.php	9.25 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 get.section.request.article.php	5.82 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 get.section.settings.php	21.15 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 get.section.team.php	6.73 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 get.section.utils.php	4.1 KB	08/21/2024 10:01:16 AM	rw-r--r--
📁 guzzlehttp	-	08/21/2024 10:01:22 AM	rwxr-xr-x
📄 logout.php	428 bytes	08/21/2024 10:01:16 AM	rw-r--r--
📁 mtdowling	-	08/21/2024 10:01:23 AM	rwxr-xr-x
📁 phpmailer	-	08/21/2024 10:01:23 AM	rwxr-xr-x
📁 psr	-	08/21/2024 10:01:25 AM	rwxr-xr-x
📁 ralouphie	-	08/21/2024 10:01:25 AM	rwxr-xr-x
📄 sendgrid.php	3.62 KB	08/21/2024 10:01:16 AM	rw-r--r--
📁 symfony	-	08/21/2024 10:01:26 AM	rwxr-xr-x
📄 upload.php	2.4 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 verify.php	3.12 KB	08/21/2024 10:01:16 AM	rw-r--r--
📄 verify_email.php	7.13 KB	08/21/2024 10:01:16 AM	rw-r--r--
📁 wildbit	-	08/21/2024 10:01:26 AM	rwxr-xr-x
📄 z.get.section.feed.php	6.88 KB	08/21/2024 10:01:16 AM	rw-r--r--

Editing: get.section.utils.php

<?
// Cream: Utils

require_once '../inc/validate.logged.php';
require_once '../inc/config.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Show Notifications
if ($act == 'showNotifications') {
?>
<ol class="breadcrumb my-3">
 <li class="breadcrumb-item w-100">
  <div class="text-left w-50"><h4 class="mt-1">Notification Center</h4></div>
 </li>
</ol>
<div class="row mb-4 p-2">
 <div class="col">
  You have no notifications!
 </div>
</div>
<?
}

// Cream Shared
if ($act == 'creamShared') {
 $shareId = isset($_POST['shareId']) ? $_POST['shareId'] : '';
 $feedId = isset($_POST['feedId']) ? $_POST['feedId'] : '';
 $feedTitle = isset($_POST['feedTitle']) ? $_POST['feedTitle'] : '';
 $feedURL = isset($_POST['feedURL']) ? $_POST['feedURL'] : '';
 $feedDesc = isset($_POST['feedDesc']) ? $_POST['feedDesc'] : '';
 if ($shareId != '') {
  if ($feedId != '') {
   $sql = "SELECT title,url,description,cover_img FROM user_collection WHERE id=$feedId AND user_id=$gUserId";
   $result = mysqli_query($db, $sql);
   $numRows = mysqli_num_rows($result);
   if ($numRows > 0) {
    $row = mysqli_fetch_assoc($result);
    $feedTitle = $row['title'];
    $feedURL = $row['url'];
    $feedDesc = $row['description'];
    $coverImg = $row['cover_img'];
    $feedTitle = mysqli_real_escape_string($db, $feedTitle);
    $feedURL = mysqli_real_escape_string($db, $feedURL);
    $feedDesc = mysqli_real_escape_string($db, $feedDesc);
    $sql = "INSERT INTO user_collection(user_id,share_user_id,share_collection_id,title,url,description,cover_img,date_added) VALUES($shareId,$gUserId,$feedId,'$feedTitle','$feedURL','$feedDesc','$coverImg',Now())";
    mysqli_query($db, $sql);
   }
  } else if ($feedTitle != '') {
   $sql = "SELECT url FROM user_collection WHERE url='$feedURL' AND share_user_id=$gUserId AND user_id=$shareId";
   $result = mysqli_query($db, $sql);
   $numRows = mysqli_num_rows($result);
   if ($numRows == 0) {
    $feedTitle = mysqli_real_escape_string($db, $feedTitle);
    $feedURL = mysqli_real_escape_string($db, $feedURL);
    $feedDesc = urldecode($feedDesc);
    $feedDesc = mysqli_real_escape_string($db, $feedDesc);
    $sql = "INSERT INTO user_collection(user_id,share_user_id,title,url,description,date_added) VALUES($shareId,$gUserId,'$feedTitle','$feedURL','$feedDesc',Now())";
    mysqli_query($db, $sql);
   }
  }
  echo "OK";
 }
}

// Show Cream Sharing
if ($act == 'showCreamShare') {
 $feedId = isset($_POST['id']) ? $_POST['id'] : '';
 $feedTitle = isset($_POST['title']) ? $_POST['title'] : '';
 $feedURL = isset($_POST['url']) ? $_POST['url'] : '';
 $feedDesc = isset($_POST['desc']) ? $_POST['desc'] : '';
?>
<div class="popup" style="width:420px">
<div class="widget">
<form id="frmAdd" name="frmAdd">
 <div class="card">
  <div class="card-header bg-dark"><h5 class="mb-0 text-light">Cream<i>Share</i></h5></div>
 </div>
 <div id="widget_B" style="padding:15px 25px">
<?
 if ($gUserPlan == 0) {
  echo '<div class="alert alert-success" role="alert">This feature is only available in <b>Pro</b> plan!<br>Go to My Account to upgrade.</div>';
 } else {
?>
  <div class="form-group">
   <label for="feedURL">Cream User</label>
   <input type="email" class="form-control" id="shareEmail" name="shareEmail" maxlength="100" />
   <small class="form-text text-muted">Please enter the Cream login to share with</small>
  </div>
 </div>
 <div id="widget_F" style="border-top:1px solid #ebedf2;padding:20px 10px;">
  <div class="col">
   <input type="hidden" id="feedId" name="feedId" value="<?=$feedId?>" />
   <input type="hidden" id="feedTitle" name="feedTitle" value="<?=addslashes($feedTitle)?>" />
   <input type="hidden" id="feedURL" name="feedURL" value="<?=$feedURL?>" />
   <input type="hidden" id="feedDesc" name="feedDesc" value="<?=urlencode($feedDesc)?>" />
   <button type="submit" class="btn btn-primary" onclick="return chkCreamShare()">Share</button>
   <div id="panelStatus" class="float-right text-sm" style="margin-top:5px" align="right"></div>
  </div>
 </div>
<? } ?>
</form>
</div>
</div>
<?
}