OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	11/28/2024 11:03:35 AM	rwxrwxr-x
📄 chk.logged.in.php	1.16 KB	01/10/2021 12:30:27 PM	rw-r--r--
📄 chk.login.php	1.31 KB	02/10/2022 03:03:00 PM	rw-r--r--
📄 get.section.account.php	15.11 KB	12/28/2024 08:09:41 AM	rw-r--r--
📄 get.section.analytics.php	28.73 KB	03/02/2025 09:40:12 AM	rw-r--r--
📄 get.section.collection.php	69.19 KB	03/04/2025 05:15:01 AM	rw-r--r--
📄 get.section.community.php	7.71 KB	09/09/2024 09:46:26 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	05/22/2024 11:08:28 AM	rw-r--r--
📄 get.section.curated.php	33.87 KB	03/02/2025 10:52:06 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	02/10/2022 02:58:26 PM	rw-r--r--
📄 get.section.feed.php	6.87 KB	03/09/2023 05:28:34 AM	rw-r--r--
📄 get.section.genai.php	9.87 KB	08/21/2024 07:23:47 AM	rw-r--r--
📄 get.section.genaicreative.php	10.55 KB	08/21/2024 07:23:45 AM	rw-r--r--
📄 get.section.general.php	9.31 KB	08/22/2023 09:34:25 AM	rw-r--r--
📄 get.section.newsletter.php	18.97 KB	08/22/2024 06:42:01 AM	rw-r--r--
📄 get.section.request.article.php	13.34 KB	03/02/2025 06:07:24 AM	rw-r--r--
📄 get.section.settings.php	42.64 KB	03/02/2025 10:13:44 AM	rw-r--r--
📄 get.section.team.php	6.73 KB	05/23/2024 04:45:44 AM	rw-r--r--
📄 get.section.utils.php	4.1 KB	06/26/2021 06:06:51 AM	rw-r--r--
📄 logout.php	428 bytes	08/16/2020 11:22:29 AM	rw-r--r--
📄 sendgrid.php	3.62 KB	03/09/2021 04:01:36 AM	rw-r--r--
📄 upload.php	2.4 KB	08/22/2020 01:33:43 PM	rw-r--r--
📄 zget.section.analytics.php	11.45 KB	03/02/2025 06:25:31 AM	rw-r--r--

Name

Size

Modified

Perms

📁 ..

11/28/2024 11:03:35 AM

rwxrwxr-x

📄 chk.logged.in.php

1.16 KB

01/10/2021 12:30:27 PM

rw-r--r--

📄 chk.login.php

1.31 KB

02/10/2022 03:03:00 PM

rw-r--r--

📄 get.section.account.php

15.11 KB

12/28/2024 08:09:41 AM

rw-r--r--

📄 get.section.analytics.php

28.73 KB

03/02/2025 09:40:12 AM

rw-r--r--

📄 get.section.collection.php

69.19 KB

03/04/2025 05:15:01 AM

rw-r--r--

📄 get.section.community.php

7.71 KB

09/09/2024 09:46:26 AM

rw-r--r--

📄 get.section.create.php

22.41 KB

05/22/2024 11:08:28 AM

rw-r--r--

📄 get.section.curated.php

33.87 KB

03/02/2025 10:52:06 AM

rw-r--r--

📄 get.section.dashboard.php

3.31 KB

02/10/2022 02:58:26 PM

rw-r--r--

📄 get.section.feed.php

6.87 KB

03/09/2023 05:28:34 AM

rw-r--r--

📄 get.section.genai.php

9.87 KB

08/21/2024 07:23:47 AM

rw-r--r--

📄 get.section.genaicreative.php

10.55 KB

08/21/2024 07:23:45 AM

rw-r--r--

📄 get.section.general.php

9.31 KB

08/22/2023 09:34:25 AM

rw-r--r--

📄 get.section.newsletter.php

18.97 KB

08/22/2024 06:42:01 AM

rw-r--r--

📄 get.section.request.article.php

13.34 KB

03/02/2025 06:07:24 AM

rw-r--r--

📄 get.section.settings.php

42.64 KB

03/02/2025 10:13:44 AM

rw-r--r--

📄 get.section.team.php

6.73 KB

05/23/2024 04:45:44 AM

rw-r--r--

📄 get.section.utils.php

4.1 KB

06/26/2021 06:06:51 AM

rw-r--r--

📄 logout.php

428 bytes

08/16/2020 11:22:29 AM

rw-r--r--

📄 sendgrid.php

3.62 KB

03/09/2021 04:01:36 AM

rw-r--r--

📄 upload.php

2.4 KB

08/22/2020 01:33:43 PM

rw-r--r--

📄 zget.section.analytics.php

11.45 KB

03/02/2025 06:25:31 AM

rw-r--r--

Editing: chk.logged.in.php

<?
// Knobly Cream: Check user login

session_start();
require_once '../inc/config.php';

if (!empty($_POST)) {
 $knoblyCreamUser = isset($_POST['knoblyCreamUser']) ? $_POST['knoblyCreamUser'] : '';
 if ($knoblyCreamUser != '') {
  $knoblyCreamUser = simpleEncDec($knoblyCreamUser, 'd');
  $sql = "SELECT id,full_name,email,is_activated FROM user WHERE id='$knoblyCreamUser'";
  $result = @mysqli_query($db, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $isActivated = $row['is_activated'];
   if ($isActivated == 1) {
    $sql = "UPDATE user SET num_visits=num_visits+1 WHERE id='$knoblyCreamUser'";
    mysqli_query($db, $sql);
    $ip = getenv('HTTP_CLIENT_IP')?:getenv('HTTP_X_FORWARDED_FOR')?:getenv('HTTP_X_FORWARDED')?:getenv('HTTP_FORWARDED_FOR')?:getenv('HTTP_FORWARDED')?:getenv('REMOTE_ADDR');
    $sql = "INSERT INTO user_login(user_id,ip,date_login) VALUES(" . $row['id'] . ",'$ip',Now())";
    mysqli_query($db, $sql);
    $_SESSION['userId'] = $row['id'];
    $_SESSION['userName'] = $row['full_name'];
    $_SESSION['userEmail'] = $row['email'];
    echo 'OK';
   }
  }
 }
}