OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	11/28/2024 11:03:35 AM	rwxrwxr-x
📄 chk.logged.in.php	1.16 KB	01/10/2021 12:30:27 PM	rw-r--r--
📄 chk.login.php	1.31 KB	02/10/2022 03:03:00 PM	rw-r--r--
📄 get.section.account.php	15.11 KB	12/28/2024 08:09:41 AM	rw-r--r--
📄 get.section.analytics.php	28.73 KB	03/02/2025 09:40:12 AM	rw-r--r--
📄 get.section.collection.php	69.19 KB	03/04/2025 05:15:01 AM	rw-r--r--
📄 get.section.community.php	7.71 KB	09/09/2024 09:46:26 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	05/22/2024 11:08:28 AM	rw-r--r--
📄 get.section.curated.php	33.87 KB	03/02/2025 10:52:06 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	02/10/2022 02:58:26 PM	rw-r--r--
📄 get.section.feed.php	6.87 KB	03/09/2023 05:28:34 AM	rw-r--r--
📄 get.section.genai.php	9.87 KB	08/21/2024 07:23:47 AM	rw-r--r--
📄 get.section.genaicreative.php	10.55 KB	08/21/2024 07:23:45 AM	rw-r--r--
📄 get.section.general.php	9.31 KB	08/22/2023 09:34:25 AM	rw-r--r--
📄 get.section.newsletter.php	18.97 KB	08/22/2024 06:42:01 AM	rw-r--r--
📄 get.section.request.article.php	13.34 KB	03/02/2025 06:07:24 AM	rw-r--r--
📄 get.section.settings.php	42.64 KB	03/02/2025 10:13:44 AM	rw-r--r--
📄 get.section.team.php	6.73 KB	05/23/2024 04:45:44 AM	rw-r--r--
📄 get.section.utils.php	4.1 KB	06/26/2021 06:06:51 AM	rw-r--r--
📄 logout.php	428 bytes	08/16/2020 11:22:29 AM	rw-r--r--
📄 sendgrid.php	3.62 KB	03/09/2021 04:01:36 AM	rw-r--r--
📄 upload.php	2.4 KB	08/22/2020 01:33:43 PM	rw-r--r--
📄 zget.section.analytics.php	11.45 KB	03/02/2025 06:25:31 AM	rw-r--r--

Editing: get.section.utils.php

<?
// Cream: Utils

require_once '../inc/validate.logged.php';
require_once '../inc/config.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Show Notifications
if ($act == 'showNotifications') {
?>
<ol class="breadcrumb my-3">
 <li class="breadcrumb-item w-100">
  <div class="text-left w-50"><h4 class="mt-1">Notification Center</h4></div>
 </li>
</ol>
<div class="row mb-4 p-2">
 <div class="col">
  You have no notifications!
 </div>
</div>
<?
}

// Cream Shared
if ($act == 'creamShared') {
 $shareId = isset($_POST['shareId']) ? $_POST['shareId'] : '';
 $feedId = isset($_POST['feedId']) ? $_POST['feedId'] : '';
 $feedTitle = isset($_POST['feedTitle']) ? $_POST['feedTitle'] : '';
 $feedURL = isset($_POST['feedURL']) ? $_POST['feedURL'] : '';
 $feedDesc = isset($_POST['feedDesc']) ? $_POST['feedDesc'] : '';
 if ($shareId != '') {
  if ($feedId != '') {
   $sql = "SELECT title,url,description,cover_img FROM user_collection WHERE id=$feedId AND user_id=$gUserId";
   $result = mysqli_query($db, $sql);
   $numRows = mysqli_num_rows($result);
   if ($numRows > 0) {
    $row = mysqli_fetch_assoc($result);
    $feedTitle = $row['title'];
    $feedURL = $row['url'];
    $feedDesc = $row['description'];
    $coverImg = $row['cover_img'];
    $feedTitle = mysqli_real_escape_string($db, $feedTitle);
    $feedURL = mysqli_real_escape_string($db, $feedURL);
    $feedDesc = mysqli_real_escape_string($db, $feedDesc);
    $sql = "INSERT INTO user_collection(user_id,share_user_id,share_collection_id,title,url,description,cover_img,date_added) VALUES($shareId,$gUserId,$feedId,'$feedTitle','$feedURL','$feedDesc','$coverImg',Now())";
    mysqli_query($db, $sql);
   }
  } else if ($feedTitle != '') {
   $sql = "SELECT url FROM user_collection WHERE url='$feedURL' AND share_user_id=$gUserId AND user_id=$shareId";
   $result = mysqli_query($db, $sql);
   $numRows = mysqli_num_rows($result);
   if ($numRows == 0) {
    $feedTitle = mysqli_real_escape_string($db, $feedTitle);
    $feedURL = mysqli_real_escape_string($db, $feedURL);
    $feedDesc = urldecode($feedDesc);
    $feedDesc = mysqli_real_escape_string($db, $feedDesc);
    $sql = "INSERT INTO user_collection(user_id,share_user_id,title,url,description,date_added) VALUES($shareId,$gUserId,'$feedTitle','$feedURL','$feedDesc',Now())";
    mysqli_query($db, $sql);
   }
  }
  echo "OK";
 }
}

// Show Cream Sharing
if ($act == 'showCreamShare') {
 $feedId = isset($_POST['id']) ? $_POST['id'] : '';
 $feedTitle = isset($_POST['title']) ? $_POST['title'] : '';
 $feedURL = isset($_POST['url']) ? $_POST['url'] : '';
 $feedDesc = isset($_POST['desc']) ? $_POST['desc'] : '';
?>
<div class="popup" style="width:420px">
<div class="widget">
<form id="frmAdd" name="frmAdd">
 <div class="card">
  <div class="card-header bg-dark"><h5 class="mb-0 text-light">Cream<i>Share</i></h5></div>
 </div>
 <div id="widget_B" style="padding:15px 25px">
<?
 if ($gUserPlan == 0) {
  echo '<div class="alert alert-success" role="alert">This feature is only available in <b>Pro</b> plan!<br>Go to My Account to upgrade.</div>';
 } else {
?>
  <div class="form-group">
   <label for="feedURL">Cream User</label>
   <input type="email" class="form-control" id="shareEmail" name="shareEmail" maxlength="100" />
   <small class="form-text text-muted">Please enter the Cream login to share with</small>
  </div>
 </div>
 <div id="widget_F" style="border-top:1px solid #ebedf2;padding:20px 10px;">
  <div class="col">
   <input type="hidden" id="feedId" name="feedId" value="<?=$feedId?>" />
   <input type="hidden" id="feedTitle" name="feedTitle" value="<?=addslashes($feedTitle)?>" />
   <input type="hidden" id="feedURL" name="feedURL" value="<?=$feedURL?>" />
   <input type="hidden" id="feedDesc" name="feedDesc" value="<?=urlencode($feedDesc)?>" />
   <button type="submit" class="btn btn-primary" onclick="return chkCreamShare()">Share</button>
   <div id="panelStatus" class="float-right text-sm" style="margin-top:5px" align="right"></div>
  </div>
 </div>
<? } ?>
</form>
</div>
</div>
<?
}