OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	11/18/2021 09:42:34 AM	rwxr-xr-x
📄 active-subscriber-count.php	1.76 KB	11/18/2021 09:43:15 AM	rw-r--r--
📄 delete.php	2.25 KB	11/18/2021 09:43:15 AM	rw-r--r--
📄 subscription-status.php	2.4 KB	11/18/2021 09:43:15 AM	rw-r--r--

Editing: delete.php

<?php include('../_connect.php');?>
<?php include('../../includes/helpers/short.php');?>
<?php 
	//-------------------------- ERRORS -------------------------//
	$error_core = array('No data passed', 'API key not passed', 'Invalid API key');
	$error_passed = array('List ID not passed', 'List does not exist', 'Email address not passed', 'Subscriber does not exist');
	//-----------------------------------------------------------//
	
	//--------------------------- POST --------------------------//
	//api_key
	if(isset($_POST['api_key'])) $api_key = mysqli_real_escape_string($mysqli, $_POST['api_key']);
	else $api_key = null;
	
	//list_id
	if(isset($_POST['list_id'])) $list_id = decrypt_int($_POST['list_id']);
	else $list_id = null;
	
	//email
	if(isset($_POST['email'])) $email = mysqli_real_escape_string($mysqli, $_POST['email']);
	else $email = null;
	//-----------------------------------------------------------//
	
	//----------------------- VERIFICATION ----------------------//
	//Core data
	if($api_key==null && $list_id==null)
	{
		echo $error_core[0];
		exit;
	}
	if($api_key==null)
	{
		echo $error_core[1];
		exit;
	}
	else if(!verify_api_key($api_key))
	{
		echo $error_core[2];
		exit;
	}
	
	//Passed data
	if($list_id==null)
	{
		echo $error_passed[0];
		exit;
	}
	else
	{
		//Check if list exists
		$q = 'SELECT id FROM lists WHERE id = '.$list_id;
		$r = mysqli_query($mysqli, $q);
		if (mysqli_num_rows($r) == 0) //if list does not exist, throw error
		{
			echo $error_passed[1]; 
			exit;
		}
		else //if list exists, check if email is passed into the call
		{
			//if email is not passed into the call
			if($email==null)
			{
				
			}
			else //otherwise check if the email exist inside the list
			{
				$q = 'SELECT id FROM subscribers WHERE email = "'.$email.'" AND list = '.$list_id;
				$r = mysqli_query($mysqli, $q);
				if (mysqli_num_rows($r) == 0)
				{
				    echo $error_passed[3]; 
					exit;
				}
			}
		}
	}
	//-----------------------------------------------------------//
	
	//-------------------------- QUERY --------------------------//
	
	$q = 'DELETE FROM subscribers WHERE email = "'.$email.'" AND list = "'.$list_id.'"';
	$r = mysqli_query($mysqli, $q);
	if ($r)
	    echo true;
	//-----------------------------------------------------------//
?>