OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	08/16/2024 08:24:03 AM	rwxr-xr-x
📄 _get.section.collection.php	58.55 KB	08/16/2024 08:24:09 AM	rw-r--r--
📄 _get.section.create.php	21.82 KB	08/16/2024 08:24:09 AM	rw-r--r--
📄 _get.section.general.php	8.06 KB	08/16/2024 08:24:09 AM	rw-r--r--
📄 autoload.php	771 bytes	08/16/2024 08:24:04 AM	rw-r--r--
📁 aws	-	08/16/2024 08:24:15 AM	rwxr-xr-x
📁 bin	-	08/16/2024 08:24:09 AM	rwxr-xr-x
📄 chk.logged.in.php	1.16 KB	08/16/2024 08:24:04 AM	rw-r--r--
📄 chk.login.php	1.31 KB	08/16/2024 08:24:04 AM	rw-r--r--
📁 composer	-	08/16/2024 08:24:12 AM	rwxr-xr-x
📄 d_get.section.collection.php	57.93 KB	08/16/2024 08:24:05 AM	rw-r--r--
📄 d_get.section.create.php	21.87 KB	08/16/2024 08:24:05 AM	rw-r--r--
📄 get.section.account.php	8.47 KB	08/16/2024 08:24:06 AM	rw-r--r--
📄 get.section.analytics.php	11.46 KB	08/16/2024 08:24:06 AM	rw-r--r--
📄 get.section.collection.php	58.52 KB	08/16/2024 08:24:06 AM	rw-r--r--
📄 get.section.community.php	5.89 KB	08/16/2024 08:24:06 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	08/16/2024 08:24:06 AM	rw-r--r--
📄 get.section.curated.php	5.07 KB	08/16/2024 08:24:06 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	08/16/2024 08:24:07 AM	rw-r--r--
📄 get.section.feed.php	6.87 KB	08/16/2024 08:24:07 AM	rw-r--r--
📄 get.section.general.php	9.31 KB	08/16/2024 08:24:07 AM	rw-r--r--
📄 get.section.newsletter.php	9.25 KB	08/16/2024 08:24:07 AM	rw-r--r--
📄 get.section.request.article.php	5.82 KB	08/16/2024 08:24:08 AM	rw-r--r--
📄 get.section.settings.php	21.15 KB	08/16/2024 08:24:08 AM	rw-r--r--
📄 get.section.team.php	6.73 KB	08/16/2024 08:24:08 AM	rw-r--r--
📄 get.section.utils.php	4.1 KB	08/16/2024 08:24:08 AM	rw-r--r--
📁 guzzlehttp	-	08/16/2024 08:24:20 AM	rwxr-xr-x
📄 logout.php	428 bytes	08/16/2024 08:24:08 AM	rw-r--r--
📁 mtdowling	-	08/16/2024 08:24:22 AM	rwxr-xr-x
📁 phpmailer	-	08/16/2024 08:24:24 AM	rwxr-xr-x
📁 psr	-	08/16/2024 08:24:28 AM	rwxr-xr-x
📁 ralouphie	-	08/16/2024 08:24:29 AM	rwxr-xr-x
📄 sendgrid.php	3.62 KB	08/16/2024 08:24:08 AM	rw-r--r--
📁 symfony	-	08/16/2024 08:24:30 AM	rwxr-xr-x
📄 upload.php	2.4 KB	08/16/2024 08:24:08 AM	rw-r--r--
📄 verify.php	3.12 KB	08/16/2024 08:24:08 AM	rw-r--r--
📄 verify_email.php	7.13 KB	08/16/2024 08:24:09 AM	rw-r--r--
📁 wildbit	-	08/16/2024 08:24:30 AM	rwxr-xr-x
📄 z.get.section.feed.php	6.88 KB	08/16/2024 08:24:09 AM	rw-r--r--

Editing: get.section.account.php

<?
// Cream: My Account

require_once '../inc/validate.logged.php';
require_once '../inc/config.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Check if already exists on update
if ($act == 'chkExist') {
 $chkEmail = isset($_POST['email']) ? $_POST['email'] : '';
 $sql = "SELECT id FROM user WHERE email='$chkEmail' AND id<>$gUserId";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) {
  echo 'OK';
 }
}

// Update Profile
if ($act == 'updateProfile') {
 $userName = isset($_POST['userName']) ? $_POST['userName'] : '';
 $userEmail = isset($_POST['userEmail']) ? $_POST['userEmail'] : '';
 $userCompany = isset($_POST['userCompany']) ? $_POST['userCompany'] : '';
 $userCategoryId = isset($_POST['userCategoryId']) ? $_POST['userCategoryId'] : '';
 $userWebsite = isset($_POST['userWebsite']) ? $_POST['userWebsite'] : '';
 if ($userName != '' && $userEmail != '') {
  $sql = "UPDATE user SET full_name='$userName',email='$userEmail',company='$userCompany',category_id=$userCategoryId,website='$userWebsite',date_modified=Now() WHERE id=$gUserId";
  mysqli_query($db, $sql);
  echo "OK";
 }
}

// Update Password
if ($act == 'updatePass') {
 $userPassCurrent = isset($_POST['userPassCurrent']) ? $_POST['userPassCurrent'] : '';
 $userPassNew = isset($_POST['userPassNew']) ? $_POST['userPassNew'] : '';
 if ($userPassCurrent != '' && $userPassNew != '') {
  $sql = "SELECT id FROM user WHERE id=$gUserId AND password='$userPassCurrent'";
  $result = mysqli_query($db, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows == 0) {
   echo "IncorrectPassword";
   die();
  }
  $sql = "UPDATE user SET password='$userPassNew',date_modified=Now() WHERE id=$gUserId";
  mysqli_query($db, $sql);
  echo "OK";
 }
}

// Default
if ($act == '') {
 $sql = "SELECT * FROM user WHERE id=$gUserId";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $userName = $row['full_name'];
  $userCompany = $row['company'];
  $userEmail = $row['email'];
  $userWebsite = $row['website'];
  $userCategoryId = $row['category_id'];
?>
<ol class="breadcrumb my-3">
 <li class="breadcrumb-item"><h4 class="m-0">My Account</h4></li>
</ol>
<div class="row mb-4">
 <div class="col">
  <ul class="nav nav-tabs mb-4">
   <li class="nav-item"><a class="nav-link active" data-toggle="tab" href="#profile" role="tab" onclick="$('#panelStatus').html('')">Profile</a></li>
   <li class="nav-item"><a class="nav-link" data-toggle="tab" href="#password" role="tab" onclick="$('#panelStatus').html('')">Password</a></li>
  </ul>
  <div class="tab-content m-3">
   <div class="tab-pane fade show active" id="profile" role="tabpanel">
    <div class="form-group row">
     <label class="col-sm-2 col-form-label">Current Plan</label>
     <div class="col-sm-12 col-md-6 mt-2">
<? if ($gUserPlan == 1) { ?>
      Pro
<? } else { ?>
      Free 
      <div id="zf-widget-root-id"></div>
<? } ?>
     </div>
    </div>
<?
  if ($gUserSubdomain <> '') {
   $landingPageURL = "https://$gUserSubdomain.knoblycream.com/";
  } else {
   $landingPageURL = "https://www.knoblycream.com/$gUserId/showcase";
  }
?>
    <div class="form-group row">
     <label class="col-sm-2 col-form-label">Showcase Page</label>
     <div class="col-sm-12 col-md-6 mt-2"><a href="<?=$landingPageURL?>" target="_blank"><?=$landingPageURL?></a></div>
    </div>
    <div class="form-group row">
     <label for="inputPassword" class="col-sm-2 col-form-label">Full Name</label>
     <div class="col-sm-12 col-md-6">
      <input type="text" class="form-control" id="userName" name="userName" value="<?=$userName?>" maxlength="100" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userEmail" class="col-sm-2 col-form-label">Email</label>
     <div class="col-sm-12 col-md-6">
      <input type="email" class="form-control" id="userEmail" name="userEmail" value="<?=$userEmail?>" maxlength="100" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userCompany" class="col-sm-2 col-form-label">Company</label>
     <div class="col-sm-12 col-md-6">
      <input type="text" class="form-control" id="userCompany" name="userCompany" value="<?=$userCompany?>" maxlength="100" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userCategoryId" class="col-sm-2 col-form-label">Business Type</label>
     <div class="col-sm-12 col-md-6">
      <select id="userCategoryId" name="userCategoryId" class="form-control">
       <option value="">--[select]--
<?
 $sql = "SELECT id,category FROM category ORDER BY category";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  for ($i=0;$i<$numRows;$i++) {
   $row = mysqli_fetch_array($result);
   $tmpCategoryId = $row['id'];
   $tmpCategoryName = $row['category'];
   if ($userCategoryId == $tmpCategoryId) {
    echo '   <option value="' . $tmpCategoryId . '" SELECTED>' . $tmpCategoryName;
   } else {
    echo '   <option value="' . $tmpCategoryId . '">' . $tmpCategoryName;
   }
  }
 }
?>
       <option value="0">Others
      </select>
     </div>
    </div>
    <div class="form-group row">
     <label for="userWebsite" class="col-sm-2 col-form-label">Website</label>
     <div class="col-sm-12 col-md-6">
      <input type="text" class="form-control" id="userWebsite" name="userWebsite" value="<?=$userWebsite?>" maxlength="100" />
      <small class="form-text text-muted">Please enter the URL with http:// or https://</small>
     </div>
    </div>
    <div class="form-group row mt-4">
     <label class="col-sm-2 col-form-label"></label>
     <div class="col-sm-12 col-md-6">
      <button class="btn btn-primary" onclick="return chkUpdateProfile()">Update Profile</button>
     </div>
    </div>
   </div>
   <div class="tab-pane fade" id="password" role="tabpanel">
    <div class="form-group row">
     <label for="userPassCurrent" class="col-sm-2 col-form-label">Current password</label>
     <div class="col-sm-12 col-md-3">
      <input type="password" class="form-control" id="userPassCurrent" name="userPassCurrent" maxlength="20" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userPassNew1" class="col-sm-2 col-form-label">New password</label>
     <div class="col-sm-12 col-md-3">
      <input type="password" class="form-control" id="userPassNew1" name="userPassNew1" maxlength="20" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userPassNew2" class="col-sm-2 col-form-label">Retype Password</label>
     <div class="col-sm-12 col-md-3">
      <input type="password" class="form-control" id="userPassNew2" name="userPassNew2" maxlength="20" />
     </div>
    </div>
    <div class="form-group row mt-4">
     <label class="col-sm-2 col-form-label"></label>
     <div class="col-sm-12 col-md-3">
      <button class="btn btn-primary" onclick="return chkUpdatePassword()">Update Password</button>
     </div>
    </div>
   </div>
   <div id="panelStatus" class="mt-4"></div>
  </div>
 </div>
</div>
<script type="text/javascript">
$(function() {
 $('#btnGoPro').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.general.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'showGoPro'
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
 var pricingTableComponentOptions = {id: 'zf-widget-root-id', product_id: '2-a22c0be31501979fdf6d95705ea43113bde88338aa57ecb5f61153ce5d3090c3f48d7e9af6c8ae9e58bcad6fd428a6fde667b7eb5ddc5b2a318fde6c950d2d25', template: 'combo_pro', most_popular_plan: '', is_group_by_frequency: true, group_options: [ { frequency: 'Monthly', frequency_recurrence_value: '1_months', most_popular_plan: '', plans: [ { plan_code: 'M' }, ] }, { frequency: 'Yearly', frequency_recurrence_value: '1_years', most_popular_plan: '', plans: [ { plan_code: 'A' }, ] }, ], plans: [ ], theme: { color: '#f58020', theme_color_light: ''}, button_text: 'Upgrade to Pro Plan', product_url: 'https://subscriptions.zoho.com', price_caption: '', language_code: 'en', open_inSameTab: false }; ZFWidget.init('zf-pricing-table', pricingTableComponentOptions);
});
</script>
<?
 }
}
?>