OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/09/2025 11:18:49 AM	rwxr-xr-x
📄 .browserslistrc	208 bytes	02/11/2020 10:49:08 AM	rw-rw-r--
📄 .gitignore	42 bytes	02/11/2020 10:49:08 AM	rw-rw-r--
📄 .htaccess	803 bytes	07/18/2023 08:55:06 AM	rw-r--r--
📄 .htaccess.swp	12 KB	08/13/2021 06:21:55 AM	rw-r--r--
📄 .travis.yml	199 bytes	02/11/2020 10:49:16 AM	rw-rw-r--
📁 .well-known	-	11/28/2024 11:03:35 AM	rwxr-xr-x
📁 API	-	08/07/2024 07:35:13 AM	rwxr-xr-x
📁 _backup	-	06/22/2024 04:05:28 AM	rwxr-xr-x
📄 about.html	3.05 KB	06/15/2021 04:56:35 AM	rw-r--r--
📄 activate.php	2.56 KB	01/10/2021 11:01:39 AM	rw-r--r--
📁 admin	-	11/12/2024 08:53:01 AM	rwxr-xr-x
📄 article.php	17.24 KB	08/08/2024 12:15:43 PM	rw-r--r--
📁 arvindfacebook	-	08/14/2024 11:07:25 AM	rwxr-xr-x
📁 audio	-	04/16/2025 05:06:46 AM	rwxrwxrwx
📁 aws-ses	-	11/11/2024 12:41:09 PM	rwxr-xr-x
📄 back-dashboard.php	8.33 KB	07/25/2024 04:55:30 PM	rw-r--r--
📄 barticle.php	16.58 KB	07/22/2024 11:38:48 AM	rw-r--r--
📄 bin_article.php	6.62 KB	07/10/2024 07:41:53 AM	rw-r--r--
📄 bnewsletter.php	1.33 KB	08/08/2024 11:26:41 AM	rw-r--r--
📄 bview.php	14.07 KB	07/22/2024 07:30:50 AM	rw-r--r--
📁 clients	-	10/30/2024 11:05:12 AM	rwxr-xr-x
📄 contact.html	2.79 KB	06/15/2021 04:53:32 AM	rw-r--r--
📁 conversations	-	07/10/2024 06:53:08 AM	rwxr-xr-x
📁 covid	-	04/29/2021 04:36:04 PM	rwxr-xr-x
📁 creamapi	-	10/22/2024 10:53:04 AM	rwxrwxrwx
📄 dashboard.php	9.94 KB	04/16/2025 04:53:21 AM	rw-r--r--
📁 data	-	08/22/2020 09:10:30 AM	rwxrwxrwx
📄 down.html	1.23 KB	06/08/2021 03:26:16 PM	rw-r--r--
📁 downloads	-	11/10/2024 09:51:33 AM	rwxrwxrwx
📁 eSamudaay	-	10/10/2024 10:20:39 AM	rwxr-xr-x
📁 facebook	-	10/14/2024 07:24:26 AM	rwxr-xr-x
📄 fb_access.php	855 bytes	05/04/2021 04:21:24 AM	rw-r--r--
📁 galaxy	-	08/26/2024 06:22:21 AM	rwxr-xr-x
📄 gen2_1.php	45.17 KB	06/18/2024 09:16:17 AM	rw-r--r--
📁 genai	-	09/17/2024 07:46:25 AM	rwxr-xr-x
📄 geo_location.php	3.69 KB	08/07/2024 10:52:37 AM	rw-r--r--
📁 grfx	-	08/22/2020 01:22:42 PM	rwxr-xr-x
📁 groupchat	-	08/31/2024 11:08:59 AM	rwxr-xr-x
📁 hps	-	10/28/2024 10:38:34 AM	rwxr-xr-x
📁 img	-	09/16/2024 11:54:26 AM	rwxrwxrwx
📁 inc	-	03/04/2025 03:52:11 AM	rwxr-xr-x
📄 index.html	21.27 KB	10/09/2024 08:44:24 AM	rw-r--r--
📄 info.php	14 bytes	10/02/2020 04:48:53 AM	rw-r--r--
📁 knaadu	-	01/27/2024 09:01:23 AM	rwxr-xr-x
📁 knoblyExpressLandingPage	-	08/21/2024 10:01:16 AM	rwxr-xr-x
📁 live	-	03/11/2022 08:19:30 AM	rwxr-xr-x
📁 mailer_images	-	03/01/2023 03:50:20 AM	rwxr-xr-x
📁 mhd	-	09/05/2024 08:18:56 AM	rwxr-xr-x
📄 more.php	7.36 KB	06/25/2021 02:14:38 PM	rw-r--r--
📁 newgalaxy	-	11/22/2024 06:02:02 AM	rwxr-xr-x
📁 newsapi	-	06/19/2024 06:43:29 AM	rwxr-xr-x
📄 newsletter.php	1.33 KB	08/08/2024 12:14:17 PM	rw-r--r--
📁 oauth	-	01/26/2024 03:40:40 PM	rwxr-xr-x
📄 old1dashboard.php	8.4 KB	07/02/2024 11:18:03 AM	rw-r--r--
📄 olddashboard.php	11.58 KB	07/26/2024 06:11:34 AM	rw-r--r--
📁 postarticle	-	03/15/2024 03:05:03 AM	rwxrwxrwx
📄 privacy.html	9.99 KB	06/15/2021 04:53:16 AM	rw-r--r--
📁 process	-	03/04/2025 03:53:29 AM	rwxr-xr-x
📁 reeliv	-	09/04/2024 11:00:16 AM	rwxr-xr-x
📄 refund.html	7.34 KB	06/15/2021 04:53:16 AM	rw-r--r--
📄 reset.html	3.01 KB	06/15/2021 04:53:17 AM	rw-r--r--
📁 sendy	-	11/18/2021 09:43:15 AM	rwxr-xr-x
📄 showcase.php	7.93 KB	02/16/2024 04:22:28 AM	rw-r--r--
📄 signup.html	8.08 KB	07/05/2021 07:28:05 AM	rw-r--r--
📁 social_media	-	10/16/2024 12:36:51 PM	rwxr-xr-x
📄 splash.html	1.11 KB	01/10/2021 12:49:20 PM	rw-r--r--
📄 test.email.php	2.5 KB	06/13/2024 06:52:38 AM	rw-r--r--
📄 test.php	969 bytes	02/21/2023 04:35:32 AM	rw-r--r--
📁 testing	-	10/10/2024 05:27:49 AM	rwxr-xr-x
📁 texttovoice	-	07/16/2024 06:14:42 AM	rwxr-xr-x
📄 usage.html	30.88 KB	06/15/2021 04:53:17 AM	rw-r--r--
📁 venv	-	05/09/2024 06:58:41 AM	rwxr-xr-x
📁 videoAI	-	09/16/2024 01:25:53 PM	rwxr-xr-x
📄 view.php	12.44 KB	11/13/2024 03:42:52 AM	rw-r--r--
📁 zaws-ses	-	10/23/2024 05:53:49 AM	rwxr-xr-x
📁 znew1aws-ses	-	08/16/2024 08:24:03 AM	rwxr-xr-x
📄 zview.php	16.09 KB	07/22/2024 10:53:51 AM	rw-r--r--
📁 zzaws-ses	-	10/04/2024 04:34:42 AM	rwxr-xr-x

Editing: showcase.php

<!doctype html>
<?
include 'inc/config.php';

$id = isset($_GET["id"]) ? $_GET["id"] : '';
$domain = isset($_GET["domain"]) ? $_GET["domain"] : '';

$sql = '';
if ($id <> '') $sql = "SELECT id,full_name,company,website,news_title,news_logo,subdomain,is_side_panel,side_panel_content FROM user WHERE id=$id";
if ($domain <> '') $sql = "SELECT id,full_name,company,website,news_title,news_logo,subdomain,is_side_panel,side_panel_content FROM user WHERE subdomain='$domain'";

if ($sql <> '') {
 $result = mysqli_query($db, $sql);
 $row = $result->fetch_assoc();
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) die();

$serverName = $_SERVER['SERVER_NAME'];
 $id = $row['id'];
 $user = $row['full_name'];
 $companyName = $row['company'];
 $website = strtolower($row['website']);
 $newsTitle = $row['news_title'];
 $newsLogo = $row['news_logo'];
 $userSubdomain = $row['subdomain'];
 $userSidePanel = $row['is_side_panel'];
 $userSidePanelContent = $row['side_panel_content'];
 $userSidePanelContent = str_replace('<img src="data/','<img src="https://' . $serverName . '/data/',$userSidePanelContent);
 if (strpos($website, 'http') === false) $website = "http://$website";

$currSubdomain = explode('.', $_SERVER['HTTP_HOST'])[0];
 if ($currSubdomain <> 'knoblycream' && $currSubdomain <> 'www' && $currSubdomain <> 'localhost') {
  if ($userSubdomain <> $currSubdomain) {
   echo '<br><br><center>You are not allowed to acccess this resource!</center>';
   die();
  }
 }
?>
<html lang="en">
<head>
<title><?=$companyName?></title>
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />

<meta property="og:url" content="https://<?=$serverName?>/" />
<meta property="og:type" content="website" />
<meta property="og:title" content="<?=$companyName?>" />
<meta property="og:description" content="" />
<meta property="og:image:secure-url" itemprop="image" content="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" />

<meta property="twitter:url" content="https://<?=$serverName?>/" />
<meta name="twitter:card" content="summary" />
<meta name="twitter:title" content="<?=$companyName?>" />
<meta name="twitter:description" content="" />
<meta name="twitter:image" content="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" />

}
.boxItem {
	margin: 15px 0;
	padding: 20px;
	border-color: 1px rgba(0, 0, 0, 0.75) solid;
	border-radius: 8px;
	box-shadow: 0px 1px 3px rgba(0, 0, 0, 0.2);
	background-color: #fff;
}
.panelContent img {
	width: auto;
	height: auto;
	max-width: 100%;
}
</style>
</head>
<body>
<div class="container">

<header class="blog-header py-3 border-bottom">
 <div class="row flex-nowrap justify-content-between align-items-center">
  <div class="col-8 pt-1">
<? if ($newsLogo <> '') { ?>
   <a class="text-muted" href="<?=$website?>"><img class="mx-auto" width="256px" src="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" /></a>
<? } ?>
   <h6 class="mt-1" style="color:#9e9e9e"><?=$user?> | <?=$companyName?></h6>
  </div>
  <div class="col-4 text-right">
  </div>
 </div>
</header>

<? 
 // For KBKB
 if ($userSubdomain == 'kbkb') {
?>
  <iframe width="300" height="260" src="https://liveindex.org/widget/300-light.php" frameborder="0" hspace="0" vspace="0" scrolling="0" style="background:transparent" ></iframe>
<? } ?>

<? 
 // For KBKB
 if ($userSubdomain == 'kannadanaadu') {
?>
  <iframe width="640" height="360" src="https://www.youtube.com/embed/kzK4zmQQSoc" title="Karnataka Legislative Assembly Session Day 05 Live: ಕರ್ನಾಟಕ ವಿಧಾನಸಭೆ ಅಧಿವೇಶನ ನೇರಪ್ರಸಾರ" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
<? } ?>

<?
 $sql = "SELECT * FROM user_landing WHERE user_id=$id ORDER BY date_created DESC";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) {
  echo '<div class="p-2">Nothing to show here!</div>';
 } else {
  while($row = mysqli_fetch_assoc($result)) {
   $userId = $row['user_id'];
   $articleId = $row['article_id'];
   $articleDate = $row['date_created'];

$sql = "SELECT full_name FROM user WHERE id=$userId";
   $resultInner = mysqli_query($db, $sql);
   $rowInner = mysqli_fetch_assoc($resultInner);
   $articleAuthor = $rowInner['full_name'];

$sql = "SELECT * FROM user_collection WHERE id=$articleId";
   $resultInner = mysqli_query($db, $sql);
   $numRowsInner = mysqli_num_rows($resultInner);
   if ($numRowsInner > 0) {
    $rowInner = mysqli_fetch_assoc($resultInner);
    $artId = $rowInner['id'];
    $artTitle = $rowInner['title'];
    $artURL = 'view/' . $artId . '/' . createArticleURL($artTitle);
    $artDesc = $rowInner['description'];
    $artDesc = str_replace('<img src="data/posts/', '<img src="https://www.knoblycream.com/data/posts/', $artDesc);
    $artCoverImg = $rowInner['cover_img'];
    $artDate = $rowInner['date_added'];

$countReads = 0;
    $sql = "SELECT count(article_id) AS countReads FROM metrics WHERE article_id=$articleId";
    $resultCount = mysqli_query($db, $sql);
    $rowCount = mysqli_fetch_assoc($resultCount);
    $countReads = $rowCount['countReads'];

$collectionURL = $rowInner['url'];
    $collectionPublisher = substr($collectionURL, strpos($collectionURL, ".") + 1);
    $collectionPublisher = ucfirst(strtok($collectionPublisher, '.'));
    if ($collectionPublisher == '') $collectionPublisher = 'Cream';
?>
 <div class="row mx-3 mx-lg-0">
  <div class="col-12 boxItem">
<?
    if ($artCoverImg <> '') {
?>
   <div style="padding-bottom:10px"><a href="<?=$artURL?>" target="_blank"><img src="https://www.knoblycream.com/data/covers/<?=$artCoverImg?>" class="img-fluid" /></a></div>
<?
    }
?>
   <div style="padding-bottom:10px;font-size:18px;"><a href="<?=$artURL?>" target="_blank"><strong><?=$artTitle?></strong></a></div>

<? if ($collectionPublisher <> 'Cream') { ?>
   <div class="mt-1"><?=$artDesc?></div>
<? } ?>

<div style="margin-top:10px;font-size:13px;color:#888;">
    <div class="float-left">Date: <?=date('M d, Y', strtotime($artDate))?></div>
<? if ($countReads > 10) { ?>
    <div class="float-right"><?=$countReads?> reads</div>
<? } ?>
   </div>
  </div>
 </div>
<?
   }
  }
 }
?>

<? 
 // For KBKB
 if ($userSubdomain == 'kbkb') {
?>
  <div class="my-3" style="font-size:13px">
   <b>Disclaimer:</b><br>
   This is a news and data aggregation service and do not represent the views and opinions of the publisher. This is published only as a central repo for relevant information for an investor and a trader. Users are advised to use their own analysis and discretion before taking any action. The publisher is not liable for any kind of loss arising out of any action taken based on the content of this service.<br>
  </div>
<? } ?>

</div>

<? if ($userSidePanel == 1) { ?>
 <div style="width:300px;"><?=$userSidePanelContent?></div>
<? } ?>
</div>

</div>

<div class="container fixed-bottom pb-3" style="background-color:#fff">
 <div class="row no-gutters" style="border-top:1px solid #eb5e31">
  <div class="col mt-2 text-right">
   <small>Powered by</small> <a href="https://www.knoblycream.com/" target="_blank"><img src="/grfx/logo.png" width="100" /></a>
  </div>
 </div>
</div>

</body>
</html>
<? } ?>