OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/31/2025 06:36:42 AM	rwxr-xr-x
📄 _get.section.collection.php	58.55 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 _get.section.create.php	21.82 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 _get.section.general.php	8.06 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 b.get.section.newsletter.php	18.36 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 bbget.section.curated.php	33.74 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 bget.section.newsletter.php	18.39 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 bget.section.request.article.php	6.04 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 chk.logged.in.php	1.16 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 chk.login.php	1.31 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 d_get.section.collection.php	57.93 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 d_get.section.create.php	21.87 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 fget.section.curated.php	17.04 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 fget.section.settings.php	33.55 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.account.php	8.55 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.analytics.php	11.45 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.collection copy.php	67.57 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.collection.php	69.19 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.community.php	7.7 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.curated.php	33.74 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.feed.php	6.87 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.genai.php	9.84 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.genaicreative.php	10.52 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.general.php	2.28 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.newsletter.php	18.94 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.request.article - Copy.php	5.82 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.request.article.php	16.31 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.settings.php	41.71 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 get.section.team.php	6.72 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 get.section.test.php	529 bytes	03/26/2025 03:48:11 AM	rw-r--r--
📄 get.section.utils.php	4.77 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 logout.php	428 bytes	03/26/2025 03:48:11 AM	rw-r--r--
📄 my-get.section.curated.php	18.56 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 old.get.section.genai.php	10.22 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 old1get.section.create.php	30.29 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 sendgrid.php	3.62 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 upload.php	2.4 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 z.get.section.feed.php	6.88 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zget.section.newsletter.php	17.97 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zget.section.settings.php	34.6 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zzget.section.curated.php	13.95 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zzget.section.genai.php	12.7 KB	03/26/2025 03:48:11 AM	rw-r--r--

Editing: get.section.team.php

<?php
// Cream: Community Feeds

require_once '../inc/validate.logged.php';
require_once '../inc/config.php';
$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Function to truncate the description to a certain number of words
function truncateDescription($description, $limit = 25) {
    $words = explode(' ', $description);
    if (count($words) > $limit) {
        return implode(' ', array_slice($words, 0, $limit)) . '...';
    } else {
        return $description;
    }
}

// Add to Collection
if ($act == 'addCollection') {
 $data = isset($_POST['data']) ? $_POST['data'] : '';
 if ($data != '') {
  $arrData = json_decode($data, true);
  foreach ($arrData as &$value) {
   $feedTitle = $value['title'];
   $feedURL = $value['url'];
   $feedDesc = $value['desc'];
   $sql = "SELECT url FROM user_collection WHERE url='$feedURL' AND user_id=$gUserId";
   $result = mysqli_query($db, $sql);
   $numRows = mysqli_num_rows($result);
   if ($numRows == 0) {
    $feedTitle = mysqli_real_escape_string($db, $feedTitle);
    $feedURL = mysqli_real_escape_string($db, $feedURL);
    $feedDesc = mysqli_real_escape_string($db, $feedDesc);
    $sql = "INSERT INTO user_collection(user_id,title,url,description,date_added) VALUES($gUserId,'$feedTitle','$feedURL','$feedDesc',Now())";
    mysqli_query($db, $sql);
   }
  }
  echo "OK";
 }
}

?>
<ol class="breadcrumb my-3">
 <li class="breadcrumb-item w-100">
  <div class="text-left w-50"><h4 class="mt-1">Team Feeds</h4></div>
  <div class="text-right w-50"><button type="button" id="buttonAddCollection" class="hide btn btn-success" onclick="chkAddCollection()">Add selected to My Collection</button></div>
 </li>
</ol>

<?php
// Prepare the SQL statement
$sql = "SELECT email FROM user WHERE id = $gUserId";
$result = mysqli_query($db, $sql);
if ($result) {
    $numRows = mysqli_num_rows($result);

if ($numRows > 0) {
        while ($row = mysqli_fetch_assoc($result)) {
        	$gUserEmail = $row['email'];
        	}
    }
}

$gUserDomain = substr(strrchr($gUserEmail, "@"), 1);
if ($gUserDomain=='gmail.com' OR $gUserDomain=='yahoo.com' OR $gUserDomain=='zohomail.com' OR $gUserDomain=='protonmail.com' OR $gUserDomain=='outlook.com' OR $gUserDomain=='hotmail.com' OR $gUserDomain=='mail.com' OR $gUserDomain=='rediff.com' ){
	$gUserDomain = '';	
}
//echo $gUserDomain;

$sql = "
SELECT
    uc.id AS article_id,
    uc.title,
    uc.description,
    uc.likes,
    uc.date_added,
    uc.is_archive,
    u.full_name AS user_name,
    u.email
FROM
    user_collection uc
INNER JOIN
    user u ON uc.user_id = u.id
WHERE
    SUBSTRING(u.email, LOCATE('@', u.email) + 1) =  '$gUserDomain'
ORDER BY
    uc.date_added DESC;
";

$result = mysqli_query($db, $sql);

if ($result) {
    $numRows = mysqli_num_rows($result);

if ($numRows > 0) {
        while ($row = mysqli_fetch_assoc($result)) {
        	//$emailDisplay = $row['email'];
        	//echo $emailDisplay;
        	$articleId = $row['article_id'];
            $title = $row['title'];
            $description = truncateDescription($row['description'], 25); // Truncate description to 25 words
            $feedPublisher = $row['user_name']; // Updated to fetch the user's full name
            $feedDate = $row['date_added']; // Updated to fetch the date added
            $isExist = 0;
            ?>
            <div class="card p-0 mb-3 border-0" style="background-color:#f5ede7">
                <div class="panelFeed card-body">
                    
                    <h4><a href="article.php?article_id=<?= $articleId ?>" style="color:#f26522"><?= htmlentities($title) ?></a></h4>
                    <p style="color:#7d7d7d"><?= $description ?></p>
                    <div class="row">
                        <div class="col-12 col-md-6 text-center text-md-left"><?= htmlentities($feedPublisher) ?> &bull; <?= htmlentities($feedDate) ?></div>
                        <div class="data col-12 col-md-6 text-center text-md-left mt-2 m-md-0" data-feed-title="<?= htmlentities($feedTitle) ?>" data-feed-url="#" data-feed-publisher="<?= htmlentities($feedPublisher) ?>" data-feed-desc="<?= htmlentities($feedDesc) ?>">
                            <?php if ($isExist == 0) { ?>
                                <label class="btn-secondary m-0 px-2 py-1" style="user-select:none"><input type="checkbox" name="feedData" onclick="addCollection()"> My Collection</label>
                            <?php } else { ?>
                                <label class="float-right badge-warning m-0 px-3 py-1" style="user-select:none">My Collection</label>
                            <?php } ?>
                            
                            <br /><br />
                        </div>
                    </div>
                </div>
            </div>
            <?php
        }
    } else {
        echo "Nothing found here!. You should use your company email Id to be part of a team.";
    }
} else {
    echo "Error in query execution: " . mysqli_error($db);
}
?>

<script src="../assets/js/jquery-3.6.0.min.js"></script>
<script>
  $(document).ready(function() {
  // add click event listener to the button
  $(document).on('click', '.incrementButton', function()  {
    // get the id from the data attribute
    var id = $(this).data('id');
    
    // make an AJAX request to the server-side script
    $.ajax({
      type: 'POST',
      url: 'inc/increment.php',
      data: {id: id},
      success: function(likes) {
        // update the likes display on the page
        $('#likesDisplay').text('Likes: ' + likes);
      },
      error: function() {
        alert('Error: unable to increment likes.');
      }
    });
  });
});
</script>

</script>
<script type="text/javascript">
function CopyToClipboard(text) {
  var $temp = $("<textarea>");
  $("body").append($temp);
  $temp.val(text).select();
  document.execCommand("copy");
  $temp.remove();
  alert("Copied to clipboard!");
}
    </script>