OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/31/2025 06:36:42 AM	rwxr-xr-x
📄 _get.section.collection.php	58.55 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 _get.section.create.php	21.82 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 _get.section.general.php	8.06 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 b.get.section.newsletter.php	18.36 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 bbget.section.curated.php	33.74 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 bget.section.newsletter.php	18.39 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 bget.section.request.article.php	6.04 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 chk.logged.in.php	1.16 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 chk.login.php	1.31 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 d_get.section.collection.php	57.93 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 d_get.section.create.php	21.87 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 fget.section.curated.php	17.04 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 fget.section.settings.php	33.55 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.account.php	8.55 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.analytics.php	11.45 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.collection copy.php	67.57 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.collection.php	69.19 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.community.php	7.7 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.curated.php	33.74 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.feed.php	6.87 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.genai.php	9.84 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.genaicreative.php	10.52 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.general.php	2.28 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.newsletter.php	18.94 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.request.article - Copy.php	5.82 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.request.article.php	16.31 KB	03/26/2025 03:48:10 AM	rw-r--r--
📄 get.section.settings.php	41.71 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 get.section.team.php	6.72 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 get.section.test.php	529 bytes	03/26/2025 03:48:11 AM	rw-r--r--
📄 get.section.utils.php	4.77 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 logout.php	428 bytes	03/26/2025 03:48:11 AM	rw-r--r--
📄 my-get.section.curated.php	18.56 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 old.get.section.genai.php	10.22 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 old1get.section.create.php	30.29 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 sendgrid.php	3.62 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 upload.php	2.4 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 z.get.section.feed.php	6.88 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zget.section.newsletter.php	17.97 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zget.section.settings.php	34.6 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zzget.section.curated.php	13.95 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 zzget.section.genai.php	12.7 KB	03/26/2025 03:48:11 AM	rw-r--r--

Editing: get.section.utils.php

<?
// Cream: Utils

require_once '../assets/php/validate.logged.php';
require_once '../inc/config.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Show Notifications
if ($act == 'showNotifications') {
?>
  <ol class="breadcrumb my-3">
    <li class="breadcrumb-item w-100">
      <div class="text-left w-50">
        <h4 class="mt-1">Notification Center</h4>
      </div>
    </li>
  </ol>
  <div class="row mb-4 p-2">
    <div class="col">
      You have no notifications!
    </div>
  </div>
<?
}

// Cream Shared
if ($act == 'creamShared') {
  $shareId = isset($_POST['shareId']) ? $_POST['shareId'] : '';
  $feedId = isset($_POST['feedId']) ? $_POST['feedId'] : '';
  $feedTitle = isset($_POST['feedTitle']) ? $_POST['feedTitle'] : '';
  $feedURL = isset($_POST['feedURL']) ? $_POST['feedURL'] : '';
  $feedDesc = isset($_POST['feedDesc']) ? $_POST['feedDesc'] : '';
  if ($shareId != '') {
    if ($feedId != '') {
      $sql = "SELECT title,url,description,cover_img FROM user_collection WHERE id=$feedId AND user_id=$gUserId";
      $result = mysqli_query($db, $sql);
      $numRows = mysqli_num_rows($result);
      if ($numRows > 0) {
        $row = mysqli_fetch_assoc($result);
        $feedTitle = $row['title'];
        $feedURL = $row['url'];
        $feedDesc = $row['description'];
        $coverImg = $row['cover_img'];
        if (!empty($feedTitle)) {
          $feedTitle = $db->real_escape_string($feedTitle);
        }

if (!empty($feedURL)) {
          $feedURL = $db->real_escape_string($feedURL);
        }

if (!empty($feedDesc)) {
          $feedDesc = $db->real_escape_string($feedDesc);
        }
        $sql = "INSERT INTO user_collection(user_id,share_user_id,share_collection_id,title,url,description,cover_img,date_added) VALUES($shareId,$gUserId,$feedId,'$feedTitle','$feedURL','$feedDesc','$coverImg',Now())";
        mysqli_query($db, $sql);
      }
    } else if ($feedTitle != '') {
      $sql = "SELECT url FROM user_collection WHERE url='$feedURL' AND share_user_id=$gUserId AND user_id=$shareId";
      $result = mysqli_query($db, $sql);
      $numRows = mysqli_num_rows($result);
      if ($numRows == 0) {
        if (!empty($feedTitle)) {
          $feedTitle = $db->real_escape_string($feedTitle);
        }
        if (!empty($feedURL)) {
          $feedURL = $db->real_escape_string($feedURL);
        }
        $feedDesc = urldecode($feedDesc);
        if (!empty($feedDesc)) {
          $feedDesc = $db->real_escape_string($feedDesc);
        }
        $sql = "INSERT INTO user_collection(user_id,share_user_id,title,url,description,date_added) VALUES($shareId,$gUserId,'$feedTitle','$feedURL','$feedDesc',Now())";
        mysqli_query($db, $sql);
      }
    }
    echo "OK";
  }
}

// Show Cream Sharing
if ($act == 'showCreamShare') {
  $feedId = isset($_POST['id']) ? $_POST['id'] : '';
  $feedTitle = isset($_POST['title']) ? $_POST['title'] : '';
  $feedURL = isset($_POST['url']) ? $_POST['url'] : '';
  $feedDesc = isset($_POST['desc']) ? $_POST['desc'] : '';
?>
  <div class="popup" style="width:420px">
    <div class="widget">
      <form id="frmAdd" name="frmAdd">
        <div class="card">
          <div class="card-header bg-dark">
            <h5 class="mb-0 text-light">Cream<i>Share</i></h5>
          </div>
        </div>
        <div id="widget_B" style="padding:15px 25px">
          <?
          if ($gUserPlan == 0) {
            echo '<div class="alert alert-success" role="alert">This feature is only available in <b>Pro</b> plan!<br>Go to My Account to upgrade.</div>';
          } else {
          ?>
            <div class="form-group">
              <label for="feedURL">Cream User</label>
              <input type="email" class="form-control" id="shareEmail" name="shareEmail" maxlength="100" />
              <small class="form-text text-muted">Please enter the Cream login to share with</small>
            </div>
        </div>
        <div id="widget_F" style="border-top:1px solid #ebedf2;padding:20px 10px;">
          <div class="col">
            <input type="hidden" id="feedId" name="feedId" value="<?= $feedId ?>" />
            <input type="hidden" id="feedTitle" name="feedTitle" value="<?= addslashes($feedTitle) ?>" />
            <input type="hidden" id="feedURL" name="feedURL" value="<?= $feedURL ?>" />
            <input type="hidden" id="feedDesc" name="feedDesc" value="<?= urlencode($feedDesc) ?>" />
            <button type="submit" class="btn btn-primary" onclick="return chkCreamShare()">Share</button>
            <div id="panelStatus" class="float-right text-sm" style="margin-top:5px" align="right"></div>
          </div>
        </div>
      <? } ?>
      </form>
    </div>
  </div>
<?
}