OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/31/2025 06:36:42 AM	rwxr-xr-x
📄 .htaccess	643 bytes	03/26/2025 03:48:11 AM	rw-r--r--
📄 _compatibility.php	3.83 KB	03/26/2025 03:48:13 AM	rw-r--r--
📄 _install.php	7.3 KB	03/26/2025 03:48:13 AM	rw-r--r--
📁 api	-	03/26/2025 04:20:09 AM	rwxr-xr-x
📄 app.php	33.77 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 autoresponders-create.php	23.29 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 autoresponders-edit.php	28.89 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 autoresponders-emails.php	26.81 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 autoresponders-list.php	15.85 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 autoresponders-report.php	40.18 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 autoresponders.php	77.28 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 blacklist-blocked-domains.php	13.39 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 blacklist-suppression.php	13.34 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 campaigns-rss.php	8.35 KB	03/26/2025 03:48:11 AM	rw-r--r--
📁 certs	-	03/26/2025 04:15:54 AM	rwxr-xr-x
📄 clear-queue.php	996 bytes	03/26/2025 03:48:11 AM	rw-r--r--
📄 confirm.php	9.34 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 create-template.php	3.99 KB	03/26/2025 03:48:11 AM	rw-r--r--
📄 create.php	15.92 KB	03/26/2025 03:48:12 AM	rw-r--r--
📁 css	-	03/26/2025 04:20:09 AM	rwxr-xr-x
📄 custom-fields.php	8.5 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 delete-from-list.php	5.29 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 detect-table-conflicts.php	2.47 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 edit-brand.php	57.32 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 edit-list.php	20.97 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 edit-template.php	4.65 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 edit.php	19.04 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 eula.txt	6.5 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 housekeeping-inactive.php	12.54 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 housekeeping-unconfirmed.php	14.01 KB	03/26/2025 03:48:12 AM	rw-r--r--
📁 img	-	03/26/2025 04:15:54 AM	rwxr-xr-x
📄 import-csv.php	18.68 KB	03/26/2025 03:48:12 AM	rw-r--r--
📁 includes	-	03/26/2025 04:20:12 AM	rwxr-xr-x
📄 index.php	18.77 KB	03/26/2025 03:48:12 AM	rw-r--r--
📁 js	-	03/26/2025 04:20:15 AM	rwxr-xr-x
📄 l.php	10.63 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 list.php	12.3 KB	03/26/2025 03:48:12 AM	rw-r--r--
📁 locale	-	03/26/2025 04:21:20 AM	rwxr-xr-x
📄 login.php	4.84 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 logout.php	133 bytes	03/26/2025 03:48:12 AM	rw-r--r--
📄 new-brand.php	46.35 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 new-list.php	1.98 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 payment.php	7.41 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 phpinfo.php	1.39 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 r.php	11 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 reconsent-success.php	3.91 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 remove-duplicates.php	2.94 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 report.php	48.79 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 reports.php	10.7 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 reset-cron.php	999 bytes	03/26/2025 03:48:12 AM	rw-r--r--
📄 rules.php	37.35 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 scheduled.php	39.51 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 search-all-brands.php	7.07 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 search-all-lists.php	10.68 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 search-campaigns.php	30.29 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 segment.php	45.8 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 segments-list.php	6.84 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 send-to.php	57.72 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 sending.php	8.9 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 settings.php	41.29 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 subscribe.php	29.26 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 subscribers.php	44.09 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 subscription.php	9.01 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 t.php	4.22 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 template-preview.php	4.55 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 templates.php	7.35 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 two-factor.php	4.33 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 unsubscribe-from-list.php	5.33 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 unsubscribe-success.php	3.9 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 unsubscribe.php	16.19 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 update-list.php	13.88 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 update-segments.php	3.09 KB	03/26/2025 03:48:12 AM	rw-r--r--
📁 uploads	-	03/26/2025 04:21:20 AM	rwxr-xr-x
📄 verification-status.php	3.63 KB	03/26/2025 03:48:12 AM	rw-r--r--
📄 w.php	17.76 KB	03/26/2025 03:48:13 AM	rw-r--r--
📄 webhooks-log.php	4.28 KB	03/26/2025 03:48:13 AM	rw-r--r--

Editing: payment.php

<?php 
	include('includes/config.php');
	include('includes/helpers/locale.php');
	//--------------------------------------------------------------//
	function dbConnect() { //Connect to database
	//--------------------------------------------------------------//
	    // Access global variables
	    global $mysqli;
	    global $dbHost;
	    global $dbUser;
	    global $dbPass;
	    global $dbName;
	    global $dbPort;
	    
	    // Attempt to connect to database server
	    if(isset($dbPort)) $mysqli = new mysqli($dbHost, $dbUser, $dbPass, $dbName, $dbPort);
	    else $mysqli = new mysqli($dbHost, $dbUser, $dbPass, $dbName);
	
	    // If connection failed...
	    if ($mysqli->connect_error) {
	        fail("<!DOCTYPE html><html><head><meta http-equiv=\"Content-Type\" content=\"text/html;charset=utf-8\"/><link rel=\"Shortcut Icon\" type=\"image/ico\" href=\"/img/favicon.png\"><title>"._('Can\'t connect to database')."</title></head><style type=\"text/css\">body{background: #ffffff;font-family: Helvetica, Arial;}#wrapper{background: #f2f2f2;width: 300px;height: 110px;margin: -140px 0 0 -150px;position: absolute;top: 50%;left: 50%;-webkit-border-radius: 5px;-moz-border-radius: 5px;border-radius: 5px;}p{text-align: center;line-height: 18px;font-size: 12px;padding: 0 30px;}h2{font-weight: normal;text-align: center;font-size: 20px;}a{color: #000;}a:hover{text-decoration: none;}</style><body><div id=\"wrapper\"><p><h2>"._('Can\'t connect to database')."</h2></p><p>"._('There is a problem connecting to the database. Please try again later.')."</p></div></body></html>");
	    }
	    
	    global $charset; mysqli_set_charset($mysqli, isset($charset) ? $charset : "utf8");
	    
	    return $mysqli;
	}
	//--------------------------------------------------------------//
	function fail($errorMsg) { //Database connection fails
	//--------------------------------------------------------------//
	    echo $errorMsg;
	    exit;
	}
	// connect to database
	dbConnect();
?>
<?php 
	define('PAYPAL_URL', 'https://www.paypal.com/us/cgi-bin/webscr');
	//define('PAYPAL_URL', 'https://www.sandbox.paypal.com/us/cgi-bin/webscr');
	
	//POST data
	$schedule = $_POST['pay-and-schedule'];
	$cron = $_POST['cron'];
	
	if($schedule=='true')
	{
		$timezone = $_POST['timezone'];
		date_default_timezone_set($timezone);
		$campaign_id = is_numeric($_POST['campaign_id']) ? $_POST['campaign_id'] : exit;
		$app = is_numeric($_POST['app']) ? $_POST['app'] : exit;
		$email_list = mysqli_real_escape_string($mysqli, $_POST['email_lists']);
		$email_list_excl = mysqli_real_escape_string($mysqli, $_POST['email_lists_excl']);
		$email_lists_segs = mysqli_real_escape_string($mysqli, $_POST['email_lists_segs']);
		$email_lists_segs_excl = mysqli_real_escape_string($mysqli, $_POST['email_lists_segs_excl']);
		$paypal_email = $_POST['paypal2'];
		$total = $_POST['grand_total_val2'];		
		$send_date = mysqli_real_escape_string($mysqli, $_POST['send_date']);
		$hour = mysqli_real_escape_string($mysqli, $_POST['hour']);
		$min = mysqli_real_escape_string($mysqli, $_POST['min']);
		$ampm = mysqli_real_escape_string($mysqli, $_POST['ampm']);
		$the_date = strtotime("$send_date $hour.$min$ampm");
		$total_recipients = mysqli_real_escape_string($mysqli, $_POST['total_recipients2']);
	}
	else
	{
		$campaign_id = mysqli_real_escape_string($mysqli, $_POST['cid']);
		$app = mysqli_real_escape_string($mysqli, $_POST['uid']);
		$email_list = mysqli_real_escape_string($mysqli, $_POST['in_list']);
		$email_list_excl = mysqli_real_escape_string($mysqli, $_POST['ex_list']);
		$email_lists_segs = mysqli_real_escape_string($mysqli, $_POST['in_list_seg']);
		$email_lists_segs_excl = mysqli_real_escape_string($mysqli, $_POST['ex_list_seg']);
		$paypal_email = $_POST['paypal'];
		$total = $_POST['grand_total_val'];
		$total_recipients = mysqli_real_escape_string($mysqli, $_POST['total_recipients']);
	}
	
	//Set language
	$q = "SELECT login.language FROM campaigns, login WHERE campaigns.id = '$campaign_id' AND login.app = campaigns.app";
	$r = mysqli_query($mysqli, $q);
	if ($r && mysqli_num_rows($r) > 0) while($row = mysqli_fetch_array($r)) $language = $row['language'];
	set_locale($language);

//get currency
	$q = "SELECT currency FROM apps WHERE id = '$app'";
	$r = mysqli_query($mysqli, $q);
	if ($r)
	{
	    while($row = mysqli_fetch_array($r))
	    {
			$currency = $row['currency'];
	    }  
	}
	
	//get campaign name
	$q = "SELECT title FROM campaigns WHERE id = '$campaign_id'";
	$r = mysqli_query($mysqli, $q);
	if ($r)
	{
	    while($row = mysqli_fetch_array($r))
	    {
			$title = $row['title'];
	    }  
	}
?>
<html>  
<head>
<title><?php echo _('Sending you to PayPal');?>..</title>
</head>
<body style="text-align:center;position: absolute; top: 50%; left: 50%;	margin-top: -150px;	margin-left: -130px;"> 
<form id="form" action="<?php echo PAYPAL_URL;?>" method="post" name="_xclick"> 
 
<div> 
<p style="font-size: 12px; font-family: Helvetica, Verdana, Arial, sans-serif; text-shadow: 1px 1px white; color: #424749; background-color:#E6E6E6; padding-left:10px; padding:10px; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-bottom: 1px #D0D0D0 solid; -webkit-border-radius: 5px; -moz-border-radius: 5px; border-radius: 5px;"><?php echo _('Sending you to PayPal, one moment please');?>..</p>
<INPUT TYPE="hidden" name="charset" value="utf-8"> 
<input type="hidden" name="cmd" value="_xclick">
<input type="hidden" name="business" value="<?php echo htmlentities($paypal_email, ENT_QUOTES);?>">
<input type="hidden" name="currency_code" value="<?php echo htmlentities($currency, ENT_QUOTES);?>">
<input type="hidden" name="no_shipping" value="1">
<input type="hidden" name="item_name" value="<?php echo _('Campaign for');?> <?php echo htmlentities($title, ENT_QUOTES);?>">
<?php if($schedule=='true'):?>
<input type="hidden" name="return" value="<?php echo htmlentities(APP_PATH, ENT_QUOTES);?>/sending?i=<?php echo htmlentities($app, ENT_QUOTES);?>&c=<?php echo htmlentities($campaign_id, ENT_QUOTES);?>&e=<?php echo htmlentities($email_list, ENT_QUOTES);?>&ex=<?php echo htmlentities($email_list_excl, ENT_QUOTES);?>&e_segs=<?php echo htmlentities($email_lists_segs, ENT_QUOTES);?>&ex_segs=<?php echo htmlentities($email_lists_segs_excl, ENT_QUOTES);?>&s=true&date=<?php echo htmlentities($the_date, ENT_QUOTES);?>&timezone=<?php echo htmlentities($timezone, ENT_QUOTES);?>&recipients=<?php echo htmlentities($total_recipients, ENT_QUOTES);?>">
<?php else:?>
<input type="hidden" name="return" value="<?php echo htmlentities(APP_PATH, ENT_QUOTES);?>/sending?i=<?php echo htmlentities($app, ENT_QUOTES);?>&c=<?php echo htmlentities($campaign_id, ENT_QUOTES);?>&e=<?php echo htmlentities($email_list, ENT_QUOTES);?>&ex=<?php echo htmlentities($email_list_excl, ENT_QUOTES);?>&e_segs=<?php echo htmlentities($email_lists_segs, ENT_QUOTES);?>&ex_segs=<?php echo htmlentities($email_lists_segs_excl, ENT_QUOTES);?>&cr=<?php echo htmlentities($cron, ENT_QUOTES);?>&recipients=<?php echo htmlentities($total_recipients, ENT_QUOTES);?>">
<?php endif;?>
<input type="hidden" name="cancel_return" value="<?php echo htmlentities(APP_PATH, ENT_QUOTES);?>/send-to?i=<?php echo htmlentities($app, ENT_QUOTES);?>&c=<?php echo htmlentities($campaign_id, ENT_QUOTES);?>">
<input type="hidden" name="amount" value="<?php echo htmlentities($total, ENT_QUOTES);?>">
</div>
 
<noscript> 
<br/>
<input type="submit" value="<?php echo _('Click here to proceed');?> >>" /> 
</noscript> 
 
</form> 
 
<script> 
document.getElementById('form').submit();
</script> 
 
</body> 
</html>