OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	11/07/2024 07:55:42 AM	rwxr-xr-x
📄 b.get.section.curated.php	17.96 KB	08/16/2024 05:40:32 AM	rw-r--r--
📄 b.get.section.newsletter.php	18.39 KB	07/09/2024 11:59:36 AM	rw-r--r--
📄 bchk.login.php	1.84 KB	08/01/2024 11:55:32 AM	rw-r--r--
📄 chk.logged.in.php	1.16 KB	01/10/2021 12:30:27 PM	rw-r--r--
📄 chk.login.php	1.84 KB	08/07/2024 10:43:41 AM	rw-r--r--
📁 eyecandy	-	08/15/2024 04:29:45 AM	rwxr-xr-x
📄 get.section.account.php	8.47 KB	02/10/2022 03:15:36 PM	rw-r--r--
📄 get.section.admin.php	16.74 KB	08/02/2024 11:49:35 AM	rw-r--r--
📄 get.section.analytics.php	11.45 KB	07/09/2024 05:04:07 AM	rw-r--r--
📄 get.section.collection.php	58.52 KB	05/23/2024 04:31:24 AM	rw-r--r--
📄 get.section.community.php	7.71 KB	09/09/2024 09:46:43 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	05/22/2024 11:08:28 AM	rw-r--r--
📄 get.section.curated - Copy.php	37.34 KB	09/12/2024 12:29:57 PM	rw-r--r--
📄 get.section.curated.php	40.16 KB	09/13/2024 05:15:16 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	02/10/2022 02:58:26 PM	rw-r--r--
📄 get.section.feed.php	7.42 KB	07/28/2024 01:53:28 PM	rw-r--r--
📄 get.section.genai.php	12.72 KB	07/15/2024 07:24:13 AM	rw-r--r--
📄 get.section.genaicreative.php	12.74 KB	07/15/2024 07:24:13 AM	rw-r--r--
📄 get.section.general.php	9.31 KB	08/22/2023 09:34:25 AM	rw-r--r--
📄 get.section.newsletter.php	18.42 KB	07/22/2024 12:12:42 PM	rw-r--r--
📄 get.section.request.article.php	5.82 KB	02/27/2021 02:27:58 PM	rw-r--r--
📄 get.section.settings.php	21.15 KB	12/28/2021 01:58:50 PM	rw-r--r--
📄 get.section.team.php	6.73 KB	05/23/2024 04:45:44 AM	rw-r--r--
📄 get.section.utils.php	4.1 KB	06/26/2021 06:06:51 AM	rw-r--r--
📄 logout.php	428 bytes	08/16/2020 11:22:29 AM	rw-r--r--
📄 sendgrid.php	3.62 KB	03/09/2021 04:01:36 AM	rw-r--r--
📄 upload.php	2.4 KB	08/22/2020 01:33:43 PM	rw-r--r--
📄 zget.section.curated.php	21.2 KB	08/27/2024 12:24:10 PM	rw-r--r--
📄 zzget.section.curated.php	23.64 KB	08/29/2024 08:24:32 AM	rw-r--r--

Editing: get.section.account.php

<?
// Cream: My Account

require_once '../inc/validate.logged.php';
require_once '../inc/config.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Check if already exists on update
if ($act == 'chkExist') {
 $chkEmail = isset($_POST['email']) ? $_POST['email'] : '';
 $sql = "SELECT id FROM user WHERE email='$chkEmail' AND id<>$gUserId";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) {
  echo 'OK';
 }
}

// Update Profile
if ($act == 'updateProfile') {
 $userName = isset($_POST['userName']) ? $_POST['userName'] : '';
 $userEmail = isset($_POST['userEmail']) ? $_POST['userEmail'] : '';
 $userCompany = isset($_POST['userCompany']) ? $_POST['userCompany'] : '';
 $userCategoryId = isset($_POST['userCategoryId']) ? $_POST['userCategoryId'] : '';
 $userWebsite = isset($_POST['userWebsite']) ? $_POST['userWebsite'] : '';
 if ($userName != '' && $userEmail != '') {
  $sql = "UPDATE user SET full_name='$userName',email='$userEmail',company='$userCompany',category_id=$userCategoryId,website='$userWebsite',date_modified=Now() WHERE id=$gUserId";
  mysqli_query($db, $sql);
  echo "OK";
 }
}

// Update Password
if ($act == 'updatePass') {
 $userPassCurrent = isset($_POST['userPassCurrent']) ? $_POST['userPassCurrent'] : '';
 $userPassNew = isset($_POST['userPassNew']) ? $_POST['userPassNew'] : '';
 if ($userPassCurrent != '' && $userPassNew != '') {
  $sql = "SELECT id FROM user WHERE id=$gUserId AND password='$userPassCurrent'";
  $result = mysqli_query($db, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows == 0) {
   echo "IncorrectPassword";
   die();
  }
  $sql = "UPDATE user SET password='$userPassNew',date_modified=Now() WHERE id=$gUserId";
  mysqli_query($db, $sql);
  echo "OK";
 }
}

// Default
if ($act == '') {
 $sql = "SELECT * FROM user WHERE id=$gUserId";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $userName = $row['full_name'];
  $userCompany = $row['company'];
  $userEmail = $row['email'];
  $userWebsite = $row['website'];
  $userCategoryId = $row['category_id'];
?>
<ol class="breadcrumb my-3">
 <li class="breadcrumb-item"><h4 class="m-0">My Account</h4></li>
</ol>
<div class="row mb-4">
 <div class="col">
  <ul class="nav nav-tabs mb-4">
   <li class="nav-item"><a class="nav-link active" data-toggle="tab" href="#profile" role="tab" onclick="$('#panelStatus').html('')">Profile</a></li>
   <li class="nav-item"><a class="nav-link" data-toggle="tab" href="#password" role="tab" onclick="$('#panelStatus').html('')">Password</a></li>
  </ul>
  <div class="tab-content m-3">
   <div class="tab-pane fade show active" id="profile" role="tabpanel">
    <div class="form-group row">
     <label class="col-sm-2 col-form-label">Current Plan</label>
     <div class="col-sm-12 col-md-6 mt-2">
<? if ($gUserPlan == 1) { ?>
      Pro
<? } else { ?>
      Free 
      <div id="zf-widget-root-id"></div>
<? } ?>
     </div>
    </div>
<?
  if ($gUserSubdomain <> '') {
   $landingPageURL = "https://$gUserSubdomain.knoblycream.com/";
  } else {
   $landingPageURL = "https://www.knoblycream.com/$gUserId/showcase";
  }
?>
    <div class="form-group row">
     <label class="col-sm-2 col-form-label">Showcase Page</label>
     <div class="col-sm-12 col-md-6 mt-2"><a href="<?=$landingPageURL?>" target="_blank"><?=$landingPageURL?></a></div>
    </div>
    <div class="form-group row">
     <label for="inputPassword" class="col-sm-2 col-form-label">Full Name</label>
     <div class="col-sm-12 col-md-6">
      <input type="text" class="form-control" id="userName" name="userName" value="<?=$userName?>" maxlength="100" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userEmail" class="col-sm-2 col-form-label">Email</label>
     <div class="col-sm-12 col-md-6">
      <input type="email" class="form-control" id="userEmail" name="userEmail" value="<?=$userEmail?>" maxlength="100" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userCompany" class="col-sm-2 col-form-label">Company</label>
     <div class="col-sm-12 col-md-6">
      <input type="text" class="form-control" id="userCompany" name="userCompany" value="<?=$userCompany?>" maxlength="100" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userCategoryId" class="col-sm-2 col-form-label">Business Type</label>
     <div class="col-sm-12 col-md-6">
      <select id="userCategoryId" name="userCategoryId" class="form-control">
       <option value="">--[select]--
<?
 $sql = "SELECT id,category FROM category ORDER BY category";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  for ($i=0;$i<$numRows;$i++) {
   $row = mysqli_fetch_array($result);
   $tmpCategoryId = $row['id'];
   $tmpCategoryName = $row['category'];
   if ($userCategoryId == $tmpCategoryId) {
    echo '   <option value="' . $tmpCategoryId . '" SELECTED>' . $tmpCategoryName;
   } else {
    echo '   <option value="' . $tmpCategoryId . '">' . $tmpCategoryName;
   }
  }
 }
?>
       <option value="0">Others
      </select>
     </div>
    </div>
    <div class="form-group row">
     <label for="userWebsite" class="col-sm-2 col-form-label">Website</label>
     <div class="col-sm-12 col-md-6">
      <input type="text" class="form-control" id="userWebsite" name="userWebsite" value="<?=$userWebsite?>" maxlength="100" />
      <small class="form-text text-muted">Please enter the URL with http:// or https://</small>
     </div>
    </div>
    <div class="form-group row mt-4">
     <label class="col-sm-2 col-form-label"></label>
     <div class="col-sm-12 col-md-6">
      <button class="btn btn-primary" onclick="return chkUpdateProfile()">Update Profile</button>
     </div>
    </div>
   </div>
   <div class="tab-pane fade" id="password" role="tabpanel">
    <div class="form-group row">
     <label for="userPassCurrent" class="col-sm-2 col-form-label">Current password</label>
     <div class="col-sm-12 col-md-3">
      <input type="password" class="form-control" id="userPassCurrent" name="userPassCurrent" maxlength="20" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userPassNew1" class="col-sm-2 col-form-label">New password</label>
     <div class="col-sm-12 col-md-3">
      <input type="password" class="form-control" id="userPassNew1" name="userPassNew1" maxlength="20" />
     </div>
    </div>
    <div class="form-group row">
     <label for="userPassNew2" class="col-sm-2 col-form-label">Retype Password</label>
     <div class="col-sm-12 col-md-3">
      <input type="password" class="form-control" id="userPassNew2" name="userPassNew2" maxlength="20" />
     </div>
    </div>
    <div class="form-group row mt-4">
     <label class="col-sm-2 col-form-label"></label>
     <div class="col-sm-12 col-md-3">
      <button class="btn btn-primary" onclick="return chkUpdatePassword()">Update Password</button>
     </div>
    </div>
   </div>
   <div id="panelStatus" class="mt-4"></div>
  </div>
 </div>
</div>
<script type="text/javascript">
$(function() {
 $('#btnGoPro').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.general.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'showGoPro'
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
 var pricingTableComponentOptions = {id: 'zf-widget-root-id', product_id: '2-a22c0be31501979fdf6d95705ea43113bde88338aa57ecb5f61153ce5d3090c3f48d7e9af6c8ae9e58bcad6fd428a6fde667b7eb5ddc5b2a318fde6c950d2d25', template: 'combo_pro', most_popular_plan: '', is_group_by_frequency: true, group_options: [ { frequency: 'Monthly', frequency_recurrence_value: '1_months', most_popular_plan: '', plans: [ { plan_code: 'M' }, ] }, { frequency: 'Yearly', frequency_recurrence_value: '1_years', most_popular_plan: '', plans: [ { plan_code: 'A' }, ] }, ], plans: [ ], theme: { color: '#f58020', theme_color_light: ''}, button_text: 'Upgrade to Pro Plan', product_url: 'https://subscriptions.zoho.com', price_caption: '', language_code: 'en', open_inSameTab: false }; ZFWidget.init('zf-pricing-table', pricingTableComponentOptions);
});
</script>
<?
 }
}
?>