OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/19/2025 10:07:16 AM	rwxr-xr-x
📄 delete.php	469 bytes	05/19/2025 10:07:16 AM	rw-r--r--
📄 export-csv.php	3.17 KB	05/19/2025 10:07:16 AM	rw-r--r--
📄 main.php	4.57 KB	05/19/2025 10:07:16 AM	rw-r--r--
📄 save.php	2.66 KB	05/19/2025 10:07:16 AM	rw-r--r--
📄 segmentate.php	14.72 KB	05/19/2025 10:07:16 AM	rw-r--r--

Editing: export-csv.php

<?php include('../functions.php');?>
<?php include('../login/auth.php');?>
<?php

/********************************/
$userID = get_app_info('main_userID');
$app = isset($_GET['i']) && is_numeric($_GET['i']) ? get_app_info('app') : exit;
$listID = isset($_GET['l']) && is_numeric($_GET['l']) ? mysqli_real_escape_string($mysqli, $_GET['l']) : exit;
$segID = isset($_GET['s']) && is_numeric($_GET['s']) ? mysqli_real_escape_string($mysqli, $_GET['s']) : exit;

//Check if sub user is trying to download CSVs from other brands
if(get_app_info('is_sub_user')) 
{
	$q = 'SELECT app FROM lists WHERE id = '.$listID;
	$r = mysqli_query($mysqli, $q);
	if ($r && mysqli_num_rows($r) > 0) while($row = mysqli_fetch_array($r)) $app_attached_to_listID = $row['app'];

if(get_app_info('app')!=get_app_info('restricted_to_app') || $app_attached_to_listID!=get_app_info('restricted_to_app'))
	{
		echo '<script type="text/javascript">window.location="'.addslashes(get_app_info('path')).'/list?i='.get_app_info('restricted_to_app').'"</script>';
		exit;
	}
}

//Get seg name to populate $filename
$q = 'SELECT name FROM seg WHERE id = '.$segID;
$r = mysqli_query($mysqli, $q);
if ($r && mysqli_num_rows($r) > 0)
{
    while($row = mysqli_fetch_array($r))
    {
		$seg_name = $row['name'];
		$seg_name = str_replace(' ', '-', $seg_name);
		$filename = strtolower($seg_name).'.csv';
    }  
}

$q = 'SELECT name, custom_fields FROM lists WHERE id = '.$listID.' AND userID = '.$userID;
$r = mysqli_query($mysqli, $q);
if ($r && mysqli_num_rows($r) > 0)
{
    while($row = mysqli_fetch_array($r))
    {
		$list_name = $row['name'];
		$custom_fields = $row['custom_fields'];
    }  
}

$q2 = 'SELECT subscribers.name, subscribers.email, subscribers.custom_fields FROM subscribers, subscribers_seg 
		WHERE subscribers.list = '.$listID.' AND subscribers_seg.seg_id = '.$segID.' AND subscribers.userID = '.$userID.' 
		AND subscribers_seg.subscriber_id = subscribers.id 
		ORDER BY subscribers.timestamp DESC';
$r2 = mysqli_query($mysqli, $q2);
if ($r2 && mysqli_num_rows($r2) > 0)
{
	$data = '';
    while($row = mysqli_fetch_array($r2))
    {
		$name = '"'.$row['name'].'"';
		$email = '"'.$row['email'].'"';
		$custom_values = $row['custom_fields'];
		$cf_value = '';
		
		if($custom_fields=='')
			$data .= $name.','.$email."\n";
		else
		{
			//format custom fields into CSV
			$custom_fields_array = explode('%s%', $custom_fields);
			$custom_values_array = explode('%s%', $custom_values);
			for($i=0;$i<count($custom_fields_array);$i++)
			{
				$cf_field_array = explode(':', $custom_fields_array[$i]);
				
				if($cf_field_array[1]=='Date' && $cf_field_array[1]!='')
					$cf_value .= '"'.parse_date_csv($custom_values_array[$i]).'",';
				else			
					$cf_value .= '"'.$custom_values_array[$i].'",';
			}
			$cf_value = substr($cf_value, 0, -1);
			$data .= $name.','.$email.','.$cf_value."\n";
		}
    }
    $data = substr($data, 0, -1);
    $data = str_replace("\r" , "" , $data);
}

if ( $data == "" )
{
    $data = "\n(0) Records Found!\n";                        
}

header("Content-type: application/octet-stream");
header("Content-Disposition: attachment; filename=\"$filename\"");
header("Pragma: no-cache");
header("Expires: 0");
print "$data";
 
?>