OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	09/23/2024 04:31:31 AM	rwxr-xr-x
📄 .browserslistrc	208 bytes	09/23/2024 04:31:33 AM	rw-r--r--
📄 .gitignore	42 bytes	09/23/2024 04:31:33 AM	rw-r--r--
📄 .htaccess	803 bytes	09/23/2024 04:31:33 AM	rw-r--r--
📄 .htaccess.swp	12 KB	09/23/2024 04:31:33 AM	rw-r--r--
📄 .travis.yml	199 bytes	09/23/2024 04:31:34 AM	rw-r--r--
📁 .well-known	-	09/23/2024 04:31:45 AM	rwxr-xr-x
📁 API	-	09/23/2024 04:31:47 AM	rwxr-xr-x
📄 about.html	3.05 KB	09/23/2024 04:31:34 AM	rw-r--r--
📄 activate.php	2.56 KB	09/23/2024 04:31:34 AM	rw-r--r--
📄 article.php	17.24 KB	09/23/2024 04:31:35 AM	rw-r--r--
📁 arvindfacebook	-	09/23/2024 04:31:50 AM	rwxr-xr-x
📁 audio	-	09/23/2024 04:39:55 AM	rwxr-xr-x
📄 back-dashboard.php	8.33 KB	09/23/2024 04:31:35 AM	rw-r--r--
📄 barticle.php	16.58 KB	09/23/2024 04:31:35 AM	rw-r--r--
📄 bin_article.php	6.62 KB	09/23/2024 04:31:36 AM	rw-r--r--
📄 bnewsletter.php	1.33 KB	09/23/2024 04:31:36 AM	rw-r--r--
📄 bview.php	14.07 KB	09/23/2024 04:31:36 AM	rw-r--r--
📄 contact.html	2.79 KB	09/23/2024 04:31:37 AM	rw-r--r--
📄 dashboard.php	12.06 KB	09/23/2024 04:31:37 AM	rw-r--r--
📄 down.html	1.23 KB	09/23/2024 04:31:37 AM	rw-r--r--
📄 fb_access.php	855 bytes	09/23/2024 04:31:38 AM	rw-r--r--
📄 gen2_1.php	45.17 KB	09/23/2024 04:31:38 AM	rw-r--r--
📄 geo_location.php	3.69 KB	09/23/2024 04:31:39 AM	rw-r--r--
📄 index.html	14 KB	09/23/2024 04:31:39 AM	rw-r--r--
📄 info.php	14 bytes	09/23/2024 04:31:39 AM	rw-r--r--
📄 more.php	7.36 KB	09/23/2024 04:31:40 AM	rw-r--r--
📄 newsletter.php	1.33 KB	09/23/2024 04:31:40 AM	rw-r--r--
📄 old1dashboard.php	8.4 KB	09/23/2024 04:31:40 AM	rw-r--r--
📄 olddashboard.php	11.58 KB	09/23/2024 04:31:40 AM	rw-r--r--
📄 privacy.html	9.99 KB	09/23/2024 04:31:41 AM	rw-r--r--
📄 refund.html	7.34 KB	09/23/2024 04:31:41 AM	rw-r--r--
📄 reset.html	3.01 KB	09/23/2024 04:31:41 AM	rw-r--r--
📄 showcase.php	7.93 KB	09/23/2024 04:31:41 AM	rw-r--r--
📄 signup.html	8.08 KB	09/23/2024 04:31:42 AM	rw-r--r--
📄 splash.html	1.11 KB	09/23/2024 04:31:42 AM	rw-r--r--
📄 test.email.php	2.5 KB	09/23/2024 04:31:42 AM	rw-r--r--
📄 test.php	969 bytes	09/23/2024 04:31:42 AM	rw-r--r--
📄 usage.html	30.88 KB	09/23/2024 04:31:43 AM	rw-r--r--
📄 view.php	12.99 KB	09/23/2024 04:31:43 AM	rw-r--r--
📄 zview.php	16.09 KB	09/23/2024 04:31:43 AM	rw-r--r--

Editing: showcase.php

<!doctype html>
<?
include 'inc/config.php';

$id = isset($_GET["id"]) ? $_GET["id"] : '';
$domain = isset($_GET["domain"]) ? $_GET["domain"] : '';

$sql = '';
if ($id <> '') $sql = "SELECT id,full_name,company,website,news_title,news_logo,subdomain,is_side_panel,side_panel_content FROM user WHERE id=$id";
if ($domain <> '') $sql = "SELECT id,full_name,company,website,news_title,news_logo,subdomain,is_side_panel,side_panel_content FROM user WHERE subdomain='$domain'";

if ($sql <> '') {
 $result = mysqli_query($db, $sql);
 $row = $result->fetch_assoc();
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) die();

$serverName = $_SERVER['SERVER_NAME'];
 $id = $row['id'];
 $user = $row['full_name'];
 $companyName = $row['company'];
 $website = strtolower($row['website']);
 $newsTitle = $row['news_title'];
 $newsLogo = $row['news_logo'];
 $userSubdomain = $row['subdomain'];
 $userSidePanel = $row['is_side_panel'];
 $userSidePanelContent = $row['side_panel_content'];
 $userSidePanelContent = str_replace('<img src="data/','<img src="https://' . $serverName . '/data/',$userSidePanelContent);
 if (strpos($website, 'http') === false) $website = "http://$website";

$currSubdomain = explode('.', $_SERVER['HTTP_HOST'])[0];
 if ($currSubdomain <> 'knoblycream' && $currSubdomain <> 'www' && $currSubdomain <> 'localhost') {
  if ($userSubdomain <> $currSubdomain) {
   echo '<br><br><center>You are not allowed to acccess this resource!</center>';
   die();
  }
 }
?>
<html lang="en">
<head>
<title><?=$companyName?></title>
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />

<meta property="og:url" content="https://<?=$serverName?>/" />
<meta property="og:type" content="website" />
<meta property="og:title" content="<?=$companyName?>" />
<meta property="og:description" content="" />
<meta property="og:image:secure-url" itemprop="image" content="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" />

<meta property="twitter:url" content="https://<?=$serverName?>/" />
<meta name="twitter:card" content="summary" />
<meta name="twitter:title" content="<?=$companyName?>" />
<meta name="twitter:description" content="" />
<meta name="twitter:image" content="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" />

}
.boxItem {
	margin: 15px 0;
	padding: 20px;
	border-color: 1px rgba(0, 0, 0, 0.75) solid;
	border-radius: 8px;
	box-shadow: 0px 1px 3px rgba(0, 0, 0, 0.2);
	background-color: #fff;
}
.panelContent img {
	width: auto;
	height: auto;
	max-width: 100%;
}
</style>
</head>
<body>
<div class="container">

<header class="blog-header py-3 border-bottom">
 <div class="row flex-nowrap justify-content-between align-items-center">
  <div class="col-8 pt-1">
<? if ($newsLogo <> '') { ?>
   <a class="text-muted" href="<?=$website?>"><img class="mx-auto" width="256px" src="https://<?=$serverName?>/data/logos/<?=$newsLogo?>" /></a>
<? } ?>
   <h6 class="mt-1" style="color:#9e9e9e"><?=$user?> | <?=$companyName?></h6>
  </div>
  <div class="col-4 text-right">
  </div>
 </div>
</header>

<? 
 // For KBKB
 if ($userSubdomain == 'kbkb') {
?>
  <iframe width="300" height="260" src="https://liveindex.org/widget/300-light.php" frameborder="0" hspace="0" vspace="0" scrolling="0" style="background:transparent" ></iframe>
<? } ?>

<? 
 // For KBKB
 if ($userSubdomain == 'kannadanaadu') {
?>
  <iframe width="640" height="360" src="https://www.youtube.com/embed/kzK4zmQQSoc" title="Karnataka Legislative Assembly Session Day 05 Live: ಕರ್ನಾಟಕ ವಿಧಾನಸಭೆ ಅಧಿವೇಶನ ನೇರಪ್ರಸಾರ" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
<? } ?>

<?
 $sql = "SELECT * FROM user_landing WHERE user_id=$id ORDER BY date_created DESC";
 $result = mysqli_query($db, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows == 0) {
  echo '<div class="p-2">Nothing to show here!</div>';
 } else {
  while($row = mysqli_fetch_assoc($result)) {
   $userId = $row['user_id'];
   $articleId = $row['article_id'];
   $articleDate = $row['date_created'];

$sql = "SELECT full_name FROM user WHERE id=$userId";
   $resultInner = mysqli_query($db, $sql);
   $rowInner = mysqli_fetch_assoc($resultInner);
   $articleAuthor = $rowInner['full_name'];

$sql = "SELECT * FROM user_collection WHERE id=$articleId";
   $resultInner = mysqli_query($db, $sql);
   $numRowsInner = mysqli_num_rows($resultInner);
   if ($numRowsInner > 0) {
    $rowInner = mysqli_fetch_assoc($resultInner);
    $artId = $rowInner['id'];
    $artTitle = $rowInner['title'];
    $artURL = 'view/' . $artId . '/' . createArticleURL($artTitle);
    $artDesc = $rowInner['description'];
    $artDesc = str_replace('<img src="data/posts/', '<img src="https://www.knoblycream.com/data/posts/', $artDesc);
    $artCoverImg = $rowInner['cover_img'];
    $artDate = $rowInner['date_added'];

$countReads = 0;
    $sql = "SELECT count(article_id) AS countReads FROM metrics WHERE article_id=$articleId";
    $resultCount = mysqli_query($db, $sql);
    $rowCount = mysqli_fetch_assoc($resultCount);
    $countReads = $rowCount['countReads'];

$collectionURL = $rowInner['url'];
    $collectionPublisher = substr($collectionURL, strpos($collectionURL, ".") + 1);
    $collectionPublisher = ucfirst(strtok($collectionPublisher, '.'));
    if ($collectionPublisher == '') $collectionPublisher = 'Cream';
?>
 <div class="row mx-3 mx-lg-0">
  <div class="col-12 boxItem">
<?
    if ($artCoverImg <> '') {
?>
   <div style="padding-bottom:10px"><a href="<?=$artURL?>" target="_blank"><img src="https://www.knoblycream.com/data/covers/<?=$artCoverImg?>" class="img-fluid" /></a></div>
<?
    }
?>
   <div style="padding-bottom:10px;font-size:18px;"><a href="<?=$artURL?>" target="_blank"><strong><?=$artTitle?></strong></a></div>

<? if ($collectionPublisher <> 'Cream') { ?>
   <div class="mt-1"><?=$artDesc?></div>
<? } ?>

<div style="margin-top:10px;font-size:13px;color:#888;">
    <div class="float-left">Date: <?=date('M d, Y', strtotime($artDate))?></div>
<? if ($countReads > 10) { ?>
    <div class="float-right"><?=$countReads?> reads</div>
<? } ?>
   </div>
  </div>
 </div>
<?
   }
  }
 }
?>

<? 
 // For KBKB
 if ($userSubdomain == 'kbkb') {
?>
  <div class="my-3" style="font-size:13px">
   <b>Disclaimer:</b><br>
   This is a news and data aggregation service and do not represent the views and opinions of the publisher. This is published only as a central repo for relevant information for an investor and a trader. Users are advised to use their own analysis and discretion before taking any action. The publisher is not liable for any kind of loss arising out of any action taken based on the content of this service.<br>
  </div>
<? } ?>

</div>

<? if ($userSidePanel == 1) { ?>
 <div style="width:300px;"><?=$userSidePanelContent?></div>
<? } ?>
</div>

</div>

<div class="container fixed-bottom pb-3" style="background-color:#fff">
 <div class="row no-gutters" style="border-top:1px solid #eb5e31">
  <div class="col mt-2 text-right">
   <small>Powered by</small> <a href="https://www.knoblycream.com/" target="_blank"><img src="/grfx/logo.png" width="100" /></a>
  </div>
 </div>
</div>

</body>
</html>
<? } ?>