OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	11/28/2024 11:03:35 AM	rwxrwxr-x
📄 chk.logged.in.php	1.16 KB	01/10/2021 12:30:27 PM	rw-r--r--
📄 chk.login.php	1.31 KB	02/10/2022 03:03:00 PM	rw-r--r--
📄 get.section.account.php	15.11 KB	12/28/2024 08:09:41 AM	rw-r--r--
📄 get.section.analytics.php	28.73 KB	03/02/2025 09:40:12 AM	rw-r--r--
📄 get.section.collection.php	69.19 KB	03/04/2025 05:15:01 AM	rw-r--r--
📄 get.section.community.php	7.71 KB	09/09/2024 09:46:26 AM	rw-r--r--
📄 get.section.create.php	22.41 KB	05/22/2024 11:08:28 AM	rw-r--r--
📄 get.section.curated.php	33.87 KB	03/02/2025 10:52:06 AM	rw-r--r--
📄 get.section.dashboard.php	3.31 KB	02/10/2022 02:58:26 PM	rw-r--r--
📄 get.section.feed.php	6.87 KB	03/09/2023 05:28:34 AM	rw-r--r--
📄 get.section.genai.php	9.87 KB	08/21/2024 07:23:47 AM	rw-r--r--
📄 get.section.genaicreative.php	10.55 KB	08/21/2024 07:23:45 AM	rw-r--r--
📄 get.section.general.php	9.31 KB	08/22/2023 09:34:25 AM	rw-r--r--
📄 get.section.newsletter.php	18.97 KB	08/22/2024 06:42:01 AM	rw-r--r--
📄 get.section.request.article.php	13.34 KB	03/02/2025 06:07:24 AM	rw-r--r--
📄 get.section.settings.php	42.64 KB	03/02/2025 10:13:44 AM	rw-r--r--
📄 get.section.team.php	6.73 KB	05/23/2024 04:45:44 AM	rw-r--r--
📄 get.section.utils.php	4.1 KB	06/26/2021 06:06:51 AM	rw-r--r--
📄 logout.php	428 bytes	08/16/2020 11:22:29 AM	rw-r--r--
📄 sendgrid.php	3.62 KB	03/09/2021 04:01:36 AM	rw-r--r--
📄 upload.php	2.4 KB	08/22/2020 01:33:43 PM	rw-r--r--
📄 zget.section.analytics.php	11.45 KB	03/02/2025 06:25:31 AM	rw-r--r--

Editing: get.section.community.php

<?php
// Cream: Community Feeds

require_once '../inc/validate.logged.php';
require_once '../inc/config.php';
$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Function to truncate the description to a certain number of words
function truncateHtml($html, $wordLimit)
{
    // Convert HTML entities to their corresponding characters
    $html = html_entity_decode($html, ENT_QUOTES | ENT_HTML5, 'UTF-8');

// Use regex to strip HTML tags while preserving spaces
    $text = preg_replace('/<[^>]*>/', ' ', $html);

// Normalize whitespace
    $text = preg_replace('/\s+/', ' ', trim($text));

// Split the text content into words
    $words = explode(' ', $text);

// Truncate to the word limit
    if (count($words) > $wordLimit) {
        $words = array_slice($words, 0, $wordLimit);
        $truncatedText = implode(' ', $words) . '...';
    } else {
        $truncatedText = implode(' ', $words);
    }

// Prepare HTML for reconstruction
    $html = '<html><body>' . htmlspecialchars($html, ENT_HTML5 | ENT_QUOTES, 'UTF-8') . '</body></html>';

// Reconstruct the HTML with truncated content
    $truncatedHtml = reconstructHtml($html, $truncatedText);

return $truncatedHtml;
}
// Function to reconstruct HTML with truncated text
function reconstructHtml($html, $truncatedText)
{
    // Use regex to find the content between the body tags
    return preg_replace('/<body[^>]*>(.*?)<\/body>/is', '<body>' . htmlspecialchars($truncatedText, ENT_HTML5 | ENT_QUOTES, 'UTF-8') . '</body>', $html);
}

// Add to Collection
if ($act == 'addCollection') {
    $data = isset($_POST['data']) ? $_POST['data'] : '';
    if ($data != '') {
        $arrData = json_decode($data, true);
        foreach ($arrData as &$value) {
            $feedTitle = $value['title'];
            $feedURL = $value['url'];
            $feedDesc = $value['desc'];
            $sql = "SELECT url FROM user_collection WHERE url='$feedURL' AND user_id=$gUserId";
            $result = mysqli_query($db, $sql);
            $numRows = mysqli_num_rows($result);
            if ($numRows == 0) {
                $feedTitle = mysqli_real_escape_string($db, $feedTitle);
                $feedURL = mysqli_real_escape_string($db, $feedURL);
                $feedDesc = mysqli_real_escape_string($db, $feedDesc);
                $sql = "INSERT INTO user_collection(user_id,title,url,description,date_added) VALUES($gUserId,'$feedTitle','$feedURL','$feedDesc',Now())";
                mysqli_query($db, $sql);
            }
        }
        echo "OK";
    }
}

?>
<ol class="breadcrumb my-3">
    <li class="breadcrumb-item w-100">
        <div class="text-left w-50">
            <h4 class="mt-1">Community Feeds</h4>
        </div>
        <div class="text-right w-50"><button type="button" id="buttonAddCollection" class="hide btn btn-success" onclick="chkAddCollection()">Add selected to My Collection</button></div>
    </li>
</ol>

<?php
$sql = "
SELECT
    uc.id AS article_id,
    uc.title,
    uc.share_collection_id,
    uc.description,
    uc.likes,
    uc.date_added,
    u.full_name AS user_name
FROM
    user_collection uc
INNER JOIN
    user u ON uc.user_id = u.id
WHERE
    uc.share_collection_id IS NOT NULL
ORDER BY
    uc.date_added DESC;
";

$result = mysqli_query($db, $sql);

if ($result) {
    $numRows = mysqli_num_rows($result);

if ($numRows > 0) {
        while ($row = mysqli_fetch_assoc($result)) {
            $articleId = $row['article_id'];
            $title = $row['title'];
            $description = $row['description']; // Truncate description to 25 words
            $feedPublisher = $row['user_name']; // Updated to fetch the user's full name
            $feedDate = $row['date_added']; // Updated to fetch the date added
            $isExist = 0;
?>
            <div class="card p-0 mb-3 border-0" style="background-color:#f5ede7">
                <div class="panelFeed card-body">
                    <h4>
                        <a href="article.php?article_id=<?= $articleId ?>" style="color:#f26522" onclick="openPopup(this.href); return false;"><?= htmlentities($title) ?>
                        </a>
                    </h4>
                    <p style="color:#7d7d7d"><?= truncateHtml($description, 100) ?></p>
                    <div class="row">
                        <div class="col-12 col-md-6 text-center text-md-left">
                            <?= htmlentities($feedPublisher) ?> &bull; <?= htmlentities($feedDate) ?>
                        </div>
                        <div class="data col-12 col-md-6 text-center text-md-left mt-2 m-md-0" data-feed-title="<?= htmlentities($feedTitle) ?>" data-feed-url="#" data-feed-publisher="<?= htmlentities($feedPublisher) ?>" data-feed-desc="<?= htmlentities($feedDesc) ?>">
                            <?php if ($isExist == 0) { ?>
                                <label class="btn-secondary m-0 px-2 py-1" style="user-select:none"><input type="checkbox" name="feedData" onclick="addCollection()"> My Collection</label>
                            <?php } else { ?>
                                <label class="badge-warning m-0 px-3 py-1" style="user-select:none">My Collection</label>
                            <?php } ?>
                            <label class="buttonCreamShare btn-info m-0 px-2 py-1" style="user-select:none">Cream<i>Share</i></label>
                            <label class="btn-success m-0 px-2 py-1" id="button1" onclick="CopyToClipboard('<?= htmlentities($feedTitle) ?>')">Share</label>
                            <button id="incrementButton" data-id="<?= $row['article_id'] ?>">Like Article</button>
                            <div id="likesDisplay"></div>
                            <br /><br />
                        </div>
                    </div>
                </div>
            </div>
<?php
        }
    } else {
        echo "Nothing found here!";
    }
} else {
    echo "Error in query execution: " . mysqli_error($db);
}
?>

<script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
<script>
    $(document).ready(function() {
        // add click event listener to the button
        $(document).on('click', '.incrementButton', function() {
            // get the id from the data attribute
            var id = $(this).data('id');

// make an AJAX request to the server-side script
            $.ajax({
                type: 'POST',
                url: 'inc/increment.php',
                data: {
                    id: id
                },
                success: function(likes) {
                    // update the likes display on the page
                    $('#likesDisplay').text('Likes: ' + likes);
                },
                error: function() {
                    alert('Error: unable to increment likes.');
                }
            });
        });
    });
</script>

<script type="text/javascript">
    function CopyToClipboard(text) {
        var $temp = $("<textarea>");
        $("body").append($temp);
        $temp.val(text).select();
        document.execCommand("copy");
        $temp.remove();
        alert("Copied to clipboard!");
    }

function openPopup(url) {
        var width = 800; // Width of the popup window
        var height = 600; // Height of the popup window
        var left = (screen.width - width) / 2;
        var top = (screen.height - height) / 2;

var popupWindow = window.open(url, '_blank', 'toolbar=yes,scrollbars=yes,resizable=yes,top=' + top + ',left=' + left + ',width=' + width + ',height=' + height);
        popupWindow.focus();
    }
</script>