OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/09/2025 11:18:49 AM	rwxr-xr-x
📄 .browserslistrc	208 bytes	02/11/2020 10:49:08 AM	rw-rw-r--
📄 .gitignore	42 bytes	02/11/2020 10:49:08 AM	rw-rw-r--
📄 .htaccess	803 bytes	07/18/2023 08:55:06 AM	rw-r--r--
📄 .htaccess.swp	12 KB	08/13/2021 06:21:55 AM	rw-r--r--
📄 .travis.yml	199 bytes	02/11/2020 10:49:16 AM	rw-rw-r--
📁 .well-known	-	11/28/2024 11:03:35 AM	rwxr-xr-x
📁 API	-	08/07/2024 07:35:13 AM	rwxr-xr-x
📁 _backup	-	06/22/2024 04:05:28 AM	rwxr-xr-x
📄 about.html	3.05 KB	06/15/2021 04:56:35 AM	rw-r--r--
📄 activate.php	2.56 KB	01/10/2021 11:01:39 AM	rw-r--r--
📁 admin	-	11/12/2024 08:53:01 AM	rwxr-xr-x
📄 article.php	17.24 KB	08/08/2024 12:15:43 PM	rw-r--r--
📁 arvindfacebook	-	08/14/2024 11:07:25 AM	rwxr-xr-x
📁 audio	-	04/16/2025 05:06:46 AM	rwxrwxrwx
📁 aws-ses	-	11/11/2024 12:41:09 PM	rwxr-xr-x
📄 back-dashboard.php	8.33 KB	07/25/2024 04:55:30 PM	rw-r--r--
📄 barticle.php	16.58 KB	07/22/2024 11:38:48 AM	rw-r--r--
📄 bin_article.php	6.62 KB	07/10/2024 07:41:53 AM	rw-r--r--
📄 bnewsletter.php	1.33 KB	08/08/2024 11:26:41 AM	rw-r--r--
📄 bview.php	14.07 KB	07/22/2024 07:30:50 AM	rw-r--r--
📁 clients	-	10/30/2024 11:05:12 AM	rwxr-xr-x
📄 contact.html	2.79 KB	06/15/2021 04:53:32 AM	rw-r--r--
📁 conversations	-	07/10/2024 06:53:08 AM	rwxr-xr-x
📁 covid	-	04/29/2021 04:36:04 PM	rwxr-xr-x
📁 creamapi	-	10/22/2024 10:53:04 AM	rwxrwxrwx
📄 dashboard.php	9.94 KB	04/16/2025 04:53:21 AM	rw-r--r--
📁 data	-	08/22/2020 09:10:30 AM	rwxrwxrwx
📄 down.html	1.23 KB	06/08/2021 03:26:16 PM	rw-r--r--
📁 downloads	-	11/10/2024 09:51:33 AM	rwxrwxrwx
📁 eSamudaay	-	10/10/2024 10:20:39 AM	rwxr-xr-x
📁 facebook	-	10/14/2024 07:24:26 AM	rwxr-xr-x
📄 fb_access.php	855 bytes	05/04/2021 04:21:24 AM	rw-r--r--
📁 galaxy	-	08/26/2024 06:22:21 AM	rwxr-xr-x
📄 gen2_1.php	45.17 KB	06/18/2024 09:16:17 AM	rw-r--r--
📁 genai	-	09/17/2024 07:46:25 AM	rwxr-xr-x
📄 geo_location.php	3.69 KB	08/07/2024 10:52:37 AM	rw-r--r--
📁 grfx	-	08/22/2020 01:22:42 PM	rwxr-xr-x
📁 groupchat	-	08/31/2024 11:08:59 AM	rwxr-xr-x
📁 hps	-	10/28/2024 10:38:34 AM	rwxr-xr-x
📁 img	-	09/16/2024 11:54:26 AM	rwxrwxrwx
📁 inc	-	03/04/2025 03:52:11 AM	rwxr-xr-x
📄 index.html	21.27 KB	10/09/2024 08:44:24 AM	rw-r--r--
📄 info.php	14 bytes	10/02/2020 04:48:53 AM	rw-r--r--
📁 knaadu	-	01/27/2024 09:01:23 AM	rwxr-xr-x
📁 knoblyExpressLandingPage	-	08/21/2024 10:01:16 AM	rwxr-xr-x
📁 live	-	03/11/2022 08:19:30 AM	rwxr-xr-x
📁 mailer_images	-	03/01/2023 03:50:20 AM	rwxr-xr-x
📁 mhd	-	09/05/2024 08:18:56 AM	rwxr-xr-x
📄 more.php	7.36 KB	06/25/2021 02:14:38 PM	rw-r--r--
📁 newgalaxy	-	11/22/2024 06:02:02 AM	rwxr-xr-x
📁 newsapi	-	06/19/2024 06:43:29 AM	rwxr-xr-x
📄 newsletter.php	1.33 KB	08/08/2024 12:14:17 PM	rw-r--r--
📁 oauth	-	01/26/2024 03:40:40 PM	rwxr-xr-x
📄 old1dashboard.php	8.4 KB	07/02/2024 11:18:03 AM	rw-r--r--
📄 olddashboard.php	11.58 KB	07/26/2024 06:11:34 AM	rw-r--r--
📁 postarticle	-	03/15/2024 03:05:03 AM	rwxrwxrwx
📄 privacy.html	9.99 KB	06/15/2021 04:53:16 AM	rw-r--r--
📁 process	-	03/04/2025 03:53:29 AM	rwxr-xr-x
📁 reeliv	-	09/04/2024 11:00:16 AM	rwxr-xr-x
📄 refund.html	7.34 KB	06/15/2021 04:53:16 AM	rw-r--r--
📄 reset.html	3.01 KB	06/15/2021 04:53:17 AM	rw-r--r--
📁 sendy	-	11/18/2021 09:43:15 AM	rwxr-xr-x
📄 showcase.php	7.93 KB	02/16/2024 04:22:28 AM	rw-r--r--
📄 signup.html	8.08 KB	07/05/2021 07:28:05 AM	rw-r--r--
📁 social_media	-	10/16/2024 12:36:51 PM	rwxr-xr-x
📄 splash.html	1.11 KB	01/10/2021 12:49:20 PM	rw-r--r--
📄 test.email.php	2.5 KB	06/13/2024 06:52:38 AM	rw-r--r--
📄 test.php	969 bytes	02/21/2023 04:35:32 AM	rw-r--r--
📁 testing	-	10/10/2024 05:27:49 AM	rwxr-xr-x
📁 texttovoice	-	07/16/2024 06:14:42 AM	rwxr-xr-x
📄 usage.html	30.88 KB	06/15/2021 04:53:17 AM	rw-r--r--
📁 venv	-	05/09/2024 06:58:41 AM	rwxr-xr-x
📁 videoAI	-	09/16/2024 01:25:53 PM	rwxr-xr-x
📄 view.php	12.44 KB	11/13/2024 03:42:52 AM	rw-r--r--
📁 zaws-ses	-	10/23/2024 05:53:49 AM	rwxr-xr-x
📁 znew1aws-ses	-	08/16/2024 08:24:03 AM	rwxr-xr-x
📄 zview.php	16.09 KB	07/22/2024 10:53:51 AM	rw-r--r--
📁 zzaws-ses	-	10/04/2024 04:34:42 AM	rwxr-xr-x

Editing: bview.php

<!doctype html>
<?
include 'inc/config.php';
include 'conversations/functions.php';

// My work
// $servername1 = "localhost";
// $username1 = "root";
// $password1 = "";
// $dbname1 = "cream";

// $conn1 = new mysqli($servername1, $username1, $password1, $dbname1);

// // Check connection
// if ($conn1->connect_error) {
//   die("Connection failed: " . $conn1->connect_error);
// }

$chat = [];

$id = isset($_GET["id"]) ? $_GET["id"] : '';
if ($id <> '') {
  $sql = "SELECT * FROM user_collection WHERE id=$id";
  $result = mysqli_query($db, $sql);
  $row = $result->fetch_assoc();
  $numRows = mysqli_num_rows($result);
  if ($numRows == 0) die();

$serverName = $_SERVER['SERVER_NAME'];
  $collectionUserId = $row['user_id'];
  $sql = "SELECT subdomain,is_side_panel,side_panel_content FROM user WHERE id=$collectionUserId";
  $resultInner = mysqli_query($db, $sql);
  $rowInner = mysqli_fetch_assoc($resultInner);
  $userSubdomain = $rowInner['subdomain'];
  $userSidePanel = $rowInner['is_side_panel'];
  $userSidePanelContent = $rowInner['side_panel_content'];
  $userSidePanelContent = str_replace('<img src="data/', '<img src="https://' . $serverName . '/data/', $userSidePanelContent);

// $chat = fetch_messages($conn1, $id);
  $chat = fetch_messages($db, $id);

/*$currSubdomain = explode('.', $_SERVER['HTTP_HOST'])[0];
 if ($currSubdomain <> 'knoblycream' && $currSubdomain <> 'www' && $currSubdomain <> 'localhost') {
  if ($userSubdomain <> $currSubdomain) {
   echo '<br><br><center>You are not allowed to acccess this resource!</center>';
   die();
  }
 }*/

$ip = getenv('HTTP_CLIENT_IP') ?: getenv('HTTP_X_FORWARDED_FOR') ?: getenv('HTTP_X_FORWARDED') ?: getenv('HTTP_FORWARDED_FOR') ?: getenv('HTTP_FORWARDED') ?: getenv('REMOTE_ADDR');

/*
 $apiURL = "http://api.ipstack.com/$ip?fields=country_name,city&access_key=ecba53a0a330ffb5dffcb823493565c0";
 $ch = curl_init();
 curl_setopt_array($ch, array(
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_URL => $apiURL
 ));
 $response = curl_exec($ch);
 if ($response === false) {
  $visitCity = '';
  $visitCountry = '';
 } else {
  $arrResponse = json_decode($response, true);
  $visitCity = $arrResponse['city'];
  $visitCountry = $arrResponse['country_name'];
 }
*/

$response = unserialize(file_get_contents('http://www.geoplugin.net/php.gp?ip=' . $ip));
  if ($response === false) {
    $visitCity = '';
    $visitCountry = '';
  } else {
    $visitCity = $response['geoplugin_city'];
    $visitCountry = $response['geoplugin_countryName'];
  }
  $sql = "INSERT INTO metrics(article_id,ip,visit_city,visit_country,date_visited) VALUES($id,'$ip','$visitCity','$visitCountry',Now())";
  mysqli_query($db, $sql);

$collectionURL = $row['url'];
  if ($collectionURL <> '') {
    header("Location: " . $collectionURL);
    die();
  }

$collectionTitle = $row['title'];
  $collectionDesc = $row['description'];
  $collectionDesc = str_replace('<img src="data/', '<img src="https://' . $serverName . '/data/', $collectionDesc);
  $collectionDesc = str_replace('\n','<br>', $collectionDesc);
  $collectionDesc = str_replace('\\','', $collectionDesc);  
  $collectionShareUserId = $row['share_user_id'];
  $collectionPublisher = substr($collectionURL, strpos($collectionURL, ".") + 1);
  $collectionPublisher = ucfirst(strtok($collectionPublisher, '.'));
  if ($collectionPublisher == '') $collectionPublisher = 'Cream';
  $collectionDate = date('d M, Y', strtotime($row['date_added']));
  $collectionLink = 'https://' . $serverName . '/view/' . $id . '/' . createArticleURL($collectionTitle);
  $collectionImgCover = $row['cover_img'];
  $collectionIsReadMore = $row['is_read_more'];
  $collectionReadMoreTxt = $row['read_more_txt'];
  if ($collectionReadMoreTxt == '') $collectionReadMoreTxt = "Read More";

if ($collectionShareUserId <> '') {
    $sql = "SELECT full_name,company,website,news_title,news_logo FROM user WHERE id=$collectionShareUserId";
  } else {
    $sql = "SELECT full_name,company,website,news_title,news_logo FROM user WHERE id=$collectionUserId";
  }
  $result = mysqli_query($db, $sql);
  $row = mysqli_fetch_assoc($result);
  $user = $row['full_name'];
  $companyName = $row['company'];
  $website = strtolower($row['website']);
  $newsTitle = $row['news_title'];
  $newsLogo = $row['news_logo'];
  if (strpos($website, 'http') === false) $website = "http://$website";
?>
  <html lang="en">

<meta property="og:url" content="<?= $collectionLink ?>" />
    <meta property="og:type" content="website" />
    <meta property="og:title" content="<?= $collectionTitle ?>" />
    <meta property="og:description" content="<?= $collectionTitle ?>" />
    <? if ($collectionImgCover <> '') { ?>
      <meta property="og:image" content="https://<?= $serverName ?>/data/covers/<?= $collectionImgCover ?>" />
      <meta property="og:image:secure-url" itemprop="image" content="https://<?= $serverName ?>/data/covers/<?= $collectionImgCover ?>" />
    <? } else { ?>
      <meta property="og:image" content="https://<?= $serverName ?>/data/logos/<?= $newsLogo ?>" />
      <meta property="og:image:secure-url" itemprop="image" content="https://<?= $serverName ?>/data/logos/<?= $newsLogo ?>" />
    <? } ?>

<meta property="twitter:url" content="<?= $collectionLink ?>" />
    <meta name="twitter:card" content="summary" />
    <meta name="twitter:title" content="<?= $companyName ?>" />
    <meta name="twitter:description" content="" />
    <? if ($collectionImgCover <> '') { ?>
      <meta name="twitter:image" content="https://<?= $serverName ?>/data/covers/<?= $collectionImgCover ?>" />
    <? } else { ?>
      <meta name="twitter:image" content="https://<?= $serverName ?>/data/logos/<?= $newsLogo ?>" />
    <? } ?>

}

.panelContent img {
        width: auto;
        height: auto;
        max-width: 100%;
      }
    </style>
    <style>
      .conversations {
        max-height: 300px;
        overflow-y: scroll;
      }

.comments-section {
        margin-top: 40px;
        margin-bottom: 80px;
        margin-left: 90px;
        margin-right: 90px;

}

.comment-form {
        margin-bottom: 20px;
      }

.comment-form textarea {
        width: 100%;
        height: 100px;
        margin-bottom: 10px;
      }

.comment {
        width: fit-content;
        margin-bottom: 20px;
        padding: 10px 20px;
        /* border: 1px solid #ccc; */
        box-shadow: 0 0 10px rgba(0, 0, 0, 0.2);
        border-radius: 5px;
      }

.comment .author {
        font-weight: bold;
      }

.conversation-form {
        display: flex;
        width: 100%;
        column-gap: 8px;
        justify-content: left;
        margin: 10px 0px;
        margin-bottom: 20px;
      }

.comment-text {
        border-radius: 6px;
        padding: 5px 10px;
        width: 80%;
        height: 40px;
      }

.conversation-btn {
        border-radius: 5px;

}

.author span {
        padding-left: 10px;
      }

.login-redirect {
        display: flex;
        justify-content: center;
        max-width: 100%;

}

.login-redirect span {
        border: 0.2px solid black;
        padding: 8px 16px;
        border-radius: 10px;
        margin: 10px 20px;
        width: 600px;
        display: flex;
        justify-content: center;
      }

.login-redirect a:hover {
        text-decoration: none;
        color: #000;
      }
      .login-redirect span:hover {
        background-color: #d9d9e18f;
      }

</style>
  </head>

<? if ($newsLogo <> '' && $user <> '' && $companyName <> '') { ?>
        <header class="blog-header py-3 border-bottom">
          <div class="row flex-nowrap justify-content-between align-items-center">
            <div class="col-8 pt-1">
              <? if ($newsLogo <> '') { ?>
                <a class="text-muted" href="<?= $website ?>"><img class="mx-auto" width="256px" src="https://<?= $serverName ?>/data/logos/<?= $newsLogo ?>" /></a>
              <? } ?>
              <h6 class="mt-1" style="color:#9e9e9e"><?= $user ?> | <?= $companyName ?></h6>
            </div>
            <div class="col-4 text-right">
            </div>
          </div>
        </header>
      <? } ?>

<div class="row mt-3 pb-5">
        <div class="panelContent col-12 col-md pb-3">
          <h1><?= $collectionTitle ?></h1>
          <h6 style="color:#9e9e9e"><?= $collectionDate ?></h6>
          <? if ($collectionImgCover <> '') { ?>
            <div class="my-2"><img src="https://<?= $serverName ?>/data/covers/<?= $collectionImgCover ?>" /></div>
          <? } ?>
          <p><?= $collectionDesc ?></p>
          <? if ($collectionIsReadMore <> '') { ?>
            <center>
              <a href="https://<?= $serverName ?>/more.php?id=<?= $id ?>" target="_blank">
                <div class="btn btn-warning py-2"><?= $collectionReadMoreTxt ?></div>
              </a>
            </center>
            <br>
          <? } ?>
          <? if ($newsLogo <> '' && $user <> '' && $companyName <> '') { ?>
            <p class="small" style="color:#189eb5;">Publisher: <?= $user ?> | <?= $companyName ?></p>
          <? } ?>
        </div>

<? if ($userSidePanel == 1) { ?>
          <div style="width:300px;"><?= $userSidePanelContent ?></div>
        <? } ?>

</div>

<div class="comments-section" style="padding:0 15px;">
    <h3>Comments<span style="font-size: 12px; font-style: italic; color: grey; margin-left: 10px;"><?= noOfComments($db, $id)?> Comments</span></h3>
      <div class="conversations">
        <div id="comments">
          <?php
          display_comments($chat);
          ?>
        </div>
      </div>

<div class="login-redirect">
          <span><a href="/signup.html?type=login&article_Id=<?=$id?>">Login to Give your comment</a></span>
        </div>

</div>

<div class="container fixed-bottom pb-3" style="background-color:#fff">
      <div class="row no-gutters" style="border-top:1px solid #eb5e31">
        <div class="col mt-2 text-right">
          <small>Powered by</small> <a href="https://www.knoblycream.com/" target="_blank"><img src="/grfx/logo.png" width="100" /></a>
        </div>
      </div>
    </div>

</body>

// Refresh the page
      location.reload();
    }

function sendMessage(article_id, user_name) {

var messageText = $('#comment-text1').val().trim();
      var now = new Date(); // Get current date and time in user's local time zone

var posted_on = now.getFullYear() + '-' +
        ('0' + (now.getMonth() + 1)).slice(-2) + '-' +
        ('0' + now.getDate()).slice(-2) + ' ' +
        ('0' + now.getHours()).slice(-2) + ':' +
        ('0' + now.getMinutes()).slice(-2) + ':' +
        ('0' + now.getSeconds()).slice(-2); // Format as 'YYYY-MM-DD HH:MM:SS'

if (messageText === '') {
        return;
      }

$.ajax({
        url: 'conversations/save_conversations.php',
        method: 'POST',
        data: {
          article_id: article_id,
          user_id: user_id,
          message: messageText,
          posted_on: posted_on
        },
        success: function(response) {
          // Handle the response
          alert('Message sent successfully!');
          console.log(response); // Log response to console
          location.reload(); // Reload the page after successful message post
        },
        error: function(xhr, status, error) {
          // Handle errors
          console.error(xhr.responseText);
        }
      });
    }

function saveComments(comments) {
      localStorage.setItem('comments', JSON.stringify(comments));
    }

function addComment() {
      const text = $('#comment-text').val();
      // const author = $('#comment-author').val();
      const author = '<?php echo $user_name; ?>';

if (!text || !author) {
        alert('Please enter your name and comment.');
        return;
      }

const comments = getComments();
      comments.push({
        text: text,
        author: author,
        date: new Date().toLocaleString()
      });
      saveComments(comments);

$('#comment-text').val('');
      $('#comment-author').val('');
      renderComments();
    }

function renderComments() {
      const comments = getComments();
      const commentsDiv = $('#comments');

comments.forEach(comment => {
        const commentDiv = $('<div></div>').addClass('comment');
        commentDiv.html(`
            <div class="author">${comment.author} <span style="font-size: 0.8em; color: #555;">${comment.date}</span></div>
            <div class="text">${comment.text}</div>
            `);
        commentsDiv.append(commentDiv);
      });
    }

$(document).ready(renderComments);
  </script>

</html>
<? } ?>