OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	12/26/2021 06:46:23 AM	rwxr-xr-x
📄 bootstrap.min.css	155.78 KB	03/31/2020 05:14:19 PM	rw-r--r--
📄 bootstrap.min.js	58.6 KB	03/31/2020 05:14:58 PM	rw-r--r--
📄 common.js	1.14 KB	12/31/2021 04:26:57 AM	rw-r--r--
📄 config.php	7.63 KB	02/08/2022 01:44:19 PM	rw-r--r--
📁 fontawesome	-	12/18/2021 02:06:02 PM	rwxr-xr-x
📄 footer.php	2.24 KB	12/25/2021 06:15:53 AM	rw-r--r--
📄 header.php	4.38 KB	12/26/2021 05:47:09 AM	rw-r--r--
📄 jquery-3.6.0.min.js	87.4 KB	12/18/2021 09:22:42 AM	rw-r--r--
📄 moment.min.js	52.07 KB	10/15/2020 05:19:40 AM	rw-r--r--
📄 side.php	1.4 KB	12/30/2021 07:39:30 AM	rw-r--r--
📄 style.css	1.75 KB	12/29/2021 04:43:43 AM	rw-r--r--
📄 track.download.php	1.31 KB	11/29/2021 05:41:55 AM	rw-r--r--

Editing: track.download.php

<?
// Current Science: Track Downloads

include 'config.php';

$volumeNum = isset($_POST["volumeNum"]) ? $_POST["volumeNum"] : '';
$issueNum = isset($_POST["issueNum"]) ? $_POST["issueNum"] : '';
$pageNum = isset($_POST["pageNum"]) ? $_POST["pageNum"] : '';

if ($volumeNum != '' && $issueNum != '' && $pageNum != '') {
 $ip = getenv('HTTP_CLIENT_IP')?:getenv('HTTP_X_FORWARDED_FOR')?:getenv('HTTP_X_FORWARDED')?:getenv('HTTP_FORWARDED_FOR')?:getenv('HTTP_FORWARDED')?:getenv('REMOTE_ADDR');
 $response = unserialize(file_get_contents('http://www.geoplugin.net/php.gp?ip='.$ip));
 if ($response === false) {
  $downloadCountry = '';
 } else {
  $downloadCountry = $response['geoplugin_countryName'];
 }
 $sql = "SELECT article_id FROM articles WHERE volume_num=$volumeNum AND issue_num=$issueNum AND page_num=$pageNum";
 $result = mysqli_query($dbpro, $sql);
 $hasResult = mysqli_num_rows($result);
 if ($hasResult > 0) {
  $row = mysqli_fetch_assoc($result);
  $articleId = $row['article_id'];
  $sql = "UPDATE articles SET article_downloads=article_downloads+1 WHERE article_id=$articleId";
  mysqli_query($dbpro, $sql);
  $sql = "INSERT INTO article_downloads(article_id,country,date_downloaded) VALUES($articleId,'$downloadCountry',Now())";
  mysqli_query($dbpro, $sql);
 }
 mysqli_free_result($result);
}