Zploit 0-Day Shell

:: Editing File: menu.php

<div class="col header-wrapper m-0 header-right-wrapper">
				<div class="row m-0">
					<form class="form-inline search-full col" action="#" method="get">
						<div class="form-group w-100">
							<div class="Typeahead Typeahead--twitterUsers">
								<div class="u-posRelative">
									<input class="demo-input Typeahead-input form-control-plaintext w-100" type="text" placeholder="Search anything .." name="q" title="" autofocus>
									<div class="spinner-border Typeahead-spinner" role="status"><span class="sr-only">Loading...</span></div><i class="close-search" data-feather="x"></i>
								</div>
								<div class="Typeahead-menu"></div>
							</div>
						</div>
					</form>
					<div class="header-logo-wrapper col-auto p-0 left-header"></div>
					<div class="nav-right col-auto pull-right right-header p-0 ms-auto">
						<ul class="nav-menus">

<?php $query_user = "SELECT * FROM users WHERE id = '$_SESSION[user_id]'";
									$result_user = mysqli_query($conn, $query_user);
									$user = mysqli_fetch_assoc($result_user);
									?>

<div class="onhover-click">
									<div class="sidebar-image"> <img src="uploads/profile/<?= htmlspecialchars($user['pic']) ?>" alt="profile"><span class="status status-success"></span></div>
									<div class="sidebar-content">
										<h4>
											<?= htmlspecialchars($user['name']) ?>
										</h4><span class="f-12 f-w-600 f-light"><?= htmlspecialchars($user['occupation']) ?></span>
									</div>
								</div>

<li>
										<a href="profile-edit.php">
											<div class="profile-icon">
												<svg>
												<use href="assets/svg/icon-sprite.svg#user"></use>
											  </svg>
											</div><span>Account </span></a>
									</li>

<li>
										<a href="logout.php">
											<div class="profile-icon">
												<svg>
												<use href="assets/svg/icon-sprite.svg#login"></use>
											  </svg>
											</div><span>Log out</span></a>
									</li>
								</ul>
							</li>
						</ul>
					</div>
					<script class="result-template" type="text/x-handlebars-template">
						<div class="ProfileCard u-cf">
							<div class="ProfileCard-avatar"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-airplay m-0"><path d="M5 17H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2h-1"></path><polygon points="12 15 17 21 7 21 12 15"></polygon></svg></div>
							<div class="ProfileCard-details">
								<div class="ProfileCard-realName">{{name}}</div>
							</div>
						</div>
					</script>
					<script class="empty-template" type="text/x-handlebars-template">
						<div class="EmptyMessage">Your search turned up 0 results. This most likely means the backend is down, yikes!</div>
					</script>
				</div>
			</div>
			
      </div>
	  
      
      <div class="page-body-wrapper">
        
        <div class="sidebar-wrapper" data-sidebar-layout="stroke-svg">
          <div>
            <div class="logo-wrapper" style="padding:0px;"><a href="dashboard.php">
			<img class="img-fluid" src="assets/images/logo/logo_dark.png" alt="" style="height: 60px;
    text-align: center;
    margin: 5px 40px;"></a>
              <div class="back-btn"><i class="fa fa-angle-left"></i></div>
              
            </div>
            <div class="logo-icon-wrapper"><a href="dashboard.php">
			<img class="img-fluid" src="assets/images/logo/logo-icon.png" alt="" width="10px;"></a></div>
            <div class="profile-section sidebar-search"> 
              <div class="profile-wrapper">
                <div class="active-profile"> <img class="img-fluid" src="uploads/profile/<?= htmlspecialchars($user['pic']) ?>" alt="user">
                  <div class="status bg-success"> </div>
                </div>	  
                <div> 
                  <h4><?= htmlspecialchars($user['name']) ?></h4><span><?= htmlspecialchars($user['occupation']) ?></span>
                </div>
              </div>
              
            </div>
			
           
			
			
			
            <nav class="sidebar-main">
              <div class="left-arrow" id="left-arrow"><i data-feather="arrow-left"></i></div>
              <div id="sidebar-menu">
                <ul class="sidebar-links" id="simple-bar">

<li class="back-btn"><a href="index.html"><img class="img-fluid" src="assets/images/logo/logo-icon.png" alt=""></a>
                    <div class="mobile-back text-end"><span>Back</span><i class="fa fa-angle-right ps-2" aria-hidden="true"></i></div>
                  </li>
                  <li class="pin-title sidebar-main-title">
                    <div> 
                      <h6>- Pinned</h6>
                    </div>
                  </li>
                  <li class="sidebar-main-title">
                    <div>
                      <h6 class="lan-1">- General</h6>
                    </div>
                  </li>
				  
                 
					
					<li class="sidebar-list">
						<a class="sidebar-link sidebar-title link-nav" href="dashboard.php">
						  <svg class="stroke-icon">
							<use href="assets/svg/icon-sprite.svg#stroke-home"></use>
						  </svg>
						  <span>Dashboard</span>
						</a>
					  </li>
					  
					<li class="sidebar-list">
						<a class="sidebar-link sidebar-title link-nav" href="leads.php">
						  <svg class="stroke-icon">
							<use href="assets/svg/icon-sprite.svg#stroke-faq"></use>
						  </svg>
						  <span>Leads</span>
						</a>
					</li>
					
					
					<li class="sidebar-list">
						<a class="sidebar-link sidebar-title link-nav" href="work_sections_list.php">
						  <svg class="stroke-icon">
							<use href="assets/svg/icon-sprite.svg#stroke-widget"></use>
						  </svg>
						  <span>Work Section</span>
						</a>
					</li>
					
					<li class="sidebar-list">
						<a class="sidebar-link sidebar-title link-nav" href="portfolio.php">
						  <svg class="stroke-icon">
							<use href="assets/svg/icon-sprite.svg#stroke-project"></use>
						  </svg>
						  <span>Portfolio</span>
						</a>
					</li>
					
				  
					
					
					
					
					<?php if (isset($_SESSION['user_role']) && $_SESSION['user_role'] === 'admin'): ?>
					
						<li class="sidebar-main-title">
							<div>
							  <h6 class="lan-8">- Client</h6>
							</div>
						</li>
						
						
						
						<li class="sidebar-list">
						<a class="sidebar-link sidebar-title link-nav" href="clients_list.php">
						  <svg class="stroke-icon">
							<use href="assets/svg/icon-sprite.svg#stroke-project"></use>
						  </svg>
						  <span>Client Module</span>
						</a>
				    	</li>
				    	
						<li class="sidebar-list">
						<a class="sidebar-link sidebar-title link-nav" href="invoice.php">
						  <svg class="stroke-icon">
							<use href="assets/svg/icon-sprite.svg#stroke-project"></use>
						  </svg>
						  <span>Invoice Module</span>
						</a>
				    	</li>
				    	
				    	
				    	 <li class="sidebar-list">
							<i class="fa fa-thumb-tack"></i><a class="sidebar-link sidebar-title" href="#">
							<svg class="stroke-icon">
								<use href="assets/svg/icon-sprite.svg#stroke-user"></use>
							</svg><span class="lan-6">Quotation Module</span></a>
							<ul class="sidebar-submenu">
							    <li><a href="qcompany_list.php">Client Quotation </a></li>
								
							</ul>
						</li>
						
						<li class="sidebar-list">
							<i class="fa fa-thumb-tack"></i><a class="sidebar-link sidebar-title" href="#">
							<svg class="stroke-icon">
								<use href="assets/svg/icon-sprite.svg#stroke-user"></use>
							</svg><span class="lan-6">Visting Card Details</span></a>
							<ul class="sidebar-submenu">
								<li><a href="vcard_list.php">Visting Card List </a></li>
								<li><a href="vcard_inquiries_list.php">Inquiries  </a></li>
								<li><a href="vcard_testimonial_list.php">Testimonials  </a></li>
								<li><a href="vcard_social_links_list.php">Social Links </a></li>
								<li><a href="vcard_portfolio_list.php">Portfolio </a></li>
								<li><a href="vcard_about_list.php">About </a></li>
								<li><a href="vcard_service_list.php">Services </a></li>
								<li><a href="vcard_media_list.php">Media </a></li>
							</ul>
						</li>
						
						
						
						<li class="sidebar-main-title">
							<div>
							  <h6 class="lan-8">- Office</h6>
							</div>
						</li>
						
							
						<li class="sidebar-list">
							<a class="sidebar-link sidebar-title link-nav" href="team_members_list.php">
							  <svg class="stroke-icon">
								<use href="assets/svg/icon-sprite.svg#stroke-internationalization"></use>
							  </svg>
							  <span>Team Members</span>
							</a>
						</li>
						
						
						<li class="sidebar-list">
							<a class="sidebar-link sidebar-title link-nav" href="expenses_list.php">
							  <svg class="stroke-icon">
								<use href="assets/svg/icon-sprite.svg#stroke-editors"></use>
							  </svg>
							  <span>Expenses</span>
							</a>
						</li>
						<li class="sidebar-list">
							<a class="sidebar-link sidebar-title link-nav" href="tasks_list.php">
							  <svg class="stroke-icon">
								<use href="assets/svg/icon-sprite.svg#stroke-to-do"></use>
							  </svg>
							  <span>Assign Task</span>
							</a>
						</li>
						<li class="sidebar-list">
							<a class="sidebar-link sidebar-title link-nav" href="projects_list.php">
							  <svg class="stroke-icon">
								<use href="assets/svg/icon-sprite.svg#stroke-others"></use>
							  </svg>
							  <span>Projects </span>
							</a>
						</li>
				        
				        <li class="sidebar-list">
							<i class="fa fa-thumb-tack"></i><a class="sidebar-link sidebar-title" href="#">
							<svg class="stroke-icon">
								<use href="assets/svg/icon-sprite.svg#stroke-user"></use>
							</svg><span class="lan-6">Support Module</span></a>
							<ul class="sidebar-submenu">
								<li><a href="ticket_list.php">Raise A Ticket</a></li>
								<li><a href="https://api.whatsapp.com/send?phone=918692842333" target="_blank">Live Chat</a></li>
								
							</ul>
						</li>
						<br><br><br><br>
						
					
					<?php endif; ?>
				  
				  
                </ul>
              </div>
              <div class="right-arrow" id="right-arrow"><i data-feather="arrow-right"></i></div>
            </nav>
			
			
          </div>
        </div>