Zploit 0-Day Shell

:: Editing File: projects_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Project";
$page_parent = "Projects";
$page_parent_link = "projects_list.php";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
  $project_name = mysqli_real_escape_string($conn, $_POST['project_name']);
  $assign_to = mysqli_real_escape_string($conn, $_POST['assign_to']);
  $start_date = mysqli_real_escape_string($conn, $_POST['start_date']);
  $deadline = mysqli_real_escape_string($conn, $_POST['deadline']);
  $status = mysqli_real_escape_string($conn, $_POST['status']);
  $description = mysqli_real_escape_string($conn, $_POST['description']);

$sql = "INSERT INTO projects (project_name, assign_to, start_date, deadline, status, description)
          VALUES ('$project_name', '$assign_to', '$start_date', '$deadline', '$status', '$description')";
  if (mysqli_query($conn, $sql)) {
    header("Location: projects_list.php?msg=Project Added Successfully");
    exit;
  } else {
    $message = "Error: " . mysqli_error($conn);
  }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header"><h2>Add Project</h2></div>
      <div class="card-body">
        <?php if ($message): ?><div class="alert alert-danger"><?= $message; ?></div><?php endif; ?>

<form method="POST">
          <div class="row g-3">
			
			<?php 
				
				// Fetch Clients
				$clients_query = "SELECT id, name FROM clients";
				$clients_result = mysqli_query($conn, $clients_query);

// Fetch Team Members
				$teams_query = "SELECT id, name FROM team_members";
				$teams_result = mysqli_query($conn, $teams_query);

?>
            
			  <div class="col-md-6">
				<label class="form-label">Client Name</label>
				<select name="project_name" class="form-control" required>
				  <option value="">Select Client</option>
				  <?php while ($client = mysqli_fetch_assoc($clients_result)) { ?>
					<option value="<?= $client['id']; ?>"><?= htmlspecialchars($client['name']); ?></option>
				  <?php } ?>
				</select>
			  </div>
			
            <div class="col-md-6">
			<label class="form-label">Assign To</label>
			<select name="assign_to" class="form-control" required>
			  <option value="">Select Team Member</option>
			  <?php while ($team = mysqli_fetch_assoc($teams_result)) { ?>
				<option value="<?= $team['id']; ?>"><?= htmlspecialchars($team['name']); ?></option>
			  <?php } ?>
			</select>
		  </div>

<div class="col-md-6">
              <label class="form-label">Start date</label>
              <input type="date" name="start_date" class="form-control">
            </div>

<div class="col-md-6">
              <label class="form-label">Deadline</label>
              <input type="date" name="deadline" class="form-control">
            </div>

<div class="col-md-6">
              <label class="form-label">Status</label>
              <select name="status" class="form-select">
                <option value="Ongoing">Ongoing</option>
                <option value="Completed">Completed</option>
                <option value="Pending">Pending</option>
              </select>
            </div>

<div class="col-12">
              <label class="form-label">Message</label>
              <textarea name="description" class="form-control" rows="3"></textarea>
            </div>

<div class="col-12">
              <button type="submit" class="btn btn-success">Save Project</button>
              <a href="projects_list.php" class="btn btn-secondary">Cancel</a>
            </div>

</div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>