Zploit 0-Day Shell

:: Editing File: list_blogs.php

<?php 
include '../../include/config.php';
include '../../auth.php';
include "../../include/header.php";
include "../../include/sidebar.php";

?>
  
  <div class="content-wrapper">
    
    <section class="content-header">
      <h1>Blogs List</h1>
      <ol class="breadcrumb">
        <li class="breadcrumb-item"><a href="<?php echo $DOMAIN_NAME_ADMIN;?>"><i class="fa fa-home"></i> Home </a></li>
        <li class="breadcrumb-item active">Dashboard</li>
      </ol>
    </section>

<section class="content">
      <div class="row">
        <div class="col-12">
          <div class="box">
            <div class="box-header">
              <h3 class="box-title"> All Blogs  List</h3> 
             <a href="add_blog.php" style="float: right;background-color: #ff6028;border-color: #ff6028;" class="btn btn-primary">+Add  New Blog </a> 
            </div>

<div class="box-body">
				<div class="table-responsive">
					<?php if (isset($_SESSION['message'])) { ?>
					<div class="alert alert-info" style="width: 100%;text-align: center;background: #777777 !important;">
						<a href="#" class="close" data-dismiss="alert" aria-label="close">&times;</a>
								<?php echo $_SESSION['message'];
								unset($_SESSION['message']);  ?>
					</div>
					<?php } ?>
					<table id="example" class="table table-bordered table-hover display nowrap margin-top-10">
						<thead>
							<tr>
							  <th>#</th>
							  <th>Blog Name</th>
							  <th>Blog Date</th>
							  <th>Properties Image</th>
							  
							  <th>Status</th>	   
							  <td>Action</td>
							</tr>
						</thead>
						<tbody>
						 <?php
						 
							$lead="SELECT * FROM  tbl_blogs order by id";
							$stmt_lead=$conn->query($lead);
							$client_lead = $stmt_lead->fetchAll();
							
							$count_id = '1';
							foreach ($client_lead as $row) {  
							
							?>
							<tr>
								<td><?php echo $count_id++; ?></td> 
								
								<td><?php echo $row['blog_name']; ?></a></td>
								<td><?php echo $row['blog_name']; ?></a></td>
								
								<td>
									<?php if(!empty($row['blog_image']))
											{ ?>
												<img src="<?php echo $DOMAIN_NAME_ADMIN.'/storage/blogs/'.$row['blog_image']?>"  class="form-control" name=""	 style="width:80px;height:80px">
											<?php } else { ?>
												<img src="<?php echo $DOMAIN_NAME_ADMIN.'/storage/gallery.jpg'?>" width="100px" height="100px" style="float:right">
											<?php } ?>
								</td>
								
								<td><?php if( $row['status'] == '1'){ echo "Active"; } else { echo "Inactive"; }?></td>
								
								<td>
									<a href="edit_blog.php?id=<?php echo $row['id'];?>"><i class='fa fa-pencil'></i></a> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
									<a href="delete_blog.php?id=<?php echo $row['id'];?>" onclick="confirm_click()"><i class='fa fa-trash'></i></a>
								</td>
							</tr>
							<?php } ?> 
						</tbody> 
					</table>
				</div>
            </div>
            
          </div>
                    
        </div>
        
      </div>
      
    </section>

</div>
  
  
<?php include "../../include/footer.php"; ?>