Zploit 0-Day Shell

:: Editing File: projects_edit.php

<?php
ob_start();
include 'header.php';
$page_title = "Edit Project";
$page_parent = "Projects";
$page_parent_link = "projects_list.php";
include 'breadcrumb.php';
include 'menu.php';

$id = $_GET['id'] ?? 0;
$result = mysqli_query($conn, "SELECT * FROM projects WHERE id=$id");
$project = mysqli_fetch_assoc($result);

// Fetch clients
$clients_result = mysqli_query($conn, "SELECT id, name FROM clients ORDER BY name ASC");

// Fetch team members
$team_result = mysqli_query($conn, "SELECT id, name FROM team_members ORDER BY name ASC");

if (!$project) {
  die("Project not found!");
}

$message = "";

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
  $project_name = mysqli_real_escape_string($conn, $_POST['project_name']);
  $assign_to = mysqli_real_escape_string($conn, $_POST['assign_to']);
  $deadline = mysqli_real_escape_string($conn, $_POST['deadline']);
  $start_date = mysqli_real_escape_string($conn, $_POST['start_date']);
  $status = mysqli_real_escape_string($conn, $_POST['status']);
  $description = mysqli_real_escape_string($conn, $_POST['description']);
  
  $sql = "UPDATE projects SET 
          project_name='$project_name', 
          assign_to='$assign_to', 
          deadline='$deadline',
		  start_date='$start_date',
          status='$status', 
          description='$description' 
          WHERE id=$id";

if (mysqli_query($conn, $sql)) {
    header("Location: projects_list.php?msg=Project Updated Successfully");
    exit;
  } else {
    $message = "Error: " . mysqli_error($conn);
  }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header"><h2>Edit Project</h2></div>
      <div class="card-body">
        <?php if ($message): ?><div class="alert alert-danger"><?= $message; ?></div><?php endif; ?>

<form method="POST">
          <div class="row g-3">
		  
				
                <div class="col-md-6">
                  <label class="form-label">Client Name (Project)</label>
                  <select name="project_name" class="form-select" required>
                    <option value="">Select Client</option>
                    <?php while ($client = mysqli_fetch_assoc($clients_result)) { ?>
                      <option value="<?= $client['id']; ?>" 
                        <?= ($project['project_name'] == $client['id']) ? 'selected' : ''; ?>>
                        <?= htmlspecialchars($client['name']); ?>
                      </option>
                    <?php } ?>
                  </select>
                </div>

<div class="col-md-6">
                  <label class="form-label">Assign To (Team Member)</label>
                  <select name="assign_to" class="form-select">
                    <option value="">Select Team Member</option>
                    <?php while ($team = mysqli_fetch_assoc($team_result)) { ?>
                      <option value="<?= $team['id']; ?>" 
                        <?= ($project['assign_to'] == $team['id']) ? 'selected' : ''; ?>>
                        <?= htmlspecialchars($team['name']); ?>
                      </option>
                    <?php } ?>
                  </select>
                </div>

<div class="col-md-6">
              <label class="form-label">Start date</label>
              <input type="date" name="start_date" class="form-control" value="<?= $project['start_date']; ?>">
            </div>

<div class="col-md-6">
              <label class="form-label">Deadline</label>
              <input type="date" name="deadline" class="form-control" value="<?= $project['deadline']; ?>">
            </div>

<div class="col-md-6">
              <label class="form-label">Status</label>
              <select name="status" class="form-select">
                <option <?= $project['status']=='Ongoing'?'selected':''; ?>>Ongoing</option>
                <option <?= $project['status']=='Completed'?'selected':''; ?>>Completed</option>
                <option <?= $project['status']=='Pending'?'selected':''; ?>>Pending</option>
              </select>
            </div>

<div class="col-12">
              <label class="form-label">Message</label>
              <textarea name="description" class="form-control" rows="3"><?= $project['description']; ?></textarea>
            </div>

<div class="col-12">
              <button type="submit" class="btn btn-success">Update Project</button>
              <a href="projects_list.php" class="btn btn-secondary">Cancel</a>
            </div>

</div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>