Zploit 0-Day Shell

:: Editing File: team_members_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Team Member";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    $position = mysqli_real_escape_string($conn, $_POST['position']);
    $employee_id = mysqli_real_escape_string($conn, $_POST['employee_id']);
    $joining_date = mysqli_real_escape_string($conn, $_POST['joining_date']);
    $address = mysqli_real_escape_string($conn, $_POST['address']);
    $contact_number = mysqli_real_escape_string($conn, $_POST['contact_number']);
    $email_id = mysqli_real_escape_string($conn, $_POST['email_id']);

$sql = "INSERT INTO team_members (name, position, employee_id, joining_date, address, contact_number, email_id)
            VALUES ('$name', '$position', '$employee_id', '$joining_date', '$address', '$contact_number', '$email_id')";

if (mysqli_query($conn, $sql)) {
        header("Location: team_members_list.php?msg=Team Member Added Successfully");
        exit;
    } else {
        $message = "Database Error: " . mysqli_error($conn);
    }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header pb-0">
        <h2>Add New Team Member</h2>
      </div>

<div class="col-md-6">
              <label class="form-label">Position</label>
              <input type="text" name="position" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Employee ID</label>
              <input type="text" name="employee_id" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Joining Date</label>
              <input type="date" name="joining_date" class="form-control" required>
            </div>

<div class="col-md-12">
              <label class="form-label">Address</label>
              <textarea name="address" class="form-control" rows="3" required></textarea>
            </div>

<div class="col-md-6">
              <label class="form-label">Contact Number</label>
              <input type="text" name="contact_number" class="form-control" maxlength="15" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Email ID</label>
              <input type="email" name="email_id" class="form-control" required>
            </div>

</div>

<div class="mt-4">
            <button type="submit" class="btn btn-success">Save</button>
            <a href="team_members_list.php" class="btn btn-secondary">Cancel</a>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>