Zploit 0-Day Shell

:: Editing File: tasks_list.php

<?php
// ✅ Page title
$page_title = "Task List";

// Include common layout
include 'header.php';
include 'breadcrumb.php';
include 'menu.php';

$result = mysqli_query($conn, "SELECT * FROM tasks ORDER BY id DESC");

$sql = "
SELECT 
    t.*, 
    tm.name AS team_name
FROM tasks t
LEFT JOIN team_members tm ON t.assign_to = tm.id
ORDER BY t.id DESC
";
$result = mysqli_query($conn, $sql);

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header pb-0 d-flex justify-content-between align-items-center">
        <h2>Tasks List</h2>
        <a href="tasks_add.php" class="btn btn-primary">+ Add New Task</a>
      </div>
       <div class="card-body">
            <div class="dt-ext table-responsive">
              <table class="display" id="export-button">
                <thead>
					<tr>
              <th>ID</th>
              <th>Task Name</th>
              <th>Assign To</th>
              <th>Task Type</th>
              <th>Status</th>
			  <th>Start date</th>
			  <th>End Date</th>
			  
              <th>Message</th>
              <th>Action</th>
            </tr>
          </thead>
          <tbody>
            <?php while ($row = mysqli_fetch_assoc($result)): ?>
              
              <tr>
                <td><?= $row['id']; ?></td>
                <td><?= htmlspecialchars($row['task_name']); ?></td>
                <td><?= htmlspecialchars($row['team_name']); ?></td>
                <td><?= htmlspecialchars($row['task_type']); ?></td>
                <td><?= htmlspecialchars($row['task_status']); ?></td>
				<td><?= htmlspecialchars($row['start_date']); ?></td>
				<td><?= htmlspecialchars($row['due_date']); ?></td>
				
                <td><?= htmlspecialchars($row['message']); ?></td>
                
				
				 <td>
                  <a href="tasks_edit.php?id=<?= $row['id']; ?>" class='btn btn-warning btn-sm'>
								  <i class='fa fa-edit'></i> Edit
								</a>
                  <a href="tasks_delete.php?id=<?= $row['id']; ?>"  class='btn btn-danger btn-sm' 
								   onclick=\"return confirm('Are you sure you want to delete this quotation?');\">
								  <i class='fa fa-trash'></i> Delete
								</a>
                </td>
				
              </tr>
            <?php endwhile; ?>
          </tbody>
        </table>
      </div>
	  </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ?>