Zploit 0-Day Shell

:: Editing File: portfolio_add.php

<?php
ob_start();
include 'header.php';

/*$page_grandparent = "Portfolio CRM ";*/ 
$page_parent = "Portfolio CRM";
$page_parent_link = "portfolio.php"; 
$page_title = "Add Portfolio CRM";

include 'breadcrumb.php';
include 'menu.php';

$message = "";

// ✅ Handle Form Submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $work_section_id = mysqli_real_escape_string($conn, $_POST['work_section_id']);
    $status = mysqli_real_escape_string($conn, $_POST['status']);
    $video_link = mysqli_real_escape_string($conn, $_POST['video_link'] ?? '');
    $website_link = mysqli_real_escape_string($conn, $_POST['website_link'] ?? '');

// ✅ Fetch section name to identify folder
    $sectionQuery = mysqli_query($conn, "SELECT section_name FROM work_sections WHERE id='$work_section_id'");
    $sectionRow = mysqli_fetch_assoc($sectionQuery);
    $section_name = strtolower(trim($sectionRow['section_name']));
    $folder_name = preg_replace('/[^a-z0-9]+/', '_', $section_name);
    $uploadDir = "uploads/portfolio/$folder_name/";

if (!file_exists($uploadDir)) {
        mkdir($uploadDir, 0777, true);
    }

// ✅ If section is "Video Production"
    if ($section_name === 'video production') {
        if (!empty($video_link)) {
            $sql = "INSERT INTO portfolio_photos (work_section_id, status, video_link) 
                    VALUES ('$work_section_id', '$status', '$video_link')";
            if (mysqli_query($conn, $sql)) {
                $message = "<div class='alert alert-success'>Video portfolio added successfully!</div>";
            } else {
                $message = "<div class='alert alert-danger'>Database Error: " . mysqli_error($conn) . "</div>";
            }
        } else {
            $message = "<div class='alert alert-danger'>Please enter a video link.</div>";
        }

// ✅ If section is "Website Development"
    } elseif ($section_name === 'website development') {
        if (!empty($_FILES['image']['name'])) {
            $imageName = time() . "_" . basename($_FILES['image']['name']);
            $targetFile = $uploadDir . $imageName;

if (move_uploaded_file($_FILES['image']['tmp_name'], $targetFile)) {
                $sql = "INSERT INTO portfolio_photos (work_section_id, status, img_name, website_link) 
                        VALUES ('$work_section_id', '$status', '$imageName', '$website_link')";
                if (mysqli_query($conn, $sql)) {
                    $message = "<div class='alert alert-success'>Website portfolio added successfully!</div>";
                } else {
                    $message = "<div class='alert alert-danger'>Database Error: " . mysqli_error($conn) . "</div>";
                }
            } else {
                $message = "<div class='alert alert-danger'>Error uploading image file.</div>";
            }
        } else {
            $message = "<div class='alert alert-danger'>Please select an image to upload.</div>";
        }

// ✅ For all other sections
    } else {
        if (!empty($_FILES['image']['name'])) {
            $imageName = time() . "_" . basename($_FILES['image']['name']);
            $targetFile = $uploadDir . $imageName;

if (move_uploaded_file($_FILES['image']['tmp_name'], $targetFile)) {
                $sql = "INSERT INTO portfolio_photos (work_section_id, status, img_name) 
                        VALUES ('$work_section_id', '$status', '$imageName')";
                if (mysqli_query($conn, $sql)) {
                    $message = "<div class='alert alert-success'>Portfolio added successfully!</div>";
                } else {
                    $message = "<div class='alert alert-danger'>Database Error: " . mysqli_error($conn) . "</div>";
                }
            } else {
                $message = "<div class='alert alert-danger'>Error uploading image file.</div>";
            }
        } else {
            $message = "<div class='alert alert-danger'>Please select an image to upload.</div>";
        }
    }
}
?>

<div class="page-body">
    <div class="container-fluid">
        <div class="row">
            <div class="col-sm-12">
                <div class="card">
                    <div class="card-header pb-0">
                        <h2>Add Portfolio</h2>
                    </div>
                    <div class="card-body">
                        <?= $message; ?>
                        <form method="POST" enctype="multipart/form-data">
                            <div class="row">
                                
                                <div class="col-md-6">
                                    <label class="form-label">Work Section</label>
                                    <select name="work_section_id" id="work_section_id" class="form-select form-control" required>
                                        <option value="">-- Select Work Section --</option>
                                        <?php
                                        $sectionQuery = mysqli_query($conn, "SELECT * FROM work_sections ORDER BY section_name ASC");
                                        while ($row = mysqli_fetch_assoc($sectionQuery)) {
                                            echo "<option value='{$row['id']}'>{$row['section_name']}</option>";
                                        }
                                        ?>
                                    </select>
                                </div>

<div class="col-md-6">
                                    <label class="form-label">Status</label>
                                    <select name="status" class="form-select">
                                        <option value="Active">Active</option>
                                        <option value="Inactive">Inactive</option>
                                    </select>
                                </div>

<div class="col-md-6" id="image_upload_section">
                                    <label class="form-label">Upload Image</label>
                                    <input type="file" name="image" id="image" class="form-control">
                                </div>

<div class="col-md-6" id="video_link_section" style="display: none;">
                                    <label class="form-label">Video Link (YouTube/Vimeo)</label>
                                    <input type="text" name="video_link" id="video_link" class="form-control" placeholder="Paste video URL (e.g., https://youtu.be/xyz)">
                                </div>

<div class="col-md-6" id="website_link_section" style="display: none;">
                                    <label class="form-label">Website Link</label>
                                    <input type="text" name="website_link" id="website_link" class="form-control" placeholder="e.g., https://www.example.com">
                                </div>

</div>

<br>
                            <div class="text-start">
                                <button type="submit" class="btn btn-success">Save Portfolio</button>
                                <a href="portfolio.php" class="btn btn-secondary">Cancel</a>
                            </div>
                        </form>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>

<script>
document.getElementById('work_section_id').addEventListener('change', function() {
    var selectedText = this.options[this.selectedIndex].text.toLowerCase();
    
    // Hide all conditional sections
    document.getElementById('image_upload_section').style.display = 'block';
    document.getElementById('video_link_section').style.display = 'none';
    document.getElementById('website_link_section').style.display = 'none';
    
    // Reset required attributes
    document.getElementById('image').removeAttribute('required');
    document.getElementById('video_link').removeAttribute('required');
    document.getElementById('website_link').removeAttribute('required');

// Show/Hide based on section
    if (selectedText.includes('video production')) {
        document.getElementById('image_upload_section').style.display = 'none';
        document.getElementById('video_link_section').style.display = 'block';
        document.getElementById('video_link').setAttribute('required', 'required');
    } 
    else if (selectedText.includes('website development')) {
        document.getElementById('image_upload_section').style.display = 'block';
        document.getElementById('website_link_section').style.display = 'block';
        document.getElementById('image').setAttribute('required', 'required');
        document.getElementById('website_link').setAttribute('required', 'required');
    } 
    else {
        document.getElementById('image_upload_section').style.display = 'block';
        document.getElementById('image').setAttribute('required', 'required');
    }
});
</script>