Zploit 0-Day Shell

:: Editing File: tasks_edit.php

<?php
ob_start();
include 'header.php';
$page_title = "Edit Task";
$page_parent = "Task";
$page_parent_link = "tasks_list.php";
include 'breadcrumb.php';
include 'menu.php';

$id = $_GET['id'] ?? 0;
$result = mysqli_query($conn, "SELECT * FROM tasks WHERE id=$id");
$task = mysqli_fetch_assoc($result);

if (!$task) {
  die("Task not found!");
}

// Fetch team members
$team_result = mysqli_query($conn, "SELECT id, name FROM team_members ORDER BY name ASC");

$message = "";

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
  $task_name = mysqli_real_escape_string($conn, $_POST['task_name']);
  $assign_to = mysqli_real_escape_string($conn, $_POST['assign_to']);
  $task_type = mysqli_real_escape_string($conn, $_POST['task_type']);
  $task_status = mysqli_real_escape_string($conn, $_POST['task_status']);
  
  $start_date = mysqli_real_escape_string($conn, $_POST['start_date']);
  $due_date = mysqli_real_escape_string($conn, $_POST['due_date']);
  $priority = mysqli_real_escape_string($conn, $_POST['priority']);
  
  $msg = mysqli_real_escape_string($conn, $_POST['message']);

$sql = "UPDATE tasks SET 
          task_name='$task_name', 
          assign_to='$assign_to', 
          task_type='$task_type', 
          task_status='$task_status', 
		  start_date='$start_date', 
          due_date='$due_date', 
          priority='$priority',
          message='$msg' 
          WHERE id=$id";

if (mysqli_query($conn, $sql)) {
    header("Location: tasks_list.php?msg=Task Updated Successfully");
    exit;
  } else {
    $message = "Error: " . mysqli_error($conn);
  }
}
?>

<form method="POST">
          <div class="row g-3">
            <div class="col-md-6">
              <label class="form-label">Task Name</label>
              <input type="text" name="task_name" class="form-control" value="<?= $task['task_name']; ?>" required>
            </div>

<div class="col-md-6">
                  <label class="form-label">Assign To (Team Member)</label>
                  <select name="assign_to" class="form-select">
                    <option value="">Select Team Member</option>
                    <?php while ($team = mysqli_fetch_assoc($team_result)) { ?>
                      <option value="<?= $team['id']; ?>" 
                        <?= ($task['assign_to'] == $team['id']) ? 'selected' : ''; ?>>
                        <?= htmlspecialchars($team['name']); ?>
                      </option>
                    <?php } ?>
                  </select>
                </div>
            <div class="col-md-6">
              <label class="form-label">Task Type</label>
              <input type="text" name="task_type" class="form-control" value="<?= $task['task_type']; ?>">
            </div>

<div class="col-md-6">
              <label class="form-label">Task Status</label>
              <select name="task_status" class="form-select">
                <option <?= $task['task_status']=='Pending'?'selected':''; ?>>Pending</option>
                <option <?= $task['task_status']=='In Progress'?'selected':''; ?>>In Progress</option>
                <option <?= $task['task_status']=='Completed'?'selected':''; ?>>Completed</option>
              </select>
            </div>
			
			<div class="col-md-4">
              <label class="form-label">Start Date</label>
              <input type="date" name="start_date" class="form-control" value="<?= $task['start_date']; ?>">
            </div>

<div class="col-md-4">
              <label class="form-label">End Date</label>
              <input type="date" name="due_date" class="form-control" value="<?= $task['due_date']; ?>">
            </div>
			
			
			<div class="col-md-4">
				<label class="form-label">Priority</label>
				<select name="priority" class="form-select">
					<option <?= $task['priority']=='Low'?'selected':''; ?>>Low</option>
					<option <?= $task['priority']=='Medium'?'selected':''; ?>>Medium</option>
					<option <?= $task['priority']=='High'?'selected':''; ?>>High</option>
				</select>
            </div>

<div class="col-12">
              <label class="form-label">Message</label>
              <textarea name="message" class="form-control" rows="3"><?= $task['message']; ?></textarea>
            </div>

<div class="col-12">
              <button type="submit" class="btn btn-success">Update Task</button>
              <a href="tasks_list.php" class="btn btn-secondary">Cancel</a>
            </div>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>