Zploit 0-Day Shell

:: Editing File: images_products_edit.php

<?php 
require_once 'db.php'; 
require_once 'session.php'; 
include "header.php";

// 1. Validate ID and Fetch Image Data
if (!isset($_GET['id']) || empty($_GET['id'])) {
    $_SESSION['error'] = "Error: Image ID is missing for editing.";
    header("Location: products.php"); // Fallback to product list
    exit;
}

$image_id = (int)$_GET['id'];
$image_data = null;
$product_name = "Product Image"; // Default name

// Query to fetch the specific image details and the parent product name
$sql_image = "SELECT gi.*, g.name AS product_name
              FROM groupsimages gi
              JOIN products g ON gi.groups_id = g.id
              WHERE gi.id = ?";
$stmt_image = mysqli_prepare($conn, $sql_image);

if ($stmt_image) {
    mysqli_stmt_bind_param($stmt_image, "i", $image_id);
    mysqli_stmt_execute($stmt_image);
    $result_image = mysqli_stmt_get_result($stmt_image);
    $image_data = mysqli_fetch_assoc($result_image);
    mysqli_stmt_close($stmt_image);

if (!$image_data) {
        $_SESSION['error'] = "Error: Image not found.";
        header("Location: products.php");
        exit;
    }
    
    $groups_id = $image_data['groups_id'];
    $product_name = htmlspecialchars($image_data['image']);
} else {
    $_SESSION['error'] = "Database error: Could not prepare image fetch statement.";
    header("Location: products.php");
    exit;
}

// Close connection before HTML output
mysqli_close($conn);
?>

<div class="page-content-wrapper">
    <div class="page-content">
        
        <div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
            <div class="breadcrumb-title pe-3">Product Images</div>
            <div class="ps-3">
                <nav aria-label="breadcrumb">
                    <ol class="breadcrumb mb-0 p-0 align-items-center">
                        <li class="breadcrumb-item"><a href="dashboard.php"><ion-icon name="home-outline"></ion-icon></a></li>
                        <li class="breadcrumb-item"><a href="products.php">Products</a></li>
                        <li class="breadcrumb-item"><a href="images_products.php?groups_id=<?php echo $groups_id; ?>">Images for <?php echo $product_name; ?></a></li>
                        <li class="breadcrumb-item active" aria-current="page">Edit Image</li>
                    </ol>
                </nav>
            </div>
        </div>
        <?php 
        // Display session messages (success/error)
        if (isset($_SESSION['error'])): ?>
            <div class="alert alert-danger"><?php echo $_SESSION['error']; unset($_SESSION['error']); ?></div>
        <?php endif; ?>

<div class="card">
            <div class="card-header">
                <h6 class="mb-0">Edit Image for "<?php echo $product_name; ?>"</h6>
            </div>
            <div class="card-body">
                <form action="images_products_update.php" method="POST" enctype="multipart/form-data">
                    
                    <input type="hidden" name="image_id" value="<?php echo $image_data['id']; ?>">
                    <input type="hidden" name="groups_id" value="<?php echo $image_data['groups_id']; ?>">
                    <input type="hidden" name="old_image_path" value="<?php echo htmlspecialchars($image_data['image'] ?? ''); ?>">

<div class="row">
                        
                        <div class="mb-3 col-sm-12">
                            <label class="form-label">Current Image</label>
                            <div>
                                <?php 
                                    $src = !empty($image_data['image']) ? htmlspecialchars($image_data['image']) : 'assets/images/placeholder.jpg';
                                ?>
                                <img src="../uploads/groupsimages/<?php echo $src; ?>" alt="Current Image" style="max-width: 200px; height: auto; border: 1px solid #ddd;">
                            </div>
                        </div>

<div class="mb-3 col-sm-6">
                            <label class="form-label">Replace Image File (Optional)</label>
                            <input type="file" class="form-control" name="image" accept="image/*">
                            <div class="form-text">Upload a new file to replace the current image.</div>
                        </div>
                        
                        
                        
                        <div class="col-12 mt-4">
                            <button type="submit" class="btn btn-success">Update Image Details</button>
                            
                            <a href="images_products.php" class="btn btn-warning">Cancel / Back to List</a>
                        </div>
                    </div>	
                </form>
            
            </div>
        </div>		
    </div>	
</div>		
			
<?php 
include "footer.php";
?>