Zploit 0-Day Shell

:: Editing File: sub_subcategory_edit.php

<?php 
require_once 'db.php'; 
require_once 'session.php'; 
include "header.php";

// ✅ Check ID
if (!isset($_GET['id']) || empty($_GET['id'])) {
    $_SESSION['error'] = "Error: Sub Sub Category ID is missing.";
    header("Location: sub_subcategory_list.php"); 
    exit;
}

$subsub_id = (int)$_GET['id'];

// ✅ Fetch Sub Sub Category
$sql = "SELECT * FROM sub_subcategories WHERE id = ?";
$stmt = mysqli_prepare($conn, $sql);

if ($stmt) {
    mysqli_stmt_bind_param($stmt, "i", $subsub_id);
    mysqli_stmt_execute($stmt);
    $result = mysqli_stmt_get_result($stmt);
    $subsub = mysqli_fetch_assoc($result);
    mysqli_stmt_close($stmt);

if (!$subsub) {
        $_SESSION['error'] = "Sub Sub Category not found.";
        header("Location: sub_subcategory_list.php");
        exit;
    }
} else {
    $_SESSION['error'] = "Database error.";
    header("Location: sub_subcategory_list.php");
    exit;
}

// ✅ Fetch Categories
$categories = [];
$result = mysqli_query($conn,"SELECT id,name FROM categories ORDER BY name ASC");

while($row = mysqli_fetch_assoc($result)){
    $categories[] = $row;
}

// ✅ Fetch Subcategories
$subcategories = [];
$result2 = mysqli_query($conn,"SELECT id,name FROM subcategories ORDER BY name ASC");

while($row = mysqli_fetch_assoc($result2)){
    $subcategories[] = $row;
}
?>

<div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">

<div class="breadcrumb-title pe-3">Sub Sub Category</div>

<li class="breadcrumb-item active">
Edit Sub Sub Category
</li>

</ol>

</nav>

</div>
</div>

<div class="card-header">
<h6 class="mb-0">
Edit Sub Sub Category - <?= htmlspecialchars($subsub['name']) ?>
</h6>
</div>

<div class="mb-3 col-sm-6">

<label class="form-label">Select Category</label>

<option value="">Select Category</option>

<?php foreach($categories as $cat){ ?>

<?= htmlspecialchars($cat['name']) ?>

</option>

<?php } ?>

</select>

</div>

<div class="mb-3 col-sm-6">

<label class="form-label">Select Sub Category</label>

<option value="">Select Sub Category</option>

<?php foreach($subcategories as $sub){ ?>

<?= htmlspecialchars($sub['name']) ?>

</option>

<?php } ?>

</select>

</div>

<div class="mb-3 col-sm-6">

<label class="form-label">Sub Sub Category Name</label>

<input type="text" class="form-control" id="subSubName" name="name"
value="<?= htmlspecialchars($subsub['name']); ?>" required>

</div>

<div class="mb-3 col-sm-6">

<label class="form-label">Subheading</label>

</div>

<div class="mb-3 col-sm-4">

<label class="form-label">Image Upload</label>

<?php if (!empty($subsub['image'])): ?>

Current Image :
<a href="../uploads/sub_subcategory/<?= $subsub['image'] ?>" target="_blank">
View
</a>

</small>

<?php endif; ?>

</div>

<div class="mb-3 col-sm-4">

</div>

<div class="mb-3 col-sm-4">

<label class="form-label">Sort Order</label>

</div>

<div class="mb-3 col-sm-12">

<label class="form-label">Content</label>

<?= htmlspecialchars($subsub['content']); ?>

</textarea>

</div>

<button type="submit" class="btn btn-success">
Update Sub Sub Category
</button>

</div>

</form>

</div>

</div>
</div>

<script>

document.getElementById('subSubName').addEventListener('input',function(){

let name=this.value.trim();

let slug=name.toLowerCase()
.replace(/[\s_]+/g,'-')
.replace(/[^a-z0-9\-]/g,'')
.replace(/-+/g,'-')
.replace(/^-+|-+$/g,'');

document.getElementById('urlSlug').value=slug;

});

</script>

<?php include "footer.php"; ?>