Zploit 0-Day Shell

:: Editing File: category_edit.php

<?php 
require_once 'db.php'; 
require_once 'session.php'; 
include "header.php";

// ✅ 1. Check for ID and Fetch Data
if (!isset($_GET['id']) || empty($_GET['id'])) {
    $_SESSION['error'] = "Error: Category ID is missing for editing.";
    header("Location: category.php"); 
    exit;
}

$category_id = (int)$_GET['id'];

// ✅ 2. Fetch Data from Database
$sql = "SELECT * FROM categories WHERE id = ?";
$stmt = mysqli_prepare($conn, $sql);

if ($stmt) {
    mysqli_stmt_bind_param($stmt, "i", $category_id);
    mysqli_stmt_execute($stmt);
    $result = mysqli_stmt_get_result($stmt);
    $category = mysqli_fetch_assoc($result);
    mysqli_stmt_close($stmt);

if (!$category) {
        $_SESSION['error'] = "Error: Category not found.";
        header("Location: category.php");
        exit;
    }
} else {
    $_SESSION['error'] = "Database error: Could not prepare statement.";
    header("Location: category.php");
    exit;
}

// Note: Do not close $conn — footer may use it
?>

<div class="page-content-wrapper">
    <div class="page-content">
        
        
        <div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
            <div class="breadcrumb-title pe-3">Category</div>
            <div class="ps-3">
                <nav aria-label="breadcrumb">
                    <ol class="breadcrumb mb-0 p-0 align-items-center">
                        <li class="breadcrumb-item">
                            <a href="dashboard.php"><ion-icon name="home-outline"></ion-icon></a>
                        </li>
                        <li class="breadcrumb-item active" aria-current="page">Edit Category</li>
                    </ol>
                </nav>
            </div>
        </div>

<div class="card">
            <div class="card-header">
                <h6 class="mb-0">
                    Edit Category - <?= htmlspecialchars($category['name'] ?? '') ?>
                </h6>
            </div>
            <div class="card-body">
				
                <form action="category_update.php" method="POST" enctype="multipart/form-data">
                    <input type="hidden" name="category_id" value="<?= htmlspecialchars($category['id']); ?>">
                    <input type="hidden" name="old_image_path" value="<?= htmlspecialchars($category['image']); ?>">

<div class="mb-3 col-sm-6">
                            <label class="form-label">Category Name</label>
                            <input type="text" class="form-control" id="categoryName" name="name"
                                value="<?= htmlspecialchars($category['name'] ?? ''); ?>" required>
                        </div>

<div class="mb-3 col-sm-6">
                            <label class="form-label">Subheading</label>
                            <input type="text" class="form-control" name="subheading"
                                value="<?= htmlspecialchars($category['subheading'] ?? ''); ?>">
                        </div>

<div class="mb-3 col-sm-4">
                            <label class="form-label">Image Upload</label>
                            <input type="file" class="form-control" name="image" accept="image/*">
                            <?php if (!empty($category['image'])): ?>
                                <small class="form-text text-muted mt-1">
                                    Current Image: 
                                    <a href="../uploads/collectiongroup/<?= htmlspecialchars($category['image']); ?>" target="_blank">
                                        View
                                    </a> | Upload a new file to replace it.
                                </small>
                            <?php else: ?>
                                <small class="form-text text-muted mt-1">No current image.</small>
                            <?php endif; ?>
                        </div>

<div class="mb-3 col-sm-4">
                            <label class="form-label">URL Slug</label>
                            <input type="text" class="form-control" id="urlSlug" name="url"
                                value="<?= htmlspecialchars($category['url'] ?? ''); ?>">
                        </div>

<!-- Sort Order --
                        <div class="mb-3 col-sm-4">
                            <label class="form-label">Sort Order</label>
                            <input type="number" class="form-control" name="sort_order"
                                value="<?= htmlspecialchars($category['sort_order'] ?? ''); ?>">
                        </div>

<div class="mb-3 col-sm-12">
                            <label class="form-label">Content / Description</label>
                            <textarea class="form-control" name="content" rows="5"><?= htmlspecialchars($category['content'] ?? ''); ?></textarea>
                        </div>

<div class="col-12 mt-4">
                            <button type="submit" class="btn btn-success">Update Category</button>
                            <a href="category.php" class="btn btn-warning">Back to List</a>
                        </div>
                    </div>	
                </form>
            
            </div>
        </div>		
    </div>	
</div>

<script>
document.getElementById('categoryName').addEventListener('input', function () {
    let name = this.value.trim();
    let slug = name.toLowerCase()
                   .replace(/[\s_]+/g, '-')
                   .replace(/[^a-z0-9\-]/g, '')
                   .replace(/-+/g, '-')
                   .replace(/^-+|-+$/g, '');
    document.getElementById('urlSlug').value = slug;
});
</script>

<?php include "footer.php"; ?>