Zploit 0-Day Shell

:: Editing File: product_add.php

<?php 
require_once 'db.php'; 
require_once 'session.php'; 
include "header.php";

// Fetch categories
$categories = [];

$sql = "SELECT id,name FROM categories ORDER BY name ASC";
$result = mysqli_query($conn,$sql);

if($result){
    while($row = mysqli_fetch_assoc($result)){
        $categories[] = $row;
    }
}

// Fetch subcategories
$subcategories = [];

$sql = "SELECT id,name FROM subcategories ORDER BY name ASC";
$result1 = mysqli_query($conn,$sql);

if($result1){
    while($row = mysqli_fetch_assoc($result1)){
        $subcategories[] = $row;
    }
}

// Fetch sub_subcategories
$sub_subcategories = [];

$sql = "SELECT id,name FROM sub_subcategories ORDER BY name ASC";
$result2 = mysqli_query($conn,$sql);

if($result2){
    while($row = mysqli_fetch_assoc($result2)){
        $sub_subcategories[] = $row;
    }
}

mysqli_close($conn);
?>

<div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
<div class="breadcrumb-title pe-3">Products</div>

<li class="breadcrumb-item active">Add Product</li>

</ol>
</nav>
</div>

</div>

<div class="card-header">
<h6 class="mb-0">Add Product</h6>
</div>

<label class="form-label">Category</label>

<option value="">Select Category</option>

<?php foreach($categories as $cat){ ?>

<?php } ?>

</select>

</div>

<!-- Subcategory --

<label class="form-label">Sub Category</label>

<option value="">Select Sub Category</option>

</select>

</div>
-->

<label class="form-label">Sub Category</label>

<option value="">Select Sub Category</option>

<?php foreach($subcategories as $sub){ ?>

<?php } ?>

</select>

</div>

<!-- Sub Sub Category --

<label class="form-label">Sub Sub Category</label>

<option value="">Select Sub Sub Category</option>

</select>

</div>
-->

<label class="form-label">Sub Sub Category</label>

<option value="">Select Sub Sub Category</option>

<?php foreach($sub_subcategories as $s){ ?>

<?php } ?>

</select>

</div>

<label class="form-label">Product Name</label>

</div>

</div>

<label class="form-label">Product Image</label>

</div>

<label class="form-label">Actual Price</label>

</div>

<label class="form-label">Old Price</label>

</div>

<label class="form-label">Color Name</label>

</div>

<label class="form-label">Color Code</label>

</div>

</div>

<label class="form-label">Description</label>

</div>

<label class="form-label">Additional Information</label>

</div>

<label class="form-label">Shipping & Return</label>

</div>

Save Product

</button>

Back to List

</a>

</div>

</form>

</div>

<?php include "footer.php"; ?>

document.getElementById('productName').addEventListener('input', function () {

let name = this.value.trim();

let slug = name.toLowerCase()
.replace(/[\s_]+/g,'-')
.replace(/[^a-z0-9\-]/g,'')
.replace(/-+/g,'-')
.replace(/^-+|-+$/g,'');

document.getElementById('urlSlug').value = slug;

});

</script>