Zploit 0-Day Shell

:: Editing File: subcategory.php

<?php 
require_once 'db.php'; 
require_once 'session.php'; 
include "header.php";

// --- Initialize variables ---
$status  = $_GET['status'] ?? '';
$message = htmlspecialchars($_GET['msg'] ?? '');

$subcategories = [];

// --- Fetch Data with Category Name ---
$sql = "SELECT s.id, s.name, s.url, s.sort_order, s.created_at,
               c.name AS category_name
        FROM subcategories s
        LEFT JOIN categories c ON s.category_id = c.id
        ORDER BY s.sort_order ASC";

$stmt = mysqli_prepare($conn, $sql);

if ($stmt) {
    mysqli_stmt_execute($stmt);
    $result = mysqli_stmt_get_result($stmt);

if ($result && mysqli_num_rows($result) > 0) {
        while ($row = mysqli_fetch_assoc($result)) {
            $subcategories[] = $row;
        }
    }

mysqli_stmt_close($stmt);
} else {
    $status = 'danger';
    $message = 'Database query failed: ' . mysqli_error($conn);
}

mysqli_close($conn);
?>

<div class="page-content-wrapper">
<div class="page-content">

<div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
<div class="breadcrumb-title pe-3">Sub Category</div>
<div class="ps-3">
<nav aria-label="breadcrumb">
<ol class="breadcrumb mb-0 p-0 align-items-center">
<li class="breadcrumb-item">
<a href="dashboard.php"><ion-icon name="home-outline"></ion-icon></a>
</li>
<li class="breadcrumb-item active">Sub Category</li>
</ol>
</nav>
</div>
</div>

<div class="row mb-3">
<div class="col-sm-9">
<h5 class="mb-0">Sub Category List</h5>
</div>

<div class="col-sm-3 text-end">
<a href="subcategory_add.php" class="btn btn-primary">Add Sub Category</a>
</div>
</div>

<?php if ($status === 'success'): ?>
<div class="alert alert-success alert-dismissible fade show">
<strong>Success!</strong> <?= $message ?>
<button type="button" class="btn-close" data-bs-dismiss="alert"></button>
</div>
<?php elseif ($status === 'danger'): ?>
<div class="alert alert-danger alert-dismissible fade show">
<strong>Error!</strong> <?= $message ?>
<button type="button" class="btn-close" data-bs-dismiss="alert"></button>
</div>
<?php endif; ?>

<div class="table-responsive mt-3">
<table class="table align-middle" id="example">

<thead class="table-secondary">
<tr>
<th style="width:60px;">Sr No</th>
<th>Category</th>
<th>Name</th>
<th>URL</th>
<th>Created At</th>
<th class="text-center">Actions</th>
</tr>
</thead>

<tbody>

<?php if (empty($subcategories)): ?>

<tr>
<td colspan="6" class="text-center">No subcategories found.</td>
</tr>

<?php else: ?>

<?php $sr=1; foreach ($subcategories as $sub): ?>

<tr>

<a href="subcategory_edit.php?id=<?= $sub['id'] ?>" title="Edit">
<ion-icon name="create-outline"></ion-icon>
</a>

<a href="subcategory_delete.php?id=<?= $sub['id'] ?>"
onclick="return confirm('Are you sure you want to delete this subcategory?')"
class="text-danger" title="Delete">
<ion-icon name="trash-outline"></ion-icon>
</a>

</div>

</td>

</tr>

<?php endforeach; ?>

<?php endif; ?>

</tbody>
</table>
</div>

</div>
</div>

<?php include "footer.php"; ?>

<script src="assets/plugins/datatable/js/jquery.dataTables.min.js"></script>
<script src="assets/plugins/datatable/js/dataTables.bootstrap5.min.js"></script>
<script src="assets/js/table-datatable.js"></script>