Zploit 0-Day Shell

:: Editing File: subcategory_edit.php

<?php 
require_once 'db.php'; 
require_once 'session.php'; 
include "header.php";

// ✅ Check ID
if (!isset($_GET['id']) || empty($_GET['id'])) {
    $_SESSION['error'] = "Error: Subcategory ID is missing.";
    header("Location: subcategory.php"); 
    exit;
}

$subcategory_id = (int)$_GET['id'];

// ✅ Fetch Subcategory
$sql = "SELECT * FROM subcategories WHERE id = ?";
$stmt = mysqli_prepare($conn, $sql);

if ($stmt) {
    mysqli_stmt_bind_param($stmt, "i", $subcategory_id);
    mysqli_stmt_execute($stmt);
    $result = mysqli_stmt_get_result($stmt);
    $subcategory = mysqli_fetch_assoc($result);
    mysqli_stmt_close($stmt);

if (!$subcategory) {
        $_SESSION['error'] = "Subcategory not found.";
        header("Location: subcategory.php");
        exit;
    }
} else {
    $_SESSION['error'] = "Database error.";
    header("Location: subcategory.php");
    exit;
}

// ✅ Fetch Categories for dropdown
$categories = [];
$result = mysqli_query($conn,"SELECT id,name FROM categories ORDER BY name ASC");

while($row = mysqli_fetch_assoc($result)){
    $categories[] = $row;
}
?>

<div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
<div class="breadcrumb-title pe-3">Sub Category</div>

<li class="breadcrumb-item active">
Edit Sub Category
</li>

</ol>
</nav>
</div>

</div>

<div class="card-header">
<h6 class="mb-0">
Edit Sub Category - <?= htmlspecialchars($subcategory['name']) ?>
</h6>
</div>

<div class="mb-3 col-sm-6">

<label class="form-label">Select Category</label>

<option value="">Select Category</option>

<?php foreach($categories as $cat){ ?>

<?= htmlspecialchars($cat['name']) ?>

</option>

<?php } ?>

</select>

</div>

<div class="mb-3 col-sm-6">

<label class="form-label">Sub Category Name</label>

<input type="text" class="form-control" id="subcategoryName" name="name"
value="<?= htmlspecialchars($subcategory['name']); ?>" required>

</div>

<div class="mb-3 col-sm-6">

<label class="form-label">Subheading</label>

</div>

<div class="mb-3 col-sm-4">

<label class="form-label">Image Upload</label>

<?php if (!empty($subcategory['image'])): ?>

Current Image :
<a href="../uploads/subcategory/<?= $subcategory['image'] ?>" target="_blank">
View
</a>

</small>

<?php endif; ?>

</div>

<div class="mb-3 col-sm-4">

</div>

<div class="mb-3 col-sm-12">

<label class="form-label">Content</label>

<?= htmlspecialchars($subcategory['content']); ?>

</textarea>

</div>

Update Sub Category

</button>

Back to List

</a>

</div>

</form>

</div>

</div>
</div>

<script>

document.getElementById('subcategoryName').addEventListener('input',function(){

let name=this.value.trim();

let slug=name.toLowerCase()
.replace(/[\s_]+/g,'-')
.replace(/[^a-z0-9\-]/g,'')
.replace(/-+/g,'-')
.replace(/^-+|-+$/g,'');

document.getElementById('urlSlug').value=slug;

});

</script>

<?php include "footer.php"; ?>