Zploit 0-Day Shell

:: Editing File: tasks_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Task";
$page_parent = "Task";
$page_parent_link = "tasks_list.php";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
  $task_name = mysqli_real_escape_string($conn, $_POST['task_name']);
  $assign_to = mysqli_real_escape_string($conn, $_POST['assign_to']);
  $task_type = mysqli_real_escape_string($conn, $_POST['task_type']);
  $task_status = mysqli_real_escape_string($conn, $_POST['task_status']);
  
  
  $start_date = mysqli_real_escape_string($conn, $_POST['start_date']);
  $due_date = mysqli_real_escape_string($conn, $_POST['due_date']);
  $priority = mysqli_real_escape_string($conn, $_POST['priority']);
  
  $msg = mysqli_real_escape_string($conn, $_POST['message']);

$sql = "INSERT INTO tasks (task_name, assign_to, task_type, task_status, start_date, due_date, priority, message)
          VALUES ('$task_name', '$assign_to', '$task_type', '$task_status', '$start_date', '$due_date', '$priority', '$msg')";
  if (mysqli_query($conn, $sql)) {
    header("Location: tasks_list.php?msg=Task Added Successfully");
    exit;
  } else {
    $message = "Error: " . mysqli_error($conn);
  }
}
?>

<?php // Fetch Team Members
				$teams_query = "SELECT id, name FROM team_members";
				$teams_result = mysqli_query($conn, $teams_query);?>
				
            <div class="col-md-6">
			<label class="form-label">Assign To</label>
			<select name="assign_to" class="form-control" required>
			  <option value="">Select Team Member</option>
			  <?php while ($team = mysqli_fetch_assoc($teams_result)) { ?>
				<option value="<?= $team['id']; ?>"><?= htmlspecialchars($team['name']); ?></option>
			  <?php } ?>
			</select>
		  </div>

<div class="col-md-6">
              <label class="form-label">Task Status</label>
              <select name="task_status" class="form-select">
                <option value="Pending">Pending</option>
                <option value="In Progress">In Progress</option>
                <option value="Completed">Completed</option>
              </select>
            </div>
			
			 <div class="col-md-4">
              <label class="form-label">Start Date</label>
              <input type="date" name="start_date" class="form-control">
            </div>

<div class="col-md-4">
              <label class="form-label">End Date</label>
              <input type="date" name="due_type" class="form-control">
            </div>
			
			
			<div class="col-md-4">
              <label class="form-label">Priority</label>
              <select name="priority" class="form-select">
                <option value="Low">Low</option>
                <option value="Medium">Medium</option>
                <option value="High">High</option>
              </select>
            </div>

<div class="col-12">
              <label class="form-label">Message</label>
              <textarea name="message" class="form-control" rows="3"></textarea>
            </div>

<div class="col-12">
              <button type="submit" class="btn btn-success">Save Task</button>
              <a href="tasks_list.php" class="btn btn-secondary">Cancel</a>
            </div>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>