Zploit 0-Day Shell

:: Editing File: slider_update.php

<?php
require_once 'db.php';
require_once 'session.php';

// Upload folder for slider
$upload_dir = '../uploads/slider/';

// Create folder if not exists
if (!is_dir($upload_dir)) {
    mkdir($upload_dir, 0777, true);
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

// 1️⃣ Get Request Data
    $slider_id   = (int)($_POST['slider_id'] ?? 0);
    $status      = trim($_POST['status'] ?? '');
    $old_image   = $_POST['old_image'] ?? '';

if ($slider_id <= 0) {
        $_SESSION['error'] = "❌ Invalid request: Slider ID missing.";
        header("Location: slider.php");
        exit;
    }

// 2️⃣ Handle Image Upload
    $new_image = $old_image;
    $file_uploaded = false;

if (!empty($_FILES['image']['name']) && $_FILES['image']['error'] === UPLOAD_ERR_OK) {

$file_name = $_FILES['image']['name'];
        $file_tmp  = $_FILES['image']['tmp_name'];
        $ext       = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
        $allowed   = ['jpg', 'jpeg', 'png', 'gif', 'webp'];

if (!in_array($ext, $allowed)) {
            $_SESSION['error'] = "⚠️ Invalid file type. Allowed: JPG, PNG, GIF, WEBP.";
            header("Location: slider_edit.php?id=$slider_id");
            exit;
        }

// Create unique file name
        $unique = uniqid('slider_') . "." . $ext;
        $target_path = $upload_dir . $unique;

if (move_uploaded_file($file_tmp, $target_path)) {
            $new_image = $unique;
            $file_uploaded = true;
        } else {
            $_SESSION['error'] = "⚠️ Error uploading image. Check folder permissions.";
            header("Location: slider_edit.php?id=$slider_id");
            exit;
        }
    }

// 3️⃣ Update Query
    $sql = "UPDATE slider 
            SET image = ?, status = ?
            WHERE id = ?";

$stmt = mysqli_prepare($conn, $sql);

if (!$stmt) {
        $_SESSION['error'] = "❌ DB Error: " . mysqli_error($conn);
        header("Location: slider_edit.php?id=$slider_id");
        exit;
    }

mysqli_stmt_bind_param($stmt, "ssi", $new_image, $status, $slider_id);

if (mysqli_stmt_execute($stmt)) {

// 4️⃣ Delete old file if new uploaded
        if ($file_uploaded && !empty($old_image) && $old_image !== $new_image) {
            $old_file = $upload_dir . $old_image;
            if (file_exists($old_file)) unlink($old_file);
        }

$_SESSION['success'] = "✅ Slider updated successfully!";
        header("Location: slider.php");
        exit;

} else {

$_SESSION['error'] = "❌ Failed to update: " . mysqli_error($conn);

// rollback file if DB fails
        if ($file_uploaded && file_exists($upload_dir . $new_image)) {
            unlink($upload_dir . $new_image);
        }

header("Location: slider_edit.php?id=$slider_id");
        exit;
    }

} else {
    $_SESSION['error'] = "Invalid request method.";
    header("Location: slider.php");
    exit;
}
?>