AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Edit the file

<?php
include_once 'inc/function.php';
$admin=new Admin();

if(!empty($_GET['task'])){
	if($_GET['action']=='delete'){
		$result=mysqli_query($db,"DELETE FROM banner WHERE id='".$_GET['id']."'");
		$_SESSION['success']='Banner Deleted Successfully';
		echo '<script> window.location="view-banner.php?task=view"; </script>';
	}
	if($_POST['action']=='edit'){
		$response=$admin->edit_banner($db,$_POST);
		if($response){ 
			$_SESSION['success']="Banner Updated Successfully"; 
		}
	}
	if($_GET['task']=='edit'){
		$result=mysqli_fetch_array(mysqli_query($db,"SELECT * FROM banner WHERE id='".$_GET['id']."'"));
	}
}

include_once 'inc/header.php';
?>

<div id="content" class="container-fluid">
  <ol class="breadcrumb">
    <li>Home</li>
    <li>Banner Management</li>
    <li>View Banner</li>
  </ol>
  <?php if(!empty($_SESSION['success'])) { ?>
  <div class="alert alert-success">
  	<strong>Success!</strong> <?=$_SESSION['success']?>
  </div>
  <?php } ?>
  <?php if(!empty($_GET['task']) && $_GET['task']=='view') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <div class="pull-right">
        <a href="add-banner.php" class="btn btn-primary"><i class="fa fa-plus"></i></a>
      </div>
      <h1 class="panel-title"><i class="fa fa-file-image-o"></i> View Banner</h1>
    </div>
    <div class="panel-body">
      <form method="post" id="table-banner">
        <div class="table-responsive">
          <table class="table table-striped table-bordered table-hover">
            <tr>
              <th class="text-left">S.No.</th>
              <th class="text-left">Title</th>
              <th class="text-left">Image</th>
              <th class="text-left">Status</th>
              <th class="text-right" width="9%">Action</th>
            </tr>
            <?php
			    $i=1;
				$banners=$admin->get_data($db,'banner');
				foreach($banners as $banner):
				extract($banner);
			  ?>
            <tr>
              <td class="text-left"><?=$i?></td>
              <td class="text-left"><?=$title?></td>
              <td class="text-left"><img src="<?=SITEURL?>/files/banner/<?=$image?>" height="50"></td>
              <td class="text-left"><?=$status?></td>
              <td class="text-right">
              	<a href="view-banner.php?task=edit&id=<?=$id?>" class="btn btn-primary btn-xs"><i class="fa fa-pencil"></i></a> 
                <a href="javascript:void(0)" onClick="deleteAction('<?=$id?>')" class="btn btn-danger btn-xs"><i class="fa fa-times"></i></a></td>
            </tr>
            <?php
				$i++;
				endforeach;
		    ?>
          </table>
        </div>
      </form>
    </div>
  </div> 
  <?php } if(!empty($_GET['task']) && $_GET['task']=='edit') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <div class="pull-right">
        <button type="submit" form="form-banner" title="Save" data-toggle="tooltip" class="btn btn-success"><i class="fa fa-save"></i></button>
        <a href="view-banner.php?task=view" title="Cancel" data-toggle="tooltip" class="btn btn-danger"><i class="fa fa-times"></i></a> </div>
      <h1 class="panel-title"><i class="fa fa-file-image-o"></i> Edit Banner</h1>
    </div>
    <div class="panel-body">
      <form method="post" id="form-banner" class="form-horizontal" enctype="multipart/form-data"><br>
		<input type="hidden" name="action" value="edit">
        <input type="hidden" name="id" value="<?=$result['id']?>">
        <div class="form-group">
          <label class="col-sm-2 control-label">Title</label>
          <div class="col-sm-10">
            <input type="text" name="title" class="form-control" value="<?=$result['title']?>">
          </div>
        </div>
        <div class="form-group">
          <label class="col-sm-2 control-label">Image</label>
          <div class="col-sm-10">
            <input type="file" name="image" class="form-control">
            <div class="col-md-3 post-container">
             	<div class="post-image"><img src="<?=SITEURL?>/files/banner/<?=$result['image']?>" height="100"></div>
             </div>
          </div>
        </div>
        <div class="form-group">
          <label class="col-sm-2 control-label">Status</label>
          <div class="col-sm-10">
            <select name="status" class="form-control">
              <option value="Active" <?php if($result['status']=='Active'){ echo 'selected'; } ?>>Active</option>
              <option value="Inactive" <?php if($result['status']=='Inactive'){ echo 'selected'; } ?>>In Active</option>
            </select>
          </div>
        </div>
      </form>
    </div>
  </div>
  <?php } ?>
</div>

<?php include_once 'inc/footer.php'; ?>

Rename: -