AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Edit the file

<?php
include_once 'inc/function.php';
$admin=new Admin();

if(isset($_GET['action']) || isset($_GET['task'])){
	if($_POST['action']=='edit'){
		$response=$admin->edit_static($db,$_POST);
		if($response){ 
			$_SESSION['success']="Content Updated Successfully"; 
		}
	}
	if($_GET['task']=='edit'){
		$result=mysqli_fetch_array(mysqli_query($db,"SELECT * FROM static WHERE id='".$_GET['id']."'"));
	}
}

include_once 'inc/header.php';
?>

<div id="content" class="container-fluid">
  <ol class="breadcrumb">
    <li>Home</li>
    <li>Static Management</li>
    <li>View Static</li>
  </ol>
  <?php if(!empty($_SESSION['success'])) { ?>
  <div class="alert alert-success">
  	<strong>Success!</strong> <?=$_SESSION['success']?>
  </div>
  <?php } ?>
  <?php if(!empty($_GET['task']) && $_GET['task']=='view') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <h1 class="panel-title"><i class="fa fa-link"></i> View Static</h1>
    </div>
    <div class="panel-body">
      <form method="post" id="table-blog">
        <div class="table-responsive">
          <table class="table table-striped table-bordered table-hover">
            <tr>
              <th class="text-left">S.No.</th>
              <th class="text-left">Page</th>
              <th class="text-right" width="9%">Action</th>
            </tr>
            <?php
			    $i=1;
				$apps=$admin->get_data($db,'static');
				foreach($apps as $app):
				extract($app);
			?>
            <tr>
              <td class="text-left"><?=$i?></td>
              <td class="text-left"><?=$title?></td>
              <td class="text-right"> 
              	<a href="view-static.php?task=edit&id=<?=$id?>" class="btn btn-primary btn-xs" title="Edit" data-toggle="tooltip"><i class="fa fa-pencil"></i></a>
            </tr>
            <?php
				$i++;
				endforeach;
		    ?>
          </table>
        </div>
      </form>
    </div>
  </div> 
  <?php } if(!empty($_GET['task']) && $_GET['task']=='edit') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <div class="pull-right">
        <button type="submit" form="form-content" title="Save" data-toggle="tooltip" class="btn btn-success"><i class="fa fa-save"></i></button>
        <a href="view-static.php?task=view" title="Cancel" data-toggle="tooltip" class="btn btn-danger"><i class="fa fa-times"></i></a> </div>
      <h1 class="panel-title"><i class="fa fa-link"></i> Edit <?=$result['title']?></h1>
    </div>
    <div class="panel-body">
      <form method="post" id="form-content" class="form-horizontal" enctype="multipart/form-data"><br>
		<input type="hidden" name="action" value="edit">
        <input type="hidden" name="id" value="<?=$result['id']?>">
        <?php if($result['text']=='Active'){ ?>
        <div class="form-group">
          <label class="col-sm-2 control-label">Content</label>
          <div class="col-sm-10">
            <textarea name="content" id="editor" class="form-control"><?=$result['content']?></textarea>
          </div>
        </div>
        <?php } if($result['file']=='Active'){ ?>
        <div class="form-group">
          <label class="col-sm-2 control-label">Image</label>
          <div class="col-sm-10">
            <input type="file" name="image" class="form-control">
          </div>
        </div>
        <?php } ?>
      </form>
    </div>
  </div>
  <?php } ?>
</div>

<?php include_once 'inc/footer.php'; ?>

Rename: -