Zploit 0-Day Shell

:: Editing File: mail.php

<?php
// Enable error reporting for debugging if needed (set to 0 in production)
error_reporting(1);
ini_set('display_errors', 1);

header('Content-Type: application/json');

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $name = isset($_POST['name']) ? strip_tags(trim($_POST['name'])) : '';
    $phone = isset($_POST['phone']) ? strip_tags(trim($_POST['phone'])) : '';
    $email = isset($_POST['email']) ? filter_var(trim($_POST['email']), FILTER_SANITIZE_EMAIL) : '';
    $message = isset($_POST['message']) ? strip_tags(trim($_POST['message'])) : '';

// Simple backend validation check
    if (empty($name) || empty($phone) || empty($message)) {
        echo json_encode([
            'status' => 'error',
            'message' => 'Please fill in all required fields.'
        ]);
        exit;
    }

if (!empty($email) && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
        echo json_encode([
            'status' => 'error',
            'message' => 'Invalid email address provided.'
        ]);
        exit;
    }

// Email configuration
    $to = "harshad.mbtb@gmail.com";
    $subject = "New Website Contact Inquiry from " . $name;

// Email body content format
    $email_content = "You have received a new message from your website contact form.\n\n";
    $email_content .= "Full Name: " . $name . "\n";
    $email_content .= "Phone Number: " . $phone . "\n";
    $email_content .= "Email Address: " . ($email ? $email : 'Not Provided') . "\n";
    $email_content .= "Message:" . $message . "\n";

// Email headers
    $headers = "From: " . ($email ? $email : "noreply@gemerik.com") . "\r\n";
    if (!empty($email)) {
        $headers .= "Reply-To: " . $email . "\r\n";
    }
    $headers .= "X-Mailer: PHP/" . phpversion();

// Send email using PHP mail()
    if (mail($to, $subject, $email_content, $headers)) {
        echo json_encode([
            'status' => 'success',
            'message' => 'Thank You! Your message has been sent successfully.'
        ]);
    } else {
        echo json_encode([
            'status' => 'error',
            'message' => 'Oops! Something went wrong and we could not send your message.'
        ]);
    }
} else {
    echo json_encode([
        'status' => 'error',
        'message' => 'Invalid request method.'
    ]);
}
?>