Zploit 0-Day Shell

:: Editing File: design_details_edit.php

<?php
include 'header.php';
include 'menu.php';
include 'breadcrumb.php';

$id = $_GET['id'];
$row = mysqli_fetch_assoc(mysqli_query($conn, "SELECT * FROM design_details WHERE id='$id'"));

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $clients_id = $_POST['clients_id'];
    $start_date = $_POST['start_date'];
    $expiry_date = $_POST['expiry_date'];
    $services = $_POST['services'];
    $amount = $_POST['amount'];
    $notes = $_POST['notes'];
    $comments = $_POST['comments'];

$sql = "UPDATE design_details SET 
            clients_id='$clients_id', start_date='$start_date', expiry_date='$expiry_date',
            services='$services', amount='$amount', notes='$notes', comments='$comments'
            WHERE id='$id'";

if (mysqli_query($conn, $sql)) {
        header("Location: design_details_list.php?msg=Updated successfully");
        exit;
    } else {
        echo "Error: " . mysqli_error($conn);
    }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header"><h4>Edit Design Details</h4></div>
      <div class="card-body">
        <form method="POST">
          <div class="row g-3">
            <div class="col-md-4">
              <label>Client</label>
              <select name="clients_id" class="form-select">
                <?php
                $clients = mysqli_query($conn, "SELECT id, name FROM clients ORDER BY name ASC");
                while ($c = mysqli_fetch_assoc($clients)) {
                    $sel = ($c['id'] == $row['clients_id']) ? 'selected' : '';
                    echo "<option value='{$c['id']}' $sel>{$c['name']}</option>";
                }
                ?>
              </select>
            </div>

<div class="col-md-4">
              <label>Start Date</label>
              <input type="date" name="start_date" class="form-control" value="<?= $row['start_date'] ?>">
            </div>

<div class="col-md-4">
              <label>Expiry Date</label>
              <input type="date" name="expiry_date" class="form-control" value="<?= $row['expiry_date'] ?>">
            </div>

<div class="col-md-4">
              <label>Services</label>
              <input type="text" name="services" class="form-control" value="<?= $row['services'] ?>">
            </div>

<div class="col-md-4">
              <label>Amount</label>
              <input type="number" step="0.01" name="amount" class="form-control" value="<?= $row['amount'] ?>">
            </div>

<div class="col-md-6">
              <label>Notes</label>
              <textarea name="notes" class="form-control"><?= $row['notes'] ?></textarea>
            </div>

<div class="col-md-6">
              <label>Comments</label>
              <textarea name="comments" class="form-control"><?= $row['comments'] ?></textarea>
            </div>
          </div>

<div class="mt-3">
            <button type="submit" class="btn btn-success">Update</button>
            <a href="design_details_list.php" class="btn btn-secondary">Cancel</a>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>
<?php include 'footer.php'; ?>