Zploit 0-Day Shell

:: Editing File: qcategory_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Quotation Category";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$name   = mysqli_real_escape_string($conn, $_POST['name']);
    $status = isset($_POST['status']) ? 1 : 0;
    $created_at = date('Y-m-d H:i:s');

if (!empty($name)) {

$sql = "INSERT INTO quotation_categories (name, status, created_at)
                VALUES ('$name', '$status', '$created_at')";

if (mysqli_query($conn, $sql)) {
            header("Location: qcategory_list.php?msg=Quotation Category Added Successfully");
            exit;
        } else {
            $message = "Database Error: " . mysqli_error($conn);
        }

} else {
        $message = "Category name is required.";
    }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header pb-0">
        <h2>Add Quotation Category</h2>
      </div>

<div class="col-md-6">
              <label class="form-label">Category Name</label>
              <input type="text" name="name" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label d-block">Status</label>
              <div class="form-check form-switch mt-2">
                <input class="form-check-input" type="checkbox" name="status" checked>
                <label class="form-check-label">Active</label>
              </div>
            </div>

</div>

<div class="mt-4">
            <button type="submit" class="btn btn-success">Save</button>
            <a href="qcategory_list.php" class="btn btn-secondary">Cancel</a>
          </div>

</form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>