Zploit 0-Day Shell

:: Editing File: tasks_add_notification_Work.php

<?php
ob_start();
include 'header.php';
include 'menu.php';
include 'breadcrumb.php';
require 'class.phpmailer.php';  // Adjust path as per your folder

$page_title = "Add Task";
$page_parent = "Task";
$page_parent_link = "tasks_list.php";

$message = "";

if ($_SERVER['REQUEST_METHOD'] == 'POST') {

// Get form data safely
  $task_name = mysqli_real_escape_string($conn, $_POST['task_name']);
  $assign_to = mysqli_real_escape_string($conn, $_POST['assign_to']);
  $task_type = mysqli_real_escape_string($conn, $_POST['task_type']);
  $task_status = mysqli_real_escape_string($conn, $_POST['task_status']);
  $start_date = mysqli_real_escape_string($conn, $_POST['start_date']);
  $due_date = mysqli_real_escape_string($conn, $_POST['due_date']);
  $priority = mysqli_real_escape_string($conn, $_POST['priority']);
  $msg = mysqli_real_escape_string($conn, $_POST['message']);

// Insert task in database
  $sql = "INSERT INTO tasks (task_name, assign_to, task_type, task_status, start_date, due_date, priority, message)
          VALUES ('$task_name', '$assign_to', '$task_type', '$task_status', '$start_date', '$due_date', '$priority', '$msg')";

if (mysqli_query($conn, $sql)) {
    
    echo "SELECT name, email, mobile FROM team_members WHERE id = '$assign_to' LIMIT 1";
    // ✅ Fetch assigned team member’s details
    $team_query = "SELECT name, email, mobile FROM team_members WHERE id = '$assign_to' LIMIT 1";
    $team_result = mysqli_query($conn, $team_query);
    $team = mysqli_fetch_assoc($team_result);

if ($team) {
      $member_name = $team['name'];
      $member_email = $team['email'];
      $member_mobile = preg_replace('/\D/', '', $team['mobile']); // sanitize mobile number

// ✅ WhatsApp message
      $message_text = "Hello $member_name,%0AYou have been assigned a new task:%0A---------------------------------%0A"
                    . "📝 Task: $task_name%0A"
                    . "📂 Type: $task_type%0A"
                    . "📅 Start Date: $start_date%0A"
                    . "⏰ Due Date: $due_date%0A"
                    . "⭐ Priority: $priority%0A"
                    . "💬 Message: $msg%0A---------------------------------%0AFrom Kreative Pixelz Admin";

$whatsappURL = "https://wa.me/91$member_mobile?text=" . $message_text;

// ✅ Email Notification using PHPMailer
      $mail = new PHPMailer(true);
      try {
        $mail->isSMTP();
        $mail->Host = 'mail.kreativepixelz.com';
        $mail->SMTPAuth = true;
        $mail->Username = 'harshad@kreativepixelz.com'; 
        $mail->Password = 'harshad@123'; 
        $mail->Port = 587;
        $mail->SMTPSecure = 'tls';

$mail->setFrom('harshad@kreativepixelz.com', 'Kreative Pixelz Admin');
        $mail->addAddress($member_email, $member_name);
        $mail->isHTML(true);
        $mail->Subject = "New Task Assigned: $task_name";
        $mail->Body = "
          <h3>New Task Assigned</h3>
          <p><strong>Dear $member_name,</strong></p>
          <p>You have been assigned a new task:</p>
          <ul>
            <li><strong>Task:</strong> $task_name</li>
            <li><strong>Type:</strong> $task_type</li>
            <li><strong>Status:</strong> $task_status</li>
            <li><strong>Start Date:</strong> $start_date</li>
            <li><strong>Due Date:</strong> $due_date</li>
            <li><strong>Priority:</strong> $priority</li>
          </ul>
          <p><strong>Message:</strong><br>$msg</p>
          <p>Regards,<br><b>Kreative Pixelz Team</b></p>
        ";
        $mail->send();

} catch (Exception $e) {
        // Just log or display an error silently, no interruption
        $message = "Task added but email failed: {$mail->ErrorInfo}";
      }

// ✅ Redirect to WhatsApp (optional) or Success Page
      header("Location: $whatsappURL");
      exit;
    }
  } else {
    $message = "Error: " . mysqli_error($conn);
  }
}
?>

<?php
            $teams_query = "SELECT id, name FROM team_members";
            $teams_result = mysqli_query($conn, $teams_query);
            ?>
            <div class="col-md-6">
              <label class="form-label">Assign To</label>
              <select name="assign_to" class="form-control" required>
                <option value="">Select Team Member</option>
                <?php while ($team = mysqli_fetch_assoc($teams_result)) { ?>
                  <option value="<?= $team['id']; ?>"><?= htmlspecialchars($team['name']); ?></option>
                <?php } ?>
              </select>
            </div>

<div class="col-md-6">
              <label class="form-label">Task Status</label>
              <select name="task_status" class="form-select">
                <option value="Pending">Pending</option>
                <option value="In Progress">In Progress</option>
                <option value="Completed">Completed</option>
              </select>
            </div>

<div class="col-md-4">
              <label class="form-label">Start Date</label>
              <input type="date" name="start_date" class="form-control">
            </div>

<div class="col-md-4">
              <label class="form-label">Priority</label>
              <select name="priority" class="form-select">
                <option value="Low">Low</option>
                <option value="Medium">Medium</option>
                <option value="High">High</option>
              </select>
            </div>

<div class="col-12">
              <label class="form-label">Message</label>
              <textarea name="message" class="form-control" rows="3"></textarea>
            </div>

<div class="col-12">
              <button type="submit" class="btn btn-success">Save Task</button>
              <a href="tasks_list.php" class="btn btn-secondary">Cancel</a>
            </div>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>