Zploit 0-Day Shell

:: Editing File: clients_list.php

<?php 
// ✅ Page title
$page_title = "Clients";

// Include common layout
include 'header.php';
include 'breadcrumb.php';
include 'menu.php';
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="row">
      <div class="col-sm-12">
        <div class="card">
          <div class="row">
            <div class="col-sm-8">
              <div class="card-header pb-0 card-no-border">
                <h2>Clients Management</h2>
              </div>
            </div>
            <div class="col-sm-4">
              <div class="card-header pb-0 card-no-border text-end">
                <a href="client_add.php" class="btn btn-primary btn-sm">
                  <i class="fa fa-plus"></i> Add New Client
                </a>
              </div>
            </div>
          </div>

<div class="card-body">
            <div class="dt-ext table-responsive">
              <table class="display" id="export-button">
                <thead>
                  <tr>
                    <th>#</th>
                    <th>Client Name</th>
                    <th>Phone</th>
                    <th>Email</th>
                    <th>Address</th>
                    <th>Message</th>
                    <th>Work</th>
                    
                    <th>Convert Date</th>
                    <th>Action</th>
                  </tr>
                </thead>
                <tbody>
                  <?php
                  $sr_no = 1; 
                  $sql = "SELECT * FROM clients ORDER BY id DESC";
                  $result = mysqli_query($conn, $sql);

if (mysqli_num_rows($result) > 0) {
                    while ($row = mysqli_fetch_assoc($result)) {
                      echo "<tr>";
                      echo "<td class='text-center'>{$sr_no}</td>";
                      echo "<td>" . htmlspecialchars($row['name']) . "</td>";
                      echo "<td>" . htmlspecialchars($row['phone']) . "</td>";
                      echo "<td>" . htmlspecialchars($row['email']) . "</td>";
                      echo "<td>" . htmlspecialchars($row['address']) . "</td>";
                      echo "<td>" . htmlspecialchars($row['message']) . "</td>";
                      echo "<td>" . htmlspecialchars($row['domain_details']) . "</td>";
                      
                     /* echo "<td>" . htmlspecialchars($row['service_taken']) . "</td>";
                      echo "<td>₹" . number_format($row['invoice_amount'], 2) . "</td>";
                      echo "<td>₹" . number_format($row['advance_received'], 2) . "</td>";
                      echo "<td>₹" . number_format($row['balance_due'], 2) . "</td>";*/
                      echo "<td>" . (!empty($row['created_at']) ? date('d-m-Y', strtotime($row['created_at'])) : '-') . "</td>";

echo "<td class='text-center'>
                              
                              <a href='client_edit.php?id={$row['id']}' class='btn btn-warning btn-sm'>
                                <i class='fa fa-edit'></i> 
                              </a>
                              <a href='client_delete.php?id={$row['id']}' 
                                 class='btn btn-danger btn-sm'
                                 onclick=\"return confirm('Are you sure you want to delete this client?');\">
                                <i class='fa fa-trash'></i> 
                              </a>
                            </td>";
                      echo "</tr>";
                      $sr_no++;
                    }
                  } else {
                    echo "<tr><td colspan='8' class='text-center text-muted'>No clients found</td></tr>";
                  }
                  ?>
                </tbody>
              </table>
            </div>
          </div>

</div>
      </div>
    </div>
  </div>
</div>

<?php include "footer.php"; ?>