Zploit 0-Day Shell

:: Editing File: design_details_add.php

<?php
include 'header.php';
include 'menu.php';
include 'breadcrumb.php';

$message = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $clients_id = $_POST['clients_id'];
    $start_date = $_POST['start_date'];
    $expiry_date = $_POST['expiry_date'];
    $services = $_POST['services'];
    $amount = $_POST['amount'];
    $notes = $_POST['notes'];
    $comments = $_POST['comments'];

$sql = "INSERT INTO design_details (clients_id, start_date, expiry_date, services, amount, notes, comments)
            VALUES ('$clients_id', '$start_date', '$expiry_date', '$services', '$amount', '$notes', '$comments')";
    if (mysqli_query($conn, $sql)) {
        header("Location: design_details_list.php?msg=Design details added successfully");
        exit;
    } else {
        $message = "Error: " . mysqli_error($conn);
    }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header"><h4>Add Design Details</h4></div>
      <div class="card-body">
        <?php if ($message): ?><div class="alert alert-danger"><?= $message ?></div><?php endif; ?>

<form method="POST">
          <div class="row g-3">
            <div class="col-md-4">
              <label>Client</label>
              <select name="clients_id" class="form-select" required>
                <option value="">Select Client</option>
                <?php
                $clients = mysqli_query($conn, "SELECT id, name FROM clients ORDER BY name ASC");
                while ($row = mysqli_fetch_assoc($clients)) {
                    echo "<option value='{$row['id']}'>{$row['name']}</option>";
                }
                ?>
              </select>
            </div>

<div class="col-md-4">
              <label>Start Date</label>
              <input type="date" name="start_date" class="form-control">
            </div>

<div class="col-md-4">
              <label>Expiry Date</label>
              <input type="date" name="expiry_date" class="form-control">
            </div>

<div class="col-md-4">
              <label>Services</label>
              <input type="text" name="services" class="form-control">
            </div>

<div class="col-md-4">
              <label>Amount</label>
              <input type="number" step="0.01" name="amount" class="form-control">
            </div>

<div class="col-md-6">
              <label>Notes</label>
              <textarea name="notes" class="form-control"></textarea>
            </div>

<div class="col-md-6">
              <label>Comments</label>
              <textarea name="comments" class="form-control"></textarea>
            </div>

</div>
          <div class="mt-3">
            <button type="submit" class="btn btn-success">Save</button>
            <a href="design_details_list.php" class="btn btn-secondary">Cancel</a>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>
<?php include 'footer.php'; ?>