Zploit 0-Day Shell

:: Editing File: domain_details_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Domain Details";
$page_parent = "Clients";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  $client_id = mysqli_real_escape_string($conn, $_POST['client_id']);
  $start_date = mysqli_real_escape_string($conn, $_POST['start_date']);
  $expiry_date = mysqli_real_escape_string($conn, $_POST['expiry_date']);
  $amount = mysqli_real_escape_string($conn, $_POST['amount']);
 /*$renewal_date = mysqli_real_escape_string($conn, $_POST['renewal_date']);
  $renewal_amount = mysqli_real_escape_string($conn, $_POST['renewal_amount']);*/
  $notes = mysqli_real_escape_string($conn, $_POST['notes']);
  $comments = mysqli_real_escape_string($conn, $_POST['comments']);

$sql = "INSERT INTO domain_details (client_id, start_date, expiry_date, amount, notes, comments)
          VALUES ('$client_id', '$start_date', '$expiry_date', '$amount', '$notes', '$comments')";

if (mysqli_query($conn, $sql)) {
    header("Location: domain_details_list.php?msg=Domain Added Successfully");
    exit;
  } else {
    $message = "Database Error: " . mysqli_error($conn);
  }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header pb-0">
        <h2>Add Domain Details</h2>
      </div>
      <div class="card-body">
        <?php if ($message): ?>
          <div class="alert alert-danger"><?= $message; ?></div>
        <?php endif; ?>
        <form method="POST">
          <div class="row g-3">

<div class="col-md-6">
              <label class="form-label">Client Name</label>
              <select name="client_id" class="form-select" required>
                <option value="">Select Client</option>
                <?php
                $clients = mysqli_query($conn, "SELECT id, name FROM clients ORDER BY name ASC");
                while ($c = mysqli_fetch_assoc($clients)) {
                  echo "<option value='{$c['id']}'>{$c['name']}</option>";
                }
                ?>
              </select>
            </div>

<div class="col-md-6">
              <label class="form-label">Start Date</label>
              <input type="date" name="start_date" class="form-control">
            </div>

<div class="col-md-6">
              <label class="form-label">Expiry Date</label>
              <input type="date" name="expiry_date" class="form-control">
            </div>

<div class="col-md-6">
              <label class="form-label">Amount (₹)</label>
              <input type="number" step="0.01" name="amount" class="form-control">
            </div>

<!--<div class="col-md-3">
              <label class="form-label">Renewal Date</label>
              <input type="date" name="renewal_date" class="form-control">
            </div>

<div class="col-md-3">
              <label class="form-label">Renewal Amount (₹)</label>
              <input type="number" step="0.01" name="renewal_amount" class="form-control">
            </div>
		-->
            <div class="col-md-6">
              <label class="form-label">Notes</label>
              <textarea name="notes" class="form-control" rows="2"></textarea>
            </div>

<div class="col-md-6">
              <label class="form-label">Comments</label>
              <textarea name="comments" class="form-control" rows="2"></textarea>
            </div>

</div>

<div class="mt-4">
            <button type="submit" class="btn btn-success">Save</button>
            <a href="domain_details_list.php" class="btn btn-secondary">Cancel</a>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>