Zploit 0-Day Shell

:: Editing File: quotation_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Quotation";
$page_parent = "Quotations";
$page_parent_link = "quotation.php";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

// ✅ Handle form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $name = mysqli_real_escape_string($conn, $_POST['name']);
    $created_at = date('Y-m-d H:i:s');

$pdf_path = "";

// ✅ Handle PDF upload
    if (!empty($_FILES['pdf_file']['name'])) {
        $target_dir = "uploads/quotation/";
        if (!is_dir($target_dir)) {
            mkdir($target_dir, 0777, true);
        }

$file_name = basename($_FILES['pdf_file']['name']);
        $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));

// Validate PDF file
        if ($file_ext !== "pdf") {
            $message = "Only PDF files are allowed.";
        } else {
            $new_file_name = time() . "_" . preg_replace("/[^a-zA-Z0-9_\.-]/", "_", $file_name);
            $target_file = $target_dir . $new_file_name;

if (move_uploaded_file($_FILES['pdf_file']['tmp_name'], $target_file)) {
                $pdf_path = $new_file_name;

// ✅ Insert into database
                $sql = "INSERT INTO qutation (name, pdf_path, created_at) 
                        VALUES ('$name', '$pdf_path', '$created_at')";
                if (mysqli_query($conn, $sql)) {
                    header("Location: quotation.php?msg=Quotation added successfully");
                    exit;
                } else {
                    $message = "Database Error: " . mysqli_error($conn);
                }
            } else {
                $message = "Error uploading file.";
            }
        }
    } else {
        $message = "Please select a PDF file.";
    }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="row">
      <div class="col-sm-12">
        <div class="card">

<div class="card-header pb-0 card-no-border">
            <h2>Add Quotation</h2>
          </div>

<form method="POST" enctype="multipart/form-data">
              <div class="row">
                <div class="col-md-6">
                  <label class="form-label">Quotation Name</label>
                  <input type="text" name="name" class="form-control" required>
                </div>

<div class="col-md-6">
                  <label class="form-label">Upload PDF File</label>
                  <input type="file" name="pdf_file" class="form-control" accept=".pdf" required>
                </div>
              </div>

<br>
              <div class="text-start">
                <button type="submit" class="btn btn-success">Save Quotation</button>
                <a href="qutation.php" class="btn btn-secondary">Cancel</a>
              </div>
            </form>

</div>
        </div>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>