Zploit 0-Day Shell

:: Editing File: vcard_company_add.php

<?php
ob_start();
include 'header.php';

$page_title = "Add VCard Company";
include 'breadcrumb.php';
include 'menu.php';

/* ===============================
   ERROR REPORTING (DEV MODE)
   =============================== */
error_reporting(E_ALL);
ini_set('display_errors', 1);

/* ===============================
   PATH CONFIG
   =============================== */
define(
    'COMPANY_UPLOAD_PATH',
    $_SERVER['DOCUMENT_ROOT'] . '/kreative_crm/uploads/company/'
);

$error = "";

/* ===============================
   FORM SUBMIT
   =============================== */
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$name       = mysqli_real_escape_string($conn, $_POST['name']);
    $about      = mysqli_real_escape_string($conn, $_POST['about']);
    $address    = mysqli_real_escape_string($conn, $_POST['address']);
    $map_iframe = mysqli_real_escape_string($conn, $_POST['map_iframe']);
    $status     = isset($_POST['status']) ? 1 : 0;

$logo   = NULL;
    $banner = NULL;

$allowed_ext = ['jpg', 'jpeg', 'png', 'webp'];

/* ===============================
       CREATE DIRECTORIES
       =============================== */
    if (!is_dir(COMPANY_UPLOAD_PATH . 'logo/')) {
        mkdir(COMPANY_UPLOAD_PATH . 'logo/', 0777, true);
    }

if (!is_dir(COMPANY_UPLOAD_PATH . 'banner/')) {
        mkdir(COMPANY_UPLOAD_PATH . 'banner/', 0777, true);
    }

/* ===============================
       LOGO UPLOAD
       =============================== */
    if (isset($_FILES['logo']) && $_FILES['logo']['error'] === 0) {

$ext = strtolower(pathinfo($_FILES['logo']['name'], PATHINFO_EXTENSION));

if (!in_array($ext, $allowed_ext)) {
            $error = "Invalid logo file type";
        } else {

$logo = time() . '_logo_' . uniqid() . '.' . $ext;

if (!move_uploaded_file(
                $_FILES['logo']['tmp_name'],
                COMPANY_UPLOAD_PATH . 'logo/' . $logo
            )) {
                $error = "Logo upload failed. Check folder permissions.";
            }
        }
    }

/* ===============================
       BANNER UPLOAD
       =============================== */
    if ($error === '' && isset($_FILES['banner_image']) && $_FILES['banner_image']['error'] === 0) {

$ext = strtolower(pathinfo($_FILES['banner_image']['name'], PATHINFO_EXTENSION));

if (!in_array($ext, $allowed_ext)) {
            $error = "Invalid banner file type";
        } else {

$banner = time() . '_banner_' . uniqid() . '.' . $ext;

if (!move_uploaded_file(
                $_FILES['banner_image']['tmp_name'],
                COMPANY_UPLOAD_PATH . 'banner/' . $banner
            )) {
                $error = "Banner upload failed. Check folder permissions.";
            }
        }
    }

/* ===============================
       INSERT DATABASE
       =============================== */
    if ($error === '') {

$sql = "
            INSERT INTO vcard_company
            (name, about, banner_image, logo, address, map_iframe, status, created_at)
            VALUES (
                '$name',
                '$about',
                " . ($banner ? "'$banner'" : "NULL") . ",
                " . ($logo ? "'$logo'" : "NULL") . ",
                '$address',
                '$map_iframe',
                '$status',
                NOW()
            )
        ";

if (mysqli_query($conn, $sql)) {
            header("Location: vcard_company_list.php?msg=Company Added Successfully");
            exit;
        } else {
            $error = mysqli_error($conn);
        }
    }
}
?>

<div class="page-body">
<div class="container-fluid">
<div class="card">
<div class="card-body">

<?php if ($error): ?>
<div class="alert alert-danger"><?= htmlspecialchars($error); ?></div>
<?php endif; ?>

<div class="col-md-6 mb-3">

<label class="form-label">Company Name *</label>
<input type="text" name="name" class="form-control" required>
</div>

<div class="col-md-6 mb-3">
<label class="form-label mt-3">About Company</label>
<textarea name="about" class="form-control" rows="4"></textarea>
</div>

<div class="col-md-6 mb-3">
<label class="form-label mt-3">Company Logo</label>
<input type="file" name="logo" class="form-control">
</div>

<div class="col-md-6 mb-3">
<label class="form-label mt-3">Company Banner</label>
<input type="file" name="banner_image" class="form-control">
</div>

<div class="col-md-6 mb-3">
<label class="form-label mt-3">Address</label>
<textarea name="address" class="form-control" rows="3"></textarea>
</div>

<div class="col-md-6 mb-3">
<label class="form-label mt-3">Map Iframe</label>
<textarea name="map_iframe" class="form-control" rows="3"></textarea>
</div>

<div class="col-md-6 mb-3">
<label class="form-label mt-3">
    <input type="checkbox" name="status" checked> Active
</label>
</div>
<br><br>
<div class="col-md-12 mb-3">
<button type="submit" class="btn btn-success">Save Company</button>
<a href="vcard_company_list.php" class="btn btn-secondary">Cancel</a>
</div>
</form>

</div>
</div>
</div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>