Zploit 0-Day Shell

:: Editing File: vcard_view.php

<?php
include "config/db.php";

/* ===============================
   VALIDATE ID
   =============================== */
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    header("Location: vcard_list.php?msg=Invalid Social Link ID");
    exit;
}

/* ===============================
   VALIDATE VCARD ID
   =============================== */
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    die('Invalid VCard ID');
}

$id = intval($_GET['id']);

/* ===============================
   FETCH VCARD PROFILE (SINGLE)
   =============================== */
$profile_q = mysqli_query(
    $conn,
    "SELECT * FROM vcards 
     WHERE id='$id' AND status=1 
     LIMIT 1"
);
$profile = mysqli_fetch_assoc($profile_q);

/* ===============================
   FETCH SERVICES (MULTIPLE)
   =============================== */
$services = [];
$q = mysqli_query(
    $conn,
    "SELECT * FROM vcard_services 
     WHERE status=1 AND vcard_id='$id' 
     ORDER BY sort_order ASC"
);
while ($row = mysqli_fetch_assoc($q)) {
    $services[] = $row;
}

/* ===============================
   FETCH PORTFOLIO (MULTIPLE)
   =============================== */
$portfolio = [];
$q = mysqli_query(
    $conn,
    "SELECT * FROM vcard_portfolio 
     WHERE status=1 AND vcard_id='$id' 
     ORDER BY sort_order ASC"
);
while ($row = mysqli_fetch_assoc($q)) {
    $portfolio[] = $row;
}

/* ===============================
   FETCH MEDIA (MULTIPLE)
   =============================== */
$media = [];
$q = mysqli_query(
    $conn,
    "SELECT * FROM vcard_media 
     WHERE status=1 AND vcard_id='$id' 
     ORDER BY created_at DESC"
);
while ($row = mysqli_fetch_assoc($q)) {
    $media[] = $row;
}

/* ===============================
   FETCH TESTIMONIALS (MULTIPLE)
   =============================== */
$testimonials = [];
$q = mysqli_query(
    $conn,
    "SELECT * FROM vcard_testimonials 
     WHERE status=1 AND vcard_id='$id'"
);
while ($row = mysqli_fetch_assoc($q)) {
    $testimonials[] = $row;
}

/* ===============================
   FETCH SOCIAL LINKS (MULTIPLE)
   =============================== */
$socials = [];
$q = mysqli_query(
    $conn,
    "SELECT * FROM vcard_social_links 
     WHERE status=1 AND vcard_id='$id' 
     ORDER BY sort_order ASC"
);
while ($row = mysqli_fetch_assoc($q)) {
    $socials[] = $row;
}

/* ===============================
   DEBUG (REMOVE IN LIVE)
   =============================== */
echo "<pre>";
print_r($profile);
print_r($services);
print_r($portfolio);
print_r($media);
print_r($testimonials);
print_r($socials);
echo "</pre>";
exit;

/* SAVE INQUIRY */
if(isset($_POST['send'])){
    mysqli_query($conn,"INSERT INTO vcard_inquiries(name,phone,email,message)
    VALUES(
      '{$_POST['name']}',
      '{$_POST['phone']}',
      '{$_POST['email']}',
      '{$_POST['message']}'
    )");
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title><?= $profile['name']; ?> | Digital vCard</title>
<meta name="viewport" content="width=device-width, initial-scale=1">

<body>

<section class="profile-section">
  <div class="container text-center">
    <img src="upload/profile/<?= $profile['profile_image']; ?>" class="client-img">
    <h1 class="client-name"><?= $profile['name']; ?></h1>
    <p class="client-title"><?= $profile['designation']; ?></p>
  </div>
</section>

<section class="contact-section">
  <div class="container">

<a href="tel:<?= $profile['phone']; ?>" class="contact-card">
      <p><?= $profile['phone']; ?></p>
    </a>

<a href="mailto:<?= $profile['email']; ?>" class="contact-card">
      <p><?= $profile['email']; ?></p>
    </a>

</div>
</section>

<section class="social-section">
  <div class="container d-flex justify-content-center gap-3">
    <?php while($s = mysqli_fetch_assoc($socials)){ ?>
      <a href="<?= $s['url']; ?>" target="_blank">
        <img src="assets/images/social-icon/<?= $s['icon']; ?>" width="40">
      </a>
    <?php } ?>
  </div>
</section>

<section class="about-section">
  <div class="container">
    <h2><?= $profile['about_title']; ?></h2>
    <img src="upload/profile/<?= $profile['about_image']; ?>" class="img-fluid">
    <p><?= $profile['about_text']; ?></p>
  </div>
</section>

<section class="services-section">
  <div class="container">
    <h2>Services</h2>

<?php while($s = mysqli_fetch_assoc($services)){ ?>
      <div class="service-card">
        <img src="assets/images/services/<?= $s['icon']; ?>" width="50">
        <h3><?= $s['title']; ?></h3>
        <p><?= $s['description']; ?></p>
      </div>
    <?php } ?>

</div>
</section>

<section class="gallery-section">
  <div class="container">
    <h2>Portfolio</h2>
    <div class="row">
      <?php while($g = mysqli_fetch_assoc($gallery)){ ?>
        <div class="col-6 mb-3">
          <a href="upload/gallery/<?= $g['image']; ?>">
            <img src="upload/gallery/<?= $g['image']; ?>" class="img-fluid">
          </a>
        </div>
      <?php } ?>
    </div>
  </div>
</section>

<?php if($profile['video'] != ''){ ?>
<section class="video-section">
  <div class="container">
    <video controls width="100%">
      <source src="upload/video/<?= $profile['video']; ?>" type="video/mp4">
    </video>
  </div>
</section>
<?php } ?>

<section class="testimonial-section">
  <div class="container">
    <h2>Testimonials</h2>

<?php while($t = mysqli_fetch_assoc($testimonials)){ ?>
      <div class="testimonial-box">
        <img src="upload/testimonials/<?= $t['image']; ?>" width="60">
        <h4><?= $t['name']; ?></h4>
        <p><?= $t['message']; ?></p>
      </div>
    <?php } ?>

</div>
</section>

<section class="map-section">
  <div class="container">
    <?= $profile['map_embed']; ?>
  </div>
</section>

<section class="inquiry-section">
  <div class="container">
    <h2>Inquiry</h2>

<footer class="text-center p-3">
  <p>© <?= date('Y'); ?> <?= $profile['name']; ?></p>
</footer>

</body>
</html>