Zploit 0-Day Shell

:: Editing File: vcards_delete.php

<?php
ob_start();
include 'header.php';

/* ===============================
   PATH CONFIG
   =============================== */
define(
    'VCARD_UPLOAD_PATH',
    $_SERVER['DOCUMENT_ROOT'] . '/kreative_crm/uploads/vcard/'
);

/* ===============================
   VALIDATE ID
   =============================== */
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    header("Location: vcards_list.php?msg=Invalid VCard ID");
    exit;
}

$id = intval($_GET['id']);

/* ===============================
   FETCH VCARD
   =============================== */
$q = mysqli_query(
    $conn,
    "SELECT id, card_slug, profile_image 
     FROM vcards 
     WHERE id = '$id'"
);

if (!$q || mysqli_num_rows($q) === 0) {
    header("Location: vcards_list.php?msg=VCard Not Found");
    exit;
}

$row = mysqli_fetch_assoc($q);
$slug = $row['card_slug'];

/* ===============================
   VCARD DIRECTORY
   =============================== */
$vcard_dir = VCARD_UPLOAD_PATH . $slug . '/';

/* ===============================
   DELETE PROFILE IMAGE
   =============================== */
if (!empty($row['profile_image'])) {
    $img_path = $vcard_dir . $row['profile_image'];
    if (file_exists($img_path)) {
        unlink($img_path);
    }
}

/* ===============================
   DELETE ENTIRE VCARD FOLDER
   =============================== */
if (is_dir($vcard_dir)) {

function deleteFolder($dir) {
        $files = array_diff(scandir($dir), ['.', '..']);
        foreach ($files as $file) {
            $path = "$dir/$file";
            is_dir($path) ? deleteFolder($path) : unlink($path);
        }
        return rmdir($dir);
    }

deleteFolder($vcard_dir);
}

/* ===============================
   DELETE DATABASE RECORD
   =============================== */
mysqli_query($conn, "DELETE FROM vcards WHERE id = '$id'");

/* ===============================
   REDIRECT
   =============================== */
header("Location: vcards_list.php?msg=VCard deleted successfully");
exit;
?>