Zploit 0-Day Shell

:: Editing File: qestimations_add.php

<?php
ob_start();

$page_title = "Add Estimation";

include 'header.php';
include 'breadcrumb.php';
include 'menu.php';

$message = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    
    $c_id = intval($_POST['c_id']);
    
    
    $description = mysqli_real_escape_string($conn, $_POST['description']);
    $area        = mysqli_real_escape_string($conn, $_POST['area']);
    $amount      = mysqli_real_escape_string($conn, $_POST['amount']);
    $status      = isset($_POST['status']) ? intval($_POST['status']) : 1;
    $created_at  = date('Y-m-d H:i:s');

if (!empty($description) && !empty($amount)) {

$sql = "INSERT INTO quotation_estimations
                (c_id,description, area, amount, status, created_at)
                VALUES
                ($c_id,'$description', '$area', '$amount', '$status', '$created_at')";

if (mysqli_query($conn, $sql)) {
            header("Location: qestimations_list.php?msg=Estimation Added Successfully");
            exit;
        } else {
            $message = "Database Error: " . mysqli_error($conn);
        }

} else {
        $message = "Description and Amount are required.";
    }
}
?>

<div class="card-header pb-0">
        <h2>Add Estimation</h2>
      </div>

<?php if (!empty($message)) { ?>
          <div class="alert alert-danger"><?= $message; ?></div>
        <?php } ?>

<form method="POST">
          <div class="row g-3">
            
            
            <div class="col-md-12">
              <label class="form-label">Client Name </label>
              <select name="c_id" class="form-control" required>
                <option value="">-- Select Client --</option>
                <?php
                $cat_sql = "SELECT id, client_name FROM quotations WHERE status = 1 ORDER BY client_name ASC";
                $cat_res = mysqli_query($conn, $cat_sql);

if ($cat_res && mysqli_num_rows($cat_res) > 0) {
                    while ($cat = mysqli_fetch_assoc($cat_res)) {
                        echo "<option value='{$cat['id']}'>{$cat['client_name']}</option>";
                    }
                }
                ?>
              </select>
            </div>

<div class="col-md-6">
              <label class="form-label">Description</label>
              <input type="text" name="description" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Area / Specification</label>
              <input type="text" name="area" class="form-control">
            </div>

<div class="col-md-6">
              <label class="form-label">Amount (₹)</label>
              <input type="number" step="0.01" name="amount" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Status</label>
              <select name="status" class="form-control">
                <option value="1" selected>Active</option>
                <option value="0">Inactive</option>
              </select>
            </div>

</div>

<div class="mt-4">
            <button type="submit" class="btn btn-success">Save</button>
            <a href="qestimations_list.php" class="btn btn-secondary">Cancel</a>
          </div>

</form>

</div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>