Zploit 0-Day Shell

:: Editing File: vcard_list.php

<?php
// ✅ Page title
$page_title = "VCard List";

include 'header.php';
include 'breadcrumb.php';
include 'menu.php';
?>

<div class="col-sm-10">
              <div class="card-header pb-0 card-no-border">
                <h2>VCard Details</h2>
              </div>
            </div>

<div class="col-sm-2">
              <div class="card-header pb-0 card-no-border" style="float:right">
                <a href="vcard_add.php" class="btn btn-primary btn-sm">
                  <i class="fa fa-plus"></i> Add VCard
                </a>
              </div>
            </div>

<div class="card-body">
              <div class="dt-ext table-responsive">
                <table class="display" id="export-button">
                  <thead>
                    <tr>
                      <th>#</th>
                      <th>Full Name</th>
                      <th>Designation</th>
                      <th>Phone</th>
                      <th>Email</th>
                      <th>Status</th>
                      
                      <th>Action</th>
                    </tr>
                  </thead>

<tbody>
                    <?php
                    $sr_no = 1;

$sql = "SELECT * FROM vcards ORDER BY created_at DESC";
                    $result = mysqli_query($conn, $sql);

if ($result && mysqli_num_rows($result) > 0) {
                      while ($row = mysqli_fetch_assoc($result)) {

// ✅ Status badge
                        $status = ($row['status'] == 1)
                          ? "<span class='badge bg-success'>Active</span>"
                          : "<span class='badge bg-danger'>Inactive</span>";

echo "<tr>";
                        echo "<td class='text-center'>{$sr_no}</td>";
                        echo "<td>" . htmlspecialchars($row['full_name']) . "</td>";
                        echo "<td>" . htmlspecialchars($row['designation']) . "</td>";
                        echo "<td>" . htmlspecialchars($row['phone']) . "</td>";
                        echo "<td>" . htmlspecialchars($row['email']) . "</td>";
                        echo "<td>{$status}</td>";
                        echo "<td class='text-center'>";
                        
                        echo "<a href='https://kreativepixelz.com/vcard/' target='_blank'
                                 class='btn btn-primary btn-sm' title='Edit'>
                                 <i class='fa fa-eye'></i>
                              </a> ";

echo "<a href='vcard_edit.php?id={$row['id']}'
                                 class='btn btn-info btn-sm' title='Edit'>
                                 <i class='fa fa-pencil'></i>
                              </a> ";

echo "<a href='vcard_delete.php?id={$row['id']}'
                                 class='btn btn-danger btn-sm'
                                 onclick=\"return confirm('Are you sure you want to delete this vCard?');\">
                                 <i class='fa fa-trash'></i>
                              </a>";

echo "</td>";
                        echo "</tr>";

$sr_no++;
                      }
                    } else {
                      echo "<tr>
                              <td colspan='8' class='text-center text-muted'>
                                No vCards found
                              </td>
                            </tr>";
                    }
                    ?>
                  </tbody>

</table>
              </div>
            </div>

</div>
        </div>

</div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ?>