Zploit 0-Day Shell

:: Editing File: vcard_view1.php

<?php
include 'config/db.php';

/* ===============================
   VALIDATE VCARD ID
   =============================== */
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    die('Invalid VCard');
}

$id = (int)$_GET['id'];

/* ===============================
   FETCH PROFILE
   =============================== */
$profile = mysqli_fetch_assoc(mysqli_query($conn,
    "SELECT * FROM vcards WHERE id='$id' AND status=1 LIMIT 1"
));

if (!$profile) {
    die('VCard not found');
}

/* ===============================
   FETCH DATA
   =============================== */
function fetchAll($conn, $sql) {
    $data = [];
    $q = mysqli_query($conn, $sql);
    while ($r = mysqli_fetch_assoc($q)) {
        $data[] = $r;
    }
    return $data;
}

$services = fetchAll($conn,
    "SELECT * FROM vcard_services WHERE status=1 AND vcard_id='$id' ORDER BY sort_order"
);

$portfolio = fetchAll($conn,
    "SELECT * FROM vcard_portfolio WHERE status=1 AND vcard_id='$id' ORDER BY sort_order"
);

$media = fetchAll($conn,
    "SELECT * FROM vcard_media WHERE status=1 AND vcard_id='$id' ORDER BY created_at DESC"
);

$testimonials = fetchAll($conn,
    "SELECT * FROM vcard_testimonials WHERE status=1 AND vcard_id='$id'"
);

$socials = fetchAll($conn,
    "SELECT * FROM vcard_social_links WHERE status=1 AND vcard_id='$id' ORDER BY sort_order"
);

/* ===============================
   PATHS
   =============================== */
$UPLOAD_BASE = "/kreativecrm/uploads/vcard/{$profile['card_slug']}/";
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title><?= htmlspecialchars($profile['full_name']) ?> | VCard</title>
<meta name="viewport" content="width=device-width, initial-scale=1">

<link rel="icon" type="image/png" href="<?= $UPLOAD_BASE.$profile['logo'] ?>">
    
	<link
		href="https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&amp;display=swap"
		rel="stylesheet">
	<link rel="stylesheet" href="vcard/assets/css/all.min.css">
	<link rel="stylesheet" href="vcard/assets/css/slick.css">
	<link rel="stylesheet" href="vcard/assets/css/magnific-popup.css">
	<link rel="stylesheet" href="vcard/assets/css/bootstrap.min.css">
	<link rel="stylesheet" href="vcard/assets/css/cursor.css">
	<link rel="stylesheet" href="vcard/assets/css/style.css">
	<link rel="stylesheet" href="vcard/assets/css/media-query.css">
</head>

<section id="ngo-main" class="ceo-content">
			<div class="ngo-main-wrap">
				<div class="hero-sec-main">
					<div class="hero-top-sec">
						<div class="menupage-1-reser-overlay"></div>
							
							<img src="<?= $UPLOAD_BASE.$profile['banner_image'] ?>" alt="logo" width="100%">
						<div class="bottom-shape">
							<img src="vcard/assets/images/main-img/bottom-shape.svg" alt="bottom-shape.svg">
						</div>
					</div>
					<div class="header-content">
						
					</div>
				</div>
				<div class="social-main">
					<div class="hero-bottom-sec container">
						<div>
							<img src="<?= $UPLOAD_BASE.$profile['profile_image'] ?>" class="profile-img">
						</div>
						<div style="top: -15px;position: relative">
							<h1 class="client-name mt-10"><?= htmlspecialchars($profile['full_name']) ?></h1>
							<p class="client-title text-left mt-5" style="text-align:left"><?= htmlspecialchars($profile['designation']) ?></p>
							
						</div>
					</div>
				</div>
		
				<div class="contact-sec container mt-30">
					<div class="contact-sec-wrap">
						<div class="top-title">
							<h2><img src="<?= $UPLOAD_BASE.$profile['logo'] ?>" alt="text-img">&nbsp;Contact Me</h2>
							<h3 class="d-none">Hidden</h3>
						</div>
						<div class="contact-bottom-sec">
							<div class="contact-details mt-10">
								<div class="contact-icon">
									<img src="vcard/assets/images/contact/mail-icon.svg" alt="mail-icon">
								</div>
								<div class="contact-content">
									<h4>Email</h4>
									<a href="mailto:harshad@kreativepixelz.com">
										<p class="mt-10"><?= $profile['email'] ?></p>
									</a>
								</div>
							</div>
							<div class="contact-details mt-10">
								<div class="contact-icon">
									<img src="vcard/assets/images/contact/call-icon.svg" alt="mail-icon">
								</div>
								<div class="contact-content">
									<h4>phone number</h4>
									<a href="tel:9768676862">
										<p class="mt-10"><?= $profile['phone'] ?></p>
									</a>
								</div>
							</div>
						
							<div class="contact-details mt-10">
								<div class="contact-icon">
									<img src="vcard/assets/images/contact/location.svg" alt="mail-icon">
								</div>
								<div class="contact-content">
									<h4>Office address</h4>
									<p class="mt-10"><?= nl2br(htmlspecialchars($profile['address'])) ?>
								</div>
							</div>
							
						</div>
					</div>
					
				    
				    <div class="social-media-sec container mt-30">
						<div class="social-icon-content">
					        
					        <?php foreach ($socials as $s): ?>
					        
							 <a href="<?= $s['url'] ?>" target="_blank">
								<div class="social-icon-content-wrap">
									<img src="<?= $UPLOAD_BASE.'social/'.$s['icon'] ?>" alt="social-icon" class="red-color">
								</div>
							</a>
							<?php endforeach; ?>
						</div>
						<div class="social-icon-para mt-20">
							<p><?= nl2br(htmlspecialchars($profile['about'])) ?></p>
						</div>
					</div>
				
				
				</div>
				
				
                 
                <div class="about-us mt-30 container">
					<div class="top-title">
						<h2><img src="assets/images/main-img/text-img.png" alt="text-img">who we are</h2>
					</div>
					<div class="about-us-bottom mt-15">
						<div class="about-us-img">
							
							
							<img src="logo/about.jpg" alt="about-us-img">
						</div>
						<div class="about-content mt-15">
							<h2 class="mt-10"> Solving  Business Problems</h2>
							<p class="mt-5">Kreative Pixelz is an Social Media Marketing, Website Development, Graphic Designing, Video Production, Software & Application Development Company based in Mumbai, India. Headquartered in Navi Mumbai, we are providing IT solutions and IT-enabled services. Ever since our establishment, we are growing every day to meet the growing demands of our clients and surpass their expectations.</p>
						</div>
						<div class="view-product mt-20">
							<a href="javascript:void(0)">Contact us</a>
						</div>
					</div>
				</div>
                 
<?php if (!empty($profile['about'])): ?>
<section class="about-section">
<h2>About</h2>
<p><?= nl2br(htmlspecialchars($profile['about'])) ?></p>
</section>
<?php endif; ?>

<?php if ($services): ?>
<section class="services-section">
<h2>Services</h2>
<div class="row">
<?php foreach ($services as $srv): ?>
    <div class="col-md-6 mb-3">
        <div class="service-card">
            <img src="<?= $UPLOAD_BASE.'services/'.$srv['icon'] ?>" class="service-icon">
            <h4><?= htmlspecialchars($srv['title']) ?></h4>
            <p><?= htmlspecialchars($srv['description']) ?></p>
        </div>
    </div>
<?php endforeach; ?>
</div>
</section>
<?php endif; ?>

<?php if ($portfolio): ?>
<section class="portfolio-section">
<h2>Gallery</h2>
<div class="row">
<?php foreach ($portfolio as $p): ?>
    <div class="col-md-4 mb-3">
        <img src="<?= $UPLOAD_BASE.'portfolio/'.$p['image'] ?>" class="img-fluid rounded">
    </div>
<?php endforeach; ?>
</div>
</section>
<?php endif; ?>

<?php if ($media): ?>
<section class="media-section">
<h2>Media</h2>

<?php foreach ($media as $m): ?>

<?php if ($m['type'] === 'video' && $m['url']): ?>
        <div class="mb-3">
            <iframe width="100%" height="220"
                src="<?= $m['url'] ?>"
                frameborder="0" allowfullscreen></iframe>
        </div>
    <?php endif; ?>

<?php if ($m['type'] === 'image' && $m['file_path']): ?>
        <img src="<?= $UPLOAD_BASE.'media/'.$m['file_path'] ?>" class="img-fluid mb-3">
    <?php endif; ?>

<?php if ($m['type'] === 'file' && $m['file_path']): ?>
        <a href="<?= $UPLOAD_BASE.'media/'.$m['file_path'] ?>" download class="btn btn-outline-primary mb-2">
            Download File
        </a>
    <?php endif; ?>

<?php endforeach; ?>
</section>
<?php endif; ?>

<?php if ($testimonials): ?>
<section class="testimonial-section">
<h2>Testimonials</h2>
<?php foreach ($testimonials as $t): ?>
    <div class="testimonial-card">
        <strong><?= htmlspecialchars($t['client_name']) ?></strong>
        <p><?= htmlspecialchars($t['message']) ?></p>
    </div>
<?php endforeach; ?>
</section>
<?php endif; ?>

<?php if (!empty($profile['map_iframe'])): ?>
<section class="map-section">
<?= $profile['map_iframe'] ?>
</section>
<?php endif; ?>

<footer class="text-center mt-4">
    <p>© <?= date('Y') ?> <?= htmlspecialchars($profile['full_name']) ?></p>
</footer>

</body>
</html>