Zploit 0-Day Shell

:: Editing File: hosting_details_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Client Hosting";
$page_parent = "Clients Hosting";
$page_parent_link = "hosting_details_list.php";
include 'breadcrumb.php';
include 'menu.php';

$msg = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $client_id = $_POST['client_id'];
    $start_date = $_POST['start_date'];
    $expiry_date = $_POST['expiry_date'];
    $amount = $_POST['amount'];
    //$renewal_date = $_POST['renewal_date'];
    //$renewal_amount = $_POST['renewal_amount'];
    $notes = $_POST['notes'];
    $comments = $_POST['comments'];

$sql = "INSERT INTO hosting_details 
    (client_id, start_date, expiry_date, amount, notes, comments)
    VALUES ('$client_id','$start_date','$expiry_date','$amount','$notes','$comments')";

if (mysqli_query($conn, $sql)) {
        header("Location: hosting_details_list.php?msg=Hosting Added Successfully");
        exit;
    } else {
        $msg = "Error: " . mysqli_error($conn);
    }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header pb-0">
        <h2>Add Hosting Details</h2>
      </div>

<div class="col-md-6">
              <label class="form-label">Client Name</label>
              <select name="client_id" class="form-select" required>
                <option value="">Select Client</option>
                <?php
                $client_sql = mysqli_query($conn, "SELECT * FROM clients ORDER BY name ASC");
                while ($c = mysqli_fetch_assoc($client_sql)) {
                    echo "<option value='{$c['id']}'>{$c['name']}</option>";
                }
                ?>
              </select>
            </div>

<div class="col-md-6">
              <label class="form-label">Start Date</label>
              <input type="date" name="start_date" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Expiry Date</label>
              <input type="date" name="expiry_date" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Amount (₹)</label>
              <input type="number" step="0.01" name="amount" class="form-control">
            </div>

<!--<div class="col-md-6">
              <label class="form-label">Renewal Date</label>
              <input type="date" name="renewal_date" class="form-control">
            </div>

<div class="col-md-6">
              <label class="form-label">Renewal Amount (₹)</label>
              <input type="number" step="0.01" name="renewal_amount" class="form-control">
            </div>
			-->
			
            <div class="col-md-6">
              <label class="form-label">Details</label>
              <textarea name="notes" class="form-control"></textarea>
            </div>

<div class="col-md-6">
              <label class="form-label">Comments</label>
              <textarea name="comments" class="form-control"></textarea>
            </div>

</div>

<div class="text-start mt-4">
            <button type="submit" class="btn btn-success">Save</button>
            <a href="hosting_details_list.php" class="btn btn-secondary">Cancel</a>
          </div>
        </form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>