Zploit 0-Day Shell

:: Editing File: qcompany_edit.php

<?php
ob_start();
include 'config/db.php';
include 'header.php';

$page_title = "Edit Quotation Company";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

/* =========================
   GET ID & FETCH RECORD
   ========================= */
if (!isset($_GET['id']) || empty($_GET['id'])) {
    header("Location: qcompany_list.php");
    exit;
}

$id = (int) $_GET['id'];

$result = mysqli_query($conn, "SELECT * FROM quotations WHERE id = $id");
if (!$result || mysqli_num_rows($result) == 0) {
    header("Location: qcompany_list.php");
    exit;
}

$row = mysqli_fetch_assoc($result);

/* =========================
   HANDLE FORM SUBMIT
   ========================= */
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$client_name    = mysqli_real_escape_string($conn, $_POST['client_name']);
    $site_address   = mysqli_real_escape_string($conn, $_POST['site_address']);
    $site_dimension = mysqli_real_escape_string($conn, $_POST['site_dimension']);
    $pincode        = mysqli_real_escape_string($conn, $_POST['pincode']);
    $phone          = mysqli_real_escape_string($conn, $_POST['phone']);
    $email          = mysqli_real_escape_string($conn, $_POST['email']);
    $status         = isset($_POST['status']) ? 1 : 0;

if (!empty($client_name)) {

$sql = "UPDATE quotations SET
                    client_name           = '$client_name',
                    client_address        = '$site_address',
                    site_dimension        = '$site_dimension',
                    client_pincode        = '$pincode',
                    client_phone          = '$phone',
                    client_email          = '$email',
                    status         = '$status'
                WHERE id = $id";

if (mysqli_query($conn, $sql)) {
            header("Location: qcompany_list.php?msg=Quotation Company Updated Successfully");
            exit;
        } else {
            $message = "Database Error: " . mysqli_error($conn);
        }

} else {
        $message = "Client name is required.";
    }
}
?>

<div class="card-header pb-0">
    <h2>Edit Quotation Company</h2>
</div>

<?php if ($message): ?>
<div class="alert alert-danger"><?= $message ?></div>
<?php endif; ?>

<div class="col-md-4">
        <label class="form-label">Client Name</label>
        <input type="text" name="client_name" class="form-control"
               value="<?= htmlspecialchars($row['client_name']) ?>" required>
    </div>

<div class="col-md-4">
        <label class="form-label">Site Address</label>
        <input type="text" name="site_address" class="form-control"
               value="<?= htmlspecialchars($row['site_address']) ?>">
    </div>

<div class="col-md-4">
        <label class="form-label">Site Dimension</label>
        <input type="text" name="site_dimension" class="form-control"
               value="<?= htmlspecialchars($row['site_dimension']) ?>">
    </div>

<div class="col-md-4">
        <label class="form-label">Pincode</label>
        <input type="text" name="pincode" class="form-control"
               value="<?= htmlspecialchars($row['pincode']) ?>">
    </div>

<div class="col-md-4">
        <label class="form-label">Phone</label>
        <input type="text" name="phone" class="form-control"
               value="<?= htmlspecialchars($row['phone']) ?>">
    </div>

<div class="col-md-4">
        <label class="form-label">Email</label>
        <input type="email" name="email" class="form-control"
               value="<?= htmlspecialchars($row['email']) ?>">
    </div>

<div class="col-md-12 mt-3">
        <div class="form-check form-switch">
            <input class="form-check-input" type="checkbox" name="status"
                   <?= ($row['status'] == 1) ? 'checked' : '' ?>>
            <label class="form-check-label">Active</label>
        </div>
    </div>

</div>

<div class="mt-4">
    <button type="submit" class="btn btn-success">
        <i class="fa fa-save"></i> Update
    </button>
    <a href="qcompany_list.php" class="btn btn-secondary">Cancel</a>
</div>

</form>

</div>
</div>
</div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>