Zploit 0-Day Shell

:: Editing File: qdesc_add.php

<?php
ob_start();

include 'header.php';
$page_title = "Add Quotation Description";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

// ============================
// Handle Form Submit
// ============================
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$category_id = intval($_POST['category_id']);
    $name        = mysqli_real_escape_string($conn, $_POST['name']);
    $status      = isset($_POST['status']) ? intval($_POST['status']) : 1;

if (!empty($category_id) && !empty($name)) {

$sql = "INSERT INTO quotation_descriptions (category_id, name, status)
                VALUES ('$category_id', '$name', '$status')";

if (mysqli_query($conn, $sql)) {
            header("Location: qdesc_list.php?msg=Quotation Description Added Successfully");
            exit;
        } else {
            $message = "Database Error: " . mysqli_error($conn);
        }

} else {
        $message = "Category and Description Name are required.";
    }
}
?>

<div class="card-header pb-0">
        <h2>Add Quotation Description</h2>
      </div>

<?php if (!empty($message)) { ?>
          <div class="alert alert-danger"><?= $message; ?></div>
        <?php } ?>

<div class="col-md-6">
              <label class="form-label">Category</label>
              <select name="category_id" class="form-control" required>
                <option value="">-- Select Category --</option>
                <?php
                $cat_sql = "SELECT id, name FROM quotation_categories WHERE status = 1 ORDER BY name ASC";
                $cat_res = mysqli_query($conn, $cat_sql);

if ($cat_res && mysqli_num_rows($cat_res) > 0) {
                    while ($cat = mysqli_fetch_assoc($cat_res)) {
                        echo "<option value='{$cat['id']}'>{$cat['name']}</option>";
                    }
                }
                ?>
              </select>
            </div>

<div class="col-md-6">
              <label class="form-label">Description Name</label>
              <input type="text" name="name" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Status</label>
              <select name="status" class="form-control">
                <option value="1">Active</option>
                <option value="0">Inactive</option>
              </select>
            </div>

</div>

<div class="mt-4">
            <button type="submit" class="btn btn-success">
              <i class="fa fa-save"></i> Save
            </button>
            <a href="qdesc_list.php" class="btn btn-secondary">
              Cancel
            </a>
          </div>

</form>

</div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>