Zploit 0-Day Shell

:: Editing File: qdesc_delete.php

<?php
// ==========================================
// Delete Quotation Description
// File: qdesc_delete.php
// ==========================================

include 'config/db.php';

// ============================
// Validate ID
// ============================
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    header("Location: qdesc_list.php?msg=Invalid ID");
    exit;
}

$id = intval($_GET['id']);

// ============================
// Check Record Exists
// ============================
$check = mysqli_query($conn, "
    SELECT id 
    FROM quotation_descriptions 
    WHERE id = $id
");

if (mysqli_num_rows($check) == 0) {
    header("Location: qdesc_list.php?msg=Description Not Found");
    exit;
}

// ============================
// Delete Record
// ============================
mysqli_query($conn, "
    DELETE FROM quotation_descriptions 
    WHERE id = $id
");

// ============================
// Redirect
// ============================
header("Location: qdesc_list.php?msg=Quotation Description Deleted Successfully");
exit;
?>