Zploit 0-Day Shell

:: Editing File: quotation_send.php

<?php
ob_start();
include 'header.php';

// ✅ Page setup
$page_parent = "Quotation";
$page_parent_link = "quotation.php";
$page_title = "Send Quotation";

include 'breadcrumb.php';
include 'menu.php';

// ✅ Check for valid quotation ID
if (!isset($_GET['q_id']) || empty($_GET['q_id'])) {
    header("Location: quotation.php?msg=Invalid Request");
    exit;
}

$q_id = intval($_GET['q_id']);
$query = mysqli_query($conn, "SELECT * FROM qutation WHERE id='$q_id'");
$qutation = mysqli_fetch_assoc($query);

if (!$qutation) {
    header("Location: quotation.php?msg=Quotation not found");
    exit;
}

// ✅ Build PDF file path
$pdf_path = "uploads/quotation/" . $qutation['pdf_path'];
$base_url = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http") . "://{$_SERVER['HTTP_HOST']}" . dirname($_SERVER['SCRIPT_NAME']) . "/";
$full_pdf_url = $base_url . $pdf_path;
?>

<div class="page-body">
    <div class="container-fluid">
        <div class="row">
            <div class="col-sm-12">
                <div class="card">
                    <div class="card-header">
                        <h2>Send Quotation via WhatsApp</h2>
                    </div>
                    <div class="card-body">
                        <form method="POST">
                            <div class="row">
                                
                                <div class="col-md-12">
                                    <label class="form-label">Mobile Number</label>
                                    <input type="text" name="mobile" class="form-control" placeholder="Enter WhatsApp number" required>
                                </div>

<div class="col-md-12 mt-3">
                                    <label class="form-label">Quotation Name</label>
                                    <input type="text" class="form-control" value="<?= htmlspecialchars($qutation['name']); ?>" readonly>
                                </div>

<div class="col-md-12 mt-3">
                                    <label class="form-label">Quotation PDF Link</label>
                                    <?php if (!empty($qutation['pdf_path']) && file_exists($pdf_path)): ?>
                                        <input type="text" name="pdf_link" class="form-control" value="<?= htmlspecialchars($full_pdf_url); ?>" readonly>
                                        <div class="mt-3">
                                            <a href="<?= $full_pdf_url; ?>" target="_blank" class="btn btn-outline-primary">
                                                <i class="fa fa-file-pdf"></i> View PDF
                                            </a>
                                        </div>
                                    <?php else: ?>
                                        <input type="text" class="form-control" value="No PDF available" readonly>
                                    <?php endif; ?>
                                </div>
                            </div>

<div class="text-center mt-5">
                                <button type="submit" name="send_now" class="btn btn-success" style="background:#00d757;border:none;">
                                    <i class="fa fa-whatsapp"></i> Send via WhatsApp
                                </button>
                                <a href="quotation.php" class="btn btn-secondary">Back</a>
                            </div>
                        </form>

<?php
                        // ✅ When form is submitted
                        if (isset($_POST['send_now'])) {
                            $mobile = mysqli_real_escape_string($conn, $_POST['mobile']);
                            $pdf_link = $full_pdf_url;
                            $created_at = date('Y-m-d H:i:s');

if (!empty($mobile) && !empty($pdf_link)) {
                                // ✅ Insert record into qutation_send table
                                $insert = "INSERT INTO qutation_send (q_id, mobile, created_at) 
                                           VALUES ('$q_id', '$mobile', '$created_at')";
                                mysqli_query($conn, $insert);

// ✅ Redirect to WhatsApp
                                $msg = "Hello,%0A%0APlease find your quotation below:%0A" . urlencode($pdf_link);
                                echo $whatsapp_url = "https://wa.me/{$mobile}?text={$msg}";
								
								
                                echo "<script>window.open('$whatsapp_url', '_blank');</script>";

echo "<script>alert('Quotation sent successfully!');window.location='quotation.php';</script>";
                            } else {
                                echo "<script>alert('Please enter a valid mobile number.');</script>";
                            }
                        }
                        ?>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>