Zploit 0-Day Shell

:: Editing File: add_tax.php

<?php

include_once("session.php");
include("db.php"); // check login session
include("header.php");

// Define table and columns for clarity
$table_name = "taxes";

<div class="row m-1">
      <div class="col-12">
        <h4 class="main-title">Add Tax</h4>
        <ul class="app-line-breadcrumbs mb-3">
          <li>
            <a class="f-s-14 f-w-500" href="dashboard.php">
              <i class="ph-duotone ph-bank f-s-16"></i> Home
            </a>
          </li>
					 <li>
            <a class="f-s-14 f-w-500" href="tax_list.php">
              <i class="ph-duotone ph-table f-s-16"></i> Tax List
            </a>
          </li>
          <li class="active">
            <a class="f-s-14 f-w-500" href="#">Add Tax</a>
          </li>
        </ul>
      </div>
    </div>
    <?php
    // Assuming 'user_id' is used for notifications
		$user_id = $_SESSION['user_id'];
		
    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        // Get and escape form data for taxes table
      $tax_name = mysqli_real_escape_string($conn, $_POST['tax_name']);
      $tax_percentage = mysqli_real_escape_string($conn, $_POST['tax_percentage']);
      $remarks = mysqli_real_escape_string($conn, $_POST['remarks']);
      $status = mysqli_real_escape_string($conn, $_POST['status']);
			
			$id = mysqli_real_escape_string($conn, $_POST['id']); // User ID for notification

// Check for duplicate tax name before inserting
        $check_sql = "SELECT id FROM {$table_name} WHERE tax_name = '{$tax_name}'";
        $check_result = mysqli_query($conn, $check_sql);

if (mysqli_num_rows($check_result) > 0) {
            $_SESSION['error'] = "❌ Tax name '{$tax_name}' already exists!";
            $msg = "❌ Tax Added Failed: Duplicate Name!";
            $type = "error";
            mysqli_query($conn, "INSERT INTO notifications (user_id, message, type) VALUES ('$id', '$msg', '$type')");
        } else {

// SQL query to insert into taxes table
      $sql = "INSERT INTO {$table_name} (tax_name, tax_percentage, remarks, status)
            VALUES ('$tax_name', '$tax_percentage', '$remarks', '$status')";

if (mysqli_query($conn, $sql)) {
        $_SESSION['success'] = "✅ Tax added successfully!";
					
					$msg = "✅ Tax Added successfully!";
					$type = "success";
					
					// Use $user_id for notifications
					mysqli_query($conn, "INSERT INTO notifications (user_id, message, type) VALUES ('$id', '$msg', '$type')");
							
      } else {
					
					$msg = "❌ Tax Added Failed ! " . mysqli_error($conn);
					$type = "error";
					mysqli_query($conn, "INSERT INTO notifications (user_id, message, type) VALUES ('$id', '$msg', '$type')");
								
        $_SESSION['error'] = "❌ Error adding Tax: " . mysqli_error($conn);
      }
        }
    }
    ?>

<?php
            if (isset($_SESSION['success'])) {
              echo '<div class="alert alert-success" id="autoAlert">'.$_SESSION['success'].'</div>';
              unset($_SESSION['success']);
            }
            if (isset($_SESSION['error'])) {
              echo '<div class="alert alert-danger" id="autoAlert">'.$_SESSION['error'].'</div>';
              unset($_SESSION['error']);
            }
            ?>

<div class="col-md-6">
                  <label class="form-label" for="tax_percentage">Tax Percentage (%)*</label>
                  <input class="form-control" id="tax_percentage" name="tax_percentage" type="number" step="0.01" min="0" required>
                </div>

<div class="col-md-6">
                  <label class="form-label" for="remarks">Remarks</label>
                  <textarea class="form-control" id="remarks" name="remarks" rows="3"></textarea>
                </div>

<div class="col-md-6">
                  <label class="form-label" for="status">Status*</label>
                    <select class="form-select" id="status" name="status" required>
                        <option value="active">Active</option>
                        <option value="inactive">Inactive</option>
                    </select>
                </div>
                
                <div class="col-12">
                  <button type="submit" class="btn btn-primary">Add Tax</button>
                </div>
            </form>

</div>
        </div>
      </div>
    </div>

</div>
</main>

<?php include("footer.php"); ?>