Zploit 0-Day Shell

:: Editing File: dryfruits_add.php

<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);

include_once("session.php");
include("db.php");
include("header.php");

$table_name = "packaging_materials";
$user_id = $_SESSION['user_id'];

// Fetch categories for dropdown
$category_sql = "SELECT id, category_name FROM material_categories WHERE status = 1 ORDER BY category_name";
$category_res = mysqli_query($conn, $category_sql);

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$category_id  = (int)$_POST['category_id'];
    $product_name = mysqli_real_escape_string($conn, trim($_POST['product_name']));
    /*$quantity     = (float)$_POST['quantity'];*/
    $unit_type    = mysqli_real_escape_string($conn, $_POST['unit_type']);
    $status       = (int)$_POST['status'];
    
    
    if (!isset($_POST['quantity']) || $_POST['quantity'] === '') {
        $quantity = null; 
    } else {
        $quantity = (float)$_POST['quantity'];
    }

// Duplicate check (same product in same category)
    $check_sql = "
        SELECT id FROM $table_name 
        WHERE product_name = '$product_name' 
        AND category_id = '$category_id'
    ";
    $check_res = mysqli_query($conn, $check_sql);

if (mysqli_num_rows($check_res) > 0) {

$_SESSION['error'] = "❌ Product already exists in this category!";
        mysqli_query($conn, "INSERT INTO notifications (user_id, message, type)
                             VALUES ('$user_id','Duplicate dry fruits attempt','error')");

} else {

$insert_sql = "
            INSERT INTO $table_name 
            (category_id, product_name, quantity, unit_type, status)
            VALUES 
            ('$category_id', '$product_name', '$quantity', '$unit_type', '$status')
        ";

if (mysqli_query($conn, $insert_sql)) {

$_SESSION['success'] = "✅ dry fruits added successfully!";
            mysqli_query($conn, "INSERT INTO notifications (user_id, message, type)
                                 VALUES ('$user_id','dry fruits added','success')");

} else {
            $_SESSION['error'] = "❌ Error: " . mysqli_error($conn);
        }
    }
}
?>

<div class="row m-1">
  <div class="col-12">
    <h4 class="main-title">Add Dry Fruits</h4>
    <ul class="app-line-breadcrumbs mb-3">
      <li>
        <a href="dashboard.php"><i class="ph-duotone ph-bank"></i> Home</a>
      </li>
      <li>
        <a href="dryfruits_list.php">Dry Fruits</a>
      </li>
      <li class="active">Add Dry Fruits</li>
    </ul>
  </div>
</div>

<?php
if (isset($_SESSION['success'])) {
    echo '<div class="alert alert-success">'.$_SESSION['success'].'</div>';
    unset($_SESSION['success']);
}
if (isset($_SESSION['error'])) {
    echo '<div class="alert alert-danger">'.$_SESSION['error'].'</div>';
    unset($_SESSION['error']);
}
?>

<div class="col-md-4">
    <label class="form-label">Product Name *</label>
    <input type="text" name="product_name" class="form-control" required>
  </div>

<div class="col-md-4">
    <label class="form-label">Status *</label>
    <select name="status" class="form-select" required>
      <option value="1">Active</option>
      <option value="0">Inactive</option>
    </select>
  </div>

<div class="col-12">
    <button type="submit" class="btn btn-primary">
      Add Dry Fruits
    </button>
    <a href="dryfruits_list.php" class="btn btn-secondary">
      Back
    </a>
  </div>

</form>

</div>
</div>

</div>
</main>

<?php include("footer.php"); ?>