Zploit 0-Day Shell

:: Editing File: edit_billing.php

<?php
include_once("session.php");
include("db.php");

$user_id = $_SESSION['user_id'];
$id = $_GET['id'] ?? null;

if (!$id || !is_numeric($id)) {
    $_SESSION['error'] = "❌ Missing or invalid Delivery ID!";
    header("Location: list_delivery.php");
    exit();
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $sql = "UPDATE delivery 
            SET company_name = ?, address = ?, gst_no = ?, pan_no = ?,
                contact_person1 = ?, contact_phone1 = ?, 
                contact_person2 = ?, contact_phone2 = ?,
                delivery_date = ?, doc_type = ?, 
                bank_details = ?, notes = ?, updated_at = NOW()
            WHERE id = ?";

if ($stmt = $conn->prepare($sql)) {
        $stmt->bind_param(
            "ssssssssssssi",
            $_POST['company_name'],
            $_POST['address'],
            $_POST['gst_no'],
            $_POST['pan_no'],
            $_POST['contact_person1'],
            $_POST['contact_phone1'],
            $_POST['contact_person2'],
            $_POST['contact_phone2'],
            $_POST['delivery_date'],
            $_POST['doc_type'],
            $_POST['bank_details'],
            $_POST['notes'],
            $id
        );

if ($stmt->execute()) {
            $_SESSION['success'] = "✅ Delivery updated successfully!";

$msg  = "✅ Delivery updated successfully!";
            $type = "success";
            $conn->query("INSERT INTO notifications (user_id, message, type) 
                          VALUES ('$user_id', '$msg', '$type')");

header("Location: list_delivery.php");
            exit();
        } else {
            $_SESSION['error'] = "❌ Error updating delivery: " . $stmt->error;
        }

$stmt->close();
    } else {
        $_SESSION['error'] = "❌ Database error: " . $conn->error;
    }
}

// fetch record
$sql = "SELECT * FROM delivery WHERE id = ?";
$stmt = $conn->prepare($sql);
$stmt->bind_param("i", $id);
$stmt->execute();
$result = $stmt->get_result();
$delivery = $result->fetch_assoc();
$stmt->close();

if (!$delivery) {
    $_SESSION['error'] = "❌ Delivery record not found!";
    header("Location: list_delivery.php");
    exit();
}

include("header.php");
?>

<div class="row m-1">
        <div class="col-12">
            <h4 class="main-title">Edit Delivery</h4>
            <ul class="app-line-breadcrumbs mb-3">
                <li><a class="f-s-14 f-w-500" href="dashboard.php"><i class="ph-duotone ph-bank f-s-16"></i> Home</a></li>
                <li><a class="f-s-14 f-w-500" href="list_delivery.php"><i class="ph-duotone ph-table f-s-16"></i> Delivery List</a></li>
                <li class="active"><a class="f-s-14 f-w-500" href="#">Edit Delivery</a></li>
            </ul>
        </div>
    </div>

<div class="row">
        <div class="col-12">
            <div class="card">
                <div class="card-body">

<form class="row g-3 app-form" method="post" action="">
                        <div class="col-md-6">
                            <label class="form-label">Company Name</label>
                            <input class="form-control" name="company_name" type="text" 
                                   value="<?= htmlspecialchars($delivery['company_name']) ?>" required>
                        </div>
                        <div class="col-md-12">
                            <label class="form-label">Address</label>
                            <textarea class="form-control" name="address" rows="2"><?= htmlspecialchars($delivery['address']) ?></textarea>
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">GST No</label>
                            <input class="form-control" name="gst_no" type="text" 
                                   value="<?= htmlspecialchars($delivery['gst_no']) ?>">
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">PAN No</label>
                            <input class="form-control" name="pan_no" type="text" 
                                   value="<?= htmlspecialchars($delivery['pan_no']) ?>">
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">Contact Person 1</label>
                            <input class="form-control" name="contact_person1" type="text" 
                                   value="<?= htmlspecialchars($delivery['contact_person1']) ?>">
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">Contact Phone 1</label>
                            <input class="form-control" name="contact_phone1" type="text" 
                                   value="<?= htmlspecialchars($delivery['contact_phone1']) ?>">
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">Contact Person 2</label>
                            <input class="form-control" name="contact_person2" type="text" 
                                   value="<?= htmlspecialchars($delivery['contact_person2']) ?>">
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">Contact Phone 2</label>
                            <input class="form-control" name="contact_phone2" type="text" 
                                   value="<?= htmlspecialchars($delivery['contact_phone2']) ?>">
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">Delivery Date</label>
                            <input class="form-control" name="delivery_date" type="date" 
                                   value="<?= htmlspecialchars($delivery['delivery_date']) ?>" required>
                        </div>
                        <div class="col-md-6">
                            <label class="form-label">Document Type</label>
                            <input class="form-control" name="doc_type" type="text" 
                                   value="<?= htmlspecialchars($delivery['doc_type']) ?>">
                        </div>
                        <div class="col-md-12">
                            <label class="form-label">Bank Details</label>
                            <textarea class="form-control" name="bank_details" rows="2"><?= htmlspecialchars($delivery['bank_details']) ?></textarea>
                        </div>
                        <div class="col-md-12">
                            <label class="form-label">Notes</label>
                            <textarea class="form-control" name="notes" rows="3"><?= htmlspecialchars($delivery['notes']) ?></textarea>
                        </div>
                        <div class="col-12 text-end">
                            <button type="submit" class="btn btn-primary">Update Delivery</button>
                            
                        </div>
                    </form>

</div>
            </div>
        </div>
    </div>

<?php include("footer.php"); ?>