Zploit 0-Day Shell

:: Editing File: lead_add.php

<?php
ob_start();
include 'header.php';
$page_title = "Add Lead";
$page_parent = "Leads";
$page_parent_link = "leads.php";
include 'breadcrumb.php';
include('menu.php');

$message = "";

// Fetch Team Members for Assigned To
$teamMembers = mysqli_query($conn, "SELECT id, name FROM team_members  where status='1' ORDER BY name ASC");

// Handle form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$name = mysqli_real_escape_string($conn, $_POST['name']);
    $mobile = mysqli_real_escape_string($conn, $_POST['mobile']);
    $location = mysqli_real_escape_string($conn, $_POST['location']);
    $email = mysqli_real_escape_string($conn, $_POST['email']);
    $business_name = mysqli_real_escape_string($conn, $_POST['business_name']);
    $enquiry_for = mysqli_real_escape_string($conn, $_POST['enquiry_for']);
    $enquiry_content = mysqli_real_escape_string($conn, $_POST['enquiry_content']);
    $comment = mysqli_real_escape_string($conn, $_POST['comment']);
    $follow_up_date = mysqli_real_escape_string($conn, $_POST['follow_up_date']);
    $calling_status = mysqli_real_escape_string($conn, $_POST['calling_status']);
    $lead_source = mysqli_real_escape_string($conn, $_POST['lead_source']);
    $lead_date = mysqli_real_escape_string($conn, $_POST['lead_date']);
    $call_status = mysqli_real_escape_string($conn, $_POST['call_status']);
    $assigned_to = mysqli_real_escape_string($conn, $_POST['assigned_to']);
    $created_by = $_SESSION['user_id'];

// --- File Upload Handling ---
    $quotation_pic = "";
    $upload_dir = "uploads/invoices/";

// Create folder if not exists
    if (!is_dir($upload_dir)) {
        mkdir($upload_dir, 0777, true);
    }

if (isset($_FILES['quotation_pic']) && $_FILES['quotation_pic']['error'] === UPLOAD_ERR_OK) {
        $file_tmp = $_FILES['quotation_pic']['tmp_name'];
        $file_name = basename($_FILES['quotation_pic']['name']);
        $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
        $allowed = ['jpg', 'jpeg', 'png', 'pdf'];

if (in_array($file_ext, $allowed)) {
            $new_name = time() . "_" . preg_replace('/[^A-Za-z0-9_\-\.]/', '_', $file_name);
            $file_path = $upload_dir . $new_name;

if (move_uploaded_file($file_tmp, $file_path)) {
                $quotation_pic = $file_path;
            } else {
                $message = "File upload failed!";
            }
        } else {
            $message = "Invalid file type! Only JPG, PNG, and PDF allowed.";
        }
    }

// --- Insert Query ---
    $sql = "INSERT INTO leads 
            (lead_date, lead_source, name, mobile, location, email, business_name, enquiry_for, enquiry_content, comment, follow_up_date, calling_status, call_status, call_time, assigned_to, created_by, quotation_pic)
            VALUES 
            ('$lead_date', '$lead_source', '$name', '$mobile', '$location', '$email', '$business_name', '$enquiry_for', '$enquiry_content', '$comment', '$follow_up_date', '$calling_status', '$call_status', NOW(), '$assigned_to', '$created_by', '$quotation_pic')";
    
    if (mysqli_query($conn, $sql)) {
        header("Location: leads.php?msg=Lead added successfully");
        exit;
    } else {
        $message = "Error: " . mysqli_error($conn);
    }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="row">
      <div class="col-sm-12">
        <div class="card">
          <div class="card-header pb-0 card-no-border">
            <h2>Add Lead</h2>
          </div>
          <div class="card-body">

<?php if ($message) echo "<div class='alert alert-danger'>$message</div>"; ?>

<div class="col-md-4">
 <label class="form-label">Mobile</label>
 <input type="text" name="mobile" class="form-control" required>
</div>

<div class="col-md-4">
 <label class="form-label">Location</label>
 <input type="text" name="location" class="form-control">
</div>

<div class="col-md-4">
 <label class="form-label">Lead Source</label>
 <select name="lead_source" class="form-select" required>
<option value="">-- Select Source --</option>
<option value="Facebook">Facebook</option>
<option value="Instagram">Instagram</option>
<option value="Referral">Referral</option>
<option value="Others">Others</option>
 </select>
</div>
                
<div class="col-md-4">
 <label class="form-label">Business Name</label>
 <input type="text" name="business_name" class="form-control">
</div>

<div class="col-md-4">
 <label class="form-label">Email</label>
 <input type="email" name="email" class="form-control">
</div>

<div class="col-md-4">
 <label class="form-label">Enquiry For (Service)</label>
 <select name="enquiry_for" class="form-select" required>
<option value="">-- Select Service --</option>
<option value="2">Website Development</option>
<option value="38">STATIC WEBSITE</option>
<option value="39">DYNAMIC WEBSITE</option>
<option value="40">E-COMMERCE WEBSITE</option>
<option value="4">DIGITAL MARKETING</option>
<option value="1">GRAPHIC DESIGNING</option>
<option value="7">VIDEO EDITING</option>
<option value="41">SEO</option>
<option value="3">CRM</option>
<option value="36">BULK WHATSAPP</option>
 </select>
</div>

<div class="col-md-4">
 <label class="form-label">Follow Up Date</label>
 <input type="date" name="follow_up_date" class="form-control">
</div>

<div class="col-md-4 mb-3">
 <label class="form-label">Call Status</label>
 <select name="call_status" class="form-control">
<option value="Incompleted">Incompleted</option>
<option value="Completed">Completed</option>
 </select>
</div>

<div class="col-md-4">
 <label class="form-label">Lead Status</label>
 <select name="calling_status" class="form-select">
<option value="Pending">Pending</option>
<option value="Done">Done</option>
<option value="No Response">No Response</option>
<option value="Interested">Interested</option>
<option value="Not Interested">Not Interested</option>
 </select>
</div>

<div class="col-md-4">
 <label class="form-label">Assign To (Team Member)</label>
 <select name="assigned_to" class="form-select" required>
<option value="">-- Select Team Member --</option>
<?php 
                        // Note: $teamMembers must be a valid result set object or an array of team members.
                        mysqli_data_seek($teamMembers, 0); // Reset pointer if $teamMembers is a result object
                        while ($tm = mysqli_fetch_assoc($teamMembers)) { 
                    ?>
<option value="<?php echo $tm['id']; ?>"><?php echo htmlspecialchars($tm['name']); ?></option>
<?php } ?>
 </select>
</div>

<div class="col-md-6 mb-3">
 <label class="form-label">Enquiry Content</label>
 <textarea name="enquiry_content" class="form-control" rows="3"></textarea>
</div>

<div class="col-md-6 mb-3">
 <label class="form-label">Comment</label>
 <textarea name="comment" class="form-control" rows="3"></textarea>
</div>

<div class="col-md-6">
 <label class="form-label">Quotation File (jpg, png, pdf)</label>
 <input type="file" name="quotation_pic" class="form-control" accept=".jpg,.jpeg,.png,.pdf">
</div>
                
                <div class="col-md-6"></div>

</div>

<br>
 <div class="text-start">
<button type="submit" class="btn btn-success">Save Lead</button>
<button type="button" onclick="history.back()" class="btn btn-secondary">Cancel</button>
 </div>

</form>
          </div>
        </div>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>