Zploit 0-Day Shell

:: Editing File: stock.php

<?php

error_reporting(E_ALL);
ini_set('display_errors', 1);
include_once("session.php");
include "db.php";
include "header.php";
?>

<div class="container mt-4">
    <h3 class="mb-3">📦 Stock Report (Movement + Boxes)</h3>

<?php
    // -------- STOCK MOVEMENT BOXES --------
    $sql_boxes = "
        SELECT
            'BOX' AS type,
            b.created_at AS date,
            b.movement_id,
            m.movement_no,
            m.product_name,
            cs.company_name AS cold_storage_name,
            m.vehicle_number,
            b.qty_4H AS b4,
            b.qty_5H AS b5,
            b.qty_6H AS b6,
            b.qty_7H AS b7,
            b.qty_8H AS b8,
            b.qty_9H AS b9,
            b.qty_10H AS b10,
            b.qty_CL AS bcl,
            (b.qty_4H + b.qty_5H + b.qty_6H + b.qty_7H + b.qty_8H + b.qty_9H + b.qty_10H + b.qty_CL) AS total,
            b.id AS ref_id
        FROM stock_movement_boxes b
        LEFT JOIN stock_movements m ON b.movement_id = m.id
        LEFT JOIN cold_storage cs ON m.cold_storage_id = cs.id
    ";

// -------- STOCK MOVEMENTS (HEADER ROW) --------
    $sql_movement = "
        SELECT
            'MOVEMENT' AS type,
            m.movement_date AS date,
            m.id AS movement_id,
            m.movement_no,
            m.product_name,
            cs.company_name AS cold_storage_name,
            m.vehicle_number,
            m.total_4H AS b4,
            m.total_5H AS b5,
            m.total_6H AS b6,
            m.total_7H AS b7,
            m.total_8H AS b8,
            m.total_9H AS b9,
            m.total_10H AS b10,
            m.total_CL AS bcl,
            m.total_box AS total,
            m.id AS ref_id
        FROM stock_movements m
        LEFT JOIN cold_storage cs ON m.cold_storage_id = cs.id
    ";

// -------- COMBINE BOTH TABLE RESULT --------
    $sql_final = "
        ($sql_boxes)
        UNION ALL
        ($sql_movement)
        ORDER BY date DESC
    ";

$res = mysqli_query($conn, $sql_final);
    ?>

<table class="table table-bordered table-striped mt-3">
        <thead>
            <tr>
                <th>Type</th>
                <th>Date</th>
                <th>Movement No</th>
                <th>Product</th>
                <th>Cold Storage</th>
                <th>Vehicle</th>
                <th>4H</th>
                <th>5H</th>
                <th>6H</th>
                <th>7H</th>
                <th>8H</th>
                <th>9H</th>
                <th>10H</th>
                <th>CL</th>
                <th>Total</th>
                <th>Print</th>
            </tr>
        </thead>

<td>
                    <a href="generated_stock_challan.php?id=<?= $row['ref_id'] ?>&type=<?= $row['type'] ?>"
                       class="btn btn-primary btn-sm" target="_blank">
                        Print
                    </a>
                </td>
            </tr>
        <?php } ?>
        </tbody>
    </table>
</div>

<?php include "footer.php"; ?>