Zploit 0-Day Shell

:: Editing File: purchase_invoice_list.php

<?php

error_reporting(E_ALL);
ini_set('display_errors', '1');

include_once("session.php");

include("header.php"); 
include("db.php");
?>
<link href="assets/vendor/datatable/jquery.dataTables.min.css" rel="stylesheet" type="text/css">

<div class="row m-1">
            <div class="col-9">
                <h4 class="main-title">Purchase Invoice</h4>
                <ul class="app-line-breadcrumbs mb-3">
                    <li>
                        <a class="f-s-14 f-w-500" href="dashboard.php">
                            <i class="ph-duotone ph-bank f-s-16"></i> Home
                        </a>
                    </li>
                    <li class="active">
                        <a class="f-s-14 f-w-500" href="#">Purchase Invoice</a>
                    </li>
                </ul>
            </div>
            <div class="col-3">
                <a href="vendor_invoice_add.php" class="btn btn-primary" style="float: right;">Add Invoice</a>
            </div>
        </div>

<div class="row">
            <div class="col-12">
                <div class="card ">
                    <div class="card-body p-0">
                        <div class="app-datatable-default overflow-auto">
                            <table class="display app-data-table default-data-table" id="example2">
                                <thead>
                                    <tr>
                                        <th>Name</th>
                                        <th>Invoice No</th>
                                        <th>Invoice Date</th>
                                        <th>Consignee  Name</th>
                                        <th>Amount</th>
                                        <th>Action</th>
                                    </tr>
                                </thead>
                                <!--<tbody>
                                    <?php /*
                                    $sql = "SELECT vi.*, v.name, v.email, v.phone, v.address 
                       FROM vendor_invoices vi 
                       JOIN vendors v ON vi.vendor_id = v.id";
                                    $result = mysqli_query($conn, $sql);

if (mysqli_num_rows($result) > 0) {
                                        while ($row = mysqli_fetch_assoc($result)) {
											
						
                                            echo "<tr>";
                                            echo "<td>".$row['name']."</td>";
                                            echo "<td>".$row['invoice_no']."</td>";
                                            echo "<td>".$row['invoice_date']."</td>";
                                            echo "<td>".$row['driver_name']."</td>";
                                            echo "<td>".$row['driver_number']."</td>";
                                            echo "<td>
                                                    <a target='_blank' href='genrated_vendor_invoice.php?id=".$row['id']."' class='btn btn-light-success icon-btn b-r-4'>
                                                        <i class='ti ti-transition-right text-success'></i>
                                                    </a>
                                                    
                                                  </td>";
                                            echo "</tr>";
                                        }
                                    } else {
                                        echo "<tr><td colspan='6' class='text-center'>No invoices found</td></tr>";
                                    }
                                    */?>
                                </tbody> -->
								
								 <tbody>
                                    <tr><td>ARNAV TRADING CO</td><td>ATC/25-26/010</td><td>2025-08-13</td><td>ARMIN TEJARAT TABRIZ</td><td>1,447,600.00</td><td>
                                                    <a target='_blank' href='uploads/purchase_invoice.pdf' class='btn btn-light-success icon-btn b-r-4'>
                                                        <i class='ti ti-transition-right text-success'></i>
                                                    </a>
                                                    
                                                  </td></tr>                                
								</tbody>
												  
                            </table>
                        </div>
                    </div>
                </div>
            </div>
        </div>

</div>
</main>

<?php include "footer.php"; ?>

<script src="assets/vendor/datatable/jquery-3.5.1.js"></script>

<script src="assets/vendor/datatable/jquery.dataTables.min.js"></script>
<script src="assets/js/data_table.js"></script>

<link rel="stylesheet" href="https://cdn.datatables.net/buttons/2.4.1/css/buttons.dataTables.min.css">
<script src="https://cdn.datatables.net/buttons/2.4.1/js/dataTables.buttons.min.js"></script>
<script src="https://cdn.datatables.net/buttons/2.4.1/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/2.4.1/js/buttons.print.min.js"></script>

<script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js"></script>