Zploit 0-Day Shell

:: Editing File: page4-extra.php

<h2 class="section-title">Extra Works</h2>

<?php
include 'conn/db.php';
?>

<?php

$id = (int)$_GET['id'];

// Use the same $id from the top of your script
$sql_extra = "SELECT 
                ew.extra_work, 
                ew.sort_order 
            FROM 
                quotations q
            INNER JOIN 
                quotation_extra_works ew ON q.id = ew.quotation_id 
            WHERE 
                ew.quotation_id = $id
            ORDER BY ew.sort_order ASC";

$result_extra = mysqli_query($conn, $sql_extra);

if (!$result_extra) {
    die("Extra Works Query Error: " . mysqli_error($conn));
}
?>

<ol>
    <?php if (mysqli_num_rows($result_extra) > 0): ?>
        <?php while ($row_extra = mysqli_fetch_assoc($result_extra)) { ?>
            <li><?php echo htmlspecialchars($row_extra['extra_work']); ?></li>
        <?php } ?>
    <?php else: ?>
        <li>No extra works specified.</li>
    <?php endif; ?>
</ol>