Zploit 0-Day Shell

:: Editing File: vcard_view1.php

<?php
include 'config/db.php';

/* ===============================
   VALIDATE VCARD ID
   =============================== */
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    die('Invalid VCard');
}

$id = (int)$_GET['id'];

/* ===============================
   FETCH PROFILE
   =============================== */
$profile = mysqli_fetch_assoc(mysqli_query($conn,
    "SELECT * FROM vcards WHERE id='$id' AND status=1 LIMIT 1"
));

if (!$profile) {
    die('VCard not found');
}

/* ===============================
   FETCH DATA
   =============================== */
function fetchAll($conn, $sql) {
    $data = [];
    $q = mysqli_query($conn, $sql);
    while ($r = mysqli_fetch_assoc($q)) {
        $data[] = $r;
    }
    return $data;
}

$company_id = (int)$profile['company_id'];

$sql = "
    SELECT c.*
    FROM vcards vc
    LEFT JOIN vcard_company c ON vc.company_id = c.id
    WHERE vc.company_id = $company_id
    LIMIT 1
";

$res = mysqli_query($conn, $sql);
$company = mysqli_fetch_assoc($res);

$services = fetchAll($conn,
    "SELECT * FROM vcard_services WHERE status=1 AND vcard_id='$id' ORDER BY sort_order"
);

$portfolio = fetchAll($conn,
    "SELECT * FROM vcard_portfolio WHERE status=1 AND vcard_id='$id' ORDER BY sort_order"
);

$media = fetchAll($conn,
    "SELECT * FROM vcard_media WHERE status=1 AND vcard_id='$id' ORDER BY created_at DESC"
);

$testimonials = fetchAll($conn,
    "SELECT * FROM vcard_testimonials WHERE status=1 AND vcard_id='$id'"
);

$socials = fetchAll($conn,
    "SELECT * FROM vcard_social_links WHERE status=1 AND vcard_id='$id' ORDER BY sort_order"
);

$about = fetchAll($conn,
    "SELECT * FROM vcard_about WHERE status=1 AND vcard_id='$id'"
);

/* ===============================
   PATHS
   =============================== */
$UPLOAD_BASE = "/kreative_crm/uploads/vcard/{$profile['card_slug']}/";

$COMPANY_BASE = "/kreative_crm/uploads/company/";
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title><?= htmlspecialchars($profile['full_name']) ?> | VCard</title>
<meta name="viewport" content="width=device-width, initial-scale=1">

<link rel="icon" type="image/png" href="<?= $UPLOAD_BASE.$profile['logo'] ?>">
    
	<link
		href="https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&amp;display=swap"
		rel="stylesheet">
	<link rel="stylesheet" href="vcard/assets/css/all.min.css">
	<link rel="stylesheet" href="vcard/assets/css/slick.css">
	<link rel="stylesheet" href="vcard/assets/css/magnific-popup.css">
	<link rel="stylesheet" href="vcard/assets/css/bootstrap.min.css">
	<link rel="stylesheet" href="vcard/assets/css/cursor.css">
	<link rel="stylesheet" href="vcard/assets/css/style.css">
	<link rel="stylesheet" href="vcard/assets/css/media-query.css">
</head>

<section id="ngo-main" class="ceo-content">
			<div class="ngo-main-wrap">
				<div class="hero-sec-main">
					<div class="hero-top-sec">
						<div class="menupage-1-reser-overlay"></div>
	
							<?php if (!empty($company['banner_image'])): ?>
                                <img src="<?= $COMPANY_BASE . '/banner/' . htmlspecialchars($company['banner_image']); ?>"
                                     alt="Company Banner"
                                     width="100%">
                            <?php endif; ?>

<img src="logo/cover.png" alt="logo" width="100%">
							
						<div class="bottom-shape">
							<img src="vcard/assets/images/main-img/bottom-shape.svg" alt="bottom-shape.svg">
						</div>
					</div>
					<div class="header-content">
						
					</div>
				</div>
				<div class="social-main">
					<div class="hero-bottom-sec container">
						<div>
							<?php if (!empty($profile['profile_image'])): ?>
                                <img src="<?= $UPLOAD_BASE . $profile['profile_image']; ?>
                                     alt="Company Banner"
                                     width="100%">
                            <?php endif; ?>
						</div>
						<div style="top: -15px;position: relative">
							<h1 class="client-name mt-10"><?= htmlspecialchars($profile['full_name']) ?></h1>
							<p class="client-title text-left mt-5" style="text-align:left"><?= htmlspecialchars($profile['designation']) ?></p>
							
						</div>
					</div>
				</div>
		
				<div class="contact-sec container mt-30">
					<div class="contact-sec-wrap">
						<div class="top-title">
							<h2><img src="<?= $COMPANY_BASE . 'logo/' . $company['logo'] ?>"
                         alt="Company Logo">&nbsp;Contact Me</h2>
							<h3 class="d-none">Hidden</h3>
						</div>
						<div class="contact-bottom-sec">
							<div class="contact-details mt-10">
								<div class="contact-icon">
									<img src="vcard/assets/images/contact/mail-icon.svg" alt="mail-icon">
								</div>
								<div class="contact-content">
									<h4>Email</h4>
									<a href="mailto:<?= $profile['email'] ?>">
										<p class="mt-10"><?= $profile['email'] ?></p>
									</a>
								</div>
							</div>
							<div class="contact-details mt-10">
								<div class="contact-icon">
									<img src="vcard/assets/images/contact/call-icon.svg" alt="mail-icon">
								</div>
								<div class="contact-content">
									<h4>phone number</h4>
									<a href="tel:<?= $profile['phone'] ?>">
										<p class="mt-10"><?= $profile['phone'] ?></p>
									</a>
								</div>
							</div>
						
							<div class="contact-details mt-10">
								<div class="contact-icon">
									<img src="vcard/assets/images/contact/location.svg" alt="mail-icon">
								</div>
								<div class="contact-content">
									<h4>Office address</h4>
									<p class="mt-10"><?= nl2br(htmlspecialchars($profile['address'])) ?>
								</div>
							</div>
							
						</div>
					</div>
					
				    
				    <div class="social-media-sec container mt-30">
						<div class="social-icon-content">
					        
					        <?php foreach ($socials as $s): ?>
					        
							 <a href="<?= $s['url'] ?>" target="_blank">
								<div class="social-icon-content-wrap">
									<img src="<?= $UPLOAD_BASE.'social/'.$s['icon'] ?>" alt="social-icon" class="red-color">
								</div>
							</a>
							<?php endforeach; ?>
						</div>
						<div class="social-icon-para mt-20">
							<p><?php if ($company['company_desc']): ?>  <?=$company['company_desc']?>  <?php endif; ?>	 </p>
						</div>
					</div>
				
				
				</div>

<?php if ($about): ?>
<div class="about-us mt-30 container">
	<div class="top-title">
			<h2><img src="<?= $COMPANY_BASE . 'logo/' . htmlspecialchars($company['logo']) ?>"
                         alt="Company Logo">who we are</h2>
	</div>
    <?php foreach ($about as $a): ?>
	<div class="about-us-bottom mt-15">
		<div class="about-us-img">
            <img src="<?= $UPLOAD_BASE.'services/'.$a['img'] ?>" alt="About">
		</div>
		<div class="about-content mt-15">
			<h2 class="mt-10"> <?=$a['title']?></h2>
			<p class="mt-5" style="text-align:justify"><?=$a['description']?></p>
		</div>
		<div class="view-product mt-20">
			<a href="javascript:void(0)">Contact us</a>
		</div>
	</div>
	<?php endforeach; ?>
</div>

<?php endif; ?>				

<?php if ($services): ?>

<div class="servicev mt-30 container">
	<div class="top-title">
		<h2><img src="<?= $COMPANY_BASE . 'logo/' . htmlspecialchars($company['logo']) ?>"
                         alt="Company Logo">Services</h2>
	</div>
	<div class="services-bottom mt-15">
		<div class="services-bottom-wrap">
		    
		    <?php foreach ($services as $srv): ?>
			<div class="service-card">
				<div class="global-icon">
					<img src="<?= $UPLOAD_BASE.'services/'.$srv['icon'] ?>" alt="services-icon">
				</div>
				<div class="services-content">
					<h3 class="mt-10"><?= htmlspecialchars($srv['title']) ?></h3>
					<p class="mt-5"><?= htmlspecialchars($srv['description']) ?>
				</div>
			</div>
			<?php endforeach; ?>
		</div>
	</div>
</div>
	
<?php endif; ?>

<div class="tp-cta-area mt-30">
	<div class="donate-bottom-sec">
		<div class="tp-cta-text">
			<h2>Scalable Solutions for Growing Businesses</h2>
			<p class="mt-15">we create growth engines. By combining Senior-level engineering with a deep understanding of digital marketing, we provide the tools you need to reach more customers and manage them more effectively. </p>
			<div class="btns mt-30">
				<a href="javascript:void(0)" class="theme-btn">Get Started</a>
				<a href="javascript:void(0)" class="theme-btn-s2">Contact Us</a>
			</div>
		</div>
	</div>
</div>

<?php if ($portfolio): ?>

<div class="gallery-sec mt-30 container">
	<div class="top-title">
		<h2><img src="<?= $COMPANY_BASE . 'logo/' . htmlspecialchars($company['logo']) ?>"
                         alt="Company Logo"> Portfolio</h2>
	</div>
	<div class="gallery-bottom mt-15" data-cursor-text="Click" data-cursor="sm">
		<div class="gallery-item">
			<?php foreach ($portfolio as $p): ?>
			<div class="gallery-box">
				<a href="<?= $UPLOAD_BASE.'portfolio/'.$p['image'] ?>" class="img-zoom w-100">
					<div class="gallery-img"> <img src="<?= $UPLOAD_BASE.'portfolio/'.$p['image'] ?>"
							alt="gallery" class="w-100">
					</div>
				</a>
				
			</div>
			<br>
			<?php endforeach; ?>
			
			<br><br>
		
		</div>
	</div>
</div>
<?php endif; ?>

<?php if ($testimonials): ?>

<div class="testimonial-sec mt-30 container">
	<div class="top-title">
		<h2> <img src="<?= $COMPANY_BASE . 'logo/' . htmlspecialchars($company['logo']) ?>"
                         alt="Company Logo">Testimonial</h2>
		
	</div>
	<div class="testimonial-sec-bottom mt-15">
		<div class="testimonial-sec-wrap" data-cursor-text="Drag" data-cursor="sm">

<?php foreach ($testimonials as $t): ?>

<div class="testimonial-content">
				<div class="client-img">
					<img src="<?= $UPLOAD_BASE.'testimonial/'.$t['client_image'] ?>" alt="client-img">
				</div>
				<div class="round-shape"></div>
				<div class="quotes-icon">
					<img src="vcard/assets/svg/quotes-icon.svg" alt="quotes-icon">
				</div>
				<div class="bottom-client-details mt-10">
					<h3><?= htmlspecialchars($t['client_name']) ?></h3>
					<p class="text-justify"><?= htmlspecialchars($t['message']) ?></p>
				</div>
			</div>
        	<?php endforeach; ?>						
			
			
		</div>
	</div>
</div>
			
<?php endif; ?>

<?php if ($media): ?>
    <?php foreach ($media as $m): ?>
        <?php if ($m['type'] === 'video' && $m['image_path']): ?>

<div class="video-sec mt-30" style="background-image: url(<?= $UPLOAD_BASE.'media/'.$m['image_path'] ?>);">
			<div class="video_sec_play" data-bs-toggle="modal" data-bs-target="#video-modal" >
				<i class="play_icon fa-solid fa-play"></i>
			</div>
		</div>
		<?php endif; ?>
	<?php endforeach; ?>
    <?php endif; ?>
    
     <div class="inquiry-sec container mt-30">
		<div class="inquiry-sec-wrap">
			<div class="top-title">
				<h2><img src="<?= $COMPANY_BASE . 'logo/' . htmlspecialchars($company['logo']) ?>"
                         alt="Company Logo">Inquiries</h2>
			</div>
			<div class="inquiry-bottom-content">
				<form class="inquiry-form">
					<div>
						<label class="info-person mt-15" for="username">NAME</label>
						<div class="input-wrapper-form mt-5">
							<span><img src="vcard/assets/images/inquery/person-icon.svg" alt="person-icon"></span>
							<input type="text" id="username" placeholder="Your Name" autocomplete="off">
						</div>
					</div>
					<div>
						<label class="info-person mt-15" for="phone-number">Enter Phone Number</label>
						<div class="input-wrapper-form mt-5">
							<span><img src="vcard/assets/images/inquery/call-icon.svg" alt="person-icon"></span>
							<input type="number" id="phone-number" placeholder="Your Phone Number"
								autocomplete="off">
						</div>
					</div>
					<div>
						<label class="info-person mt-15" for="email">Email Address</label>
						<div class="input-wrapper-form mt-5">
							<span><img src="vcard/assets/images/inquery/mail-icon.svg" alt="person-icon"></span>
							<input type="text" id="email" placeholder="Your Email Address"
								autocomplete="off">
						</div>
					</div>
					<div>
						<label class="info-person mt-15" for="email">your message</label>
						<div class="input-wrapper-form textarea-txt mt-5">
							<textarea rows="4" cols="50" placeholder="Type a message here..."
								class="custom-textarea border-0" id="textarea"></textarea>
						</div>
					</div>
				</form>
			</div>
			<div class="view-product mt-20">
				<a href="javascript:void(0)">Send Message</a>
			</div>
		</div>
	</div>
	
    <div class="contact-sec container mt-30">
		<div class="contact-sec-wrap">
			<div class="top-title">
				<h2>
                    <img src="<?= $COMPANY_BASE . 'logo/' . htmlspecialchars($company['logo']) ?>"
                         alt="Company Logo">
                    location
                </h2>

<h3 class="d-none">Hidden</h3>
			</div>
			
		</div>
	</div>
	
<?php if (!empty($company['map_iframe'])): ?>
	<div class="map-sec container mt-30">
		<div class="map-img">
            <?= $company['map_iframe'] ?>				
	    </div>
	</div>
	<div class="add-to-contact container">
		<div class="add-to-contact-wrap">
			<a href="javascript:void(0)" class="scan-btn" data-bs-toggle="modal"
				data-bs-target="#product-modal">
				<img src="assets/images/bottom-sec/scan-icon.svg" alt="scan-icon">
			</a>
			<a href="javascript:void(0)" class="scan-btn" data-bs-toggle="modal"
				data-bs-target="#share-media-modal">
				<img src="assets/images/bottom-sec/share-icon.svg" alt="share-icon">
			</a>
			<a target="_blank" href="https://www.google.com/maps/place/kreative+pixelz/data=!4m2!3m1!1s0x0:0x5426b818983707a4?sa=X&ved=1t:2428&ictx=111" class="add-to-btn">
				<div class="add-to-btn-sec">
					<div class="add-txt">Contact Now</div>
					<div class="plus-btn"><img src="assets/images/bottom-sec/plus-icon.svg" alt="plus-icon">
					</div>
				</div>
			</a>
		</div>
	</div>
<?php endif; ?>

<footer class="text-center mt-4">
	<p>© <?= date('Y') ?> Design & Developed By <a href="https://kreativepixelz.com/" style="color:#206fa2;">  Kreative Pixelz </a></p>
</footer>

</body>
</html>