Zploit 0-Day Shell

:: Editing File: vcard_social_links_edit.php

<?php
ob_start();
include 'header.php';

$page_title = "Edit VCard Social Link";
$page_parent = "VCards";
$page_parent_link = "vcard_social_links_list.php";

include 'breadcrumb.php';
include 'menu.php';

$message = "";

/* ===============================
   PATH CONFIG (IMPORTANT)
   =============================== */

// Filesystem path
define('VCARD_UPLOAD_PATH', $_SERVER['DOCUMENT_ROOT'] . '/kreativecrm/uploads/vcard/');

// Public URL
define('VCARD_UPLOAD_URL', '/kreativecrm/uploads/vcard/');

/* ===============================
   VALIDATE ID
   =============================== */
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    header("Location: vcard_social_links_list.php?msg=Invalid Social Link ID");
    exit;
}

$id = intval($_GET['id']);

/* ===============================
   FETCH SOCIAL LINK
   =============================== */
$q = mysqli_query($conn, "SELECT * FROM vcard_social_links WHERE id='$id'");
if (mysqli_num_rows($q) == 0) {
    header("Location: vcard_social_links_list.php?msg=Social Link Not Found");
    exit;
}
$row = mysqli_fetch_assoc($q);

/* ===============================
   FETCH CURRENT VCARD SLUG
   =============================== */
$vcard_q = mysqli_query(
    $conn,
    "SELECT card_slug FROM vcards WHERE id='{$row['vcard_id']}'"
);
$vcard = mysqli_fetch_assoc($vcard_q);

$slug = $vcard['card_slug'];
$upload_dir = VCARD_UPLOAD_PATH . $slug . '/social/';

if (!is_dir($upload_dir)) {
    mkdir($upload_dir, 0777, true);
}

/* ===============================
   FORM SUBMIT
   =============================== */
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$vcard_id   = intval($_POST['vcard_id']);
    $platform   = mysqli_real_escape_string($conn, $_POST['platform']);
    $url        = mysqli_real_escape_string($conn, $_POST['url']);
    $sort_order = intval($_POST['sort_order']);
    $status     = isset($_POST['status']) ? 1 : 0;

if ($vcard_id == 0 || $platform == '' || $url == '') {
        $message = "VCard, Platform and URL are required.";
    }

/* ===============================
       FETCH NEW VCARD SLUG (IF CHANGED)
       =============================== */
    if ($message == '') {

$vcard_q = mysqli_query(
            $conn,
            "SELECT card_slug FROM vcards WHERE id='$vcard_id'"
        );
        $vcard = mysqli_fetch_assoc($vcard_q);

if (!$vcard) {
            $message = "Invalid VCard selected.";
        } else {
            $slug = $vcard['card_slug'];
            $upload_dir = VCARD_UPLOAD_PATH . $slug . '/social/';

if (!is_dir($upload_dir)) {
                mkdir($upload_dir, 0777, true);
            }
        }
    }

/* ===============================
       ICON UPLOAD
       =============================== */
    $icon = $row['icon'];
    $allowed_ext = ['jpg','jpeg','png','webp','svg'];

if ($message == '' && !empty($_FILES['icon']['name'])) {

$ext = strtolower(pathinfo($_FILES['icon']['name'], PATHINFO_EXTENSION));

if (!in_array($ext, $allowed_ext)) {
            $message = "Only JPG, PNG, WEBP, SVG icons allowed.";
        } else {

/* delete old icon */
            if ($icon && file_exists($upload_dir . $icon)) {
                unlink($upload_dir . $icon);
            }

$icon = time() . '_icon.' . $ext;

move_uploaded_file(
                $_FILES['icon']['tmp_name'],
                $upload_dir . $icon
            );
        }
    }

/* ===============================
       UPDATE DATABASE
       =============================== */
    if ($message == '') {

$sql = "UPDATE vcard_social_links SET
                    vcard_id   = '$vcard_id',
                    platform   = '$platform',
                    url        = '$url',
                    icon       = '$icon',
                    sort_order = '$sort_order',
                    status     = '$status',
                    updated_at = NOW()
                WHERE id = '$id'";

if (mysqli_query($conn, $sql)) {
            header("Location: vcard_social_links_list.php?msg=Social link updated successfully");
            exit;
        } else {
            $message = "Database Error: " . mysqli_error($conn);
        }
    }
}
?>

<div class="page-body">
<div class="container-fluid">
<div class="row">
<div class="col-sm-12">

<div class="card">
<div class="card-header pb-0 card-no-border">
    <h2>Edit VCard Social Link</h2>
</div>

<?php if ($message): ?>
    <div class="alert alert-danger"><?= htmlspecialchars($message); ?></div>
<?php endif; ?>

<div class="col-md-6">
    <label class="form-label">Select VCard *</label>
    <select name="vcard_id" class="form-control" required>
        <?php
        $vcards = mysqli_query(
            $conn,
            "SELECT id, full_name FROM vcards WHERE status=1 ORDER BY full_name"
        );
        while ($v = mysqli_fetch_assoc($vcards)) {
            $sel = ($v['id'] == $row['vcard_id']) ? 'selected' : '';
            echo "<option value='{$v['id']}' $sel>" . htmlspecialchars($v['full_name']) . "</option>";
        }
        ?>
    </select>
</div>

<div class="col-md-6">
    <label class="form-label">Platform *</label>
    <input type="text" name="platform" class="form-control"
           value="<?= htmlspecialchars($row['platform']); ?>" required>
</div>

<div class="col-md-12 mt-3">
    <label class="form-label">URL *</label>
    <input type="url" name="url" class="form-control"
           value="<?= htmlspecialchars($row['url']); ?>" required>
</div>

<div class="col-md-6 mt-3">
    <label class="form-label">Social Icon (Image)</label>
    <input type="file" name="icon" class="form-control">
    <?php echo $row['icon'];?>
</div>

<div class="col-md-3 mt-3">
    <label class="form-label">Sort Order</label>
    <input type="number" name="sort_order" class="form-control"
           value="<?= (int)$row['sort_order']; ?>">
</div>

<div class="col-md-3 mt-3">
    <label class="form-label">Status</label><br>
    <input type="checkbox" name="status" <?= ($row['status']==1)?'checked':''; ?>> Active
</div>

</div>

<br>
<div class="text-start">
    <button type="submit" class="btn btn-success">Update Social Link</button>
    <a href="vcard_social_links_list.php" class="btn btn-secondary">Cancel</a>
</div>

</form>

</div>
</div>

</div>
</div>
</div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>