Zploit 0-Day Shell

:: Editing File: expenses_add.php

<?php
ob_start();
 
include 'header.php';

$page_title = "Add Expense";
$page_parent = "Expenses";
$page_parent_link = "expenses_list.php";

include 'breadcrumb.php';
include 'menu.php';
$message = "";

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  $team_id = $_POST['team_id'];
  $date = $_POST['expenses_date'];
  $salary = $_POST['salary_amount'];
  $advance = $_POST['advance_taken'];
  $msg = $_POST['message'];
  $service = $_POST['services_expenses'];
  $service_amt = $_POST['services_amount'];
  $other = $_POST['other_cost'];
  $sundry = $_POST['sundry_expenses'];
  $notes = $_POST['notes'];
  $comments = $_POST['comments'];

$sql = "INSERT INTO expenses (team_id, expenses_date, salary_amount, advance_taken, message, services_expenses, services_amount, other_cost, sundry_expenses, notes, comments)
          VALUES ('$team_id', '$date', '$salary', '$advance', '$msg', '$service', '$service_amt', '$other', '$sundry', '$notes', '$comments')";
  
  if (mysqli_query($conn, $sql)) {
    header("Location: expenses_list.php?msg=Expense Added Successfully");
    exit;
  } else {
    $message = "Error: " . mysqli_error($conn);
  }
}
?>

<div class="page-body">
  <div class="container-fluid">
    <div class="card">
      <div class="card-header"><h2>Add Expense</h2></div>
      <div class="card-body">
        <?php if ($message) echo "<div class='alert alert-danger'>$message</div>"; ?>

<div class="col-md-6">
              <label>Team Member</label>
              <select name="team_id" class="form-select" required>
                <option value="">Select Member</option>
                <?php 
                $res = mysqli_query($conn, "SELECT * FROM team_members");
                while ($tm = mysqli_fetch_assoc($res)) {
                  echo "<option value='{$tm['id']}'>{$tm['name']}</option>";
                }
                ?>
              </select>
            </div>

<div class="col-md-4">
              <label>Salary Amount (₹)</label>
              <input type="number" name="salary_amount" step="0.01" class="form-control">
            </div>

<div class="col-md-4">
              <label>Advance Taken (₹)</label>
              <input type="number" name="advance_taken" step="0.01" class="form-control">
            </div>

<div class="col-md-4">
              <label>Service Expenses</label>
              <input type="text" name="services_expenses" class="form-control">
            </div>

<div class="col-md-4">
              <label>Service Amount (₹)</label>
              <input type="number" name="services_amount" step="0.01" class="form-control">
            </div>

<div class="col-md-4">
              <label>Other Cost (₹)</label>
              <input type="number" name="other_cost" step="0.01" class="form-control">
            </div>

<div class="col-md-4">
              <label>Sundry Expenses (₹)</label>
              <input type="number" name="sundry_expenses" step="0.01" class="form-control">
            </div>

<div class="col-md-6">
              <label>Message</label>
              <textarea name="message" class="form-control"></textarea>
            </div>

<div class="col-md-6">
              <label>Notes</label>
              <textarea name="notes" class="form-control"></textarea>
            </div>

<div class="col-md-6">
              <label>Comments</label>
              <textarea name="comments" class="form-control"></textarea>
            </div>

</div>

<div class="mt-3">
            <button type="submit" class="btn btn-success">Save</button>
            <a href="expenses_list.php" class="btn btn-secondary">Cancel</a>
          </div>

</form>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>