Zploit 0-Day Shell

:: Editing File: qcompany_add.php

<?php
ob_start();
include 'config/db.php';
include 'header.php';

$page_title = "Add Quotation Company";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

/* ===== HANDLE FORM SUBMIT ===== */
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$client_name             = mysqli_real_escape_string($conn, $_POST['client_name']);
    $quotation_no            = mysqli_real_escape_string($conn, $_POST['quotation_no']);
    $remark                  = mysqli_real_escape_string($conn, $_POST['remark']);
    $content                 = mysqli_real_escape_string($conn, $_POST['content']);
    $note                    = mysqli_real_escape_string($conn, $_POST['note']);
    $design_and_development  = mysqli_real_escape_string($conn, $_POST['design_and_development']);
    $construction_cost       = mysqli_real_escape_string($conn, $_POST['construction_cost']);
    $status                  = isset($_POST['status']) ? 1 : 0;
    $created_at              = date('Y-m-d H:i:s');

if (!empty($client_name)) {

/* ===== UPLOAD PATH ===== */
        $upload_path = "uploads/quotation/";
        @mkdir($upload_path, 0777, true);

/* ===== COMPANY LOGO ===== */
        $company_logo = "";
        if (!empty($_FILES['company_logo']['name'])) {
            $ext = pathinfo($_FILES['company_logo']['name'], PATHINFO_EXTENSION);
            $company_logo = time() . "_logo." . $ext;
            move_uploaded_file(
                $_FILES['company_logo']['tmp_name'],
                $upload_path . $company_logo
            );
        }

/* ===== WATERMARK ===== */
        $watermark = "";
        if (!empty($_FILES['watermark']['name'])) {
            $ext = pathinfo($_FILES['watermark']['name'], PATHINFO_EXTENSION);
            $watermark = time() . "_watermark." . $ext;
            move_uploaded_file(
                $_FILES['watermark']['tmp_name'],
                $upload_path . $watermark
            );
        }

/* ===== INSERT QUERY ===== */
        $sql = "INSERT INTO quotations (
                    client_name,
                    quotation_no,
                    company_logo,
                    watermark,
                    remark,
                    content,
                    note,
                    design_and_development,
                    construction_cost,
                    status,
                    created_at
                ) VALUES (
                    '$client_name',
                    '$quotation_no',
                    '$company_logo',
                    '$watermark',
                    '$remark',
                    '$content',
                    '$note',
                    '$design_and_development',
                    '$construction_cost',
                    '$status',
                    '$created_at'
                )";

if (mysqli_query($conn, $sql)) {
            header("Location: qcompany_list.php?msg=Quotation Company Added Successfully");
            exit;
        } else {
            $message = "Database Error: " . mysqli_error($conn);
        }

} else {
        $message = "Client name is required.";
    }
}
?>

<div class="card-header pb-0">
    <h2>Add Quotation Company</h2>
</div>

<?php if ($message): ?>
<div class="alert alert-danger"><?= $message ?></div>
<?php endif; ?>

<div class="col-md-6">
        <label class="form-label">Client Name</label>
        <input type="text" name="client_name" class="form-control" required>
    </div>

<div class="col-md-6">
        <label class="form-label">Quotation No</label>
        <input type="text" name="quotation_no" class="form-control">
    </div>

<div class="col-md-6">
        <label class="form-label">Company Logo</label>
        <input type="file" name="company_logo" class="form-control" accept="image/*">
    </div>

<div class="col-md-6">
        <label class="form-label">Watermark</label>
        <input type="file" name="watermark" class="form-control" accept="image/*">
    </div>

<div class="col-md-12">
        <label class="form-label">Remark</label>
        <textarea name="remark" class="form-control" rows="2"></textarea>
    </div>

<div class="col-md-12">
        <label class="form-label">Content</label>
        <textarea name="content" class="form-control" rows="4"></textarea>
    </div>

<div class="col-md-6">
        <label class="form-label">Design & Development</label>
        <input type="text" name="design_and_development" class="form-control">
    </div>

<div class="col-md-6">
        <label class="form-label">Construction Cost</label>
        <input type="text" name="construction_cost" class="form-control">
    </div>

<div class="col-md-12 mt-3">
        <div class="form-check form-switch">
            <input class="form-check-input" type="checkbox" name="status" checked>
            <label class="form-check-label">Active</label>
        </div>
    </div>

</div>

<div class="mt-4">
    <button type="submit" class="btn btn-success">
        <i class="fa fa-save"></i> Save
    </button>
    <a href="qcompany_list.php" class="btn btn-secondary">Cancel</a>
</div>

</form>

</div>
</div>
</div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>