Zploit 0-Day Shell

:: Editing File: qitem_delete.php

<?php
// ==========================================
// Delete Quotation Item
// File: qitem_delete.php
// ==========================================

include 'config/db.php';

// ============================
// Validate ID
// ============================
if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    header("Location: qitem_list.php?msg=Invalid ID");
    exit;
}

$id = intval($_GET['id']);

// ============================
// Check Record Exists
// ============================
$check = mysqli_query($conn, "
    SELECT id 
    FROM quotation_items 
    WHERE id = $id
");

if (mysqli_num_rows($check) == 0) {
    header("Location: qitem_list.php?msg=Item Not Found");
    exit;
}

// ============================
// Delete Record
// ============================
mysqli_query($conn, "
    DELETE FROM quotation_items 
    WHERE id = $id
");

// ============================
// Redirect
// ============================
header("Location: qitem_list.php?msg=Quotation Item Deleted Successfully");
exit;
?>