Zploit 0-Day Shell

:: Editing File: add_farmer.php

<?php

error_reporting(E_ALL);
ini_set('display_errors', '1');

include_once("session.php");
include("db.php");           // database connection

$user_id = $_SESSION['user_id'];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$sql = "INSERT INTO farmers
                        (farmer_name, contact, village, state, bank_details, gstin, notes, remark)
                    VALUES (?, ?, ?, ?, ?, ?, ?, ?)";
			
			
            if ($stmt = $conn->prepare($sql)) {
                $stmt->bind_param(
                    "sssssss",
                    $_POST['farmer_name'],
                    $_POST['contact'],
                    $_POST['village'],
                    $_POST['state'],
                    $_POST['bank_details'],
                    $_POST['gstin'],
                    $_POST['notes']
                );

if ($stmt->execute()) {

$_SESSION['success'] = "✅ Farmer added successfully!";
                    // optional notification insert
                    $msg  = "✅ Farmer Added successfully!";
					$type = "success";
                    $conn->query("INSERT INTO notifications (user_id, message, type)
                                  VALUES ('$user_id , '$msg', '$type')");

header("Location: list_farmers.php");
                    exit();
                } else {
                    $_SESSION['error'] = "❌ Error adding farmer: " . $stmt->error;
                }

$stmt->close();
            } else {
                $_SESSION['error'] = "❌ Database error: " . $conn->error;
            }
        }
        
		
include("header.php");       // page header

<div class="row m-1">
            <div class="col-12">
                <h4 class="main-title">Add Farmer</h4>
                <ul class="app-line-breadcrumbs mb-3">
                    <li>
                        <a class="f-s-14 f-w-500" href="dashboard.php">
                            <i class="ph-duotone ph-bank f-s-16"></i> Home
                        </a>
                    </li>
                    <li>
                        <a class="f-s-14 f-w-500" href="list_farmers.php">
                            <i class="ph-duotone ph-table f-s-16"></i> Farmer List
                        </a>
                    </li>
                    <li class="active">
                        <a class="f-s-14 f-w-500" href="#">Add Farmer</a>
                    </li>
                </ul>
            </div>
        </div>

<?php
                        if (isset($_SESSION['success'])) {
                            echo '<div class="alert alert-success" id="autoAlert">'
                                 . $_SESSION['success'] . '</div>';
                            unset($_SESSION['success']);
                        }
                        if (isset($_SESSION['error'])) {
                            echo '<div class="alert alert-danger" id="autoAlert">'
                                 . $_SESSION['error'] . '</div>';
                            unset($_SESSION['error']);
                        }
                        ?>

<form class="row g-3 app-form" method="post" action="">
                            <div class="col-md-6">
                                <label class="form-label">Farmer Name</label>
                                <input class="form-control" name="farmer_name" type="text" required>
                            </div>
                            <div class="col-md-6">
                                <label class="form-label">Contact</label>
                                <input class="form-control" name="contact" type="text" required>
                            </div>
                            <div class="col-md-6">
                                <label class="form-label">Village</label>
                                <input class="form-control" name="village" type="text">
                            </div>
                            <div class="col-md-6">
                                <label class="form-label">State</label>
                                <input class="form-control" name="state" type="text">
                            </div>
                            <div class="col-md-4">
                                <label class="form-label">Bank Details</label>
                                <textarea class="form-control" name="bank_details" rows="3"></textarea>
                            </div>
                           
                            <div class="col-md-4">
                                <label class="form-label">Notes</label>
                                <textarea class="form-control" name="notes" rows="3"></textarea>
                            </div>
							<div class="col-md-4">
                                <label class="form-label">Remark</label>
                                <textarea class="form-control" name="remark" rows="3"></textarea>
                            </div>
							 <div class="col-md-12">
                                <label class="form-label">GSTIN</label>
                                <input class="form-control" name="gstin" type="text">
                            </div>
                            <div class="col-12">
                                <button type="submit" class="btn btn-primary">Add Farmer</button>
                            </div>
                        </form>

</div>
                </div>
            </div>
        </div>

<?php include("footer.php"); ?>