Zploit 0-Day Shell

:: Editing File: inward_list.php

<?php 
// Ensure error reporting is configured
error_reporting(E_ALL);
ini_set('display_errors', '1');

// Includes
include_once("session.php");
include("header.php"); 
include("db.php"); // Assumed to contain $conn for mysqli connection
?>
<link href="assets/vendor/datatable/jquery.dataTables.min.css" rel="stylesheet" type="text/css">

<div class="row m-1">
            <div class="col-9">
                <h4 class="main-title">Inward Bill List</h4>
                <ul class="app-line-breadcrumbs mb-3">
                    <li>
                        <a class="f-s-14 f-w-500" href="dashboard.php">
                            <i class="ph-duotone ph-bank f-s-16"></i> Home
                        </a>
                    </li>
                    <li class="active">
                        <a class="f-s-14 f-w-500" href="#">Inward Bill List</a>
                    </li>
                </ul>
            </div>
            <div class="col-3">
                <a href="add_inward.php" class="btn btn-primary" style="float: right;">Add Inward Bill</a>
            </div>
        </div>
        
        <div class="row">
            <div class="col-12">
                <?php
                if (isset($_SESSION['success'])) {
                    echo '<div class="alert alert-success">' . $_SESSION['success'] . '</div>';
                    unset($_SESSION['success']);
                }
                if (isset($_SESSION['error'])) {
                    echo '<div class="alert alert-danger">' . $_SESSION['error'] . '</div>';
                    unset($_SESSION['error']);
                }
                ?>
            </div>
        </div>

<table class="display app-data-table default-data-table" id="example2">
                                <thead>
                                    <tr>
                                        <th>Inward ID</th>
                                        <th>Date</th>
                                        <th>Party Name</th>
                                        <th>Bill No</th>
                                        <th>Cold Storage</th>
                                        <th>Total Box</th>
										<th>Product Name</th>
                                        <th>Vehicle No</th>
                                        <th>Action</th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php
                                    // SQL Query to fetch Inward data along with related names
                                    $sql = "SELECT 
                                                i.id, 
                                                i.inward_date, 
                                                i.billno,
                                                i.total_box_count,
                                                i.vehicle_number,
                                                i.inward_receipt,
												i.product_name,
												COALESCE(p.name, '') AS vendor_name, 
                                                cs.company_name AS cold_storage_name
                                            FROM 
                                                inward AS i
                                            LEFT JOIN 
                                                party AS p ON i.vendor_id = p.id
                                            LEFT JOIN 
                                                cold_storage AS cs ON i.cold_storage_id = cs.id
                                            ORDER BY 
                                                i.id DESC";

$result = mysqli_query($conn, $sql);

if (mysqli_num_rows($result) > 0) {
                                        while ($row = mysqli_fetch_assoc($result)) {
                                            echo "<tr>";
                                            echo "<td>" . htmlspecialchars($row['id']) . "</td>";
                                            echo "<td>" . date("d-m-Y", strtotime($row['inward_date'])) . "</td>";
                                            echo "<td>" . htmlspecialchars($row['vendor_name']) . "</td>";
                                            echo "<td>" . htmlspecialchars($row['billno']) . "</td>";
                                            echo "<td>" . htmlspecialchars($row['cold_storage_name']) . "</td>";
                                            echo "<td>" . htmlspecialchars($row['total_box_count']) . "</td>";
                                            // New field inclusion
                                            echo "<td>" . htmlspecialchars($row['product_name'] ?? 'N/A') . "</td>";
                                            echo "<td>" . htmlspecialchars($row['vehicle_number'] ?? 'N/A') . "</td>";
                                            // Action Buttons
                                            echo "<td class='text-center'>";
                                            
                                            // View Receipt Button
                                            if (!empty($row['inward_receipt'])) {
                                                $receipt_url = htmlspecialchars($row['inward_receipt']); 
                                                echo "  
                                                <a target='_blank' href='" . $receipt_url . "' class='btn btn-light-danger icon-btn b-r-4' title='View Receipt'>
                                                    <i class='ti ti-file text-danger' aria-hidden='true'></i>
                                                </a> ";
                                            }
											
											echo "<a target='_blank' href='generated_inward_challan.php?id=" . $row['id'] . "' class='btn btn-light-success icon-btn b-r-4'>
												<i class='ti ti-printer text-success'></i>
											</a>";
                                            
                                            // Edit Inward Button
                                            echo "
                                                <a href='edit_inward.php?id=" . $row['id'] . "' class='btn btn-light-primary icon-btn b-r-4' title='Edit Inward Bill'>
                                                    <i class='ti ti-edit text-primary'></i>
                                                </a>";

// Delete Inward Button (references the new delete script below)
                                            echo "
                                                <a href='delete_inward.php?id=" . $row['id'] . "' class='btn btn-light-danger icon-btn b-r-4' title='Delete Inward Bill'
                                                onclick=\"return confirm('Are you sure you want to delete this Inward Bill? This action is irreversible.');\">
                                                    <i class='ti ti-trash text-danger'></i>
                                                </a>
                                                </td>";
                                            echo "</tr>";

}
                                    } else {
                                        // The colspan is 8, matching the column count
                                        echo "<tr><td colspan='8' class='text-center'>No inward bills found</td></tr>";
                                    }
                                    ?>
                                </tbody>
                            </table>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        </div>
</main>

<?php include "footer.php"; ?>