Zploit 0-Day Shell

:: Editing File: purchase_invoice_add.php

<?php
include_once("session.php");
include("db.php");
include("header.php");

// Handle form submit
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $po_id       = $_POST['po_id'] ?? '';
    $invoice_no  = $_POST['invoice_no'] ?? '';
    $invoice_date= $_POST['invoice_date'] ?? '';
    $amount      = $_POST['amount'] ?? '';
    $remarks     = $_POST['remarks'] ?? '';

if ($po_id && $invoice_no && $invoice_date && $amount) {
        $sql = "INSERT INTO purchase_invoices (po_id, invoice_no, invoice_date, amount, remarks) 
                VALUES (?, ?, ?, ?, ?)";
        $stmt = $conn->prepare($sql);
        $stmt->bind_param("issds", $po_id, $invoice_no, $invoice_date, $amount, $remarks);

if ($stmt->execute()) {
            $_SESSION['success'] = "✅ Purchase Invoice added successfully!";
            header("Location: purchase_invoice_list.php");
            exit;
        } else {
            $_SESSION['error'] = "❌ Error: " . $stmt->error;
        }
        $stmt->close();
    } else {
        $_SESSION['error'] = "❌ Please fill all required fields.";
    }
}

// Fetch POs for dropdown
$orders = mysqli_query($conn, "SELECT po.id, v.name, po.date, po.total
                               FROM purchase_orders po
                               JOIN vendors v ON po.vendor_id = v.id
                               ORDER BY po.id DESC");
if (!$orders) {
    die("PO query failed: " . mysqli_error($conn));
}
?>

<main class="container-fluid">
    <div class="row m-1">
        <div class="col-12">
            <h4 class="main-title">Add Purchase Invoice</h4>
            <ul class="app-line-breadcrumbs mb-3">
                <li><a href="dashboard.php">Home</a></li>
                <li><a href="purchase_invoice_list.php">Invoice List</a></li>
                <li class="active">Add Invoice</li>
            </ul>
        </div>
    </div>

<?php
                    if (isset($_SESSION['success'])) {
                        echo '<div class="alert alert-success" id="autoAlert">'.$_SESSION['success'].'</div>';
                        unset($_SESSION['success']);
                    }
                    if (isset($_SESSION['error'])) {
                        echo '<div class="alert alert-danger" id="autoAlert">'.$_SESSION['error'].'</div>';
                        unset($_SESSION['error']);
                    }
                    ?>

<form method="post" class="row g-3 app-form">
                        <div class="col-md-6">
                            <label class="form-label">Purchase Order <span class="text-danger">*</span></label>
                            <select name="po_id" class="form-control" required>
                                <option value="">-- Select PO --</option>
                                <?php while ($po = mysqli_fetch_assoc($orders)): ?>
                                    <option value="<?= $po['id'] ?>">
                                        PO#<?= $po['id'] ?> - <?= htmlspecialchars($po['name']) ?> (<?= $po['order_date'] ?>, ₹<?= $po['total_amount'] ?>)
                                    </option>
                                <?php endwhile; ?>
                            </select>
                        </div>

<div class="col-md-6">
                            <label class="form-label">Invoice No <span class="text-danger">*</span></label>
                            <input type="text" name="invoice_no" class="form-control" required>
                        </div>

<div class="col-md-6">
                            <label class="form-label">Invoice Date <span class="text-danger">*</span></label>
                            <input type="date" name="invoice_date" class="form-control" required>
                        </div>

<div class="col-md-6">
                            <label class="form-label">Amount <span class="text-danger">*</span></label>
                            <input type="number" step="0.01" name="amount" class="form-control" required>
                        </div>

<div class="col-md-12">
                            <label class="form-label">Remarks</label>
                            <textarea name="remarks" class="form-control" rows="2"></textarea>
                        </div>

<div class="col-12">
                            <button type="submit" class="btn btn-primary">Add Invoice</button>
                        </div>
                    </form>

</div>
            </div>
        </div>
    </div>
</main>

<?php include("footer.php"); ?>