Zploit 0-Day Shell

:: Editing File: vendor_invoice_list.php

<?php
error_reporting(E_ALL);
ini_set('display_errors', '1');

include_once("session.php");
include("header.php");
include("db.php");
?>
<link href="assets/vendor/datatable/jquery.dataTables.min.css" rel="stylesheet" type="text/css">

<div class="row m-1">
        <div class="col-9">
            <h4 class="main-title">Vendor Invoices</h4>
            <ul class="app-line-breadcrumbs mb-3">
                <li>
                    <a class="f-s-14 f-w-500" href="dashboard.php">
                        <i class="ph-duotone ph-bank f-s-16"></i> Home
                    </a>
                </li>
                <li class="active">
                    <a class="f-s-14 f-w-500" href="#">Vendor Invoices</a>
                </li>
            </ul>
        </div>
        <div class="col-3">
            <a href="vendor_invoice_add.php" class="btn btn-primary" style="float: right;">Add Vendor Invoice</a>
        </div>
    </div>

<div class="row">
        <div class="col-12">
            <div class="card">
                <div class="card-body p-0">
                    <div class="app-datatable-default overflow-auto">

<table class="display app-data-table default-data-table" id="example2">
    <thead>
        <tr>
            <th>Invoice No</th>
            <th>Invoice Date</th>
            <th>Vendor Name</th>
            <th>Billing Company</th>
            <th>Total Amount</th>
           
            <th>Actions</th>
        </tr>
    </thead>
    <tbody>
        <?php
        
           $sql = "SELECT vi.id,
                       vi.invoice_no,
                       vi.invoice_date,
                       vi.grand_total,
                       vi.terms_of_delivery,
                       vi.vendor_receipt,
                       p.name AS vendor_name,
                       b.company_name AS billing_name
                FROM vendor_invoice AS vi
                LEFT JOIN party AS p ON vi.vendor_id = p.id
                LEFT JOIN billing AS b ON vi.billing_id = b.id
                ORDER BY vi.id DESC";

$result = mysqli_query($conn, $sql);

if (mysqli_num_rows($result) > 0) {
            while ($row = mysqli_fetch_assoc($result)) {
                echo "<tr>";
                echo "<td>".htmlspecialchars($row['invoice_no'])."</td>";
                echo "<td>".date('d-m-Y', strtotime($row['invoice_date']))."</td>";
                /*echo "<td>".htmlspecialchars($row['vendor_name'])."</td>";*/
				echo "<td>" . htmlspecialchars($row['vendor_name'] ?? '') . "</td>";
                echo "<td>".htmlspecialchars($row['billing_name'])."</td>";
                echo "<td>".number_format((float)$row['grand_total'],2)."</td>";

echo "<td>";
                // View/Download invoice file if uploaded
                if (!empty($row['vendor_receipt'])) {
                    echo "
                        <a target='_blank' href='uploads/vendor_invoices/".$row['vendor_receipt']."' 
                           class='btn btn-light-danger icon-btn b-r-4'>
                            <i class='ti ti-file text-danger' aria-hidden='true'></i>
                        </a> ";
                }

echo "
                    <a target='_blank' href='print_vendor_invoice.php?id=".$row['id']."' 
                       class='btn btn-light-success icon-btn b-r-4'>
                        <i class='ti ti-printer text-success'></i>
                    </a>

<a href='delete_vendor_invoice.php?id=".$row['id']."' 
                       class='btn btn-light-danger icon-btn b-r-4'
                       onclick=\"return confirm('Are you sure you want to delete this invoice?');\">
                        <i class='ti ti-trash text-danger'></i>
                    </a>";
                echo "</td>";

echo "</tr>";
            }
        } else {
            echo "<tr><td colspan='7' class='text-center'>No invoices found</td></tr>";
        }
        ?>
    </tbody>
</table>

</div>
                </div>
            </div>
        </div>
    </div>

</div>
</main>

<?php include "footer.php"; ?>

<script src="assets/vendor/datatable/jquery-3.5.1.js"></script>
<script src="assets/vendor/datatable/jquery.dataTables.min.js"></script>
<script src="assets/js/data_table.js"></script>

<link rel="stylesheet" href="https://cdn.datatables.net/buttons/2.4.1/css/buttons.dataTables.min.css">
<script src="https://cdn.datatables.net/buttons/2.4.1/js/dataTables.buttons.min.js"></script>
<script src="https://cdn.datatables.net/buttons/2.4.1/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/2.4.1/js/buttons.print.min.js"></script>

<script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js"></script>