Zploit 0-Day Shell

:: Editing File: lead_edit.php

<?php
ob_start();
include 'header.php';
$page_title = "Edit Lead";
$page_parent = "Leads";
$page_parent_link = "leads.php";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

$id = $_GET['id'] ?? '';
$return_url = $_GET['return_url'] ?? 'leads.php';

// Get lead ID
if (!isset($_GET['id'])) {
    header("Location: leads.php");
    exit;
}

$id = intval($_GET['id']);

// Fetch Team Members
$teamMembers = mysqli_query($conn, "SELECT id, name FROM team_members where status='1' ORDER BY name ASC");

// Fetch Lead Data
$lead = mysqli_query($conn, "SELECT * FROM leads WHERE id = $id");
$data = mysqli_fetch_assoc($lead);

if (!$data) {
    die("Lead not found!");
}

// Handle form submit
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$name = mysqli_real_escape_string($conn, $_POST['name']);
    $mobile = mysqli_real_escape_string($conn, $_POST['mobile']);
    $location = mysqli_real_escape_string($conn, $_POST['location']);
    $email = mysqli_real_escape_string($conn, $_POST['email']);
    $business_name = mysqli_real_escape_string($conn, $_POST['business_name']);
    $enquiry_for = mysqli_real_escape_string($conn, $_POST['enquiry_for']);
    $enquiry_content = mysqli_real_escape_string($conn, $_POST['enquiry_content']);
    $comment = mysqli_real_escape_string($conn, $_POST['comment']);
    $follow_up_date = mysqli_real_escape_string($conn, $_POST['follow_up_date']);
    $calling_status = mysqli_real_escape_string($conn, $_POST['calling_status']);
    $lead_source = mysqli_real_escape_string($conn, $_POST['lead_source']);
    $lead_date = mysqli_real_escape_string($conn, $_POST['lead_date']);
    $call_status = mysqli_real_escape_string($conn, $_POST['call_status']);
    $assigned_to = mysqli_real_escape_string($conn, $_POST['assigned_to']);

$quotation_pic = $data['quotation_pic'];
    $upload_dir = "uploads/invoices/";

// Create folder if not exists
    if (!is_dir($upload_dir)) {
        mkdir($upload_dir, 0777, true);
    }

// File upload
    if (!empty($_FILES['quotation_pic']['name'])) {

$file_tmp = $_FILES['quotation_pic']['tmp_name'];
        $file_name = basename($_FILES['quotation_pic']['name']);
        $file_ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
        $allowed = ['jpg', 'jpeg', 'png', 'pdf'];

if (in_array($file_ext, $allowed)) {
            $new_name = time() . "_" . preg_replace('/[^A-Za-z0-9_\-\.]/', '_', $file_name);
            $file_path = $upload_dir . $new_name;

if (move_uploaded_file($file_tmp, $file_path)) {

if (!empty($quotation_pic) && file_exists($quotation_pic)) {
                    unlink($quotation_pic);
                }

$quotation_pic = $file_path;
            }
        }
    }

// Update Query
    $sql = "UPDATE leads SET
            lead_date='$lead_date',
            lead_source='$lead_source',
            name='$name',
            mobile='$mobile',
            location='$location',
            email='$email',
            business_name='$business_name',
            enquiry_for='$enquiry_for',
            enquiry_content='$enquiry_content',
            comment='$comment',
            follow_up_date='$follow_up_date',
            calling_status='$calling_status',
            call_status='$call_status',
            assigned_to='$assigned_to',
            quotation_pic='$quotation_pic'
            WHERE id=$id";

if (mysqli_query($conn, $sql)) {
        header("Location: {$return_url}");
        exit;
    } else {
        $message = "Error: " . mysqli_error($conn);
    }
}
?>

<?php if ($message) echo "<div class='alert alert-danger'>$message</div>"; ?>

<div class="col-md-4">
<label class="form-label">Name</label>
<input type="text" name="name" value="<?= htmlspecialchars($data['name']); ?>" class="form-control" required>
</div>

<div class="col-md-4">
<label class="form-label">Mobile</label>
<input type="text" name="mobile" value="<?= htmlspecialchars($data['mobile']); ?>" class="form-control" required>
</div>

<div class="col-md-4">
<label class="form-label">Location</label>
<input type="text" name="location" value="<?= htmlspecialchars($data['location']); ?>" class="form-control">
</div>

<div class="col-md-4">
<label class="form-label">Lead Date</label>
<input type="date" name="lead_date" value="<?= date('Y-m-d', strtotime($data['lead_date'])); ?>" class="form-control" required>
</div>

<div class="col-md-4">
<label class="form-label">Lead Source</label>
<select name="lead_source" class="form-select form-control" required>
<option value="">-- Select Source --</option>
<option value="Facebook"   <?= ($data['lead_source'] === "Facebook") ? "selected" : "" ?>>Facebook</option>
<option value="Instagram"  <?= ($data['lead_source'] === "Instagram") ? "selected" : "" ?>>Instagram</option>
<option value="Google Ads" <?= ($data['lead_source'] === "Google Ads") ? "selected" : "" ?>>Google Ads</option>
<option value="YouTube"    <?= ($data['lead_source'] === "YouTube") ? "selected" : "" ?>>YouTube</option>
<option value="Just Dial"  <?= ($data['lead_source'] === "Just Dial") ? "selected" : "" ?>>Just Dial</option>
<option value="India Mart" <?= ($data['lead_source'] === "India Mart") ? "selected" : "" ?>>India Mart</option>
<option value="Referral"   <?= ($data['lead_source'] === "Referral") ? "selected" : "" ?>>Referral</option>
<option value="Others"     <?= ($data['lead_source'] === "Others") ? "selected" : "" ?>>Others</option>
</select>
</div>

<div class="col-md-4">
<label class="form-label">Business Name</label>
<input type="text" name="business_name" value="<?= htmlspecialchars($data['business_name']); ?>" class="form-control">
</div>

<div class="col-md-4">
<label class="form-label">Email</label>
<input type="email" name="email" value="<?= htmlspecialchars($data['email']); ?>" class="form-control">
</div>

<div class="col-md-4">
    <label class="form-label">Enquiry For (Service)</label>
    <select name="enquiry_for" class="form-select form-control">
        <option value="">-- Select Service --</option>
        <?php
        // These keys must match the numeric IDs used in your lead_add.php
        $services = [
            "2" => "Website Development",
            "38" => "STATIC WEBSITE",
            "39" => "DYNAMIC WEBSITE",
            "40" => "E-COMMERCE WEBSITE",
            "4" => "DIGITAL MARKETING",
            "1" => "GRAPHIC DESIGNING",
            "7" => "VIDEO EDITING",
            "41" => "SEO",
            "3" => "CRM",
            "36" => "BULK WHATSAPP"
        ];

foreach($services as $id => $name) {
            // Check if stored ID matches current ID in loop
            $selected = ($data['enquiry_for'] == $id) ? "selected" : "";
            echo "<option value='$id' $selected>$name</option>";
        }
        ?>
    </select>
</div>

<div class="col-md-4">
<label class="form-label">Follow Up Date</label>
<input type="date" name="follow_up_date" 
    value="<?= (!empty($data['follow_up_date']) && $data['follow_up_date'] != '0000-00-00') 
                ? date('Y-m-d', strtotime($data['follow_up_date'])) 
                : date('Y-m-d'); ?>" 
    class="form-control">

</div>

<div class="col-md-4 mb-3">
<label class="form-label">Call Status</label>
<select name="call_status" class="form-control">
<option <?= $data['call_status']=="Incompleted"?"selected":"" ?>>Incompleted</option>
<option <?= $data['call_status']=="Completed"?"selected":"" ?>>Completed</option>
</select>
</div>

<div class="col-md-4">
  <label class="form-label">Lead Status</label>
  <select name="calling_status" class="form-select form-control" required>

<option value="">-- Select Status --</option>

<option value="Pending" <?= ($data['calling_status'] === "Pending") ? "selected" : "" ?>>Pending</option>

<option value="Interested" <?= ($data['calling_status'] === "Interested") ? "selected" : "" ?>>Interested</option>

<option value="No Response" <?= ($data['calling_status'] === "No Response") ? "selected" : "" ?>>No Response</option>

<option value="Quotation Sent" <?= ($data['calling_status'] === "Quotation Sent") ? "selected" : "" ?>>Quotation Sent</option>

<option value="Sales Done" <?= ($data['calling_status'] === "Sales Done") ? "selected" : "" ?>>Sales Done</option>

<option value="Follow-Up" <?= ($data['calling_status'] === "Follow-Up") ? "selected" : "" ?>>Follow-Up</option>

</select>
</div>

<div class="col-md-4">
<label class="form-label">Assign To (Team Member)</label>
<select name="assigned_to" class="form-select form-control">
<option value="">-- Select Team Member --</option>
<?php 
                        // NOTE: $teamMembers needs to be fetched again before this point if it's already iterated over once.
                        // Or, use mysqli_data_seek($teamMembers, 0); if it's a valid result set object.
                        // For simplicity, assuming $teamMembers is an array or re-fetched.
                        while ($row = mysqli_fetch_assoc($teamMembers)) { 
                    ?>
<option value="<?= $row['id']; ?>" <?= $data['assigned_to']==$row['id']?"selected":"" ?>>
<?= htmlspecialchars($row['name']); ?>
</option>
<?php } ?>
</select>
</div>

<div class="col-md-6 mb-3">
<label class="form-label">Enquiry Content</label>
<textarea name="enquiry_content" class="form-control" rows="3"><?= htmlspecialchars($data['enquiry_content']); ?></textarea>
</div>

<div class="col-md-6 mb-3">
<label class="form-label">Comment</label>
<textarea name="comment" class="form-control" rows="3"><?= htmlspecialchars($data['comment']); ?></textarea>
</div>

<div class="col-md-6">
<label class="form-label">Quotation File (jpg, png, pdf)</label>
<input type="file" name="quotation_pic" class="form-control" accept=".jpg,.jpeg,.png,.pdf">

<?php if (!empty($data['quotation_pic']) /* && file_exists($data['quotation_pic']) */) { ?>
<p class="mt-2">Current File:
<a href="<?php echo htmlspecialchars($data['quotation_pic']); ?>" target="_blank">View</a>
</p>
<?php } ?>
</div>
                
                <div class="col-md-6"></div>

</div>

<br>
<div class="text-start">
<button type="submit" class="btn btn-success">Update Lead</button>
<button type="button" onclick="history.back()" class="btn btn-secondary">Cancel</button>
</div>

</form>

</div>
        </div>
      </div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>