Zploit 0-Day Shell

:: Editing File: qdesc_list.php

<?php
// ==========================================
// quotation_descriptions List Page
// File: qdesc_list.php
// ==========================================

// ✅ Page settings
$page_title = "Quotation Descriptions";

include 'header.php';
include 'breadcrumb.php';
include 'menu.php';
?>

<div class="page-body">
  
  <div class="container-fluid">
    <div class="row">
      <div class="col-sm-12">

<div class="card">
          <div class="row">
            <div class="col-sm-10">
              <div class="card-header pb-0 card-no-border">
                <h2>Quotation Description Details</h2>
              </div>
            </div>

<div class="col-sm-2">
              <div class="card-header pb-0 card-no-border" style="float:right">
                <a href="qdesc_add.php" class="btn btn-primary btn-sm">
                  <i class="fa fa-plus"></i> Add Description
                </a>
              </div>
            </div>

<div class="card-body">
              <div class="dt-ext table-responsive">
                <table class="display" id="export-button">
                  <thead>
                    <tr>
                      <th>#</th>
                      <th>Category</th>
                      <th>Description Name</th>
                      <th>Status</th>
                      <th class="text-center">Action</th>
                    </tr>
                  </thead>
                  <tbody>

<?php
$sr_no = 1;

$sql = "
    SELECT 
        d.id,
        d.name,
        d.status,
        c.name AS category_name
    FROM quotation_descriptions d
    INNER JOIN quotation_categories c 
        ON c.id = d.category_id
    ORDER BY c.name ASC, d.name ASC
";

$result = mysqli_query($conn, $sql);

if ($result && mysqli_num_rows($result) > 0) {
    while ($row = mysqli_fetch_assoc($result)) {

// Status Badge
        if ($row['status'] == 1) {
            $statusBadge = "<span class='badge badge-success'>Active</span>";
        } else {
            $statusBadge = "<span class='badge badge-danger'>Inactive</span>";
        }

echo "<tr>";
        echo "<td class='text-center'>{$sr_no}</td>";
        echo "<td>{$row['category_name']}</td>";
        echo "<td>{$row['name']}</td>";
        echo "<td>{$statusBadge}</td>";

echo "<td class='text-center'>";

// Edit Button
        echo "<a href='qdesc_edit.php?id=" . intval($row['id']) . "' 
                 class='btn btn-warning btn-sm me-1'>
                 <i class='fa fa-edit'></i>
              </a>";

// Delete Button
        echo "<a href='qdesc_delete.php?id=" . intval($row['id']) . "' 
                 class='btn btn-danger btn-sm'
                 onclick=\"return confirm('Are you sure you want to delete this description?');\">
                 <i class='fa fa-trash'></i>
              </a>";

echo "</td>";
        echo "</tr>";

$sr_no++;
    }
} else {
    echo "<tr>
            <td colspan='5' class='text-center text-muted'>
              No quotation descriptions found
            </td>
          </tr>";
}
?>

</tbody>
                </table>
              </div>
            </div>

</div>
        </div>

</div>
    </div>
  </div>
  
</div>

<?php include "footer.php"; ?>