Zploit 0-Day Shell

:: Editing File: qitem_add.php

<?php
ob_start();

include 'header.php';
$page_title = "Add Quotation Item";
include 'breadcrumb.php';
include 'menu.php';

$message = "";

// ============================
// Handle Form Submit
// ============================
if ($_SERVER['REQUEST_METHOD'] === 'POST') {

$desc_id = intval($_POST['desc_id']);
    $name    = mysqli_real_escape_string($conn, $_POST['name']);
    $status  = isset($_POST['status']) ? intval($_POST['status']) : 1;

if (!empty($desc_id) && !empty($name)) {

$sql = "
            INSERT INTO quotation_items (desc_id, name, status)
            VALUES ('$desc_id', '$name', '$status')
        ";

if (mysqli_query($conn, $sql)) {
            header("Location: qitem_list.php?msg=Quotation Item Added Successfully");
            exit;
        } else {
            $message = "Database Error: " . mysqli_error($conn);
        }

} else {
        $message = "Description and Item Name are required.";
    }
}
?>

<div class="card-header pb-0">
        <h2>Add Quotation Item</h2>
      </div>

<?php if (!empty($message)) { ?>
          <div class="alert alert-danger"><?= $message; ?></div>
        <?php } ?>

<div class="col-md-6">
              <label class="form-label">Category</label>
              <select name="category_id" class="form-control" required>
                <option value="">-- Select Category --</option>
                <?php
                $cat_sql = "SELECT id, name FROM quotation_categories WHERE status = 1 ORDER BY name ASC";
                $cat_res = mysqli_query($conn, $cat_sql);

while ($cat = mysqli_fetch_assoc($cat_res)) {
                    echo "<option value='{$cat['id']}'>{$cat['name']}</option>";
                }
                ?>
              </select>
            </div>

<div class="col-md-6">
              <label class="form-label">Description</label>
              <select name="desc_id" class="form-control" required>
                <option value="">-- Select Description --</option>
                <?php
                // Simple load all descriptions (can be upgraded to AJAX)
                $desc_sql = "SELECT id, name FROM quotation_descriptions WHERE status = 1 ORDER BY name ASC";
                $desc_res = mysqli_query($conn, $desc_sql);

while ($desc = mysqli_fetch_assoc($desc_res)) {
                    echo "<option value='{$desc['id']}'>{$desc['name']}</option>";
                }
                ?>
              </select>
            </div>

<div class="col-md-6">
              <label class="form-label">Item Name</label>
              <input type="text" name="name" class="form-control" required>
            </div>

<div class="col-md-6">
              <label class="form-label">Status</label>
              <select name="status" class="form-control">
                <option value="1">Active</option>
                <option value="0">Inactive</option>
              </select>
            </div>

</div>

<div class="mt-4">
            <button type="submit" class="btn btn-success">
              <i class="fa fa-save"></i> Save
            </button>
            <a href="qitem_list.php" class="btn btn-secondary">
              Cancel
            </a>
          </div>

</form>

</div>
    </div>
  </div>
</div>

<?php include 'footer.php'; ob_end_flush(); ?>