LittleDemon WebShell

<?php
if ((!isset($_SESSION['gen256']))  ) {
  echo "<script>
        window.open('login.php','_self');
    </script>";  
}

?>
<form method="post">


	
	 <div class="form-group">
  <label>Update Labour Rate %:</label>

    <?php
    $bid=$_GET['bid'];
    // $aid=$_GET['aid'];
                $query="SELECT * FROM labour WHERE siteid='$bid' ORDER BY id DESC";

                 
                $result = mysqli_query($conn,$query);
                $count = 1;
                while($row = mysqli_fetch_assoc($result) ){
                    $labourid = $row['id'];
                    $rate = $row['rate'];
                   
                
                    ?> 
  <input type="number" class="form-control" value="<?php echo $rate;?>" name="rate" required>

  <?php
                    $count ++;
                }
            ?>  
    
</div>
<div class="form-group">
    <input type="submit" name="update" class="btn btn-sm btn-success" value="Update">
</div>

</form>

<?php

// $sql = "UPDATE labour SET rate='$rate' WHERE siteid='$bid'";


?>
<?php
include "dbconfig/db.php";
$bid=$_GET['bid'];
    $aid=$_GET['aid'];
if(isset($_POST['update'])){
    
    $rate = strip_tags($_POST['rate']);
  
      
      

        $sql = "UPDATE labour SET rate='$rate' WHERE siteid='$bid'";
mysqli_query($conn,$sql);
   echo "<script>alert('Updated Successfully')</script>";

   echo"<script>
            window.open('index.php?p=qoute&bid=$bid&aid=$aid','_self');
            </script>";



}


?>