Zploit 0-Day Shell

:: Editing File: admin-cli.php

<?php

if(php_sapi_name() != "cli"){
    die("Not Command Line");
}

$cli_options = getopt("", array("route:"));

if(is_null($cli_options['route'])){
    die("missing route.");
}

// Configuration
if (is_file('admin/config.php')) {
    require_once('admin/config.php');
}

// Startup
require_once(DIR_SYSTEM . 'startup.php');

// Registry
$registry = new Registry();
// Config
$config = new Config();
$registry->set('config', $config);
// Database
$db = new DB(DB_DRIVER, DB_HOSTNAME, DB_USERNAME, DB_PASSWORD, DB_DATABASE);
$registry->set('db', $db);

// Settings
$query = $db->query("SELECT * FROM " . DB_PREFIX . "setting WHERE store_id = '0'");
foreach ($query->rows as $setting) {
    if (!$setting['serialized']) {
        $config->set($setting['key'], $setting['value']);
    } else {
        $config->set($setting['key'], unserialize($setting['value']));
    }
}

// Loader
$loader = new Loader($registry);
$registry->set('load', $loader);
// Url
$url = new Url(HTTP_SERVER, $config->get('config_secure') ? HTTPS_SERVER : HTTP_SERVER);
$registry->set('url', $url);
// Log
$log = new Log($config->get('config_error_filename'));
$registry->set('log', $log);
function error_handler($errno, $errstr, $errfile, $errline) {
 global $log, $config;
 // error suppressed with @
 if (error_reporting() === 0) {
 return false;
 }
 switch ($errno) {
 case E_NOTICE:
 case E_USER_NOTICE:
 $error = 'Notice';
 break;
 case E_WARNING:
 case E_USER_WARNING:
 $error = 'Warning';
 break;
 case E_ERROR:
 case E_USER_ERROR:
 $error = 'Fatal Error';
 break;
 default:
 $error = 'Unknown';
 break;
 }
 if ($config->get('config_error_display')) {
 echo '' . $error . ': ' . $errstr . ' in ' . $errfile . ' on line ' . $errline . '';
 }
 if ($config->get('config_error_log')) {
 $log->write('PHP ' . $error . ': ' . $errstr . ' in ' . $errfile . ' on line ' . $errline);
 }
 return true;
}
// Error Handler
set_error_handler('error_handler');
// Request
$request = new Request();
$registry->set('request', $request);
// Response
$response = new Response();
$response->addHeader('Content-Type: text/html; charset=utf-8');
$registry->set('response', $response);
// Cache
$cache = new Cache('file');
$registry->set('cache', $cache);
// Session
$session = new Session();

$controller->user['user_id'] = 1;
$temp_token = md5(mt_rand());
$session->data['token'] = $temp_token;
$_GET['token'] = $temp_token;
$session->data['user_id'] = 1;

$registry->set('session', $session);
// Language
$languages = array();
$query = $db->query("SELECT * FROM `" . DB_PREFIX . "language`");
foreach ($query->rows as $result) {
    $languages[$result['code']] = $result;
}
$config->set('config_language_id', $languages[$config->get('config_admin_language')]['language_id']);
// Language
$language = new Language($languages[$config->get('config_admin_language')]['directory']);
$language->load('default');
$registry->set('language', $language);
// Document
$registry->set('document', new Document());
// Currency
$registry->set('currency', new Currency($registry));
// Weight
$registry->set('weight', new Weight($registry));
// Length
$registry->set('length', new Length($registry));
// User
$registry->set('user', new User($registry));
//OpenBay Pro
$registry->set('openbay', new Openbay($registry));

// Event
$event = new Event($registry);
$registry->set('event', $event);
$query = $db->query("SELECT * FROM " . DB_PREFIX . "event");
foreach ($query->rows as $result) {
    $event->register($result['trigger'], $result['action']);
}
// Front Controller
$controller = new Front($registry);

// Router
$action = new Action($cli_options['route']);
// Dispatch
$controller->dispatch($action, new Action('error/not_found'));
// Output
$response->output();