Zploit 0-Day Shell

:: Editing File: index_old.php

<?php
include"admin/func.php";
include"admin/param.php";
include"live.php";
?>
<?php include("top_ind.php"); ?>
<?php include("top_menu.php"); ?>

<div class="container-fluid">
		<?php
		$QRY = qry_run("select * from tbl_webs WHERE mainid = 1"); 
		if (num_rec($QRY) > 0) 
		{ 
		$rs = fetch_rec($QRY);
		$banerPic=$rs['HomeBannerImage'];
		}
		$QRY = qry_run("select * from tbl_main where pshow = 'Yes' order by ranking limit 7");
        if (num_rec($QRY) > 0)
        {
        	$n = 1;
			$banner='';
			while($rs = fetch_rec($QRY))
			{ 
				//if($n==1){$banner=$rs['img1'];}
		?>

		<div id="banner_<?=$n?>" style="display:none;"><img src="data/<?=$banerPic?>" class="img-responsive"></div>
		<?php
			$n += 1;
			}
		}
		?>
	</div>
	<div class="container-fluid hidden-xs">
		<div class="row">
			<div class="col-md-12">
				<div class="sub_menu">
				<?php
				$QRY = qry_run("select * from tbl_main where pshow = 'Yes' order by ranking limit 7");
				if (num_rec($QRY) > 0)
				{
					$n = 1;
					while($rs = fetch_rec($QRY))
					{
						$css_menu_class = 'main_btn';
						if ($n == 1)
						{
							$css_menu_class = 'main_btn_left';
						}
						if ($n == 7)
						{
							$css_menu_class = 'main_btn_right';
						}
						$QRYs = qry_run("select * from tbl_section where mainid = ".$rs['mainid']." order by ranking");
						if (num_rec($QRYs) > 0)
						{
							$ssow = "main";
						}else{
							$ssow = "products";
						}
				?>
				<a href="<?=$ssow?>.php?live=<?=$rs['mainid']?>_0_0_0" id="link_menu_<?=$n?>" class="<?=$css_menu_class?>" onMouseOver="calc(<?=$n?>);"><?=$rs['pname']?></a>
				<?php
						$n += 1;
					}
				}
				?>
				</div>
			</div>
		</div>
		<div class="row">
			<div class="col-md-12">
				<div class="link_menu" style="background:#ececec;">
				<?php
				$QRY = qry_run("select * from tbl_main where pshow = 'Yes' order by ranking limit 7");
				if (num_rec($QRY) > 0)
				{
					$n = 1;
					while($rs = fetch_rec($QRY))
					{
				?>
				<div class="row" id="sub_link_<?=$n?>" style="display:none;">
					<?php
					$QRYs = qry_run("select * from tbl_section where mainid = ".$rs['mainid']." AND pshow = 'Yes' order by ranking limit 4"); 
					if (num_rec($QRYs) > 0) 
					{
						while($rss = fetch_rec($QRYs))
						{
					?>
					<div class="col-md-3">
						<div class="sub_menu_body" style="height:150px;">
							<div class="sub_menu_heading"><?=$rss['pname']?></div>
							<ul style="padding-left: 20px;">
								<?php
								$QRYp = qry_run("select * from tbl_prods where mainid = ".$rs['mainid']." AND secid = ".$rss['secid']." AND pshow = 'Yes' order by ranking limit 5"); 
								if (num_rec($QRYp) > 0) 
								{
									while($rsp = fetch_rec($QRYp))
									{
								?>
								<li><a href="detail.php?live=<?=$rsp['mainid']?>_<?=$rsp['secid']?>_<?=$rsp['catid']?>_<?=$rsp['pid']?>"><?=$rsp['pname']?></a></li>
								<?php
									}
								}
								?>
							</ul>
							
						</div>
					</div>
					<?php
						}
					}
					?>
				</div>
				<?php
						$n += 1;
					}
				}
				?>
				</div>
			</div>
		</div>
	</div>
<script>
calc(1);
function calc(id)
{
	var st = 1;
	while(st <= 7)
	{
		if (st == id)
		{
			$('#banner_'+st).show();
			$('#sub_link_'+st).show();
			$('#link_menu_'+st).addClass('main_btn_active');
		}else{
			$('#banner_'+st).hide();
			$('#sub_link_'+st).hide();
			$('#link_menu_'+st).removeClass('main_btn_active');
		}
		st += 1;
	}
}
</script>

<div class="container">
	<div class="row">
		<div class="col-md-12">
			<div style="padding-bottom:20px;padding-top:20px;">
				<div class="row">
					<?php
					$QRY = qry_run("select * from tbl_contents where ptype = 'Special Services' AND pshow = 'Yes' order by ranking limit 6");
					if (num_rec($QRY) > 0)
					{
						$n = 1;
						while($rs = fetch_rec($QRY))
						{
					?>
					<div class="col-md-2 col-sm-2 col-xs-6" style="margin-bottom:10px;">
						<div class="view third-effect">  
						  <div><img src="admin/pictures/<?=$rs['img2']?>" class="img-responsive" style="height:100px;"></div>
						  <div class="text-center" style="background:#293778;color:#FFF;line-height: 40px;"><?=$rs['pname']?></div> 
						  <div class="mask"></div>
						  <div class="content">  
							<a href="content.php?p=<?=$rs['mainid']?>" class="info" title="<?=$rs['pname']?>"><?=$rs['pname']?></a>  
						  </div>  
						</div>
					</div>
					<?php
						}
					}
					?>
					
				</div>
			</div>
		</div>
	</div>
</div>
<div class="container-fluid">
	<div class="container">
	<?php
		$QRY = qry_run("Select * from tbl_webs");
        if (num_rec($QRY) > 0)
        {
        	$rs = fetch_rec($QRY);
			if ($rs['SpecialProductsTitle'] != ''){
			?>
				<h1 class="text-center" style="margin-bottom: 20px;color:#232d6f;"><?=$rs['SpecialProductsTitle']?></h1>
			<?} 
			else {?>
				<h1 class="text-center" style="margin-bottom: 20px;color:#232d6f;">Special Products</h1>
				<?}
				} 
			else {?>
				<h1 class="text-center" style="margin-bottom: 20px;color:#232d6f;">Special Products</h1>
				<?
		}?>
		<div class="row">
			<?php
			$QRY = qry_run("Select * from tbl_prods where pshow = 'Yes' AND feature = 'Yes'  order by ranking limit 6");
			if (num_rec($QRY) > 0)
			{
				$n = 1;
				while($rs = fetch_rec($QRY))
				{
			?>
			  <div class="col-md-3 col-sm-4 col-xs-12" style="margin-bottom:25px;">
				<div class="view effect">  
				  <img src="admin/pictures/<?=$rs['img1']?>" class="img-responsive center-block" alt="">  
				  <div class="text-center"><?=$rs['pname']?></div>
				  <div class="mask"></div>  
				  <div class="content">  
					<a href="detail.php?live=<?=$rs['mainid']?>_<?=$rs['secid']?>_0_<?=$rs['pid']?>" class="infos" title="View Detail">View Detail</a>  
				  </div>  
				  <div style="display:block;position:absolute;top:0px;right:0px;background:#FF0000;color:#FFF;width:90px;height:20px;">Stock: <?=$rs['stock']?></div>
				</div>
			  </div>
			<?php
				}
			}
			?>
		</div>
	</div>
</div>
<div class="container-fluid" style="background:#ececec;padding-bottom:20px;">
	<div style="text-align:center;display:block;"><img src="imgs/arrow.jpg"></div>
	<?php
		$QRY = qry_run("Select * from tbl_webs");
        if (num_rec($QRY) > 0)
        {
        	$rs = fetch_rec($QRY);
			if ($rs['WelcomeMessage'] != ''){
			?>
			<h1 class="text-center" style="margin-bottom: 20px;color:#232d6f;">Welcome to <strong><?=$rs['WelcomeMessage']?></strong></h1>
				
			<?} 
			else {?>
				<h1 class="text-center" style="margin-bottom: 20px;color:#232d6f;">Welcome to <strong>AL MINHAJ Computers&nbsp;Trading</strong></h1>
				<?}
				} 
			else {?>
				<h1 class="text-center" style="margin-bottom: 20px;color:#232d6f;">Welcome to <strong>AL MINHAJ Computers&nbsp;Trading</strong></h1>
				<?
		}?>
	
	<div class="container">
		<?php
		$QRY = qry_run("Select * from tbl_contents where ptype = 'Home Page' AND pshow = 'Yes'");
        if (num_rec($QRY) > 0)
        {
        	$rs = fetch_rec($QRY);
		?>
		<p><?=stripslashes(html_entity_decode($rs['pdetail']))?></p>
		<div class="row">
			<?php if ($rs['video_1'] != ''){?>
			<div class="col-md-6">
				<div class="embed-responsive embed-responsive-16by9">
				  <iframe class="embed-responsive-item" src="https://www.youtube.com/embed/<?=$rs['video_1']?>"></iframe>
				</div>
			</div>
			<?php }?>
			<?php if ($rs['video_2'] != ''){?>
			<div class="col-md-6">
				<div class="embed-responsive embed-responsive-16by9">
				  <iframe class="embed-responsive-item" src="https://www.youtube.com/embed/<?=$rs['video_2']?>"></iframe>
				</div>
			</div>
			<?php }?>
		</div>
		<?php
		}
		?>
	</div>
</div>
<div class="container-fluid no-padding" style="background-image:url('imgs/signup.jpg');background-repeat:no-repeat;background-position:center;border-bottom:solid 5px #ea9e24;">
	<div class="container">
		<div class="row">
			<div class="col-md-12" style="margin-bottom:50px;">
				<h2 class="text-center" style="color:#ea9e24;margin-top:70px;"><strong>Sign-up</strong> NewsLetter</h2>
				<div>
				<form action="maill.php" method="post" class="form-horizontal">
					<div class="form-group">
						<div class="col-md-2"></div>
						<div class="col-md-3"><input type="email" name="fmail" class="form-control" placeholder="Enter your Email" style="border:solid 3px #FFF;background:transparent;font-size:16px;padding:20px;color:#FFF;" required></div>
						<div class="col-md-3"><input type="pname" name="pname" class="form-control" placeholder="Enter your Name" style="border:solid 3px #FFF;background:transparent;font-size:16px;padding:20px;color:#FFF;" required></div>
						<div class="col-md-2"><button class="btn btn-primary form-control" type="submit" style="border:solid 3px #FFF;background:transparent;font-size:16px;height:45px;color:#FFF;font-weight:bold;">Suscribe</button></div>
						<div class="col-md-2"></div>
					</div>
				</form>
				</div>
			</div>
		</div>
	</div>
</div>
<?php 
$QRY = qry_run("select * from tbl_maps WHERE mid = 1"); 
if (num_rec($QRY) > 0) 
{ 
$rs = fetch_rec($QRY); 
?> 
<div class="container-fluid no-padding hidden-xs" style="max-height:300px;">
	<?=stripslashes(html_entity_decode($rs['pdetail']))?>
</div>
<?php }?>
<?php
$QRY = qry_run("select * from tbl_webs WHERE pop_status = 'Active'");
if (num_rec($QRY) > 0) 
{ 
	$rs = fetch_rec($QRY); 
?>
<div class="modal fade bs-modal-md" id="my-ajax-modal" role="basic" aria-hidden="true">
    <div class="modal-dialog modal-md">
        <div class="modal-content">
			<div class="modal-header">
				<h4 class="modal-title" id="gridSystemModalLabel" style="margin:0px;padding:0px; text-align:center;"><?=$rs['popup_title']?></h4>
				<button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
			</div>
			<div class="modal-body">
				<img src="data/<?=$rs['pop_image']?>" class="img-responsive">
			</div>
		</div>
    </div>
</div>
<script>
$(document).ready(function(){
	$('#my-ajax-modal').modal('show');
});
</script>
<?php }?>
<?php include("btm.php"); ?>
</body>
</html>