Zploit 0-Day Shell

:: Editing File: new-home-update.php

<?php
$conn=mysqli_connect('106.0.62.85','bbbncs7_newalminhajtech','u^{}&L}fn0m^','bbbncs7_newalminhajtech');
if (!$conn)
{
echo "Failed to connect to MySQL: " . mysqli_connect_error();
}

<?php
if (isset($_POST['submit'])) {
    $id = $_POST['id'];
    $sub_heading = $_POST['sub_heading'];
    $heading = $_POST['heading'];
    $about_description = $_POST['about_description'];
    $video_link = $_POST['video_link'];
    $old_file=$_POST['chosefile_old'];
    $new_file=$_FILES['chosefile']['name'];
    $oldone_file=$_POST['imgone_old'];
    $newone_file=$_FILES['imgone']['name'];
    $oldtwo_file=$_POST['imgtwo_old'];
    $newtwo_file=$_FILES['imgtwo']['name'];
    $old_file=$_POST['chosefile_old'];
    $new_file=$_FILES['chosefile']['name'];
    
    
    if ($new_file != "") {
            $update_file = $_FILES['chosefile']['name'];
    }
    else{
            $update_file = $old_file;
    }
    if (file_exists("upload-image/".$_FILES['chosefile']['name'])) {
    $filename = $_FILES['chosefile']['name'];
    $_SESSION['status'] = "Image already exists ".$filename;

} else {
            # code...
    }
    if(isset($_FILES['chosefile'])){
       $file_name= $_FILES['chosefile']['name'];
       $file_size= $_FILES['chosefile']['size'];
       $file_tmp= $_FILES['chosefile']['tmp_name'];
       $file_type= $_FILES['chosefile']['type'];
       move_uploaded_file($file_tmp,"upload-image/". $file_name);
    }
    
    
    if ($newone_file != "") {
            $updateone_file = $_FILES['imgone']['name'];
    }
    else{
            $updateone_file = $oldone_file;
    }
    if (file_exists("upload-image/".$_FILES['imgone']['name'])) {
    $filenameone = $_FILES['imgone']['name'];
    $_SESSION['status'] = "Image already exists ".$filenameone;

} else {
            # code...
    }
    if(isset($_FILES['imgone'])){
       $fileone_name= $_FILES['imgone']['name'];
       $fileone_size= $_FILES['imgone']['size'];
       $fileone_tmp= $_FILES['imgone']['tmp_name'];
       $fileone_type= $_FILES['imgone']['type'];
       move_uploaded_file($fileone_tmp,"upload-image/". $fileone_name);
    }
    
    
    if ($newtwo_file != "") {
            $updatetwo_file = $_FILES['imgtwo']['name'];
    }
    else{
            $updatetwo_file = $old_file;
    }
    if (file_exists("upload-image/".$_FILES['imgtwo']['name'])) {
    $filenametwo = $_FILES['imgtwo']['name'];
    $_SESSION['status'] = "Image already exists ".$filenametwo;

} else {
            # code...
    }
    if(isset($_FILES['imgtwo'])){
       $filetwo_name= $_FILES['imgtwo']['name'];
       $filetwo_size= $_FILES['imgtwo']['size'];
       $filetwo_tmp= $_FILES['imgtwo']['tmp_name'];
       $filetwo_type= $_FILES['imgtwo']['type'];
       move_uploaded_file($filetwo_tmp,"upload-image/". $filetwo_name);
    }

// Check if a file is uploaded
    // if ($_FILES['chosefile_three']['size'] > 0) {
    //     $file_name = $_FILES['chosefile_three']['name']; // Corrected the input name
    //     $file_tmp = $_FILES['chosefile_three']['tmp_name']; // Corrected the input name
    //     move_uploaded_file($file_tmp, "upload-image/" . $file_name); // Corrected the input name
    // }

$sql = "UPDATE about_sec SET sub_heading = '{$sub_heading}', heading = '{$heading}', about_description = '{$about_description}', video_link = '{$video_link}', img_one = '{$updateone_file}' , img_two = '{$updatetwo_file}' , img_three = '{$update_file}' WHERE id = {$id}";
 $query_run = mysqli_query($conn,$sql );
          // $result = mysqli_query($conn, $sql) or die("Query Unsuccessful.");
          if ($query_run) {
            if($_FILES['chosefile']['name'] != ""){
              move_uploaded_file($file_tmp,"upload-image/". $file_name);
              unlink("upload-image/".$old_file);
            }
            elseif($_FILES['imgone']['name'] != ""){
              move_uploaded_file($fileone_tmp,"upload-image/". $fileone_name);
              unlink("upload-image/".$oldone_file);
            }
            elseif($_FILES['imgtwo']['name'] != ""){
              move_uploaded_file($filetwo_tmp,"upload-image/". $filetwo_name);
              unlink("upload-image/".$oldtwo_file);
            }
          }
          else {
                # code...
              }
          if($conn->query($sql) === true){
            echo("Data Updated successfully");
        }else{
            echo"Error: $conn->error";
        }
         
}
?>