Zploit 0-Day Shell

:: Editing File: home-contact-update.php

<?php
$conn=mysqli_connect('106.0.62.85','bbbncs7_newamtech',']se$}HOiVeP$','bbbncs7_newamtech');
if (!$conn)
{
echo "Failed to connect to MySQL: " . mysqli_connect_error();
}
?>

<?php
if (isset($_POST['submit'])) {
          $id=$_POST['id'];
          $phone=$_POST['phone'];
          $email=$_POST['email'];
          $facebook=$_POST['facebook'];
          $linkedin=$_POST['linkedin'];
          $youtube=$_POST['youtube'];
          $twitter=$_POST['twitter'];
           $address=$_POST['address'];
            $old_file=$_POST['chosefile_old'];
          $new_file=$_FILES['chosefile']['name'];
          if ($new_file != "") {
            $update_file = $_FILES['chosefile']['name'];
          }
          else{
            $update_file = $old_file;
          }
          if (file_exists("upload-image/".$_FILES['chosefile']['name'])) {
            $filename = $_FILES['chosefile']['name'];
            $_SESSION['status'] = "Image already exists ".$filename;

} else {
            # code...
          }

$caseinfo=$_POST['caseinfo'];
          $shortinfo=$_POST['shortinfo'];
          if(isset($_FILES['chosefile'])){
            $file_name= $_FILES['chosefile']['name'];
            $file_size= $_FILES['chosefile']['size'];
            $file_tmp= $_FILES['chosefile']['tmp_name'];
            $file_type= $_FILES['chosefile']['type'];
            move_uploaded_file($file_tmp,"upload-image/". $file_name);
        }
        
          
          $sql = "UPDATE contact set phone = '{$phone}', email = '{$email}', facebook = '{$facebook}', linkedin = '{$linkedin}', youtube = '{$youtube}', twitter = '{$twitter}', address = '{$address}', file_name = '{$update_file}'where id = {$id}";
          $query_run = mysqli_query($conn,$sql );
         if ($query_run) {
            if($_FILES['chosefile']['name'] != ""){
              move_uploaded_file($file_tmp,"upload-image/". $file_name);
              unlink("upload-image/".$old_file);
            }
          } else {
            # code...
          }
          if($conn->query($sql) === true){
            echo("Data Updated successfully");
        }else{
            echo"Error: $conn->error";
        }

};