Zploit 0-Day Shell

:: Editing File: sendlogo.php

<?php 
include "param.php";
include "func.php";
include "chk_login.php";

$phone = $_POST['phone'];
$email = $_POST['email'];
$facebok = $_POST['facebok'];
$twiter = $_POST['twiter'];
$linked = $_POST['linked'];
$google = $_POST['google'];
$copy = $_POST['copyright'];
$design = $_POST['design'];
$adres = $_POST['adres'];
$fphone = $_POST['fphone'];
$fax = $_POST['fax'];
$femail = $_POST['femail'];
$varlogo=$_FILES['img1']['name'];
$varpath="pictures/".$varlogo;

if($varlogo){

move_uploaded_file($_FILES['img1']['tmp_name'], $varpath);
		
	}
	if(ch_file('img1') == "Yes")
	{
	mysql_query("update tbl_logo set img1='".$varlogo."'");
	}
	mysql_query("update tbl_logo set phone='".$phone."',email='".$email."',facebok='".$facebok."',twiter='".$twiter."',linked='".$linked."',google='".$google."',copyright='".$copy."',design='".$design."'
,adres='".$adres."',fphone='".$fphone."',fax='".$fax."',femail='".$femail."'");

header("Location:main.php");
?>