Zploit 0-Day Shell

:: Editing File: news.php

<?php
include"admin/func.php";
include"admin/param.php";
include"live.php";
$P_img_news = '';
$QRY = qry_run("select * from tbl_banners WHERE mainid = 24");
if (num_rec($QRY) > 0)
{
	$rs_b = fetch_rec($QRY);
	$P_img_news = $rs_b['img1'];
}
$web_title = 'News & Events | '. $web_title;
?>
<?php include("top.php"); ?>
<?php include("top_menu.php"); ?>
<?php if ($P_img_news != ""){?>
<div class="container-fluid">
	<div class="row">
		<div class="col-md-12"><img src="admin/pictures/<?=$P_img_news?>" class="img-responsive"></div>
	</div>
</div>
<?php }?>
<div class="container-fluid">
	<div class="row" style="padding-bottom:20px;">
		<div class="col-md-3">
				<?php include("left.php"); ?>
		</div>
		<div class="col-md-9">
			<h3 class="cat_heading">News & Events</h3>
			<div class="row breadcrumb_top">
				<div class="col-md-12">
					<ol class="breadcrumb" style="margin-bottom: 0px;">
					  <li><a href="index.php">Home</a></li>
					  <li class="active">News & Events</li>
					</ol>
				</div>
			</div>
			<?php
			$QRY = qry_run("Select * from tbl_news where pshow = 'Yes'");
			if (num_rec($QRY) > 0)
			{
				while($rs = fetch_rec($QRY))
				{
			?>
			<div class="media" style="margin-bottom:30px;">
			  <div class="media-left"><?php if ($rs['img1'] != ""){?><img class="media-object" src="admin/pictures/<?=$rs['img1']?>" width="100" alt="<?=stripslashes(html_entity_decode($rs['pname']))?>"><?php }?></div>
			  <div class="media-body">
				<h4 class="media-heading"><?=stripslashes(html_entity_decode($rs['pname']))?></h4>
				<?=stripslashes(html_entity_decode($rs['pdetail']))?>
			  </div>
			</div>
			<?php
				}
			}
			?>
		</div>
	</div>
</div>
<?php include("btm.php"); ?>
</body>
</html>