Zploit 0-Day Shell

:: Editing File: basket.php

<?php
include"admin/func.php";
include"admin/param.php";
include"live.php";
$P_img_news = '';
$QRY = qry_run("select * from tbl_contents WHERE mainid = 44");
if (num_rec($QRY) > 0)
{
	$rs_b = fetch_rec($QRY);
	$P_img_news = $rs_b['img1'];
}
?>
<?php include("top.php"); ?>
<?php include("top_menu.php"); ?>
<?php if ($P_img_news != ""){?>
<div class="container-fluid">
	<div class="row">
		<div class="col-md-12"><div class="text-center"><img src="admin/pictures/<?=$P_img_news?>" class="img-responsive"></div></div>
	</div>
</div>
<?php }?>
<div class="container-fluid">
	<div class="row" style="padding-bottom:20px;">
		<div class="col-md-3">
				<?php include("left.php"); ?>
		</div>
		<div class="col-md-9">
			<h3 class="cat_heading">Inquiry Form </h3>
			<div class="row breadcrumb_top">
				<div class="col-md-12">
					<ol class="breadcrumb" style="margin-bottom: 0px;">
					  <li><a href="index.php">Home</a></li>
					  <li class="active">Inquiry Form </li>
					</ol>
				</div>
			</div>
			<div class="table-responsive">
			<table class="table table-bordered table-responsive" style="font-size:12px;">
				<tr>
					<th width="15%">Image</th>
					<th>Product Detail</th>
					<th width="15%">QTY</th>
					<th width="10%">Action</th>
				</tr>
				<?php
				$CRT = qry_run("Select * from tbl_cart where sid = '".$sessionid."' order by mainid");
				if (num_rec($CRT) > 0)
				{
					while($rct = fetch_rec($CRT))
        			{
				?>
				<tr>
					<td><img src="admin/pictures/<?=$rct['img1']?>" class="img-responsive" /></td>
					<td><?=$rct['pname'].' ('.$rct['pcode'].')'?></td>
					<td>
					<form name="frm_basket_update" method="post" action="update_basket.php">
					<input type="hidden" name="sub_mit" value="Yes">
					<input type="hidden" name="mmid" value="<?=$rct['mainid']?>">
					<input type="hidden" name="pmid" value="<?=$rct['pid']?>">
					<div>
					<input name="qty" type="text" class="form-control" id="qty" value="<?=$rct['qty']?>">
					</div>
					<div>
					  <input name="Submit" type="submit" class="btn btn-info form-control" style="margin-top:5px;" value="Update">
					</div>
					</form>
					</td>
					<td><a href="del_item.php?cid=<?=$rct['mainid']?>" class="btn-delete" onClick="javascript:return confirm('Do you want to delete this item?');">Delete</a></td>
				</tr>
				<?php
					}
				}
				?>
			</table>
			</div>
			<h3 class="cat_heading">Inquiry Form</h3>
			<div class="row">
				<div class="col-md-12">
					<form name="frm_basket" class="form-horizontal" method="post" action="submit_quote.php">
						<input type="hidden" name="sub_mit" value="Yes" />
						<div class="form-group">
							<label class="col-md-2 control-label">Contact Person:</label>
					  		<div class="col-md-4"><input name="fname" type="text" class="form-control" id="fname" placeholder="Enter Your Name" required></div>
							<label class="col-md-2 control-label">Company:</label>
					  		<div class="col-md-4"><input name="company" type="text" class="form-control" id="company" placeholder="Enter Your Company Name" required></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Phone:</label>
					  		<div class="col-md-4"><input name="phone" type="text" class="form-control" id="phone" placeholder="Enter Your Phone Number" required></div>
							<label class="col-md-2 control-label">Mobile:</label>
					  		<div class="col-md-4"><input name="mobile" type="text" class="form-control" id="mobile" placeholder="Enter Your Mobile Number"></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Email:</label>
					  		<div class="col-md-4"><input name="email" type="email" class="form-control" id="email" placeholder="Enter Your Valid Email" required></div>
							<label class="col-md-2 control-label">Country:</label>
					  		<div class="col-md-4">
							<select name="country" id="country" class="form-control">
							<option value="">~ Select Country ~</option>
							<?php
							$qryc = qry_run("Select * from tbl_country where pshow = 'Yes' order by country");
							if (num_rec($qryc) > 0)
							{
								$p = 1;
								while($rsc = fetch_rec($qryc))
								{
							?>
							<option value="<?=$rsc['country']?>"> <?=$rsc['country']?></option>
							<?php
								}
							}
							?>
							</select>
							</div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Address:</label>
					  		<div class="col-md-10"><input name="address1" type="text" class="form-control" id="address1" placeholder="Full Address"></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Payment Type:</label>
					  		<div class="col-md-4">
							<select name="ptype" class="form-control" id="ptype">
								<option value="-">~ Select ~</option>
								<option value="Cash">Cash</option>
								<option value="Credit Card">Credit Card</option>
								<option value="Paypal">Paypal</option>
								<option value="One Coin">One Coin</option>
								<option value="Bit Coin">Bit Coin</option>
							</select>
							</div>
							<label class="col-md-2 control-label">Shipping Type:</label>
					  		<div class="col-md-4">
							<select name="stype" class="form-control" id="stype">
								<option value="-">~ Select ~</option>
								<option value="Fast Courier">Fast Courier</option>
								<option value="BY AIR">BY AIR</option>
								<option value="By Sea">By Sea</option>
							</select>
							</div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Message:</label>
					  		<div class="col-md-10">
							<textarea name="message" id="message" class="form-control" rows="5"></textarea>
							</div>
						</div>
						<?php
                        $md5_hash = md5(rand(0,999)); 
                        $security_code = strtoupper(substr($md5_hash, 15, 6)); 
                        $_SESSION["security_code"] = $security_code;
                        ?>
						<div class="form-group">
							<label class="col-md-2 control-label">Security Code:</label>
					  		<div class="col-md-4"><input name="secure" type="text" class="form-control" id="secure" value="" required></div>
							<div class="col-md-2"><h2 style="padding:0px;margin:0px;"><?=$security_code?></h2></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label"></label>
					  		<div class="col-md-3"><input type="submit" name="sub_mit_btn" class="btn btn-info form-control" value="SUBMIT NOW" /></div>
						</div>
					</form>
				</div>
			</div>
			</div>
		</div>
	</div>
</div>
<?php include("btm.php"); ?>
</body>
</html>