Zploit 0-Day Shell

:: Editing File: content.php

<?php
include"admin/func.php";
include"admin/param.php";
include"live.php";
$P_phead = "";
$M_phead = "";
$P_pdetail = "";
$M_keywords = "";
$M_desc = "";
$P_img = "";
$video_1 = '';
$video_2 = '';$P_img_sub = '';
$QRY = qry_run("select * from tbl_contents WHERE mainid = ".ch_f_int('p')."");
if (num_rec($QRY) > 0)
{
	$M_rs = fetch_rec($QRY);
	$P_phead = $M_rs['pname'];
	$P_pdetail = stripslashes(html_entity_decode($M_rs['pdetail']));
	$M_phead = $M_rs['pname'];
	if ($M_rs['phead'] != "")
	{
		$M_phead = $M_rs['phead'];
	}
	$M_keywords = $M_rs['keywords'];
	$M_desc = $M_rs['description'];
	if ($M_rs['ptype'] == "Special Services")
	{
		$P_img_sub = $M_rs['img1'];
	}else{
		$P_img = $M_rs['img1'];
		$P_img_sub = $M_rs['img2'];
	}
	$video_1 = $M_rs['video_1'];
	$video_2 = $M_rs['video_2'];
}
$web_title = $M_phead .' | '. $web_title;
?>
<?php include("top.php"); ?>
<?php include("top_menu.php"); ?>
<?php if ($P_img != ""){?>
<div class="container-fluid">
	<div class="row">
		<div class="col-md-12"><img src="admin/pictures/<?=$P_img?>" class="img-responsive"></div>
	</div>
</div>
<?php }?>
<div class="container-fluid">
	<div class="row" style="padding-bottom:20px;">
		<div class="col-md-3">
				<?php include("left.php"); ?>
		</div>
		<div class="col-md-9">
			<h3 class="cat_heading"><?=$P_phead?></h3>
			<div class="row breadcrumb_top">
				<div class="col-md-12">
					<ol class="breadcrumb" style="margin-bottom: 0px;">
					  <li><a href="index.php">Home</a></li>
					  <li class="active"><?=$P_phead?></li>
					</ol>
				</div>
			</div>
			<p><?=$P_pdetail?></p>
			<?php if ($P_img_sub != ""){?>
			<p><img src="admin/pictures/<?=$P_img_sub?>" class="img-responsive" /></p>
			<?php }?>
			<div class="row">
			<?php if ($video_1 != ''){?>
			<div class="col-md-6">
				<div class="embed-responsive embed-responsive-16by9">
				  <iframe class="embed-responsive-item" src="https://www.youtube.com/embed/<?=$video_1?>"></iframe>
				</div>
			</div>
			<?php }?>
			<?php if ($video_2 != ''){?>
			<div class="col-md-6">
				<div class="embed-responsive embed-responsive-16by9">
				  <iframe class="embed-responsive-item" src="https://www.youtube.com/embed/<?=$video_2?>"></iframe>
				</div>
			</div>
			<?php }?>
			</div>
			<?php if (ch_lvl('p') == 4){?>
			<a name="feedback"></a>
			<h3 class="cat_heading">Feedback / Quick Contact </h3>
			<div class="row">
				<div class="col-md-12">
					<form name="frm_basket" class="form-horizontal" method="post" action="submit_feed.php">
						<input type="hidden" name="sub_mit" value="Yes" />
						<?php if (ch('sub') == "Y"){?>
						<?php
						$pageid = 42;
						$p_detail = "";
						$query = qry_run("Select * from tbl_contents WHERE mainid = ".$pageid."");
						if (num_rec($query) > 0)
						{
							$rs = fetch_rec($query);
							$p_detail = stripslashes(html_entity_decode($rs['pdetail']));
						}
						?>
						<div class="alert alert-info"><?=$p_detail?></div>
						<?php }?>
						<div class="form-group">
							<label class="col-md-2 control-label">Contact Person:</label>
					  		<div class="col-md-4"><input name="fname" type="text" class="form-control" id="fname" placeholder="Enter Your Name" required></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Company:</label>
					  		<div class="col-md-4"><input name="company" type="text" class="form-control" id="company" placeholder="Enter Your Company Name" required></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Email:</label>
					  		<div class="col-md-4"><input name="email" type="email" class="form-control" id="email" placeholder="Enter Your Valid Email" required></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label">Feedback:</label>
					  		<div class="col-md-10">
							<textarea name="message" id="message" class="form-control" rows="5"></textarea>
							</div>
						</div>
						<?php
                        $md5_hash = md5(rand(0,999)); 
                        $security_code = strtoupper(substr($md5_hash, 15, 6)); 
                        $_SESSION["security_code"] = $security_code;
                        ?>
						<div class="form-group">
							<label class="col-md-2 control-label">Security Code:</label>
					  		<div class="col-md-4"><input name="secure" type="text" class="form-control" id="secure" value="" required></div>
							<div class="col-md-2"><h2 style="padding:0px;margin:0px;"><?=$security_code?></h2></div>
						</div>
						<div class="form-group">
							<label class="col-md-2 control-label"></label>
					  		<div class="col-md-3"><input type="submit" name="sub_mit_btn" class="btn btn-info form-control" value="SUBMIT NOW" /></div>
						</div>
					</form>
				</div>
			</div>
			<?php }?>
		</div>
	</div>
</div>
<?php include("btm.php"); ?>

</body>
</html>