Zploit 0-Day Shell

:: Editing File: detail.php

<?php
	include "admin/func.php";
	include "admin/param.php";
	include "live.php";
	$web_title = $M_phead .' | '. $web_title;
?>
<?php include("top.php"); ?>
<?php include("top_menu.php"); ?>
<?php if ($top_banner_sub != ""){?>
<div class="container-fluid">
	<div class="row">
		<div class="col-md-12" align="center"><img src="admin/pictures/<?=$top_banner_sub?>" class="img-responsive"></div>
	</div>
</div>
<?php }?>
<div class="container-fluid">
	<div class="row" style="padding-bottom:20px;">
		<div class="col-md-3">
				<?php include("left.php"); ?>
		</div>
		<div class="col-md-9">
			<h3 class="cat_heading"><?=$P_head?></h3>
			<div class="row breadcrumb_top">
				<div class="col-md-12">
					<ol class="breadcrumb" style="margin-bottom: 0px;">
					  <li><a href="index.php">Home</a></li>
					  <li><a href="main.php?live=<?=$mid?>_0_0_0"><?=$M_head?></a></li>
					  <li><a href="products.php?live=<?=$mid?>_<?=$sid?>_0_0"><?=$S_head?></a></li>
					  <li class="active"><?=$P_head?></li>
					</ol>
				</div>
			</div>
			<?php
			$sql = "Select * from tbl_prods where pshow = 'Yes' AND mainid = ".$mid." AND secid = ".$sid." AND catid = ".$cid." AND pid = ".$pid." order by ranking limit 1";
			$query = qry_run($sql);
			if (num_rec($query) > 0)
			{
				while ($rs = fetch_rec($query))
				{
			?>
				<div class="row" style="margin-bottom:20px;margin-top:20px;">
					<div class="col-md-6">
						<img src="admin/pictures/<?=$rs['img2']?>" class="img-responsive">
					</div>
					<div class="col-md-6">
						<div><?=stripslashes(html_entity_decode($rs['sdetail']))?></div>
						<br>
						<div>
						<form name="add_basket" method="post" action="addtocart.php" class="form-horizontal">
						<input type="hidden" name="sub_mit" value="Yes">
						<input type="hidden" name="live" value="<?=chf('live')?>">
						<div class="form-group">
							<div class="col-md-1"></div>
							<div class="col-md-5"><input type="text" name="qty" id="qty" value="1" class="form-control"></div>
							<div class="col-md-6"><input type="submit" name="sub_mit_btn" value="ADD TO INQUIRY BASKET" class="btn btn-info form-control"></div>
						</div>
						</form>
						</div>
					</div>
				</div>
				<div class="row">
					<div class="col-md-12" style="margin-bottom:15px;"><h5 style="color:#FFF;background:#232d6f;padding:10px;margin:0px;">Description</h5></div>
					<div class="col-md-12"><?=stripslashes(html_entity_decode($rs['pdetail']))?></div>
				</div>
			<?php
				}
			}
			?>
			</div>
		</div>
	</div>
</div>
<?php include("btm.php"); ?>
</body>
</html>