Zploit 0-Day Shell

:: Editing File: live.php

<?php
if (isset($_REQUEST["live"]))
{
//list($mid,$sid,$cid,$pid) = split("-",$_REQUEST["live"]);
$Livess = explode("_",$_REQUEST["live"]);
$mid = intval($Livess[0]);
$sid = intval($Livess[1]);
$cid = intval($Livess[2]);
$pid = intval($Livess[3]);
}else{
$mid = 0;
$sid = 0;
$cid = 0;
$pid = 0;
}
$M_head = "";
$M_phead = "";
$M_keywords = "";
$M_desc = "";
$M_Detail = "";
$top_banner = "";$top_banner_sub = '';
$M_QRy = qry_run("Select * from tbl_main where mainid = ".$mid."");
if (num_rec($M_QRy) > 0)
{
	$M_rs = fetch_rec($M_QRy);
	$M_head = $M_rs['pname'];
	$M_Detail = $M_rs['pdetail'];
	$M_phead = $M_rs['pname'];
	if ($M_rs['phead'] != "")
	{
		$M_phead = $M_rs['phead'];
	}
	$M_keywords = $M_rs['keywords'];
	$M_desc = $M_rs['description'];
	$M_img = $M_rs['img1'];
	$waqas = $M_rs['img2'];
	$top_banner = $M_rs['img3'];
	$top_banner_sub = $M_rs['img3'];
}
$S_head = "";
$M_QRy = qry_run("Select * from tbl_section where secid = ".$sid."");
if (num_rec($M_QRy) > 0)
{
	$M_rs = fetch_rec($M_QRy);
	$S_head = $M_rs['pname'];
	$M_phead = $M_rs['pname'];
	$M_Detail = $M_rs['pdetail'];
	if ($M_rs['phead'] != "")
	{
		$M_phead = $M_rs['phead'];
	}
	$M_keywords = $M_rs['keywords'];
	$M_desc = $M_rs['description'];
	if ($M_rs['img2'] != "")
	{
		$top_banner_sub = $M_rs['img2'];
	}
}
$C_head = "";
$C_Detail = "";
$M_QRy = qry_run("Select * from tbl_cat where catid = ".$cid."");
if (num_rec($M_QRy) > 0)
{
	$M_rs = fetch_rec($M_QRy);
	$C_head = $M_rs['pname'];
	$C_Detail = $M_rs['pdetail'];
	$M_phead = $M_rs['pname'];
	if ($M_rs['phead'] != "")
	{
		$M_phead = $M_rs['phead'];
	}
	$M_keywords = $M_rs['keywords'];
	$M_desc = $M_rs['description'];
}
$P_head = "";
$P_RANKING = 0;
$P_QRy = qry_run("Select * from tbl_prods where mainid = ".$mid." AND secid = ".$sid." AND catid = ".$cid." AND pid = ".$pid."");
if (num_rec($P_QRy) > 0)
{
	$P_rs = fetch_rec($P_QRy);
	$P_head = $P_rs['pname'];
	$M_phead = $P_rs['pname'];
	$P_RANKING = $P_rs['ranking'];
	if ($P_rs['phead'] != "")
	{
		$M_phead = $P_rs['phead'];
	}
	$M_keywords = $P_rs['keywords'];
	$M_desc = $P_rs['description'];
	$pdetail = $P_rs['pdetail'];
}
$B_name = "";
$B_location = "";
$B_detail = "";
$BID = 55555;
if (isset($_REQUEST["bid"]) || ch_session('BRAND_id') > 0)
{
	if (ch_lvl('bid') > 0)
	{
		$BID = intval($_REQUEST["bid"]);
	}else{
		$BID = intval(ch_session('BRAND_id'));
	}
	$QRY_b = qry_run("select * from tbl_brands where mainid = ".$BID." AND pshow = 'Yes' order by ranking");
	if (num_rec($QRY_b) > 0)
	{
		$rs_b = fetch_rec($QRY_b);
		$B_name = $rs_b['bname'];
		$B_location = $rs_b['location'];
		$B_detail = $rs_b['bdetail'];
		if ($rs_b['phead'] != "")
		{
			$M_phead = $rs_b['phead'];
		}
		$M_keywords = $rs_b['keywords'];
		$M_desc = $rs_b['description'];
	}
}
function mdurl($mtxt){
	$find = array(" ","'",",","(",")");
	$replace = array("_");
	return strtolower(str_replace($find,$replace,$mtxt));
}
$base_url = "https://amtechint.com/";
?>