Zploit 0-Day Shell

:: Editing File: btm_old.php

<div id="FOOTER">
	<div class="container-fluid no-padding btm_row">
		<div class="container" style="margin-top:40px;">
		<div class="row">
			<div class="col-md-3">
				<h3 style="color:#232d6f;">Contents</h3>
				<?php
				$QRY = qry_run("Select * from tbl_contents where ptype = 'Normal Page' AND pshow = 'Yes' order by ranking");
				if (num_rec($QRY) > 0)
				{
					while($rs = fetch_rec($QRY))
					{
				?>
				<div><a href="content.php?p=<?=$rs['mainid']?>" class="btm_link"><?=$rs['pname']?></a></div>
				<?php
					}
				}
				?>
				<div><a href="news.php" class="btm_link">News & Events</a></div>
			</div>
			<div class="col-md-3">
				<h3 style="color:#232d6f;">Products / Solutions</h3>
				<?php
				$QRY = qry_run("select * from tbl_main where pshow = 'Yes' order by ranking limit 7");
				if (num_rec($QRY) > 0)
				{
					while($rs = fetch_rec($QRY))
					{
				?>
				<div><a href="main.php?live=<?=$rs['mainid']?>_0_0_0" class="btm_link"><?=$rs['pname']?></a></div>
				<?php
					}
				}
				?>
			</div>
			<div class="col-md-2">
				<h3 style="color:#232d6f;">Social Media</h3>
				<div class="social_lne"><span class="social_lnk"><i class="fa fa-facebook" aria-hidden="true"></i></span><a href="https://www.facebook.com/alminhajtech">Facebook</a></div>
				<div class="social_lne"><span class="social_lnk"><i class="fa fa-twitter" aria-hidden="true"></i></span><a href="https://www.twitter.com/alminhaj_tech">Twitter</a></div>
				<div class="social_lne"><span class="social_lnk"><i class="fa fa-instagram" aria-hidden="true"></i></span><a href="https://www.instagram.com/alminhaj_computers">Instagram</a></div>
				<div class="social_lne"><span class="social_lnk"><i class="fa fa-youtube" aria-hidden="true"></i></span><a href="https://www.youtube.com/user/ALMINHAJTECH">Youtube</div>
			</div>
			<div class="col-md-4">
					<h3 style="color:#232d6f;">News & Events</h3>
					<div style="height:190px;">
					<marquee direction="up" scrollamount="2" style="height:180px;" onmouseover="this.stop();" onmouseout="this.start();">
					<?php
					$QRY = qry_run("Select * from tbl_news where pshow = 'Yes'");
					if (num_rec($QRY) > 0)
					{
						while($rs = fetch_rec($QRY))
						{
					?>
					<div style="font-weight:bold;"><a href="news.php"><?=stripslashes(html_entity_decode($rs['pname']))?></a></div>
					<div><?=substr(stripslashes(html_entity_decode($rs['pdetail'])),0,100)?>...</div>
					<?php
						}
					}
					?>
					</marquee>
					</div>
			</div>
		</div>
		</div>
	</div>
	<div class="container-fluid" style="background:#FFF;">
		<div class="row">
			<div class="col-md-12">
				<p class="text-center" style="padding:20px 5px;">Copyright © 2017 Al Minhaj - All rights reserved.</p>
			</div>
		</div>
	</div>
</div>
<a href="content.php?p=4#feedback" id="inq_btn" style="position:fixed;top:50%;left:0px;" title="Inquiry / Quick Contact"><img src="imgs/quick.png" style="width:36px;" /></a>
<script>
$(window).scroll(function() {
    if ($(this).scrollTop() >= 350) {        // If page is scrolled more than 50px
        $('#return-to-top').fadeIn(200);    // Fade in the arrow
    } else {
        $('#return-to-top').fadeOut(200);   // Else fade out the arrow
    }
});
$('#return-to-top').click(function() {      // When arrow is clicked
    $('body,html').animate({
        scrollTop : 0                       // Scroll to top of body
    }, 500);
});
</script>
<?php
if (isset($_SESSION["unique_visits"]))
{
	$UPD = qry_run("UPDATE tbl_stats SET tlt_hits = (tlt_hits + 1) WHERE mainid = 1");
}else{
	$_SESSION["unique_visits"] = "Yes";
	$UPD = qry_run("UPDATE tbl_stats SET tlt_hits = (tlt_hits + 1),tlt_unique_hits = (tlt_unique_hits + 1) WHERE mainid = 1");
}
?>