Zploit 0-Day Shell

:: Editing File: membership.php

<?php 
session_start();

// Include database connection
include('pay-now/db.php');

// Fetch all active plans from database
$sql_plans = "SELECT * FROM sub_plans WHERE status = '1' ORDER BY new_price ASC";
$result_plans = mysqli_query($conn, $sql_plans);

include('header.php');
?>

<section class="banner-section">
    <div class="container">
        <div class="section-wrapper">
            <center>
                <h1 class="center-title">Membership</h1>
            </center>
            <br><br><br>
        </div>
    </div>
</section>

<section class="pricing-section padding-tb bg-ash">
    <div class="container">
        <div class="section-header">
            <h4 class="theme-color">Soulmeet Memberships</h4>
            <h2>Choose Your Ideal Plan</h2>
        </div>
        <div class="section-wrapper mt-4">
            <div class="pricing-plan-wrapper">
                <div class="row gx-2 gy-3 justify-content-center">
                    <?php
                    // Check if user is logged in
                    $is_logged_in = isset($_SESSION['user_id']);
                    $user_id = $is_logged_in ? $_SESSION['user_id'] : '';
                    
                    if (mysqli_num_rows($result_plans) > 0) {
                        while ($plan = mysqli_fetch_assoc($result_plans)) {
                            $plan_id = $plan['plan_id'];
                            $plan_name = $plan['plan_name'];
                            $plan_price = $plan['new_price'];
                            $plan_month = $plan['month'];
                            $chat_request = $plan['chat_request'];
                            $contact_views = $plan['contact_views'];
                            
                            // Format price with comma
                            $formatted_price = number_format($plan_price);
                            
                            // Build plan features list
                            $features = [];
                            if ($contact_views > 0) {
                                $features[] = $contact_views . " Contact Requests";
                            }
                            if ($chat_request > 0) {
                                $features[] = $chat_request . " Chat Requests";
                            }
                            if ($plan_month > 0) {
                                $features[] = $plan_month . " Month" . ($plan_month > 1 ? 's' : '') . " Validity";
                            } else {
                                $features[] = "Unlimited Validity";
                            }
                            
                            // Add common features based on plan type
                            if (stripos($plan_name, 'VIP') !== false) {
                                $features[] = "Dedicated Relationship Manager";
                                $features[] = "Personally Matchmaking";
                                $features[] = "100% Confidentiality";
                                $features[] = "Meetings as per your convenience";
                            } elseif (stripos($plan_name, 'ASSISTED') !== false) {
                                $features[] = "Dedicated Relationship Manager";
                                $features[] = "Handpicked Profiles";
                                $features[] = "Meetings arranged for you";
                            } elseif (stripos($plan_name, 'CONTACT') !== false) {
                                $features[] = "Contact via WhatsApp or Call";
                                $features[] = "Get in touch directly to your Soulmeet";
                            } elseif (stripos($plan_name, 'CHAT') !== false) {
                                $features[] = "Send chat requests to anyone";
                                $features[] = "Start your life once your Soulmeet accepts";
                            } elseif (stripos($plan_name, 'SPECIAL') !== false) {
                                $features[] = "Contact via WhatsApp or Call";
                                $features[] = "Send chat requests to anyone";
                                $features[] = "Start your life with your Soulmeet";
                            }
                            
                            // Payment URL - if logged in, go to payment, otherwise go to login with plan_id
                            if ($is_logged_in) {
                                $payment_url = "pay-now/pay.php?plan_id=" . $plan_id . "&user_id=" . $user_id;
                            } else {
                                $payment_url = "login?plan_id=" . $plan_id;
                            }
                            ?>
                            <div class="col-lg-4 col-sm-6">
                                <div class="price-item">
                                    <div class="price-item-inner">
                                        <div class="price-top">
                                            <h6><?= htmlspecialchars($plan_name) ?></h6>
                                            <h2>₹ <?= htmlspecialchars($formatted_price) ?></h2>
                                            <?php if ($plan_month > 0) { ?>
                                                <p><?= $plan_month ?> Month<?= $plan_month > 1 ? 's' : '' ?></p>
                                            <?php } ?>
                                        </div>
                                        <div class="price-bottom">
                                            <ul>
                                                <?php foreach ($features as $feature) { ?>
                                                    <li><?= htmlspecialchars($feature) ?></li>
                                                <?php } ?>
                                            </ul>
                                            <a href="<?= $payment_url ?>" class="purchase-btn">Purchase Now</a>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            <?php
                        }
                    } else {
                        ?>
                        <div class="col-12">
                            <div class="alert alert-info text-center">
                                <p>No membership plans available at the moment. Please check back later.</p>
                            </div>
                        </div>
                        <?php
                    }
                    ?>
                </div> 
            </div> 
        </div> 
    </div> 
</section>

<?php 
include('footer.php');
?>