Zploit 0-Day Shell

:: Editing File: reactivate_profile.php

<?php
ob_start(); // Start output buffering
header('Content-Type: text/plain');
include('db.php');

if (!isset($_POST['user_id'])) {
    ob_end_clean();
    echo "Missing required parameters";
    exit;
}

$user_id = mysqli_real_escape_string($conn, $_POST['user_id']);

// Check current status
$sql_check = "SELECT visible_status FROM user_details WHERE user_id = '$user_id'";
$result_check = mysqli_query($conn, $sql_check);

if (!$result_check) {
    ob_end_clean();
    echo "Database error: " . mysqli_error($conn);
    exit;
}

if (mysqli_num_rows($result_check) == 0) {
    ob_end_clean();
    echo "User not found";
    exit;
}

$row = mysqli_fetch_assoc($result_check);
$current_status = $row['visible_status'];

// Check if profile is already active
if ($current_status == '1') {
    ob_end_clean();
    echo "Profile is already active";
    exit;
}

// Reactivate profile (set visible_status to 1)
$sql_update = "UPDATE user_details SET visible_status = '1' WHERE user_id = '$user_id'";
if (mysqli_query($conn, $sql_update)) {
    $affected_rows = mysqli_affected_rows($conn);
    ob_end_clean();
    if ($affected_rows > 0) {
        echo "1";
    } else {
        echo "No changes made. Profile may already be active.";
    }
} else {
    ob_end_clean();
    echo "Failed to reactivate profile: " . mysqli_error($conn);
}

mysqli_close($conn);
?>