Zploit 0-Day Shell

:: Editing File: tour.php

<?php include"header.php";
	$ref = $_GET['ref'];
	$ref_result ="SELECT * FROM category WHERE ref='$ref' ";
	$ref_stmt1=$conn->query($ref_result);
	$refernce = $ref_stmt1->fetch(); 
	?>
	
          <section class="inner-area parallax-bg" data-background="images/bg/px-1.jpg" data-type="parallax" data-speed="3">
            <div class="container">
              <div class="section-content">
                <div class="row">
                  <div class="col-12">
                    <h4><?php echo $refernce['name'] ?>  Tours</h4>
                    <p><a href="category.php">Tour </a> - <?php echo $refernce['name'] ?> Tours</p>
                  </div>
                </div>
              </div>
            </div>
          </section>
		  <section class=" boxContent">
			<div class="container">
				<div class="row">
					<div class="section-title">
						<h2><span><?php echo $refernce['name'] ?></span> Tours</h2>
						<form action="search_international.php" method="GET">
						
						</form>
					</div>
				</div>
				<div class="row">
					<?php  $ref_id=$refernce['id'];
					$tours_result ="SELECT * FROM tours WHERE category_id='$ref_id'";
					$tours_stmt1=$conn->query($tours_result);
					$tours_all = $tours_stmt1->fetchall(); 
					foreach ($tours_all as $tours) { ?>
					  
					<div class="col-md-4">
						<div class="item">
							<div class="special-places" style="margin-bottom:20px;">
								<div class="thumb">
									<?php  $tours_id=$tours['id'];	
									$gallery_result ="SELECT * FROM tour_image WHERE tours_id='$tours_id' && order_by='1' limit 1";
									$gallery_stmt1=$conn->query($gallery_result);
									$gallery = $gallery_stmt1->fetch(); ?>
									
									<a href="tour_detalis.php?ref=<?php echo $tours['ref'];?>">
										
										<img src="upload/tour/<?php echo $gallery['image_name'];?>" alt="">
									</a>
									
								</div>
								
								<div class="content">
										
									<div class="title-box">
										<a href="tour_detalis.php?ref=<?php echo $tours['ref'];?>"><h4><?php echo $tours['name']; ?> </h4></a>
									
									</div>
									<ul class="info">
										<li><i class="fa fa-calendar"></i> <?php echo $tours['days']; ?> </li>
										<li><a href="#"><i class="fa fa-"></i></a></li>
										<li><a href="<?php echo $tours['map']; ?>" target="_blank"><i class="fa fa-map-marker"></i>View on Map</a></li>
									</ul>
									<center><a class="btn-theme" href="tour_detalis.php?ref=<?php echo $tours['ref'];?>" style="float:none;">View Details</a>	</center>
								</div>
							</div>
						</div>
					</div>
					<?php } ?>
				</div>
			</div>	
		</section>
	<?php  include"footer.php";?>