Zploit 0-Day Shell

:: Editing File: blogs-details.php

<?php
include('crm/db.php');

/*
|--------------------------------------------------------------------------
| Get Blog URL
|--------------------------------------------------------------------------
| Example:
| blog-details.php?url=what-is-tdr-complete-guide
*/

$blog_url = isset($_GET['url']) ? trim($_GET['url']) : '';

if (empty($blog_url)) {
    header("Location: blogs.php");
    exit;
}

/*
|--------------------------------------------------------------------------
| Fetch Blog
|--------------------------------------------------------------------------
*/

$stmt = mysqli_prepare(
    $conn,
    "SELECT * FROM blogs WHERE url = ? AND status = 'Active' LIMIT 1"
);

mysqli_stmt_bind_param($stmt, "s", $blog_url);
mysqli_stmt_execute($stmt);

$result = mysqli_stmt_get_result($stmt);

if (mysqli_num_rows($result) == 0) {
    header("HTTP/1.0 404 Not Found");
    include('404.php');
    exit;
}

$blog = mysqli_fetch_assoc($result);

/*
|--------------------------------------------------------------------------
| Blog Variables
|--------------------------------------------------------------------------
*/

$blog_id          = $blog['id'];
$blog_name        = $blog['name'];
$blog_url         = $blog['url'];
$blog_image       = $blog['image'];
$blog_description = $blog['description'];
$meta_keyword     = $blog['meta_keyword'];
$meta_description = $blog['meta_description'];
$author_name      = $blog['author_name'];
$blog_date        = $blog['blog_date'];

/*
|--------------------------------------------------------------------------
| Format Date
|--------------------------------------------------------------------------
*/

$formatted_date = '';

if (!empty($blog_date)) {
    $formatted_date = date("F d, Y", strtotime($blog_date));
}

/*
|--------------------------------------------------------------------------
| Blog Image
|--------------------------------------------------------------------------
*/

if (!empty($blog_image)) {
    $image_path = "logo/blog/" . $blog_image;
} else {
    $image_path = "logo/blog/default.jpg";
}

/*
|--------------------------------------------------------------------------
| SEO Values
|--------------------------------------------------------------------------
*/

$page_title = !empty($blog_name)
    ? $blog_name . " | TDR Bazaar"
    : "Blog | TDR Bazaar";

$page_description = !empty($meta_description)
    ? $meta_description
    : strip_tags($blog_description);

$page_keywords = !empty($meta_keyword)
    ? $meta_keyword
    : $blog_name;

?>
<!DOCTYPE html>
<html lang="en">

<head>

<meta property="og:title"
          content="<?php echo htmlspecialchars($blog_name); ?>">

<?php include"header.php"?>

<?php echo htmlspecialchars($blog_name); ?>

</h1>

</div>

<li>
                            <a href="blogs.php">
                                Blogs
                            </a>
                        </li>

</ul>

</div>

<img
                                        src="<?php echo htmlspecialchars($image_path); ?>"
                                        alt="<?php echo htmlspecialchars($blog_name); ?>"
                                        class="w-100"
                                    >

</div>

<h2>

<?php echo htmlspecialchars($blog_name); ?>

</h2>

<!-- Blog Information --

<?php if (!empty($blog_date)) { ?>

<li>

<?php echo $formatted_date; ?>

</li>

<?php } ?>

<?php if (!empty($author_name)) { ?>

<li>

By
                                                <?php echo htmlspecialchars($author_name); ?>

</li>

<?php } ?>

</ul>
                                    -->

<?php echo $blog_description; ?>

</div>

<?php include "sidebar.php"; ?>

</div>

</section>

<?php include "footer.php"; ?>

</div>

</body>

</html>