Zploit 0-Day Shell

:: Editing File: deal.php

<?php
include('includes/db.php');
include('header.php');

if (!isset($_GET['id']) || !is_numeric($_GET['id'])) {
    echo "<div class='container'><p>Invalid deal ID.</p></div>";
    include('footer.php');
    exit;
}

$deal_id = intval($_GET['id']);
$stmt = $conn->prepare("SELECT deals.*, categories.name AS category FROM deals 
                        LEFT JOIN categories ON deals.category_id = categories.id 
                        WHERE deals.id = ? AND deals.is_active = 1");
$stmt->bind_param("i", $deal_id);
$stmt->execute();
$result = $stmt->get_result();

if ($result->num_rows === 0) {
    echo "<div class='container'><p>Deal not found or inactive.</p></div>";
    include('footer.php');
    exit;
}

$deal = $result->fetch_assoc();

// Decode HTML entities
$deal_title = html_entity_decode($deal['title']);
$deal_description = html_entity_decode($deal['description']);

// Expiry countdown
$expires = strtotime($deal['expires_at']);
$now = time();
$diff = $expires - $now;

if ($diff > 0) {
    $days = floor($diff / (60 * 60 * 24));
    $hours = floor(($diff % (60 * 60 * 24)) / 3600);
    $mins = floor(($diff % 3600) / 60);
    $expire_str = "{$days}d {$hours}h {$mins}m left";
} else {
    $expire_str = "<span style='color:red;'>Expired</span>";
}

// Image URL handling
$image = '';
if (!empty($deal['image'])) {
    if (strpos($deal['image'], 'http://') === 0 || strpos($deal['image'], 'https://') === 0) {
        $image = htmlspecialchars($deal['image']);
    } else {
        $image = 'uploads/' . htmlspecialchars($deal['image']);
    }
} else {
    $image = 'placeholder.jpg'; // Fallback image
}
?>

<div class="deal-detail">
    <img src="<?= $image ?>" alt="<?= htmlspecialchars($deal_title) ?>">
    <h1><?= htmlspecialchars($deal_title) ?></h1>
    <div class="deal-meta">
        <strong>Category:</strong> <?= htmlspecialchars($deal['category']) ?><br>
        <strong>Expires:</strong> <?= $expire_str ?><br>
        <strong>Likes:</strong> <span id="like-count-<?= $deal['id'] ?>"><?= $deal['likes'] ?></span>
    </div>

<p><?= nl2br(htmlspecialchars($deal_description)) ?></p>
    <?php
    $affiliate_url = trim($deal['affiliate_url']);
    $prefix = 'https://dealofthedayindia.com/go.php?';
    
    if (strpos($affiliate_url, $prefix) === 0) {
        $affiliate_url = substr($affiliate_url, strlen($prefix));
    }
    ?>
    <a href="<?= htmlspecialchars($affiliate_url) ?>" class="grab-btn" target="_blank" rel="nofollow noopener">Grab This Deal</a>

<?php include('footer.php'); ?>