shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : add-delivery-location.php
<?php
$state_id = "";
$city = "";
$pincode ="";
$charge="";

if(isset($location_res)){
	$btnname = "Update";
	foreach($location_res as $row){
		$location_id = $row->id;
		$state_id = $row->state_name;
		$city  = $row->city_name;
		$pincode = $row->pincode;
		$charge = $row->charge;
	}
	$method = "admin/delivery_location_update/".base64_encode($location_id);
}else{
	$method = "admin/delivery_location_process";
	$btnname = "Submit";
}
?>
 
			<?php include'sidebar.php';?>
		</div>
		<div class="content-right">
			<?php include'header.php';?>
			<div class="main-content">
				<div class="dash-block">
					<h5 class="border-bottom pb-3">Add Delivery Location</h5>
					<div class="form-element">
						<?=$this->session->flashdata("success_msg")?>
						<form method="post" action="<?=base_url($method)?>">
						<div class="row">	
							<div class="col-md-6">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-4 col-form-label"> State </label>
								    <div class="col-sm-8">
								   	<select class="form-control select_state_name" name="state">
							      	<?php
							    	if($states==true){
							    		foreach($states as $srow){
							    			if($srow->id==$state_id){
							      			echo '<option value='.$srow->id.' selected>'.$srow->name.'</option>';
							      			continue;
							      			}
							      			echo '<option value='.$srow->id.'>'.$srow->name.'</option>';
							    		}
							      	}?>
							      	</select>
								      	<span class="text-danger"><?=form_error("state")?></span>
								    </div>
								</div>
							</div>
						</div>
						<div class="row">	
							<div class="col-md-6">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-4 col-form-label"> City </label>
								    <div class="col-sm-8">
								    <select class="form-control select_city_name" name="city">
							      	<?php 
							      	if($cities==true){
							      		foreach($cities as $crow){
							      			if($crow->name==$city){
							      			echo '<option value='.$crow->name.' selected>'.$crow->name.'</option>';
							      			}	
							      		}
							      	}
							      	?>	
							      	</select>
								      <span class="text-danger"><?=form_error("city")?></span>
								    </div>
								</div>
							</div>
						</div>
						<div class="row">	
							<div class="col-md-6">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-4 col-form-label"> Pincode </label>
								    <div class="col-sm-8">
								      <input type="text" class="form-control" id="inputPassword" placeholder="Enter  Pincode" name="pincode" value="<?=$pincode?>">
								      <span class="text-danger"><?=form_error("pincode")?></span>
								    </div>
								</div>
							</div>
						</div>	
						<div class="row">	
							<div class="col-md-6">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-4 col-form-label"> Charges </label>
								    <div class="col-sm-8">
								      <input type="text" class="form-control" id="inputPassword" placeholder="Enter  Delivery Charges" name="charge" value="<?=$charge?>">
								      <span class="text-danger"><?=form_error("charge")?></span>
								    </div>
								</div>
							</div>
						</div>	
							<div class="col-md-8 offset-md-2">
								<button class="btn btn-submit"><?=$btnname?></button>
							</div>
						</div>
						</form>
					</div>
				</div>
			</div>
			<?php $this->load->view('admin/footer');?>
		</div>
	</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('assets/js/custom.js')?>"></script>
<script src="<?=base_url('assets/js/css3-animate-it.js')?>"></script>
<script type="text/javascript">
	$(".select_state_name").change(function(){
	  var id  = $(this).val();
	    $.ajax({
          url: "<?=base_url('admin/get_city_ajax')?>",
          type: "POST",
          data: {"state_id":id},
          success: function(data){
			   $(".select_city_name").html(data);
							 			 
          }
      });
 });
</script>
</body>
</html>

© 2026 GrazzMean