shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : view-sub-order.php
 
			<?php $this->load->view('admin/sidebar.php');?>
		</div>
		<div class="content-right">
			<?php $this->load->view('admin/header.php');?>
			<div class="main-content">
				<div class="dash-block">
					<h5 class="border-bottom pb-3">View Sub Item 
	 <a href="<?=base_url('admin/print_invoice/'.$this->uri->segment('3'))?> " data-toggle="tooltip" title="See Invoice" class=" pull-right btn btn-info btn-sm" >
              <i class="fa fa-print"></i> See Invoice</a>
	 
					
	<!--<button id="csv" class="btn btn-info float-right">TO CSV</button>-->
	</h5>
					
					<div class="form-element mt-2 position-relative">
						<div class="table-top">
    						
    				    </div>
						<table class="table table-bordered data" id="example">
						<thead>	
							<tr>
								<th>SNo </th>
								<th>Order No</th>
								<th>SKU</th>
								<th>Weight</th>
								<th>Price</th>
								<th>Qty</th>
								<th>Total</th>
								<th>Status Date</th>
								<th>Status</th>
								<th>Action</th>
							</tr>
						</thead>
						<tbody class="data">	
							<?php 
								if($suborder_res==true){
									$sno = 1;
									$total_price = [];
									foreach($suborder_res as $row){
										if($row->status!=0){
											$total_price[] = $row->sale_price*$row->qty;
										}
										
									?>
									<tr>
										<td><?=$sno++?></td>
										<td><?=$row->sub_order_no?></td>
										<td><?=$row->sku?></td>
										<td><?=$row->weight." g"?></td>
										<td><?=$row->sale_price?></td>
										<td><?=$row->qty?></td>
										<td><?=$row->total_price?></td>
										<td><span class="text-primary"><?=date('d-m-Y',strtotime($row->status_date))?></span></td>
										<td>
											<select class="form-control" id="status">
										<?php if($row->status==1 ){?>
											<option value="1" <?php if($row->status==1){ echo "selected";}?>>Processing</option>
											<option value="2" <?php if($row->status==2){ echo "selected";}?>>Confirm</option>
											<option value="3" <?php if($row->status==3){ echo "selected";}?>>Dispatch</option>
											<option value="4" <?php if($row->status==4){ echo "selected";}?>>Delivered</option>
											<option value="0" <?php if($row->status==0){ echo "selected";}?>>Cancel</option>
											<option value="5" <?php if($row->status==5){ echo "selected";}?>>Out of Stock</option>											
										<?php }else if($row->status==2 ){?>
											<option value="2" <?php if($row->status==2){ echo "selected";}?>>Confirm</option>
											<option value="3" <?php if($row->status==3){ echo "selected";}?>>Dispatch</option>
											<option value="4" <?php if($row->status==4){ echo "selected";}?>>Delivered</option>
											<option value="0" <?php if($row->status==0){ echo "selected";}?>>Cancel</option>	
											<option value="5" <?php if($row->status==5){ echo "selected";}?>>Out of Stock</option>										
										<?php }else if($row->status==3){?>
											<option value="3" <?php if($row->status==3){ echo "selected";}?>>Dispatch</option>
											<option value="4" <?php if($row->status==4){ echo "selected";}?>>Delivered</option>
											<option value="0" <?php if($row->status==0){ echo "selected";}?>>Cancelled</option>
										<?php }else if($row->status==4){?>
											<option value="4" <?php if($row->status==4){ echo "selected";}?>>Delivered</option>
										<?php }else if($row->status==0){?>
											<option value="0" <?php if($row->status==0){ echo "selected";}?>>Cancelled</option>
										<?php }?>
									</select>
										</td>
										<td><button type="button" class="btn btn-danger btn-sm order_status" id="<?=$row->id?>">Save</button><a href="#" data-toggle="modal" data-target=".address-detail" class="view-det"></td>
									</tr>
									
							<?php	
					       		}
					   		}?>
					   				<tr><td colspan="6"><b>Total</b></td><td><b><?=array_sum($total_price);
					   				if($addtional_info){
					   					echo " + ".$addtional_info[0]->delivery_charges.'(Shipping) - '. $addtional_info[0]->coupon_discount.'(Coupon) = ';
					   					echo array_sum($total_price)+intval($addtional_info[0]->delivery_charges)-intval($addtional_info[0]->coupon_discount);
					   				}
					   				

					   				?></b></td></tr>
						</tbody>

						</table>

					</div>
				</div>
			</div>
			<?php $this->load->view('admin/footer');?>
		</div>
	</div>
	<div class="modal fade address-detail">
		<div class="modal-dialog modal-lg">
			<div class="modal-content">
				<div class="modal-header">
					<h5 class="modal-title">Delivery Detail</h5>
					<button class="close" data-dismiss="modal">&times;</button>
				</div>
				<div class="modal-body">
				    <table id="data" class="TableStyle">
				    </table>
				</div>
			</div>
		</div>
	</div>
	 <!-- eyemodel Modal -->
  <div class="modal" id="eyemodel">
    <div class="modal-dialog">
      <div class="modal-content">
      
        <!-- Modal Header -->
        <div class="modal-header">
          <h4 class="modal-title">Cancel Description</h4>
          <button type="button" class="close" data-dismiss="modal">&times;</button>
        </div>
        
        <!-- Modal body -->
        <div class="modal-body">
          <h5 id="cancel_desc_data"></h5>
        </div>
        
        <!-- Modal footer -->
        <div class="modal-footer">
          <button type="button" class="btn btn-danger" data-dismiss="modal">Close</button>
        </div>
        
      </div>
    </div>
  </div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
<script src="<?=base_url('admin_assets/js/tableHTMLExport.js')?>"></script>
<script type="text/javascript">
 $(document).ready(function() { 
    $(".table-bordered").wrapAll("<div class='table-responsive'></div>"); 
}); 
	$(document).ready(function () {
	  	$('#example').DataTable();
	});
    $('#csv').on('click',function(){
        $("#example").tableHTMLExport({type:'csv',filename:'OrderReport.csv'});
    })
</script>
<script type="text/javascript">
$(".order_status").click(function() {
	var con = confirm("Are you sure ");
	var order_id=$(this).attr("id");
	var status = $(this).closest("tr").find('select#status').val();
	if(con==true){
		$.ajax({
			url:"<?=base_url('admin/suborder_status_changer')?>",
			method:"post",
			data:{"order_id_for_status":order_id,"status":status},
			success: function(res){//for response
			    if(res==1){
					alert("Sucess! Status Update Successfully");
				}else if(res==0){
					alert("Select Next Order Status");
					return false;
				}else if(res==2){
					alert("No Cancel After Complete");
					return false;
				}
				
			}
		});
	}else{
		alert("Internal Problem");
		return false;
	}
	
});



$(function(){
	$("#checkbox").click(function(){
			if($('input:checkbox').prop('checked')){
			
			$('input:checkbox').prop('checked',true);

			} else{

			$('input:checkbox').prop('checked',false);	
			}
	});
});


$(".app").click(function(){
	if (!$('.checkbox').is(':checked')) {
        alert('not checked');
        return false;
    }else{
		var values = new Array();
		var bulkstatus = $("#bulkstatus").val();
		$.each($("input[name='tablerecords[]']:checked"), function() {
	           var data = $(this).parents('tr:eq(0)');
	           var status = $(this).closest("tr").find('select#status').val();
	           /*values.push({ 'callphone':$(data).find('td:eq(0)').text(), 'rating':$(data).find('td:eq(2)').text() , 'location':$(data).find('td:eq(3)').text()}); */  
	            values.push({'callphone':$(this).val(),'mult_status':status});          
	       });
		 $.ajax({
				method:"POST",
				url:"<?=base_url('admin/bulk_order_status_changer')?>",
				data:{"data":values,"bulkstatus":bulkstatus},
				success:function(res){
				    //$(".reload_block").html(res);
				    alert(res);

				}
		
		});
	}

      //console.log(values);
});
$(document).ready(function() {
    $('.js-example-basic-multiple').select2();
});

$("#pincode_filter").change(function(){
	var pincode = $(this).val();
	$(".data").html("");
	if(pincode!=""){
		$.ajax({
			type:"post",
			data:{"pincode":pincode},
			url:"pincode_filter_ajax",
			success:function(res){
				$(".data").html(res);
			}
		})
	}
})

$("#city_filter").change(function(){
	var city = $(this).val();
	$(".data").html("");
	if(city!=""){
		$.ajax({
			type:"post",
			data:{"city":city},
			url:"pincode_filter_ajax",
			success:function(res){
				$(".data").html(res);
			}
		})
	}
})

$("#state_filter").change(function(){
	var state = $(this).val();
	$(".data").html("");
	if(state!=""){
		$.ajax({
			type:"post",
			data:{"state":state},
			url:"pincode_filter_ajax",
			success:function(res){
				$(".data").html(res);
			}
		})
	}
})

$(".eyemodel").click(function(){
   var desc = $(this).data("desc");
   if(desc==""){
       $("#cancel_desc_data").text("No Cancel Description");
   }else{
       $("#cancel_desc_data").text(desc);   
   }
})

</script>
</body>
</html>

© 2026 GrazzMean