shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : veiw_order.php
 
<?php $this->load->view('home/header');?>
<style>
    .table-bordered td, .table-bordered th {
    border: 1px solid #dee2e6;
    font-size: 12px;
}
</style>
<section class="myaccount-block">
    <div class="container">
         <div class="myaccount-header">
            <h5><span>Order  Details</span></h5>
         </div>
         <div class="clearfix"></div>
         <div class="row">
              <div class="col-md-3">
                     <?php $this->load->view('home/sidebar');?>
                  </div>
              <?php
                if($order_res==true){
                  foreach($order_res as $row){

                  }
                  }
                  $total_pay_amt = $row->order_price;
               ?>
                  <div class="col-md-9">
                     <div class="right-account-user border-left">
                        <div class="right-account-header" style="    background: #f5f5f5; padding: 12px 15px 0px 15px;">
                            <div class="pull-left"><p>My Order - <b>#</b><?php echo $row->order_no;?> (<?php echo $row->order_staus;?>)</p></div>
                          <?php if($row->order_update) {?>  <div class="pull-right"><p>Date - <b>#</b><?php echo $row->order_update;?></p></div> <?php } ?>
                        </div>
                         <table class="table table-border" style="width:100%;">
                            <?php 
                            if($row->invoice_no){
                                  $tracking_code='';
  if($row->tracking_code){ 
      if($row->tracking_url =='https://tracklite.in/'){
      $tracking_code.='<a  target="_blank"  href="'.base_url('admin/track?id='.$row->tracking_code).'">Track Your Order</a>';
      }else{
      $tracking_code.='<a  target="_blank"  href="https://app.shiprocket.co//tracking/'.$row->tracking_code.'">Track Your Order</a>';
          
      }
  }
                               ?>
                               <tr>
                                 <td><b>Invoice No.</b> : <?php echo $row->invoice_no;?><br>
                                 <b>Invoice Date.</b> :<?php echo $row->invoice_date;?></td>
                                 <td><?php if($row->tracking_code) {?> AWB No.: <?php echo $row->tracking_code;?>  &nbsp;&nbsp;
                                 <?php echo $tracking_code; } ?> <br>
                                 <b>Payment Mode:</b> <?php echo $row->payment_method."(".$row->pay_status.")"; ?>
                                 </td>
                             </tr> 
                               <?php 
                            }
                            
                            ?> 
                             <tr>
                                 <td>Billing Address</td>
                                 <td>Shipping Address</td>
                             </tr> 
                             <tr>
                                 <td><?php
                                 echo $row->b_name."<br>";
                                 echo $row->b_add."<br>";
                                 echo $row->b_landmark."<br>";
                                 echo $row->b_city."&nbsp;".$row->b_state."&nbsp;".$row->b_pincode."<br>";
                                if($row->gstno) { 
                                      echo "<p  style='margin: 0px;'><b>GST No. </b>".$row->gstno."</p>";
                                      }
                                 echo "<p style='margin: 0px;'><b>Email address </b>".$row->b_email."</p>";
                                 echo "<p  style='margin: 0px;'><b>Phone </b>".$row->b_phone."</p>";
                                 ?></td>
                                <td><?php
                                 echo $row->full_name."<br>";
                                 echo $row->address."<br>";
                                 echo $row->landmark."<br>";
                                 echo $row->city."&nbsp;".$row->state."&nbsp;".$row->pincode."<br>";
//                                  echo "<p><b>Email address </b>".$row->b_email."</p>";
                                 echo "<p  style='margin: 0px;'><b>Phone </b>".$row->mobile."</p>";
                                 ?></td>
                             </tr>
           </table>
            <table class="table table-bordered" style="width:100%;">
              <tr>
                  <td>S.No.</td>
                  <td>Products</td>
                  <td>HSN No.</td><td>SKU</td>
                  <td>Qty.</td>
                  <td>Price</td>
                  <td>Amount</td>
                  <td>Tax %</td>
                  <td>Tax Amount</td>
                  <td>Net Amount</td>
              </tr>
                        <?php
                        $iii=$ta_amt1=$g_amt1=$n_total=0;
                $res = $this->Curd->fetch_where("tb_sub_order",array("*"),array("order_no"=>$row->order_no));
                  if($res==true){
                    foreach($res as $row1){
//                        print_r($row1);
                        $iii++;
                        $pay_amt = round(($row1->sale_price*100)/( 100+$row1->tax_per ),2);
                        $tx =round($pay_amt*$row1->tax_per/100,2); 
                               $pro_co="";
                if($row1->product_color!="None"){
                       $pro_co="($row1->product_color)";
                }
                         echo "<tr>";
                          echo "<td>$iii</td>";
                          echo "<td>$row1->title ($row1->weight) $pro_co</td>";
                          echo "<td>$row1->hsn_no</td>"; echo "<td>$row1->sku</td>";
                            echo "<td>$row1->qty</td>";
                             echo "<td><i class='fa fa-rupee-sign'></i> $pay_amt</td>";
                              echo "<td><i class='fa fa-rupee-sign'></i> "; echo $g_amt = $pay_amt*$row1->qty; echo "</td>";
                          echo "<td>$row1->tax_per %</td>";
                          echo "<td><i class='fa fa-rupee-sign'></i> "; echo $ta_amt = $tx*$row1->qty;  echo "</td>";
                         
                        
                        
                          echo "<td><i class='fa fa-rupee-sign'></i>  $row1->total_price</td>";
                          echo "</tr>"; 
                    $ta_amt1= $ta_amt1+$ta_amt;
                    $g_amt1= $g_amt1+$g_amt;
                    $n_total = $n_total+$row1->total_price;
                          }
             
                        } ?>
            <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Total Product Value</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $n_total;?></td>
              </tr>
            <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Discount Amount</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $row->coupon_discount;?></td>
              </tr>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Net Total Amount</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $g_amt1 = $n_total-$row->coupon_discount;?></td>
              </tr>
              <?php
              $pay_amt_3 = round(($g_amt1*100)/( 105 ),2);
            $ta_amt1 =round($pay_amt_3*5/100,2); 
              
              ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Total Taxable Value </td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $pay_amt_3;?></td>
              </tr>
             
                   <?php
              if(strtolower($row->b_state)=='delhi') {
                ?>
                <tr>
                    <td colspan="5">&nbsp;</td>
                    <td colspan="4">CGST Amount</td>
                    <td ><i class='fa fa-rupee-sign'></i> <?php echo round($ta_amt1/2,2);?></td>
                </tr> 
                <tr>
                    <td colspan="5">&nbsp;</td>
                    <td colspan="4">SGST Amount</td>
                    <td ><i class='fa fa-rupee-sign'></i> <?php echo round($ta_amt1/2,2);?></td>
                </tr> 
                <?php 
              }else{
              ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">IGST Amount</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $ta_amt1;?></td>
              </tr>
              <?php } ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Shipping Charge</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $row->delivery_charges;?></td>
              </tr>
               <?php
              if( $row->payment_method=='COD') {
              ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">COD Charge</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $row->cod_charge;?></td>
              </tr>
              <?php } ?>
             
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Total Invoice Value</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $total_pay_amt;?> </td>
              </tr>
                           </table>
                     </div>
                  </div>
         </div>            
    </div>            
</section>
 

    <?php $this->load->view('home/footer');?>
  </div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('assets/js/bootstrap.min.js')?>"></script>
<script src="<?=base_url('assets/owlcarousel/owl.carousel.js')?>"></script>
<script type="text/javascript" src="<?=base_url('assets/js/custom.js')?>"></script>
<script src="https://code.jquery.com/jquery-1.12.4.js"></script>
 <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js"></script>
<script src="https://kit.fontawesome.com/a076d05399.js"></script>
 <script>
$(".repeat-order").click(function(){
   var id= $(this).attr("id");
   var product_id = $(this).attr("product_id");
   var product_weight = $(this).attr("product_weight");
   var product_qty =  $(this).attr("product_qty");
   var delivery_charges =  $(this).attr("delivery_charges");
     if(id!=""){
        $.ajax({
          method:"post",
           dataType :"json",
          url:"<?=base_url('home/repeat_to_cart')?>",
          data:{"product_qty":product_qty,"delivery_charges":delivery_charges,"product_id":product_id,"product_weight":product_weight},
          success:function(res){
               if(res.status==1){
                    $(".total_count").html(res.total_cart);
                    alert(res.msg);
                    window.location.href='<?=base_url("home/cart")?>';
                  }else if(res.status==2){
                    alert(res.msg);
                    window.location.href='<?=base_url("home/cart")?>';
                  } else if(res.status==0){
              alert("Internal Problem");
              return false;
            }
          } 
        })
      }
  });
  </script>
</body>
</html>
© 2026 GrazzMean