shell bypass 403
<?php $this->load->view('home/header');?>
<section class="user-dashboard">
<div class="container-lg">
<div class="row g-3 g-xl-4 tab-wrap">
<div class="col-lg-4 col-xl-3 sticky">
<?php $this->load->view('home/sidebar');?>
</div>
<div class="col-lg-8 col-xl-9">
<div class="right-content tab-content" id="myTabContent">
<!-- User Dashboard Start -->
<div class="tab-pane show active" id="dashboard" role="tabpanel" aria-labelledby="dashboard-tab">
<div class="dashboard-tab">
<div class="profile">
<?php if($wishlist_res==true){?>
<div class="row g-3 g-3 g-xxl-4 ratio_asos row-cols-2 row-cols-sm-4 row-cols-lg-4 row-cols-xl-4 row-cols-xxl-6">
<?php if($wishlist_res==true){
foreach($wishlist_res as $w_row){
$res = $this->Curd->inner_featured_Product("t1.id=$w_row->product_id");
// $res = $this->Curd->fetch_where("tb_product",array("*"),array("id"=>$w_row->product_id));
if($res==true){
foreach($res as $row){
$gallery = $this->Curd->fetch_where_order("tb_gallery",array("*"),array("product_id"=>$row->id),"ASC");
$price_res = $this->Curd->table_order_by('tb_product_price',array("product_id"=>$row->id),'reg_sale_price','desc','1');
// $price_res = $this->Curd->fetch_where("tb_product_price",array('MIN(price) AS price,weight,reg_discount,reg_sale_price',),array("product_id"=>$row->id));
if($price_res[0]->reg_sale_price==$price_res[0]->price){
$prices='<span>₹'.$price_res[0]->reg_sale_price.'</span>';
}else{
$prices='<span>₹'.$price_res[0]->reg_sale_price.'</span> <del>₹'.$price_res[0]->price.'</del>';
}
?>
<div class="col">
<div class="product-card product-wishlist">
<div class="img-box">
<a href="<?=base_url('home/product_detail/'.base64_encode($w_row->product_id))?>" class="primary-img">
<img class="img-fluid bg-img" src="<?=base_url('uploads/gallery/'.$gallery[0]->name)?>" alt="product" /> </a>
<!-- Rating -->
<!-- Delete Button -->
<button class="delete-button delete_btn" id="<?=$w_row->id;?>"><i data-feather="x"></i></button>
</div>
<div class="content-wrap">
<!-- Content Box -->
<div class="content-box">
<a href="<?=base_url('home/product_detail/'.base64_encode($w_row->product_id))?>">
<p><?=ucwords($row->main_cat_name)?></p>
<h5><?=ucwords($row->title)?></h5>
<span><?=$prices;?></span>
</a>
</div>
<div class="mov-to-bag">
<input type="hidden" wishid="<?=$w_row->id;?>" idd="<?=$price_res[0]->id?>" id="data<?=$row->id?>" id1="<?=$price_res[0]->weight?>" id2="<?=$price_res[0]->price?>" id3="<?=$price_res[0]->reg_sale_price?>" id4="<?=$row->sku?>" id5="<?=$row->title?>" id6="<?=base_url('uploads/gallery/'.$gallery[0]->name)?>" id7="<?=$row->hsn_no?>" id8="<?=$row->tax_per?>">
<?php
echo $sd3='<a href="javascript:void(0)" class="btn btn-solid btn-sm mb-line addtocart-btn cart_btn btt_'.$row->id.'" id="'.$row->id.'">Move To Cart <i class="arrow"></i> </a>';
?>
<!--<a href="javascript:void(0)" class="btn btn-outline btn-sm addtocart-btn">Move To Cart <i class="arrow"></i> </a>-->
</div>
</div>
</div>
</div>
<?php }
}
}
}
?>
</div>
<?php }else{?>
<div class="account-user-right">
<div class="row">
<div class="col-md-12 text-center">
<div class="notfound-product">
<img src="<?=base_url('assets/images/bag.png')?>" width="200">
<p>Item not available in your wishlist !</p>
<a href="#" class="shadow">Continue Shopping</a>
</div>
</div>
</div>
</div>
<?php }?>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</section>
<?php $this->load->view('home/footer');?>
<script type="text/javascript">
$(".delete_btn").click(function(){
var product_id = $(this).attr("id");
delete_pro(product_id);
});
function delete_pro(product_id){
$.ajax({
url : "<?php echo base_url('home/delete_wishlist');?>",
method : "POST",
data : {product_id: product_id},
success:function(res){
$('.btt_'+product_id).show();
}
});
}
$(".cart_btn").click(function(){
var product_id = $(this).attr("id");
// alert('test'+product_id);
var product_weight = $("#data"+product_id).attr("id1");
var product_weight_id = $("#data"+product_id).attr("idd");
var product_price = $("#data"+product_id).attr("id2");
var product_sale_price = $("#data"+product_id).attr("id3");
var product_sku = $("#data"+product_id).attr("id4");
var product_title = $("#data"+product_id).attr("id5");
var img = $("#data"+product_id).attr("id6");
var hsn_no = $("#data"+product_id).attr("id7");
var tax_per = $("#data"+product_id).attr("id8");
var wishid = $("#data"+product_id).attr("wishid");
var delivery_charges = 50;
var quantity = 1;
$.ajax({
url : "<?php echo base_url('home/add_to_cart');?>",
method : "POST",
dataType :"json",
data : {product_id: product_id,product_weight_id:product_weight_id,tax_per:tax_per,hsn_no:hsn_no, product_title: product_title, product_img:img, product_price: product_price, product_sale_price:product_sale_price, product_qty: quantity, product_weight:product_weight, product_sku:product_sku, delivery_charges:delivery_charges},
beforeSend:function(){
$('.btt_'+product_id).hide();
},
success:function(res){
delete_pro(wishid);
$('.btt_'+product_id).show();
if(res.status==1){
$(".total_count").html(res.total_cart);
alert(res.msg);
window.location.reload();
// window.location.href='<?=base_url("home/cart")?>';
}else if(res.status==2){
alert(res.msg);
window.location.reload();
// window.location.href='<?=base_url("home/cart")?>';
}
}
});
})
</script>