shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : wishlist.php
<?php $this->load->view('home/header');?>
<section class="user-dashboard">
    <div class="container-lg">
        <div class="row g-3 g-xl-4 tab-wrap">
            <div class="col-lg-4 col-xl-3 sticky">
                <?php $this->load->view('home/sidebar');?>
            </div>
            <div class="col-lg-8 col-xl-9">
                   <div class="right-content tab-content" id="myTabContent">
                <!-- User Dashboard Start -->
                    <div class="tab-pane show active" id="dashboard" role="tabpanel" aria-labelledby="dashboard-tab">
                      <div class="dashboard-tab">
                           <div class="profile">
                                <?php if($wishlist_res==true){?>
                           <div class="row g-3 g-3 g-xxl-4 ratio_asos row-cols-2 row-cols-sm-4 row-cols-lg-4 row-cols-xl-4 row-cols-xxl-6">
              <?php if($wishlist_res==true){
                foreach($wishlist_res as $w_row){
                    $res = $this->Curd->inner_featured_Product("t1.id=$w_row->product_id");
//                  $res = $this->Curd->fetch_where("tb_product",array("*"),array("id"=>$w_row->product_id));
                  if($res==true){
                    foreach($res as $row){
                    $gallery = $this->Curd->fetch_where_order("tb_gallery",array("*"),array("product_id"=>$row->id),"ASC");
                    $price_res = $this->Curd->table_order_by('tb_product_price',array("product_id"=>$row->id),'reg_sale_price','desc','1');
//                    $price_res = $this->Curd->fetch_where("tb_product_price",array('MIN(price) AS price,weight,reg_discount,reg_sale_price',),array("product_id"=>$row->id));
                        if($price_res[0]->reg_sale_price==$price_res[0]->price){
        $prices='<span>&#8377;'.$price_res[0]->reg_sale_price.'</span>';
    }else{
       $prices='<span>&#8377;'.$price_res[0]->reg_sale_price.'</span> <del>&#8377;'.$price_res[0]->price.'</del>'; 
    }
                    
                    ?>
              <div class="col">
              <div class="product-card product-wishlist">
                <div class="img-box">
                  <a href="<?=base_url('home/product_detail/'.base64_encode($w_row->product_id))?>" class="primary-img">
                      <img class="img-fluid bg-img" src="<?=base_url('uploads/gallery/'.$gallery[0]->name)?>" alt="product" /> </a>
                  <!-- Rating --> 
                  <!-- Delete Button -->
                  <button class="delete-button delete_btn" id="<?=$w_row->id;?>"><i data-feather="x"></i></button>
                </div>
                <div class="content-wrap">
                  <!-- Content Box -->
                  <div class="content-box">
                    <a href="<?=base_url('home/product_detail/'.base64_encode($w_row->product_id))?>">
                      <p><?=ucwords($row->main_cat_name)?></p>
                      <h5><?=ucwords($row->title)?></h5>
                      <span><?=$prices;?></span>
                    </a>
                  </div>
                  <div class="mov-to-bag">
                        <input type="hidden" wishid="<?=$w_row->id;?>" idd="<?=$price_res[0]->id?>" id="data<?=$row->id?>" id1="<?=$price_res[0]->weight?>" id2="<?=$price_res[0]->price?>" id3="<?=$price_res[0]->reg_sale_price?>" id4="<?=$row->sku?>" id5="<?=$row->title?>" id6="<?=base_url('uploads/gallery/'.$gallery[0]->name)?>" id7="<?=$row->hsn_no?>" id8="<?=$row->tax_per?>">
                      <?php
                       echo $sd3='<a href="javascript:void(0)" class="btn btn-solid btn-sm mb-line addtocart-btn cart_btn btt_'.$row->id.'"  id="'.$row->id.'">Move To Cart <i class="arrow"></i> </a>';
                      ?>
                    <!--<a href="javascript:void(0)" class="btn btn-outline btn-sm addtocart-btn">Move To Cart <i class="arrow"></i> </a>-->
                  </div>
                </div>
              </div>
            </div>     
              
              
                <?php }
                    }
                 } 
              }
?>
              
            
          </div>
                           <?php }else{?>
                            <div class="account-user-right">
                              <div class="row">
                                 <div class="col-md-12 text-center">
                                    <div class="notfound-product">
                                       <img src="<?=base_url('assets/images/bag.png')?>" width="200">
                                       <p>Item not available in your wishlist !</p>
                                       <a href="#" class="shadow">Continue Shopping</a>
                                    </div>
                                 </div>
                              </div>
                           </div>  
                           <?php }?> 
                
                            </div>
                        </div>
                    </div>
                </div>
               
            </div>
        </div>
    </div>
</section>
    
    <?php $this->load->view('home/footer');?>
 <script type="text/javascript">
    $(".delete_btn").click(function(){
          var product_id = $(this).attr("id");
         delete_pro(product_id);
    });
    function delete_pro(product_id){
         $.ajax({
        url : "<?php echo base_url('home/delete_wishlist');?>",
          method : "POST",
          data : {product_id: product_id},
          success:function(res){
               $('.btt_'+product_id).show();
          }
      });
    }
    $(".cart_btn").click(function(){
        var product_id = $(this).attr("id");
        // alert('test'+product_id);
        var product_weight = $("#data"+product_id).attr("id1");
        var product_weight_id = $("#data"+product_id).attr("idd");
        var product_price = $("#data"+product_id).attr("id2");
        var product_sale_price = $("#data"+product_id).attr("id3");
        var product_sku = $("#data"+product_id).attr("id4");
        var product_title = $("#data"+product_id).attr("id5");
        var img = $("#data"+product_id).attr("id6");
        var hsn_no = $("#data"+product_id).attr("id7");
        var tax_per = $("#data"+product_id).attr("id8");
        var wishid = $("#data"+product_id).attr("wishid");
        
        
        var delivery_charges = 50;
        var quantity = 1;
        
            $.ajax({
              url : "<?php echo base_url('home/add_to_cart');?>",
                method : "POST",
                dataType :"json",
                data : {product_id: product_id,product_weight_id:product_weight_id,tax_per:tax_per,hsn_no:hsn_no, product_title: product_title, product_img:img, product_price: product_price, product_sale_price:product_sale_price, product_qty: quantity, product_weight:product_weight, product_sku:product_sku, delivery_charges:delivery_charges},
                beforeSend:function(){
                   $('.btt_'+product_id).hide(); 
                },
                success:function(res){
                    delete_pro(wishid);
                     $('.btt_'+product_id).show();
                  if(res.status==1){
                    $(".total_count").html(res.total_cart);
                    alert(res.msg);
                    window.location.reload();
                    // window.location.href='<?=base_url("home/cart")?>';
                  }else if(res.status==2){
                    alert(res.msg);
                    window.location.reload();
                    // window.location.href='<?=base_url("home/cart")?>';
                  }
                }
            });

      
      })

    
</script>
© 2026 GrazzMean