shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : add-blog.php
<?php
$b_title = ""; 
$b_desc = "";
$b_image = "";
$meta_title = "";
$meta_desc = "";
$meta_keyword = "";
if(isset($blog_res)){
	$btnname = "Update";
	foreach($blog_res as $row){
		$blog_id = $row->id;
		$b_title = $row->title;
		$b_image = $row->image;
		$b_desc = $row->description;
		$meta_title = $row->meta_title;
		$meta_desc = $row->meta_desc;
		$meta_keyword = $row->meta_keyword;
	}

	$method = "admin/blog_update/".base64_encode($blog_id);
}else{
	$method = "admin/blog_process";
	$btnname = "Submit";
}


?> 
			<?php $this->load->view('admin/sidebar');?>
		</div>
		<div class="content-right">
			<?php $this->load->view('admin/header');?>
			<div class="main-content">
				<div class="dash-block">
					<h5 class="border-bottom pb-3">Add Blog</h5>
					<div class="form-element">
						<?=$this->session->flashdata('success_msg')?>
						<form method="post" action="<?=base_url($method)?>" enctype= 'multipart/form-data'>
						<div class="row">
							<div class="col-md-12">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-2 col-form-label">  Title </label>
								    <div class="col-sm-10">
								     <input type="text" class="form-control" id="inputPassword" placeholder="Enter Blog Title" name="b_title" required value="<?=$b_title?>">
								      <span class="text-danger"><?=form_error("b_title")?></span>
								    </div>
								</div>
							</div>
							<div class="col-md-12">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-2 col-form-label"> Description </label>
								    <div class="col-sm-8">
								      <textarea class="form-control ckeditor" id="editor" style="height: 80px !important;" name="b_desc" required="required"><?=$b_desc?></textarea>
								    </div>
								</div>
							</div>
							<div class="col-md-12">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-2 col-form-label">  Meta Title </label>
								    <div class="col-sm-8">
								     <input type="text" class="form-control" id="inputPassword" placeholder="Enter Meta Title" name="meta_title" required value="<?=$meta_title?>">
								      <span class="text-danger"><?=form_error("meta_title")?></span>
								    </div>
								</div>
							</div>
							<div class="col-md-12">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-2 col-form-label">  Meta Description </label>
								    <div class="col-sm-8">
								     <input type="text" class="form-control" id="inputPassword" placeholder="Enter Meta Description" name="meta_desc" required value="<?=$meta_desc?>">
								      <span class="text-danger"><?=form_error("meta_desc")?></span>
								    </div>
								</div>
							</div>
							<div class="col-md-12">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-2 col-form-label">  Meta Keyword </label>
								    <div class="col-sm-8">
								     <input type="text" class="form-control" id="inputPassword" placeholder="Enter Meta Keyword" name="meta_keyword" required value="<?=$meta_keyword?>">
								      <span class="text-danger"><?=form_error("meta_keyword")?></span>
								    </div>
								</div>
							</div>
							<div class="col-md-12">
								<div class="row">
									<div class="col-md-16">
										<div class="form-group row">
										    <label for="inputPassword" class="col-sm-4 col-form-label"> Image </label>
										    <div class="col-sm-8">
										      	<div class="input-group">
												  <div class="custom-file">
												    <input type="file" class="custom-file-input p_image" id="inputGroupFile04" name="blogfile[]">
												    <label class="custom-file-label file_name" for="inputGroupFile04"></label>
												  </div>
												</div>
												<small>File format should be valid JPG,PNG. <strong>(680*1055)</strong></small>
											<?php
											if($b_image!=""){?>
												<img src="<?=base_url('assets/uploads/blog/medium/'.$b_image)?>" width="100px"/>	
											<?php		
												}
											?>
										    </div>
										</div>
									</div>
								</div>
							</div>
							<div class="col-md-8 offset-md-2 mt-2">
								<button class="btn btn-submit"><?=$btnname?></button>
							</div>
						</div>
						</form>
					</div>
				</div>
			</div>
			<?php include'footer.php';?>
		</div>
	</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script src="<?=base_url('admin_assets/ckeditor/ckeditor.js')?>"></script>
<script src="<?=base_url('admin_assets/ckeditor/samples/js/sample.js')?>"></script>
<script type="text/javascript">

$(document).ready(function() {
    $('.js-example-basic-multiple').select2();
});

$(document).ready(function(){
    $('.p_image').change(function(e){
        var fileName = e.target.files[0].name;
        //alert('The file "' + fileName +  '" has been selected.');
        $(".file_name").text(fileName);
    });
});
</script>
</body>
</html>

© 2026 GrazzMean