shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : order_view_details.php
			<?php $this->load->view('admin/sidebar.php');?>
		</div>
		<div class="content-right">
			<?php $this->load->view('admin/header.php');
                        
                      
                        ?>
                     <?php
                            if($order_res==true){
                                foreach($order_res as $row){
                                    
                                }
                            }
                            $s_number = str_pad( $row->id, 4, "0", STR_PAD_LEFT );
                            $total_pay_amt = $row->order_price;
                             ?>
			<div class="main-content">
                            <div class="dash-block">
                                
				    <div class="col-md-12">
                     <div class="right-account-user border-left">
                         <div class="right-account-header" style="    background: #f5f5f5; padding: 12px 15px 0px 15px;">
                            <div class="pull-left"><p>My Order - <b>#</b><?php echo $row->order_no;?> (<?php echo $row->order_staus;?>)</p></div>
                          <?php if($row->order_update) {?>  <div class="pull-right"><p>Date - <b>#</b><?php echo $row->order_update;?></p></div> <?php } ?>
                          <div class="clearfix"></div>
                        </div>
                         <table class="table table-bordered" style="width:100%;">
                               <?php 
                            if($row->invoice_no){
                                
    $tracking_code='';
  if($row->tracking_code){ 
      if($row->tracking_url =='https://tracklite.in/'){
      $tracking_code.='<a  target="_blank"  href="'.base_url('admin/track?id='.$row->tracking_code).'">Track Your Order</a>';
      }else{
      $tracking_code.='<a  target="_blank"  href="https://app.shiprocket.co//tracking/'.$row->tracking_code.'">Track Your Order</a>';
          
      }
  }
                               ?>
                               <tr>
                                 <td><b>Invoice No.</b> : <?php echo $row->invoice_no;?><br>
                                 <b>Invoice Date.</b> :<?php echo $row->invoice_date;?></td>
                                 <td><?php if($row->tracking_code) {?> AWB No.: <?php echo $row->tracking_code;?>  &nbsp;&nbsp; <?php echo $tracking_code; } ?> <br>
                                 <b>Payment Mode:</b> <?php echo $row->payment_method."(".$row->pay_status.")"; ?>
                                 </td>
                             </tr> 
                               <?php 
                            }
                            
                            ?> 
                             <tr>
                                 <td>Billing Address</td>
                                 <td>Shipping Address</td>
                             </tr>
                            
                             <tr>
                                 <td><?php
                                 echo $row->b_name."<br>";
                                 echo $row->b_add."<br>";
                                 echo $row->b_landmark."<br>";
                                  echo $row->b_city."&nbsp;".$row->b_state."&nbsp;".$row->b_pincode."<br>";
                                if($row->gstno) { 
                                    echo "<p  style='margin: 0px;'><b>GST No. </b>".$row->gstno."</p>";
                                    }
                               echo "<p style='margin: 0px;'><b>Email address </b>".$row->b_email."</p>";
                               echo "<p  style='margin: 0px;'><b>Phone </b>".$row->b_phone."</p>"; 
                                 echo $row->b_phone."<br>";
                                 ?></td>
                                <td><?php
                                 echo $row->full_name."<br>";
                                 echo $row->address."<br>";
                                 echo $row->landmark."<br>";
                                  echo $row->city."&nbsp;".$row->state."&nbsp;".$row->pincode."<br>";
                                 echo "<p  style='margin: 0px;'><b>Phone </b>".$row->mobile."</p>";
                                
                                 ?></td>
                             </tr>
           </table>
            <table class="table table-bordered " style="width:100%;">
              <tr>
                  <td>S.No.</td>
                  <td>Products</td>
                  <td>HSN No.</td><td>SKU</td>
                  <td>Qty.</td>
                  <td>Price</td>
                  <td>Amount</td>
                  <td>Tax %</td>
                  <td>Tax Amount</td>
                  <td>Net Amount</td>
              </tr>
                       <?php
                        $iii=$ta_amt1=$g_amt1=$n_total=0;
                $res = $this->Curd->fetch_where("tb_sub_order",array("*"),array("order_no"=>$row->order_no));
                  if($res==true){
                    foreach($res as $row1){
//                        print_r($row1);
                        $iii++;
                        $pay_amt = round(($row1->sale_price*100)/( 100+$row1->tax_per ),2);
                        $tx =round($pay_amt*$row1->tax_per/100,2); 
                             $pro_co="";
                if($row1->product_color!="None"){
                       $pro_co="($row1->product_color)";
                }
                         echo "<tr>";
                          echo "<td>$iii</td>";
                          echo "<td>$row1->title ($row1->weight) $pro_co</td>";
                          echo "<td>$row1->hsn_no</td>"; echo "<td>$row1->sku</td>";
                            echo "<td>$row1->qty</td>";
                             echo "<td><i class='fa fa-rupee-sign'></i> $pay_amt</td>";
                              echo "<td><i class='fa fa-rupee-sign'></i> "; echo $g_amt = $pay_amt*$row1->qty; echo "</td>";
                          echo "<td>$row1->tax_per %</td>";
                          echo "<td><i class='fa fa-rupee-sign'></i> "; echo $ta_amt = $tx*$row1->qty;  echo "</td>";
                         
                        
                        
                          echo "<td><i class='fa fa-rupee-sign'></i>  $row1->total_price</td>";
                          echo "</tr>"; 
                    $ta_amt1= $ta_amt1+$ta_amt;
                    $g_amt1= $g_amt1+$g_amt;
                    $n_total = $n_total+$row1->total_price;
                          }
             
                        } ?>
            <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Total Product Value</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $n_total;?></td>
              </tr>
            <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Discount Amount</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $row->coupon_discount;?></td>
              </tr>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Net Total Amount</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $g_amt1 = $n_total-$row->coupon_discount;?></td>
              </tr>
              <?php
              $pay_amt_3 = round(($g_amt1*100)/( 105 ),2);
            $ta_amt1 =round($pay_amt_3*5/100,2); 
              
              ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Total Taxable Value </td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $pay_amt_3;?></td>
              </tr>
             
                   <?php
              if(strtolower($row->b_state)=='delhi') {
                ?>
                <tr>
                    <td colspan="5">&nbsp;</td>
                    <td colspan="4">CGST Amount</td>
                    <td ><i class='fa fa-rupee-sign'></i> <?php echo round($ta_amt1/2,2);?></td>
                </tr> 
                <tr>
                    <td colspan="5">&nbsp;</td>
                    <td colspan="4">SGST Amount</td>
                    <td ><i class='fa fa-rupee-sign'></i> <?php echo round($ta_amt1/2,2);?></td>
                </tr> 
                <?php 
              }else{
              ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">IGST Amount</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $ta_amt1;?></td>
              </tr>
              <?php } ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Shipping Charge</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $row->delivery_charges;?></td>
              </tr>
               <?php
              if( $row->payment_method=='COD') {
              ?>
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">COD Charge</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $row->cod_charge;?></td>
              </tr>
              <?php } ?>
             
              <tr>
                  <td colspan="5">&nbsp;</td>
                  <td colspan="4">Total Invoice Value</td>
                  <td ><i class='fa fa-rupee-sign'></i> <?php echo $total_pay_amt;?> </td>
              </tr>
                <?php 
                if($row->pay_logs){
                   ?>
                   <tr>
                     <td colspan="5"> <b>Payment Mode:</b> <?php echo $row->payment_method."(".$row->pay_status.")"; ?></td>
                     <td colspan="5" ><?php 
                     foreach(json_decode($row->pay_logs) as  $key => $r){
                         if($key=='BANKTXNID') { }else if($key=='CHECKSUMHASH') { }else if($key=='hash') { }
                         else{
                            //  echo $key;
                     echo ucfirst(str_replace('_', ' ', $key))."=>".$r."<br>";
                         }
                     } ?>  
                    
                     </td>
                 </tr> 
                   <?php 
                }
                
                ?> 
                           </table>
                     </div>
                  </div>
				</div>
			</div>
			<?php include'footer.php';?>
		</div>
	</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/jquery.dataTables.min.js"></script>
<script type="text/javascript" src="https://cdn.datatables.net/1.10.19/js/dataTables.bootstrap4.min.js"></script>
 
</body>
</html>

© 2026 GrazzMean