shell bypass 403

GrazzMean Shell

: /home/gutlooks/www/application/views/home/ [ drwxr-xr-x ]
Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : thank-you.php
 
		<?php $this->load->view('home/header');?>
    <section class="checkout-block">
          <div class="container">
             <div class="row">
                 <div class="col-md-8">
                   <div class="checkout-left shadow-sm">
                      <div class="login-detail-checkout">
                         <h4>Thank You for your order <i class="fa fa-check-circle"></i></h4>
                         <?php
                          $order_res= $this->Curd->fetch_where_order_limit("tb_order",array("*"),array("user_id"=>$_SESSION['user_id']),"DESC","1");
                        foreach($order_res as $re) {}
                         
                        //   print_r($order_res);
                         ?>
                         <p>“your order successfully placed with us and your order id is <?php  echo $re->order_no; ?>”</p>
                         <a class="btn btn-primary" href="<?=base_url()?>">Continue Shopping</a>
                         <a class="btn btn-warning" href="<?=base_url('home/order')?>">Order</a>
                       </div>
                   </div>
                 </div>
             </div>
          </div>
       </section>
    <?php $this->load->view('home/footer');?>
  </div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('assets/js/bootstrap.min.js')?>"></script>
<script src="<?=base_url('assets/owlcarousel/owl.carousel.js')?>"></script>
<script type="text/javascript" src="<?=base_url('assets/js/custom.js')?>"></script>
<script type="text/javascript">
  $(".change-address").click(function(){
      $(".address-change-form").show();
      $(".payment-block").hide();
  })

  $(".cancel-btn").click(function(){
      $(".payment-block").show();
      $(".address-change-form").hide();
  })
</script>
<script>
jQuery(document).ready(function () {
        jQuery('#datepicker').datepicker({
            format: 'dd-mm-yyyy',
            startDate: '+1d'
        });
    });
</script>
</body>
</html>
© 2026 GrazzMean