shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : home_result.php
<?php
//function autoload
       spl_autoload_register(function($class) {
  include("../admin_login/classess/".$class.".php");
});
        
        $sqlfun = new sqlfunction();
        $admin = new admin_login();
        if(isset($_POST['cred']) && $_POST['cred'] == "yes")
        {
            if(isset($_POST['token'])  && isset($_POST['pin']))
                    {
                            $deviceToken = $_POST['token'];
                            $secretKey = $_POST['pin'];
                            $mble = $_POST['mble'];
                            // $pswd = $_POST['pswd'];
                            $p_id = $admin->verifyCredentials3($deviceToken, $secretKey,$mble);
                            if($p_id)
                            {
                                $check = $sqlfun->query("SELECT 
    g.g_id,
    g.g_name AS Gamename,
    COALESCE(today_results.result, 'XX') AS today_result,
    g.result_time AS today_result_time,
    COALESCE(today_results.result_year, EXTRACT(YEAR FROM CURRENT_DATE)) AS today_result_year,
    COALESCE(yesterday_results.result, 'XX') AS yesterday_result,
    g.result_time AS yesterday_result_time,
    COALESCE(yesterday_results.result_year, EXTRACT(YEAR FROM CURRENT_DATE - INTERVAL 1 DAY)) AS yesterday_result_year
FROM 
    game g
LEFT JOIN 
    (
        SELECT 
            g.g_id,
            COALESCE(r.result, 'XX') AS result,
            EXTRACT(YEAR FROM CURRENT_DATE) AS result_year
        FROM 
            game g
        LEFT JOIN 
            result r ON g.g_id = r.game_id AND r.date = CURRENT_DATE
    ) today_results ON g.g_id = today_results.g_id
LEFT JOIN 
    (
        SELECT 
            g.g_id,
            COALESCE(r.result, 'XX') AS result,
            EXTRACT(YEAR FROM CURRENT_DATE - INTERVAL 1 DAY) AS result_year
        FROM 
            game g
        LEFT JOIN 
            result r ON g.g_id = r.game_id AND r.date = CURRENT_DATE - INTERVAL 1 DAY
    ) yesterday_results ON g.g_id = yesterday_results.g_id  
ORDER BY `yesterday_result`  DESC");
                                while($row= $check->fetch(PDO::FETCH_OBJ))
                                {
                                    $res[] = array("g_id"=>$row->g_id,"Gamename"=>$row->Gamename,"resultt"=>$row->today_result,"resulttime"=>$row->today_result_time,"resulty"=>$row->yesterday_result);
                                }
                                
                                $cnd_pid = "p_id = '$p_id'";
                                $check_pid = $sqlfun->fetchdata("player",$cnd_pid);
                                $row_pid = $check_pid->fetch(PDO::FETCH_OBJ);
                               $json = array("Balance"=>$row_pid->wallet,"Results"=>$res);
                            }
                    }
        }
        else
        {
            $check = $sqlfun->query("SELECT 
    g.g_id,
    g.g_name AS Gamename,
    COALESCE(today_results.result, 'XX') AS today_result,
    g.result_time AS today_result_time,
    COALESCE(today_results.result_year, EXTRACT(YEAR FROM CURRENT_DATE)) AS today_result_year,
    COALESCE(yesterday_results.result, 'XX') AS yesterday_result,
    g.result_time AS yesterday_result_time,
    COALESCE(yesterday_results.result_year, EXTRACT(YEAR FROM CURRENT_DATE - INTERVAL 1 DAY)) AS yesterday_result_year
FROM 
    game g
LEFT JOIN 
    (
        SELECT 
            g.g_id,
            COALESCE(r.result, 'XX') AS result,
            EXTRACT(YEAR FROM CURRENT_DATE) AS result_year
        FROM 
            game g
        LEFT JOIN 
            result r ON g.g_id = r.game_id AND r.date = CURRENT_DATE
    ) today_results ON g.g_id = today_results.g_id
LEFT JOIN 
    (
        SELECT 
            g.g_id,
            COALESCE(r.result, 'XX') AS result,
            EXTRACT(YEAR FROM CURRENT_DATE - INTERVAL 1 DAY) AS result_year
        FROM 
            game g
        LEFT JOIN 
            result r ON g.g_id = r.game_id AND r.date = CURRENT_DATE - INTERVAL 1 DAY
    ) yesterday_results ON g.g_id = yesterday_results.g_id  
ORDER BY `yesterday_result`  DESC");
                                while($row= $check->fetch(PDO::FETCH_OBJ))
                                {
                                    $res[] = array("g_id"=>$row->g_id,"Gamename"=>$row->Gamename,"resultt"=>$row->today_result,"resulttime"=>$row->today_result_time,"resulty"=>$row->yesterday_result);
                                }
                                $row_pid->wallet = "0";
                                // $cnd_pid = "p_id = '$p_id'";
                                // $check_pid = $sqlfun->fetchdata("player",$cnd_pid);
                                // $row_pid = $check_pid->fetch(PDO::FETCH_OBJ);
                                $json = array("Balance"=>$row_pid->wallet,"Results"=>$res);
        }
        
        echo json_encode($json);
        ?>
© 2026 GrazzMean