shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : wallet_balance.php
<?php
//function autoload
       spl_autoload_register(function($class) {
  include("../admin_login/classess/".$class.".php");
});
        
        $sqlfun = new sqlfunction();
        $admin = new admin_login();
        $objj = new stdClass();
         if(isset($_POST['pin']) && isset($_POST['token']) && isset($_POST['mble']))
         {
             $deviceToken = $_POST['token'];
             $secretKey = $_POST['pin'];
             $mble = $_POST['mble'];
             $p_id = $admin->verifyCredentials3($deviceToken, $secretKey,$mble);
                    if($p_id)
                    {
                        $cnd = "p_mobile = '$mble'";
                        $check = $sqlfun->fetchdata("player",$cnd);
                        if($check->rowCount() > 0)
                        {
                             $row = $check->fetch(PDO::FETCH_OBJ);
                             $objj->jodi_rate = $row->rate;
                             $objj->haruf_rate = $row->haruf_rate;
                             $objj->wallet = $row->wallet;
                             
                             echo json_encode(array("res"=>"success","msg"=>"data found","data"=>$objj));
                        }
                        else
                        {
                            echo json_encode(array("res"=>"failure","msg"=>"data not found","data"=>""));
                        }
                    }
                    else
                    {
                         echo json_encode(array("res"=>"failure","msg"=>"cred not valid","data"=>""));
                    }
         }
         else
         {
              echo json_encode(array("res"=>"failure","msg"=>"param not found","data"=>""));
         }
        
        ?>
© 2026 GrazzMean