shell bypass 403

UnknownSec Shell

: /home/az2015/public_html/admin/ [ drwxr-xr-x ]
Uname: Linux gains.arrowcloudlinux.com 4.18.0-553.22.1.lve.1.el8.x86_64 #1 SMP Tue Oct 8 15:52:54 UTC 2024 x86_64
Software: Apache
PHP version: 7.4.33 [ PHP INFO ] PHP os: Linux
Server Ip: 131.153.51.35
Your Ip: 18.216.208.243
User: az2015 (2658) | Group: az2015 (2661)
Safe Mode: OFF
Disable Function:
allow_url_include,show_source,symlink,system, passthru, exec, popen, pclose, proc_open, proc_terminate, proc_get_status, proc_close, proc_nice, allow_url_fopen, shell-exec, shell_exec, fpassthru, base64_encodem, escapeshellcmd, escapeshellarg, crack_check, crack_closedict, crack_getlastmessage, crack_opendict, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, dl, escap,phpinfo

name : edit_brochure.php
<?php
session_start();
include('../include/dbconnect.php');
include('include/sessioncheck.php');
$Msg="";
	if(isset($_POST["brochure_update"])){
		$s_title=mysqli_real_escape_string($con,$_POST["title"]);
		$dis_sql="SELECT * FROM brochure WHERE bid='".$_REQUEST["edit_slid"]."'";
								$dis_exe=mysqli_query($con,$dis_sql);
								$dis_result=mysqli_fetch_array($dis_exe);
		
		
		if(empty($_FILES["pdf"]["name"]))
		{
				$pdf=$dis_slider_result["p_pdf"];
		}
		else {
			
				$img_extension1=explode('.',$_FILES["pdf"]["name"]);
				$pdf="images/pdf/"."pdf".uniqid().".".end($img_extension1);
				$move_img1=move_uploaded_file($_FILES["pdf"]["tmp_name"],"../".$pdf);
		}
		$update_slider_sql="UPDATE brochure SET btitle='".$s_title."',bpdf='".$pdf."' WHERE bid='".$_REQUEST["edit_slid"]."'";
				
				mysqli_query($con,$update_slider_sql) or die('Update Failed');
				$Msg=showSuccessAlert('Details Updated Successfully',$con);
	
}
	
?>
<!DOCTYPE html>
<html lang="en">
   <head>
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <!-- Meta, title, CSS, favicons, etc. -->
      <meta charset="utf-8">
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta name="viewport" content="width=device-width, initial-scale=1">
      <title><?php echo TITLE; ?></title>
      <!-- Bootstrap -->
      <link href="css/bootstrap.min.css" rel="stylesheet">
      <link rel="stylesheet" type="text/css" href="css/bootstrap-fileupload.css">
      <!-- Font Awesome -->
      <link rel="stylesheet" href="http://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.3/css/font-awesome.min.css">
      <link href="css/font-awesome.min.css" rel="stylesheet">
      <!-- Custom Theme Style -->
      <link href="css/custom.min.css" rel="stylesheet">
        <script src="js/jquery.js"></script>
   </head>
   <body class="nav-md">
      <div class="container body">
         <div class="main_container">
            <div class="col-md-3 left_col">
               <div class="left_col scroll-view">
              
                  <?php include('include/sidebar.php'); ?>
                  <!-- /menu footer buttons -->
                  <div class="sidebar-footer hidden-small">
                     <a data-toggle="tooltip" data-placement="top" title="Settings">
                     <span class="glyphicon glyphicon-cog" aria-hidden="true"></span>
                     </a>
                     <a data-toggle="tooltip" data-placement="top" title="FullScreen">
                     <span class="glyphicon glyphicon-fullscreen" aria-hidden="true"></span>
                     </a>
                     <a data-toggle="tooltip" data-placement="top" title="Lock">
                     <span class="glyphicon glyphicon-eye-close" aria-hidden="true"></span>
                     </a>
                     <a data-toggle="tooltip" data-placement="top" title="Logout">
                     <span class="glyphicon glyphicon-off" aria-hidden="true"></span>
                     </a>
                  </div>
                  <!-- /menu footer buttons -->
               </div>
            </div>
            <!-- top navigation -->
            <?php include('include/header.php'); ?>
            <!-- /top navigation -->
            <!-- page content -->
            <div class="right_col" role="main">
               <div class="">
                  <div class="clearfix"></div>
                  <div class="row">
                     <div class="col-md-12 col-sm-12 col-xs-12">
                        <div class="x_panel">
                           <div class="x_title">
                              <h2>Edit Brochure Details<!--<small>different form elements</small>--></h2>
                              <ul class="nav navbar-right panel_toolbox">
                                <li><a href="brochure.php" class="btn btn-success" style="color:#fff;">Go Back</a>
                                 </li>
                                 <li><a class="collapse-link"><i class="fa fa-chevron-up"></i></a>
                                 </li>
                                 <li><a class="close-link"><i class="fa fa-close"></i></a>
                                 </li>
                              </ul>
                              <div class="clearfix"></div>
                           </div>
                           <div class="x_content">
                              <br />
                              <form method="post" enctype="multipart/form-data" class="form-horizontal form-label-left">
                              <?php
								$dis_sql1="SELECT * FROM brochure WHERE bid='".$_REQUEST["edit_slid"]."'";
								$dis_exe1=mysqli_query($con,$dis_sql1);
								$dis_result1=mysqli_fetch_array($dis_exe1);
									
							?>
                                  <div class="form-group">
                                    <label class="control-label col-md-3 col-sm-3 col-xs-12">Title <span class="required">*</span>
                                    </label>
                                    <div class="col-md-4 col-sm-6 col-xs-12">
                                       <input type="text" name="title" value="<?php echo $dis_result1["btitle"]; ?>" class="form-control col-md-7 col-xs-12" required>
                                    </div>
                                 </div>
                                
                               
                            <div class="form-group">
                                <label class="col-md-3 control-label">Pdf <span class="required">*</span></label>
                                <div class="col-md-8">
                                    <div class="fileupload fileupload-new" data-provides="fileupload">
                                        <div class="fileupload-new thumbnail" style="width: 200px; height: 150px;">
                                            <img src="<?php echo "../".$dis_result1["bpdf"]; ?>" alt="" />
                                        </div>
                                        <div class="fileupload-preview fileupload-exists thumbnail" style="max-width: 200px; max-height: 150px; line-height: 20px;"></div>
                                        <div>
                                            <span class="btn btn-white btn-file">
                                                <span class="fileupload-new"><i class="fa fa-paper-clip"></i> Select image</span>
                                                <span class="fileupload-exists"><i class="fa fa-undo"></i> Change</span>
                                                <input type="file" name="pdf" accept="application/pdf" class="default" />
                                            </span>
                                            <a href="#" class="btn btn-danger fileupload-exists" data-dismiss="fileupload"><i class="fa fa-trash"></i> Remove</a>
                                        </div>
                                    </div>
                                   <!-- <span class="label label-danger">NOTE!</span>&nbsp;
                                    <span>Image Size 1920px * 889px(For better results)</span>-->
                                </div>
                            </div>
                                 
                                 <div class="ln_solid"></div>
                                 <div class="form-group">
                                    <div class="col-md-6 col-sm-6 col-xs-12 col-md-offset-3">
                                       <button type="submit" class="btn btn-primary">Cancel</button>
                                       <button type="submit" name="brochure_update" class="btn btn-success">Update</button>
                                    </div>
                                 </div>
                              </form>
                           </div>
                        </div>
                     </div>
                  </div>
           <?php include('include/footer.php'); ?>
         </div>
      </div>
      <!-- jQuery -->
    
     <script src="js/jquery.min.js"></script>
       <script src="js/bootstrap.min.js"></script>
      <script src="validate/parsley.min.js"></script>
       <script src="js/jquery.js"></script>
      <script src="js/jquery-1.8.3.min.js"></script>
      <!-- Bootstrap -->
      <script type="text/javascript" src="js/bootstrap-fileupload.js"></script>
      <script src="js/bootstrap.min.js"></script>
       <script type="text/javascript" src="js/ckeditor/ckeditor.js"></script>
      <script src="js/moment.min.js"></script>
      <script src="js/daterangepicker.js"></script>
      <!-- Custom Theme Scripts -->
      <script src="js/custom.min.js"></script>
   </body>
</html>

© 2024 UnknownSec