shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : booking_delete.php
<?php
include 'auth.php';
require_permission('bookings_delete');
include '../includes/db.php';

if (isset($_GET['id']) && isset($_GET['type'])) {
    $id = $_GET['id'];
    $type = $_GET['type'];

    $table_name = '';
    if ($type === 'visit') {
        $table_name = 'visit_reservations';
    } elseif ($type === 'maintenance') {
        $table_name = 'maintenance_reservations';
    } else {
        header("Location: bookings.php?error=نوع الحجز غير صالح");
        exit();
    }

    $stmt = $conn->prepare("DELETE FROM {$table_name} WHERE id = ?");
    $stmt->bind_param("i", $id);

    if ($stmt->execute()) {
        header("Location: bookings.php?success=تم حذف الحجز بنجاح");
    } else {
        header("Location: bookings.php?error=حدث خطأ أثناء الحذف");
    }

    $stmt->close();
    $conn->close();
} else {
    header("Location: bookings.php");
    exit();
}
?>
© 2026 GrazzMean