shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : bookings.php
<?php
include 'auth.php';
require_permission('bookings_view');
include 'includes/header.php';
?>

<h3 class="fs-4 mb-4">إدارة الحجوزات</h3>

<!-- Visit Reservations -->
<div class="row mb-5">
    <div class="col">
        <h4>حجوزات زيارة الفروع</h4>
        <div class="glass-card p-3">
            <table class="table table-dark table-hover align-middle">
                <thead>
                    <tr>
                        <th scope="col">#</th>
                        <th scope="col">الاسم</th>
                        <th scope="col">الهاتف</th>
                        <th scope="col">الفرع</th>
                        <th scope="col">تاريخ الزيارة</th>
                        <th scope="col">الإجراءات</th>
                    </tr>
                </thead>
                <tbody>
                    <?php
                    $sql_visits = "SELECT v.id, v.name, v.phone, v.visit_date, b.name as branch_name 
                                   FROM visit_reservations v 
                                   LEFT JOIN branches b ON v.branch_id = b.id 
                                   ORDER BY v.created_at DESC";
                    $result_visits = $conn->query($sql_visits);
                    if ($result_visits->num_rows > 0) {
                        while($row = $result_visits->fetch_assoc()) {
                            echo "<tr>";
                            echo "<th scope='row'>" . $row["id"] . "</th>";
                            echo "<td>" . htmlspecialchars($row["name"]) . "</td>";
                            echo "<td>" . htmlspecialchars($row["phone"]) . "</td>";
                            echo "<td>" . htmlspecialchars($row["branch_name"] ?? 'N/A') . "</td>";
                            echo "<td>" . htmlspecialchars($row["visit_date"]) . "</td>";
                            echo "<td>
                                    <a href='booking_delete.php?id=" . $row["id"] . "&type=visit' class='btn btn-danger btn-sm' onclick='return confirm(\"هل أنت متأكد من حذف هذا الحجز؟\");'><i class='fas fa-trash'></i></a>
                                  </td>";
                            echo "</tr>";
                        }
                    } else {
                        echo "<tr><td colspan='6' class='text-center'>لا توجد حجوزات زيارة حالياً.</td></tr>";
                    }
                    ?>
                </tbody>
            </table>
        </div>
    </div>
</div>

<!-- Maintenance Reservations -->
<div class="row">
    <div class="col">
        <h4>طلبات الصيانة</h4>
        <div class="glass-card p-3">
            <table class="table table-dark table-hover align-middle">
                <thead>
                    <tr>
                        <th scope="col">#</th>
                        <th scope="col">الاسم</th>
                        <th scope="col">الهاتف</th>
                        <th scope="col">بيانات السيارة</th>
                        <th scope="col">نوع الخدمة</th>
                        <th scope="col">الفرع</th>
                        <th scope="col">التاريخ</th>
                        <th scope="col">الإجراءات</th>
                    </tr>
                </thead>
                <tbody>
                     <?php
                    $sql_maintenance = "SELECT m.id, m.name, m.phone, m.car_info, m.service_type, m.reservation_date, b.name as branch_name 
                                        FROM maintenance_reservations m
                                        LEFT JOIN branches b ON m.branch_id = b.id 
                                        ORDER BY m.created_at DESC";
                    $result_maintenance = $conn->query($sql_maintenance);
                    if ($result_maintenance->num_rows > 0) {
                        while($row = $result_maintenance->fetch_assoc()) {
                            echo "<tr>";
                            echo "<th scope='row'>" . $row["id"] . "</th>";
                            echo "<td>" . htmlspecialchars($row["name"]) . "</td>";
                            echo "<td>" . htmlspecialchars($row["phone"]) . "</td>";
                            echo "<td>" . htmlspecialchars($row["car_info"]) . "</td>";
                            echo "<td>" . htmlspecialchars($row["service_type"]) . "</td>";
                            echo "<td>" . htmlspecialchars($row["branch_name"] ?? 'N/A') . "</td>";
                            echo "<td>" . htmlspecialchars($row["reservation_date"]) . "</td>";
                            echo "<td>
                                    <a href='booking_delete.php?id=" . $row["id"] . "&type=maintenance' class='btn btn-danger btn-sm' onclick='return confirm(\"هل أنت متأكد من حذف هذا الحجز؟\");'><i class='fas fa-trash'></i></a>
                                  </td>";
                            echo "</tr>";
                        }
                    } else {
                        echo "<tr><td colspan='8' class='text-center'>لا توجد طلبات صيانة حالياً.</td></tr>";
                    }
                    ?>
                </tbody>
            </table>
        </div>
    </div>
</div>

<?php include 'includes/footer.php'; ?>
© 2026 GrazzMean