shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : brand_delete.php
<?php
include 'auth.php';
require_permission('brands_delete');
include '../includes/db.php';

if (isset($_GET['id'])) {
    $id = $_GET['id'];

    // Get logo filename
    $stmt_select = $conn->prepare("SELECT logo FROM brands WHERE id = ?");
    $stmt_select->bind_param("i", $id);
    $stmt_select->execute();
    $result = $stmt_select->get_result();
    
    if ($result->num_rows === 1) {
        $brand = $result->fetch_assoc();
        $logo_to_delete = $brand['logo'];

        // Delete DB record
        $stmt_delete = $conn->prepare("DELETE FROM brands WHERE id = ?");
        $stmt_delete->bind_param("i", $id);

        if ($stmt_delete->execute()) {
            // Delete logo file
            if (!empty($logo_to_delete) && file_exists('../uploads/brands/' . $logo_to_delete)) {
                unlink('../uploads/brands/' . $logo_to_delete);
            }
            header("Location: brands.php?success=تم حذف الماركة بنجاح");
        } else {
            header("Location: brands.php?error=حدث خطأ أثناء الحذف");
        }
        $stmt_delete->close();
    } else {
        header("Location: brands.php?error=لم يتم العثور على الماركة");
    }
    $stmt_select->close();
    $conn->close();
} else {
    header("Location: brands.php");
    exit();
}
?>
© 2026 GrazzMean