shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : dashboard.php
<?php include 'includes/header.php'; ?>

<?php
// Fetch all settings
$settings_result = $conn->query("SELECT * FROM settings");
$settings = [];
while($row = $settings_result->fetch_assoc()) {
    $settings[$row['setting_key']] = $row['setting_value'];
}
// Fetch stats - Placeholders for now, will be dynamic later
$cars_count = $conn->query("SELECT COUNT(id) as count FROM cars")->fetch_assoc()['count'];
$branches_count = $conn->query("SELECT COUNT(id) as count FROM branches")->fetch_assoc()['count'];
$visits_count = $conn->query("SELECT COUNT(id) as count FROM visit_reservations")->fetch_assoc()['count'];
$maintenance_count = $conn->query("SELECT COUNT(id) as count FROM maintenance_reservations")->fetch_assoc()['count'];
?>

<!-- Site Information Section -->
<div class="row mb-4">
    <div class="col-12">
        <div class="glass-card p-4">
            <h4 class="mb-3"><i class="fas fa-info-circle me-2"></i>معلومات الموقع</h4>
            <div class="row">
                <div class="col-md-6">
                    <p><strong>اسم الموقع:</strong> <?= htmlspecialchars($settings['site_title'] ?? 'غير محدد') ?></p>
                    <p><strong>البريد الإلكتروني:</strong> <?= htmlspecialchars($settings['contact_email'] ?? 'غير محدد') ?></p>
                </div>
                <div class="col-md-6">
                    <p><strong>رقم الهاتف:</strong> <?= htmlspecialchars($settings['contact_phone'] ?? 'غير محدد') ?></p>
                    <p><strong>العنوان:</strong> <?= htmlspecialchars($settings['contact_address'] ?? 'غير محدد') ?></p>
                </div>
            </div>
        </div>
    </div>
</div>

<div class="row g-4">
    <div class="col-md-3">
        <div class="p-4 glass-card text-center">
            <i class="fas fa-car fs-1 primary-text"></i>
            <h3 class="fs-2 mt-2"><?= $cars_count ?></h3>
            <p class="fs-5">سيارة معروضة</p>
        </div>
    </div>
    <div class="col-md-3">
        <div class="p-4 glass-card text-center">
            <i class="fas fa-map-marked-alt fs-1 primary-text"></i>
            <h3 class="fs-2 mt-2"><?= $branches_count ?></h3>
            <p class="fs-5">فرع</p>
        </div>
    </div>
    <div class="col-md-3">
        <div class="p-4 glass-card text-center">
            <i class="fas fa-calendar-check fs-1 primary-text"></i>
            <h3 class="fs-2 mt-2"><?= $visits_count ?></h3>
            <p class="fs-5">حجز زيارة</p>
        </div>
    </div>
    <div class="col-md-3">
        <div class="p-4 glass-card text-center">
            <i class="fas fa-tools fs-1 primary-text"></i>
            <h3 class="fs-2 mt-2"><?= $maintenance_count ?></h3>
            <p class="fs-5">طلب صيانة</p>
        </div>
    </div>
</div>

<div class="row my-5">
    <h3 class="fs-4 mb-3">آخر الحجوزات</h3>
    <div class="col">
        <div class="glass-card p-3">
            <table class="table table-dark table-hover">
                <thead>
                    <tr>
                        <th scope="col">#</th>
                        <th scope="col">الاسم</th>
                        <th scope="col">الهاتف</th>
                        <th scope="col">نوع الحجز</th>
                        <th scope="col">التاريخ</th>
                    </tr>
                </thead>
                <tbody>
                    <?php
                    // Fetch latest 5 reservations (visits and maintenance)
                    $sql = "(SELECT id, name, phone, 'زيارة فرع' as type, visit_date as date FROM visit_reservations ORDER BY created_at DESC LIMIT 3) 
                            UNION ALL 
                            (SELECT id, name, phone, 'طلب صيانة' as type, reservation_date as date FROM maintenance_reservations ORDER BY created_at DESC LIMIT 2) 
                            ORDER BY date DESC";
                    $result = $conn->query($sql);
                    if ($result->num_rows > 0) {
                        while($row = $result->fetch_assoc()) {
                            echo "<tr>";
                            echo "<td>" . $row["id"] . "</td>";
                            echo "<td>" . htmlspecialchars($row["name"]) . "</td>";
                            echo "<td>" . htmlspecialchars($row["phone"]) . "</td>";
                            echo "<td><span class='badge bg-primary'>" . $row["type"] . "</span></td>";
                            echo "<td>" . $row["date"] . "</td>";
                            echo "</tr>";
                        }
                    } else {
                        echo "<tr><td colspan='5' class='text-center'>لا توجد حجوزات حالياً.</td></tr>";
                    }
                    ?>
                </tbody>
            </table>
        </div>
    </div>
</div>

<?php include 'includes/footer.php'; ?>
© 2026 GrazzMean