shell bypass 403

GrazzMean Shell

Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : header.php
<?php 
include_once 'auth.php'; 
include '../includes/db_production.php';
?>
<!DOCTYPE html>
<html lang="ar" dir="rtl">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>لوحة التحكم</title>
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.rtl.min.css">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
    <link href="https://fonts.googleapis.com/css2?family=Cairo:wght@400;600;700&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="https://unpkg.com/leaflet@1.9.4/dist/leaflet.css" />
    <link rel="stylesheet" href="assets/css/admin_style.css">
</head>
<body>

<div class="d-flex" id="wrapper">
    <!-- Sidebar -->
    <div class="bg-dark" id="sidebar-wrapper">
        <div class="sidebar-heading text-center py-4 primary-text fs-4 fw-bold text-uppercase border-bottom">
            <i class="fas fa-car-side me-2"></i>M-AUTO
        </div>
        <div class="list-group list-group-flush my-3">
            <a href="dashboard.php" class="list-group-item list-group-item-action bg-transparent second-text active"><i class="fas fa-tachometer-alt me-2"></i>لوحة التحكم</a>
            
            <?php if (has_permission('users_view')) : ?>
            <a href="users.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-users-cog me-2"></i>إدارة المستخدمين</a>
            <?php endif; ?>

            <?php if (has_permission('cars_view')) : ?>
            <a href="cars.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-car me-2"></i>إدارة السيارات</a>
            <?php endif; ?>

            <?php if (has_permission('brands_view')) : ?>
            <a href="brands.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-copyright me-2"></i>إدارة الماركات</a>
            <?php endif; ?>

            <?php if (has_permission('categories_view')) : ?>
            <a href="categories.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-sitemap me-2"></i>إدارة الفئات</a>
            <?php endif; ?>

            <?php if (has_permission('branches_view')) : ?>
            <a href="branches.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-map-marked-alt me-2"></i>إدارة الفروع</a>
            <?php endif; ?>

            <?php if (has_permission('bookings_view')) : ?>
            <a href="bookings.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-calendar-check me-2"></i>الحجوزات</a>
            <?php endif; ?>

            <?php if (has_permission('slider_view')) : ?>
            <a href="slider.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-images me-2"></i>إدارة السلايدر</a>
            <?php endif; ?>

            <?php if (has_permission('offers_view')) : ?>
            <a href="offers.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-tags me-2"></i>إدارة العروض</a>
            <?php endif; ?>

            <?php if (has_permission('videos_view')) : ?>
            <a href="videos.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-video me-2"></i>إدارة الفيديوهات</a>
            <?php endif; ?>

            <?php if (has_permission('news_view')) : ?>
            <a href="news.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-newspaper me-2"></i>إدارة الأخبار</a>
            <?php endif; ?>

            <?php if (has_permission('settings_view')) : ?>
            <a href="settings.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-cog me-2"></i>الإعدادات</a>
            <?php endif; ?>

            <?php if (has_permission('about_page_edit')) : ?>
            <a href="about_edit.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-address-card me-2"></i>تعديل صفحة من نحن</a>
            <?php endif; ?>

            <?php if (has_permission('themes_view')) : ?>
            <a href="themes.php" class="list-group-item list-group-item-action bg-transparent second-text fw-bold"><i class="fas fa-palette me-2"></i>إدارة الثيمات</a>
            <?php endif; ?>

            <a href="logout.php" class="list-group-item list-group-item-action bg-transparent text-danger fw-bold"><i class="fas fa-power-off me-2"></i>تسجيل الخروج</a>
        </div>
    </div>
    <!-- /#sidebar-wrapper -->

    <!-- Page Content -->
    <div id="page-content-wrapper">
        <nav class="navbar navbar-expand-lg navbar-light bg-transparent py-4 px-4">
            <div class="d-flex align-items-center">
                <i class="fas fa-align-left primary-text fs-4 me-3" id="menu-toggle"></i>
                <h2 class="fs-2 m-0">لوحة التحكم</h2>
            </div>

            <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
                <span class="navbar-toggler-icon"></span>
            </button>

            <div class="collapse navbar-collapse" id="navbarSupportedContent">
                <ul class="navbar-nav ms-auto mb-2 mb-lg-0">
                    <li class="nav-item dropdown">
                        <a class="nav-link dropdown-toggle second-text fw-bold" href="#" id="navbarDropdown" role="button" data-bs-toggle="dropdown" aria-expanded="false">
                            <i class="fas fa-user me-2"></i><?php echo htmlspecialchars($_SESSION['username']); ?>
                        </a>
                        <ul class="dropdown-menu" aria-labelledby="navbarDropdown">
                            <li><a class="dropdown-item" href="#">الملف الشخصي</a></li>
                            <li><a class="dropdown-item" href="logout.php">تسجيل الخروج</a></li>
                        </ul>
                    </li>
                </ul>
            </div>
        </nav>

        <div class="container-fluid px-4">
© 2026 GrazzMean