shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : slider_delete.php
<?php
include 'auth.php';
require_permission('slider_delete');
include '../includes/db.php';

if (isset($_GET['id'])) {
    $id = $_GET['id'];

    // Get image filename
    $stmt_select = $conn->prepare("SELECT image_path FROM slider WHERE id = ?");
    $stmt_select->bind_param("i", $id);
    $stmt_select->execute();
    $result = $stmt_select->get_result();
    
    if ($result->num_rows === 1) {
        $slide = $result->fetch_assoc();
        $image_to_delete = $slide['image_path'];

        // Delete DB record
        $stmt_delete = $conn->prepare("DELETE FROM slider WHERE id = ?");
        $stmt_delete->bind_param("i", $id);

        if ($stmt_delete->execute()) {
            // Delete image file
            if (!empty($image_to_delete) && file_exists('../uploads/slider/' . $image_to_delete)) {
                unlink('../uploads/slider/' . $image_to_delete);
            }
            header("Location: slider.php?success=تم حذف الشريحة بنجاح");
        } else {
            header("Location: slider.php?error=حدث خطأ أثناء الحذف");
        }
        $stmt_delete->close();
    } else {
        header("Location: slider.php?error=لم يتم العثور على الشريحة");
    }
    $stmt_select->close();
    $conn->close();
} else {
    header("Location: slider.php");
    exit();
}
?>
© 2026 GrazzMean