shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : theme_delete.php
<?php
include 'includes/header.php';

if (!has_permission('themes_view')) { // Assuming 'themes_view' is the permission to manage themes
    echo "<div class='alert alert-danger'>ليس لديك الصلاحية للقيام بهذه العملية.</div>";
    include 'includes/footer.php';
    exit;
}

if (isset($_GET['id'])) {
    $id = $_GET['id'];

    // Make sure the theme is not active before deleting
    $stmt = $conn->prepare("SELECT `is_active` FROM `themes` WHERE `id` = ?");
    $stmt->bind_param('i', $id);
    $stmt->execute();
    $result = $stmt->get_result();
    $theme = $result->fetch_assoc();

    if ($theme && $theme['is_active']) {
        echo "<div class='alert alert-danger'>لا يمكن حذف الثيم النشط.</div>";
    } else {
        $stmt = $conn->prepare("DELETE FROM `themes` WHERE `id` = ?");
        $stmt->bind_param('i', $id);
        if ($stmt->execute()) {
            echo "<div class='alert alert-success'>تم حذف الثيم بنجاح.</div>";
        } else {
            echo "<div class='alert alert-danger'>حدث خطأ أثناء حذف الثيم.</div>";
        }
    }
    echo '<a href="themes.php" class="btn btn-secondary">العودة إلى قائمة الثيمات</a>';
} else {
    header('Location: themes.php');
}

include 'includes/footer.php';
?>
© 2026 GrazzMean