shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/admin/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : theme_process.php
<?php
include 'includes/header.php';

if (!has_permission('themes_view')) { // Assuming 'themes_view' is the permission to manage themes
    echo "<div class='alert alert-danger'>ليس لديك الصلاحية للقيام بهذه العملية.</div>";
    include 'includes/footer.php';
    exit;
}

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $id = $_POST['id'];
    $name = $_POST['name'];
    $css_file = $_POST['css_file'];

    if (empty($name) || empty($css_file)) {
        echo "<div class='alert alert-danger'>يرجى ملء جميع الحقول.</div>";
    } else {
        if (empty($id)) {
            // Add new theme
            $stmt = $conn->prepare("INSERT INTO `themes` (`name`, `css_file`) VALUES (?, ?)");
            $stmt->bind_param('ss', $name, $css_file);
            if ($stmt->execute()) {
                echo "<div class='alert alert-success'>تمت إضافة الثيم بنجاح.</div>";
            } else {
                echo "<div class='alert alert-danger'>حدث خطأ أثناء إضافة الثيم.</div>";
            }
        } else {
            // Update existing theme
            $stmt = $conn->prepare("UPDATE `themes` SET `name` = ?, `css_file` = ? WHERE `id` = ?");
            $stmt->bind_param('ssi', $name, $css_file, $id);
            if ($stmt->execute()) {
                echo "<div class='alert alert-success'>تم تحديث الثيم بنجاح.</div>";
            } else {
                echo "<div class='alert alert-danger'>حدث خطأ أثناء تحديث الثيم.</div>";
            }
        }
    }
    echo '<a href="themes.php" class="btn btn-secondary">العودة إلى قائمة الثيمات</a>';
} else {
    header('Location: themes.php');
}

include 'includes/footer.php';
?>
© 2026 GrazzMean