shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/ajax/ [ drwxr-xr-x ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : compare_handler.php
<?php
session_start();
header('Content-Type: application/json');

// Initialize comparison list if not exists
if (!isset($_SESSION['compare_cars'])) {
    $_SESSION['compare_cars'] = [];
}

$response = ['success' => false, 'message' => '', 'count' => 0];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';
    $car_id = (int)($_POST['car_id'] ?? 0);
    
    switch ($action) {
        case 'add':
            if (count($_SESSION['compare_cars']) >= 5) {
                $response['message'] = 'لا يمكن إضافة أكثر من 5 سيارات للمقارنة';
            } elseif (in_array($car_id, $_SESSION['compare_cars'])) {
                $response['message'] = 'السيارة موجودة بالفعل في قائمة المقارنة';
            } else {
                $_SESSION['compare_cars'][] = $car_id;
                $response['success'] = true;
                $response['message'] = 'تم إضافة السيارة للمقارنة بنجاح';
            }
            break;
            
        case 'remove':
            $_SESSION['compare_cars'] = array_filter($_SESSION['compare_cars'], function($id) use ($car_id) {
                return $id != $car_id;
            });
            $_SESSION['compare_cars'] = array_values($_SESSION['compare_cars']);
            $response['success'] = true;
            $response['message'] = 'تم إزالة السيارة من المقارنة';
            break;
            
        case 'clear':
            $_SESSION['compare_cars'] = [];
            $response['success'] = true;
            $response['message'] = 'تم مسح جميع السيارات من المقارنة';
            break;
            
        case 'get_count':
            $response['success'] = true;
            $response['message'] = 'تم جلب العدد بنجاح';
            break;
            
        default:
            $response['message'] = 'إجراء غير صحيح';
    }
    
    $response['count'] = count($_SESSION['compare_cars']);
    $response['cars'] = $_SESSION['compare_cars'];
}

echo json_encode($response, JSON_UNESCAPED_UNICODE);
?>
© 2026 GrazzMean