shell bypass 403

GrazzMean Shell

Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : header.php
<?php
if (session_status() == PHP_SESSION_NONE) {
    session_start();
}

// منع التخزين المؤقت (Cache-Control) لإجبار المتصفح على جلب الصفحة مباشرة من السيرفر
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
header("Expires: Sat, 26 Jul 1997 05:00:00 GMT");
?>
<!DOCTYPE html>
<html lang="ar" dir="rtl">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no">
    <meta name="description" content="M-AUTO - أفضل موقع لبيع وشراء السيارات في مصر. تصفح أحدث السيارات، احجز صيانة، واحسب قسط سيارتك بسهولة.">
    <meta name="keywords" content="سيارات, بيع سيارات, شراء سيارات, صيانة سيارات, قسط سيارة, M-AUTO, مصر">
    <meta name="author" content="M-AUTO">
    <meta name="robots" content="index, follow">
    
    <!-- Open Graph Meta Tags -->
    <meta property="og:title" content="M-AUTO - أفضل موقع للسيارات في مصر">
    <meta property="og:description" content="تصفح أحدث السيارات، احجز صيانة، واحسب قسط سيارتك بسهولة مع M-AUTO">
    <meta property="og:type" content="website">
    <meta property="og:url" content="<?php echo 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']; ?>">
    <meta property="og:image" content="<?php echo 'http://' . $_SERVER['HTTP_HOST']; ?>/assets/images/logo.png">
    <meta property="og:locale" content="ar_EG">
    
    <!-- Twitter Card Meta Tags -->
    <meta name="twitter:card" content="summary_large_image">
    <meta name="twitter:title" content="M-AUTO - أفضل موقع للسيارات في مصر">
    <meta name="twitter:description" content="تصفح أحدث السيارات، احجز صيانة، واحسب قسط سيارتك بسهولة">
    <meta name="twitter:image" content="<?php echo 'http://' . $_SERVER['HTTP_HOST']; ?>/assets/images/logo.png">
    
    <!-- Favicon -->
    <link rel="icon" type="image/x-icon" href="assets/images/favicon.ico">
    <link rel="apple-touch-icon" href="assets/images/logo.png">
    
    <!-- PWA Manifest -->
    <link rel="manifest" href="manifest.json">
    <meta name="theme-color" content="#ff0000">
    <meta name="mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
    <meta name="apple-mobile-web-app-title" content="M-AUTO">
    
    <title>M-AUTO - أفضل موقع للسيارات في مصر</title>
    
    <style>
    /* 
      لجعل الهيدر ثابتًا في الأعلى عند التمرير
    */
    .navbar {
        position: sticky;
        top: 0;
        z-index: 1030; /* للتأكد من أنه فوق العناصر الأخرى */
    }
    </style>
    <!-- Bootstrap 5 RTL -->
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.rtl.min.css" integrity="sha384-nU14brUcp6StFntEOOEBvcJm4huWjB0OcIeQ3fltAfSmuZFrkAif0T+UtNGlKKQv" crossorigin="anonymous">
    
    <!-- FontAwesome -->
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css" integrity="sha512-DTOQO9RWCH3ppGqcWaEA1BIZOC6xxalwEsw9c2QQeAIftl+Vegovlnee1c9QX4TctnWMn13TZye+giMm8e2LwA==" crossorigin="anonymous" referrerpolicy="no-referrer" />

    <!-- AOS Animation -->
    <link href="https://unpkg.com/aos@2.3.1/dist/aos.css" rel="stylesheet">

    <!-- Google Fonts (Cairo) -->
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Cairo:wght@300;400;700;900&display=swap" rel="stylesheet">

    <!-- Leaflet CSS for Maps -->
    <link rel="stylesheet" href="https://unpkg.com/leaflet@1.9.4/dist/leaflet.css" integrity="sha256-p4NxAoJBhIIN+hmNHrzRCf9tD/miZyoHS5obTRR9BMY=" crossorigin=""/>

    <!-- Custom CSS -->
    <link rel="stylesheet" href="assets/css/style.css">

    <?php
    include_once 'includes/db.php'; // Use the correct db file
    
    // Fetch settings
    $settings_result = $conn->query("SELECT * FROM settings");
    $site_settings = [];
    if ($settings_result) {
        while($row = $settings_result->fetch_assoc()) {
            $site_settings[$row['setting_key']] = $row['setting_value'];
        }
    }
    $logo_size = isset($site_settings['logo_size']) && is_numeric($site_settings['logo_size']) ? intval($site_settings['logo_size']) : 70;
    
    $logo_size_md = round($logo_size * 0.85);
    $logo_size_sm = round($logo_size * 0.78);
    $logo_size_xs = round($logo_size * 0.71);
    
    $pad_lg = $logo_size + 25;
    $pad_md = $logo_size_md + 25;
    $pad_sm = $logo_size_sm + 20;
    
    $sql = "SELECT css_file FROM themes WHERE is_active = 1 LIMIT 1";
    $result = $conn->query($sql);
    if ($result && $result->num_rows > 0) {
        $theme = $result->fetch_assoc();
        if (file_exists('assets/css/' . $theme['css_file'])) {
            echo '<link rel="stylesheet" href="assets/css/' . htmlspecialchars($theme['css_file']) . '">';
        }
    }
    ?>
    <style>
    /* Dynamic Logo and Header Padding Settings */
    .navbar-brand .logo {
        max-height: <?php echo $logo_size; ?>px !important;
    }
    body {
        padding-top: <?php echo $pad_lg; ?>px !important;
    }
    .hero-section {
        margin-top: -<?php echo $pad_lg; ?>px !important;
        padding-top: <?php echo $pad_lg; ?>px !important;
    }
    
    @media (max-width: 991.98px) {
        .navbar-brand .logo {
            max-height: <?php echo $logo_size_md; ?>px !important;
        }
        body {
            padding-top: <?php echo $pad_md; ?>px !important;
        }
        .hero-section {
            margin-top: -<?php echo $pad_md; ?>px !important;
            padding-top: <?php echo $pad_md; ?>px !important;
        }
    }
    
    @media (max-width: 767.98px) {
        .navbar-brand .logo {
            max-height: <?php echo $logo_size_sm; ?>px !important;
        }
        body {
            padding-top: <?php echo $pad_sm; ?>px !important;
        }
        .hero-section {
            margin-top: -<?php echo $pad_sm; ?>px !important;
            padding-top: <?php echo $pad_sm; ?>px !important;
        }
    }
    
    @media (max-width: 575.98px) {
        .navbar-brand .logo {
            max-height: <?php echo $logo_size_xs; ?>px !important;
        }
    }
    </style>
</head>
<body class="light-theme">

<nav class="navbar navbar-expand-lg navbar-dark fixed-top">
    <div class="container">
        <a class="navbar-brand d-flex align-items-center" href="index.php">
            <img src="assets/images/logo.png" alt="M-AUTO" class="logo">
        </a>
        <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarNav" aria-controls="navbarNav" aria-expanded="false" aria-label="Toggle navigation">
            <span class="navbar-toggler-icon"></span>
        </button>
        <div class="collapse navbar-collapse" id="navbarNav">
            <ul class="navbar-nav mx-auto">
                <li class="nav-item">
                    <a class="nav-link" href="index.php">الرئيسية</a>
                </li>
                <li class="nav-item">
                    <a class="nav-link" href="cars.php">السيارات</a>
                </li>
                <li class="nav-item">
                    <a class="nav-link" href="offers.php">العروض</a>
                </li>
                <li class="nav-item">
                    <a class="nav-link" href="news.php">الأخبار</a>
                </li>
                <li class="nav-item">
                    <a class="nav-link position-relative" href="compare.php">
                        <i class="fas fa-balance-scale"></i> مقارنة السيارات
                        <?php if (isset($_SESSION['compare_cars']) && !empty($_SESSION['compare_cars'])): ?>
                        <span class="position-absolute top-0 start-100 translate-middle badge rounded-pill bg-danger">
                            <?= count($_SESSION['compare_cars']) ?>
                        </span>
                        <?php endif; ?>
                    </a>
                </li>
                <li class="nav-item dropdown">
                    <a class="nav-link dropdown-toggle" href="#" id="navbarDropdownServices" role="button" data-bs-toggle="dropdown" aria-expanded="false">
                        خدماتنا
                    </a>
                    <ul class="dropdown-menu dropdown-menu-dark" aria-labelledby="navbarDropdownServices">
                        <li><a class="dropdown-item" href="maintenance.php">حجز صيانة</a></li>
                        <li><a class="dropdown-item" href="visit.php">حجز زيارة</a></li>
                        <li><a class="dropdown-item" href="calculator.php">حاسبة القسط</a></li>
                    </ul>
                </li>
                <li class="nav-item">
                    <a class="nav-link" href="branches.php">الفروع</a>
                </li>
                <li class="nav-item">
                    <a class="nav-link" href="about.php">من نحن</a>
                </li>
                <li class="nav-item">
                    <a class="nav-link" href="contact.php">اتصل بنا</a>
                </li>
            </ul>
        </div>
    </div>
</nav>
© 2026 GrazzMean