shell bypass 403

GrazzMean Shell

: /var/www/vhosts/m-auto.co/httpdocs/ [ drwxr-x--- ]
Uname: Linux serv.m-auto.co 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
Software: nginx/1.28.2
PHP version: 8.1.34 [ PHP INFO ] PHP os: Linux
Server Ip: 41.215.243.19
Your Ip: 216.73.216.151
User: m-auto.co_vxasg6smqe (10000) | Group: psacln (1003)
Safe Mode: OFF
Disable Function:
opcache_get_status,mail

name : visit_process.php
<?php
include 'includes/db.php';
include 'includes/odoo_api.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    // Sanitize and validate input
    $name = trim(filter_input(INPUT_POST, 'name', FILTER_SANITIZE_STRING));
    $phone = trim(filter_input(INPUT_POST, 'phone', FILTER_SANITIZE_STRING));
    $branch_id = filter_input(INPUT_POST, 'branch_id', FILTER_VALIDATE_INT);
    $visit_date = $_POST['visit_date'];

    // Basic validation check
    if (empty($name) || empty($phone) || !$branch_id || empty($visit_date)) {
        header("Location: visit.php?status=error");
        exit();
    }

    // Get branch name
    $branch_stmt = $conn->prepare("SELECT name FROM branches WHERE id = ?");
    $branch_stmt->bind_param("i", $branch_id);
    $branch_stmt->execute();
    $branch_result = $branch_stmt->get_result();
    $branch_name = '';
    if ($branch_row = $branch_result->fetch_assoc()) {
        $branch_name = $branch_row['name'];
    }
    $branch_stmt->close();

    // Prepare and bind
    $stmt = $conn->prepare("INSERT INTO visit_reservations (name, phone, branch_id, visit_date) VALUES (?, ?, ?, ?)");
    $stmt->bind_param("ssis", $name, $phone, $branch_id, $visit_date);

    if ($stmt->execute()) {
        // Send data to Odoo CRM
        try {
            $odoo = new OdooAPI();
            
            // Prepare lead data for Odoo
            $leadData = [
                'name' => 'حجز زيارة - ' . $name,
                'contact_name' => $name,
                'phone' => $phone,
                'description' => "حجز زيارة إلى فرع: {$branch_name}\nتاريخ الزيارة: {$visit_date}",
                'source' => OdooConfig::LEAD_SOURCE_WEBSITE_VISIT,
                'branch_name' => $branch_name,
                'visit_date' => $visit_date
            ];
            
            // Create lead in Odoo
            $leadId = $odoo->createLead($leadData);
            
            if ($leadId) {
                // Create follow-up activity
                $odoo->createActivity(
                    $leadId, 
                    1, // Default activity type (adjust as needed)
                    'متابعة حجز الزيارة',
                    "العميل {$name} حجز زيارة إلى فرع {$branch_name} في تاريخ {$visit_date}"
                );
            }
        } catch (Exception $e) {
            // Log error but don't fail the booking
            error_log('Odoo integration error for visit booking: ' . $e->getMessage());
        }
        
        header("Location: visit.php?status=success");
    } else {
        header("Location: visit.php?status=error");
    }

    $stmt->close();
    $conn->close();
} else {
    header("Location: visit.php");
    exit();
}
?>
© 2026 GrazzMean