shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : ReviewSettingsController.php
<?php

namespace App\Http\Controllers\addons;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Models\Ratting;
use App\Helpers\helper;
use App\Models\Item;
use App\Models\About;
use Illuminate\Support\Facades\Auth;

class ReviewSettingsController extends Controller
{

    public function postreview(Request $request)
    {
        $rattingcount = Ratting::where('user_id', @Auth::user()->id)->where('item_id', $request->review_item)->count();
        if ($rattingcount == 0) {
            $review = new Ratting();
            $review->user_id = @Auth::user()->id;
            $review->item_id = $request->review_item;
            $review->star = $request->ratting;
            $review->description = $request->review == null ? '-' : $request->review;
            if (helper::appdata()->review_approved_status == 1) {
                if (in_array($request->ratting, explode(',', helper::appdata()->review_auto_approved))) {
                    $review->status = 1;
                } else {
                    $review->status = 2;
                }
            } else {
                $review->status = 2;
            }
            if ($review->save()) {
                $product = Item::where('id', $request->review_item)->first();
                $product->avg_ratting = number_format(Ratting::where('item_id', $request->review_item)->where('status', 1)->avg('star'), 1);
                $product->save();
            }
            return redirect()->back()->with('success', trans('messages.success'));
        } else {
            return redirect()->back()->with('error', trans('messages.post_review_message'));
        }
    }

    public function settings_update(Request $request)
    {
        if ($request->review_setting_update) {
            $about = About::first();
            if (empty($about)) {
                $about = new About();
            }
            if ($request->review_approved_status == null) {
                $review_approved_data = $about->review_auto_approved;
            } else {
                $review_approved_data = null;
            }

            $about->review_auto_approved = $request->review_auto_approved == null ? $review_approved_data : implode(',', $request->review_auto_approved);
            $about->review_approved_status =  $request->review_approved_status == null || $request->review_auto_approved == null ? 2 : $request->review_approved_status;

            $about->save();
        }
        return redirect('admin/settings')->with('success', trans('messages.success'));
    }
    public function index(Request $request)
    {

        $getreview = Ratting::with('user_info', 'item_info')->where('user_id', '!=', '1')->where('item_id', '!=', 'null');
        $sorter = $request->get('item_id');
        if (!empty($sorter)) {
            $getreview->where('item_id', $sorter);
        }
        $getreview = $getreview->orderBydesc('id')->get();
        $reviewdata = Ratting::where('user_id', '!=', '1')->where('item_id', '!=', 'null')->groupBy('item_id')->get();
        $getproduct = [];
        foreach ($reviewdata as $review) {
            $product = Item::select('id', 'item_name')->where('id', $review->item_id)->orderBydesc('id')->first();
            $getproduct[] = $product;
        }
        return view('admin.product_review.index', compact('getreview', 'sorter', 'getproduct'));
    }
    public function destroy(Request $request)
    {
        $review = Ratting::where('id', $request->id)->first();
        if ($review->delete()) {
            $product = Item::where('id', $review->item_id)->first();
            $product->avg_ratting = number_format(Ratting::where('item_id', $review->item_id)->where('status', 1)->avg('star'), 1);
            $product->save();
            return 1;
        } else {
            return 0;
        }
    }
    public function status(Request $request)
    {
        $review = Ratting::where('id', $request->id)->first();
        $review->status = $request->status;
        if ($review->save()) {
            $product = Item::where('id', $review->item_id)->first();
            $product->avg_ratting = number_format(Ratting::where('item_id', $review->item_id)->where('status', 1)->avg('star'), 1);
            $product->save();
            return 1;
        } else {
            return 0;
        }
    }
}
© 2026 GrazzMean