shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : BannerController.php
<?php

namespace App\Http\Controllers\admin;

use Illuminate\Http\Request;
use App\Http\Controllers\Controller;
use App\Models\Banner;
use App\Models\Item;
use App\Helpers\helper;
use App\Models\Category;
use Illuminate\Support\Facades\Validator;

class BannerController extends Controller
{
    public function index()
    {
        $getbanner = Banner::orderBy('reorder_id')->get();
        return view('admin.banner.banner', compact('getbanner'));
    }
    public function add()
    {
        $getitem = Item::where('item_status', '1')->where('is_deleted', '2')->orderBy('reorder_id')->get();
        $getcategory = Category::where('is_available', '1')->where('is_deleted', '2')->orderBy('reorder_id')->get();
        return view('admin.banner.add', compact('getitem', 'getcategory'));
    }
    public function store(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'image' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
        ], [
            'image.max' => trans('messages.image_size_message'),
        ]);
        if ($validator->fails()) {
            return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
        }
        $image = 'banner-' . uniqid() . '.' . $request->image->getClientOriginalExtension();
        $request->image->move(env('ASSETSPATHURL') . 'admin-assets/images/banner', $image);
        $banner = new Banner;
        $banner->image = $image;
        $banner->section = $request->section;
        if ($request->type == "1") {
            $banner->type = $request->type;
            $banner->item_id = "";
            $banner->cat_id = $request->cat_id;
        } else if ($request->type == "2") {
            $banner->type = $request->type;
            $banner->cat_id = "";
            $banner->item_id = $request->item_id;
        } else {
            $banner->cat_id = "";
            $banner->item_id = "";
            $banner->type = "";
        }
        $banner->save();
        return redirect('admin/bannersection-' . $request->section)->with('success', trans('messages.success'));
    }
    public function show(Request $request)
    {
        $getbanner = Banner::find($request->id);
        $getitem = Item::where('item_status', '1')->where('is_deleted', '2')->orderBy('reorder_id')->get();
        $getcategory = Category::where('is_available', '1')->where('is_deleted', '2')->orderBy('reorder_id')->get();
        return view('admin.banner.edit', compact('getbanner', 'getitem', 'getcategory'));
    }
    public function update(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'image' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
        ], [
            'image.max' => trans('messages.image_size_message'),
        ]);
        if ($validator->fails()) {
            return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
        }
        $banner = Banner::find($request->id);
        if ($request->type == "1") {
            $banner->type = $request->type;
            $banner->item_id = "";
            $banner->cat_id = $request->cat_id;
        } else if ($request->type == "2") {
            $banner->type = $request->type;
            $banner->cat_id = "";
            $banner->item_id = $request->item_id;
        } else {
            $banner->cat_id = "";
            $banner->item_id = "";
            $banner->type = "";
        }
        if (isset($request->image)) {
            if ($request->hasFile('image')) {
                if (file_exists(env('ASSETSPATHURL') . 'admin-assets/images/banner/' . $banner->image)) {
                    unlink(env('ASSETSPATHURL') . 'admin-assets/images/banner/' . $banner->image);
                }
                $image = $request->file('image');
                $image = 'banner-' . uniqid() . '.' . $request->image->getClientOriginalExtension();
                $request->image->move(env('ASSETSPATHURL') . 'admin-assets/images/banner', $image);
                $banner->image = $image;
                $banner->save();
            }
        }
        $banner->save();
        return redirect('admin/bannersection-' . $request->section)->with('success', trans('messages.success'));
    }
    public function status(Request $request)
    {
        $checksbanner = Banner::where('id', $request->id)->update(['is_available' => $request->status]);
        if ($checksbanner) {
            return 1;
        } else {
            return 0;
        }
    }
    public function destroy(Request $request)
    {
        $banner = Banner::where('id', $request->id)->first();
        $updatebanner = Banner::where('id', $request->id)->delete();
        if ($updatebanner) {
            if (file_exists(env('ASSETSPATHURL') . 'admin-assets/images/banner/' . $banner->image)) {
                unlink(env('ASSETSPATHURL') . 'admin-assets/images/banner/' . $banner->image);
            }
            return 1;
        } else {
            return 0;
        }
    }
    public function reorder_banner(Request $request)
    {

        $getbanner = Banner::all();

        foreach ($getbanner as $slider) {
            foreach ($request->order as $order) {

                $ct = Banner::where('id', $order['id'])->first();
                $ct->reorder_id = $order['position'];
                $ct->save();
            }
        }
        return response()->json(['status' => 1, 'msg' => 'Update Successfully!!'], 200);
    }
}
© 2026 GrazzMean