shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : OtherPagesController.php
<?php

namespace App\Http\Controllers\Admin;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Models\Gallery;
use App\Models\Team;
use App\Models\Faq;
use App\Models\Tutorial;
use App\Models\Subscriber;
use App\Helpers\helper;
use App\Models\About;
use App\Models\Shipping;
use Illuminate\Support\Facades\Validator;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\URL;
use Jorenvh\Share\ShareFacade;

class OtherPagesController extends Controller
{
    // OUR-TEAM
    public function our_team_index(Request $request)
    {
        $getteams = Team::orderBydesc('id')->get();
        return view('admin.team.index', compact('getteams'));
    }
    public function our_team_add()
    {
        return view('admin.team.add');
    }
    public function our_team_store(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'image' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
        ], [
            'image.max' => trans('messages.image_size_message'),
        ]);
        if ($validator->fails()) {
            return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
        }
        $image = 'team-' . uniqid() . '.' . $request->image->getClientOriginalExtension();
        $request->image->move(env('ASSETSPATHURL') . 'admin-assets/images/about', $image);
        $team = new Team;
        $team->image = $image;
        $team->title = $request->title;
        $team->subtitle = $request->subtitle;
        $team->fb = $request->fb;
        $team->youtube = $request->youtube;
        $team->insta = $request->insta;
        $team->description = $request->description;
        $team->save();
        return redirect('admin/our-team')->with('success', trans('messages.success'));
    }
    public function our_team_show(Request $request)
    {
        $teamdata = Team::find($request->id);
        return view('admin.team.edit', compact('teamdata'));
    }
    public function our_team_update(Request $request)
    {
        $team = Team::find($request->id);
        if ($request->file('image') != "") {
            $validator = Validator::make($request->all(), [
                'image' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
            ], [
                'image.max' => trans('messages.image_size_message'),
            ]);
            if ($validator->fails()) {
                return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
            } else {
                if (file_exists(storage_path() . "/app/public/admin-assets/images/about/" . $team->image)) {
                    unlink(storage_path() . "/app/public/admin-assets/images/about/" . $team->image);
                }
                $image = 'team-' . uniqid() . '.' . $request->image->getClientOriginalExtension();
                $request->image->move(env('ASSETSPATHURL') . 'admin-assets/images/about', $image);
                $team->image = $image;
                $team->save();
            }
        }
        $team->title = $request->title;
        $team->subtitle = $request->subtitle;
        $team->fb = $request->fb;
        $team->youtube = $request->youtube;
        $team->insta = $request->insta;
        $team->description = $request->description;
        $team->save();
        return redirect('admin/our-team')->with('success', trans('messages.success'));
    }
    public function our_team_delete(Request $request)
    {
        $team = Team::find($request->id);
        if (file_exists(storage_path() . "/app/public/admin-assets/images/about/" . $team->image)) {
            unlink(storage_path() . "/app/public/admin-assets/images/about/" . $team->image);
        }
        if ($team->delete()) {
            return 1;
        } else {
            return 0;
        }
    }
    // tutorial
    public function tutorial_index(Request $request)
    {
        $gettutorials = Tutorial::orderBydesc('id')->get();
        return view('admin.tutorial.index', compact('gettutorials'));
    }
    public function tutorial_add(Request $request)
    {
        return view('admin.tutorial.add');
    }
    public function tutorial_store(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'image' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
        ], [
            'image.max' => trans('messages.image_size_message'),
        ]);
        if ($validator->fails()) {
            return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
        }
        $image = 'tutorial-' . uniqid() . '.' . $request->image->getClientOriginalExtension();
        $request->image->move(env('ASSETSPATHURL') . 'admin-assets/images/about', $image);
        $team = new Tutorial;
        $team->image = $image;
        $team->title = $request->title;
        $team->description = $request->description;
        $team->save();
        return redirect('admin/tutorial')->with('success', trans('messages.success'));
    }
    public function tutorial_show(Request $request)
    {
        $tutorialdata = Tutorial::find($request->id);
        return view('admin.tutorial.edit', compact('tutorialdata'));
    }
    public function tutorial_update(Request $request)
    {
        $team = Tutorial::find($request->id);
        if ($request->file('image') != "") {
            $validator = Validator::make($request->all(), [
                'image' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
            ], [
                'image.max' => trans('messages.image_size_message'),
            ]);
            if ($validator->fails()) {
                return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
            } else {
                if (file_exists(storage_path() . "/app/public/admin-assets/images/about/" . $team->image)) {
                    unlink(storage_path() . "/app/public/admin-assets/images/about/" . $team->image);
                }
                $image = 'tutorial-' . uniqid() . '.' . $request->image->getClientOriginalExtension();
                $request->image->move(env('ASSETSPATHURL') . 'admin-assets/images/about', $image);
                $team->image = $image;
                $team->save();
            }
        }
        $team->title = $request->title;
        $team->description = $request->description;
        $team->save();
        return redirect('admin/tutorial')->with('success', trans('messages.success'));
    }
    public function tutorial_delete(Request $request)
    {
        $team = Tutorial::find($request->id);
        if (file_exists(storage_path() . "/app/public/admin-assets/images/about/" . $team->image)) {
            unlink(storage_path() . "/app/public/admin-assets/images/about/" . $team->image);
        }
        if ($team->delete()) {
            return 1;
        } else {
            return 0;
        }
    }
    // faq
    public function faq_index(Request $request)
    {
        $getfaqs = Faq::orderBy('reorder_id')->get();
        return view('admin.faq.index', compact('getfaqs'));
    }
    public function faq_add(Request $request)
    {
        return view('admin.faq.add');
    }
    public function faq_store(Request $request)
    {
        $team = new Faq;
        $team->title = $request->title;
        $team->description = $request->description;
        $team->save();
        return redirect('admin/faq')->with('success', trans('messages.success'));
    }
    public function faq_show(Request $request)
    {
        $faqdata = Faq::find($request->id);
        return view('admin.faq.edit', compact('faqdata'));
    }
    public function faq_update(Request $request)
    {
        $faq = Faq::find($request->id);
        $faq->title = $request->title;
        $faq->description = $request->description;
        $faq->save();
        return redirect('admin/faq')->with('success', trans('messages.success'));
    }
    public function faq_delete(Request $request)
    {
        $faq = Faq::find($request->id);
        if ($faq->delete()) {
            return 1;
        } else {
            return 0;
        }
    }
    // gallery
    public function gallery_index(Request $request)
    {
        $getgalleries = Gallery::orderBydesc('id')->get();
        return view('admin.gallery.index', compact('getgalleries'));
    }
    public function gallery_add(Request $request)
    {
        return view('admin.gallery.add');
    }
    public function gallery_store(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'image*' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
        ], [
            'image*.max' => trans('messages.image_size_message'),
        ]);
        if ($validator->fails()) {
            return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
        } else {
            foreach ($request->image as $img) {
                $image = 'gallery-' . uniqid() . '.' . $img->getClientOriginalExtension();
                $img->move(env('ASSETSPATHURL') . 'admin-assets/images/about', $image);
                $team = new Gallery;
                $team->image = $image;
                $team->save();
            }
            return redirect('admin/gallery')->with('success', trans('messages.success'));
        }
    }
    public function gallery_show(Request $request)
    {
        $gallerydata = Gallery::find($request->id);
        return view('admin.gallery.edit', compact('gallerydata'));
    }
    public function gallery_update(Request $request)
    {
        $validator = Validator::make($request->all(), [
            'image' => 'image|max:' . helper::imagesize() . '|' . helper::imageext(),
        ], [
            'image.max' => trans('messages.image_size_message'),
        ]);
        if ($validator->fails()) {
            return redirect()->back()->with('error', trans('messages.image_size_message') . ' ' . helper::appdata('')->image_size . ' ' . 'MB');
        } else {
            $gallery = Gallery::find($request->id);
            if (file_exists(storage_path() . "/app/public/admin-assets/images/about/" . $gallery->image)) {
                unlink(storage_path() . "/app/public/admin-assets/images/about/" . $gallery->image);
            }
            $image = 'gallery-' . uniqid() . '.' . $request->image->getClientOriginalExtension();
            $request->image->move(env('ASSETSPATHURL') . 'admin-assets/images/about', $image);
            $gallery->image = $image;
            $gallery->save();
            return redirect('admin/gallery')->with('success', trans('messages.success'));
        }
    }
    public function gallery_delete(Request $request)
    {
        $gallery = Gallery::find($request->id);
        if (file_exists(storage_path() . "/app/public/admin-assets/images/about/" . $gallery->image)) {
            unlink(storage_path() . "/app/public/admin-assets/images/about/" . $gallery->image);
        }
        if ($gallery->delete()) {
            return 1;
        } else {
            return 0;
        }
    }
    public function reorder_faqs(Request $request)
    {
        $getcategory = Faq::all();

        foreach ($getcategory as $slider) {
            foreach ($request->order as $order) {

                $ct = Faq::where('id', $order['id'])->first();
                $ct->reorder_id = $order['position'];
                $ct->save();
            }
        }
        return response()->json(['status' => 1, 'msg' => 'Update Successfully!!'], 200);
    }
    public function subscribers(Request $request)
    {

        $getsubscribers = Subscriber::orderByDesc('id')->get();
        return view('admin.subscriber.index', compact('getsubscribers'));
    }
    public function subscribers_delete(Request $request)
    {
        try {
            $subscriber = Subscriber::find($request->id);
            if (!empty($subscriber)) {
                $subscriber->delete();
                return 1;
            }
        } catch (\Throwable $th) {
            return 0;
        }
    }
    public function share()
    {
        $url = URL::to('/' . Auth::user()->slug);
        $shareComponent = ShareFacade::page(
            $url
        )
            ->facebook()
            ->twitter()
            ->linkedin()
            ->telegram()
            ->whatsapp()
            ->reddit();
        return view('admin.cms.share', compact('shareComponent'));
    }

    /*===================================== Shipping ==================================*/
    public function shippingindex(Request $request)
    {
        $content = About::first();
        $allshippingcontent = Shipping::orderBy('reorder_id')->get();
        return view('admin.shipping.index', compact('content', 'allshippingcontent'));
    }
    public function savecontent(Request $request)
    {
        $newcontent = About::first();
        $newcontent->min_order_amount_for_free_shipping = $request->min_order_amount_for_free_shipping;
        $newcontent->shipping_charges = $request->shipping_charges;
        $newcontent->shipping_area = isset($request->shipping_area) ? 1 : 2;
        $newcontent->save();
        return redirect('admin/shipping')->with('success', trans('messages.success'));
    }
}
© 2026 GrazzMean