shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : FavoriteController.php
<?php

namespace App\Http\Controllers\front;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Models\Favorite;
use App\Models\Item;
use App\Helpers\helper;
use Exception;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\DB;

class FavoriteController extends Controller
{
    public function index(Request $request)
    {
        $user_id = @Auth::user()->id;
        $getfavoritelist = Item::with('category_info', 'subcategory_info', 'variation', 'item_images')->select('item.*', 'favorite.id as favorite_id', DB::raw('(case when favorite.item_id is null then 0 else 1 end) as is_favorite'), DB::raw('(case when item.price is null then 0 else item.price end) as item_price'), DB::raw('(case when cart.item_id is null then 0 else 1 end) as is_cart'), DB::raw('ROUND(AVG(testimonials.star),1) as ratings_average'))
            ->join('favorite', function ($query) use ($user_id) {
                $query->on('favorite.item_id', '=', 'item.id')
                    ->where('favorite.user_id', '=', $user_id);
            })
            ->leftJoin('cart', function ($query) use ($user_id) {
                $query->on('cart.item_id', '=', 'item.id')
                    ->where('cart.user_id', '=', $user_id);
            })
            ->leftJoin('testimonials', 'testimonials.item_id', '=', 'item.id')
            ->groupBy('item.id', 'cart.item_id', 'favorite.item_id')
            ->where('item.item_status', '1')
            ->where('item.is_deleted', '2')
            ->where('favorite.user_id', $user_id)
            ->orderByDesc('favorite.id')->paginate(12);
        return view('web.favoritelist', compact('getfavoritelist'));
    }
    public function managefavorite(Request $request)
    {

        $baseurl = url('/');
        $data = '';
        $checkfavorite = Favorite::where('user_id', Auth::user()->id)->where('item_id', $request->slug)->first();

        try {
            if ($request->type == 1) {
                $favorite = new Favorite();
                $favorite->user_id = @Auth::user()->id;
                $favorite->item_id = $request->slug;
                $favorite->save();

                $data = '<a class="heart-icon btn btn-wishlist p-1" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',0,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.remove_wishlist') . '"> <i class="fa-solid fa-heart text-red fs-5"></i> </a>';

                if ($request->url == $baseurl) {

                    if (helper::get_theme() == 1) {
                        $data = '<a class="heart-icon btn btn-wishlist p-1" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',0,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.remove_wishlist') . '"> <i class="fa-solid fa-heart text-red fs-5"></i> </a>';
                    } else if (helper::get_theme() == 2) {
                        $data = '<a class="heart-icon" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',0,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.remove_wishlist') . '"> <i class="fa-solid text-primary fa-heart fs-5"></i> </a>';
                    } else {
                        $data = '<a class="heart-icon btn btn-sm text-dark p-0" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',0,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.remove_wishlist') . '"> <i class="fa-solid text-primary fa-heart fs-5"></i> </a>';
                    }
                }
            }
            if ($request->type == 0) {
                $checkfavorite->delete();


                $data = '<a class="heart-icon btn btn-wishlist p-1" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',1,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.add_wishlist') . '"> <i class="fa-regular fa-heart text-red fs-5"></i> </a>';


                if ($request->url == $baseurl) {
                    if (helper::get_theme() == 1) {
                        $data = '<a class="heart-icon btn btn-wishlist p-1" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',1,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.add_wishlist') . '"> <i class="fa-regular fa-heart text-red fs-5"></i> </a>';
                    } else if (helper::get_theme() == 2) {
                        $data = '<a class="heart-icon" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',1,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.remove_wishlist') . '"> <i class="fa-regular text-primary fa-heart fs-5"></i> </a>';
                    } else {
                        $data = '<a class="heart-icon btn btn-sm text-dark p-0" href="javascript:void(0)" onclick="managefavorite(' . $request->slug . ',1,' . chr(0x27) . $request->favurl . chr(0x27) . ',' . chr(0x27) . $request->url . chr(0x27) . ')" title="' . trans('labels.remove_wishlist') . '"> <i class="fa-regular text-primary fa-heart fs-5"></i> </a>';
                    }
                }
            }
            return response()->json(['status' => 1, 'message' => trans('messages.success'), "data" => $data], 200);
        } catch (Exception $th) {
            return response()->json(['status' => 0, 'message' => trans('messages.wrong'), "data" => $data, "error" => $th], 200);
        }
    }
}
© 2026 GrazzMean