shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : index.blade.php

@extends('admin.theme.default')
@php
    $modules = 'role_global_extras';
    $role_id = Auth::user()->role_id;
    @endphp
@section('content')
@include('admin.breadcrumb')

    <div class="row">

        <div class="col-12">

            <div class="card border-0 mb-3 box-shadow">

                <div class="card-body">

                    <div class="table-responsive">

                        <table class="table table-striped table-bordered py-3 zero-configuration w-100">

                            <thead>

                                <tr class="fw-500">

                                    <td></td>
                                    <td>#</td>

                                    <td>{{ trans('labels.name') }}</td>

                                    <td>{{ trans('labels.price') }}</td>

                                    <td>{{ trans('labels.status') }}</td>

                                    <td>{{ trans('labels.created_date') }}</td>

                                    <td>{{ trans('labels.updated_date') }}</td>

                                    <td>{{ trans('labels.action') }}</td>

                                </tr>

                            </thead>

                            <tbody id="tabledetails" data-url="{{ url('admin/extras/reorder_extras') }}">
                                @php $i=1; @endphp
                                @foreach ($allextras as $extras)
                                    <tr class="fs-7 row1" id="dataid{{ $extras->id }}" data-id="{{ $extras->id }}">
                                        <td><a tooltip="{{ trans('labels.move') }}"><i
                                                    class="fa-light fa-up-down-left-right mx-2"></i></a></td>
                                      
                                        <td>@php echo $i++ @endphp</td>
                                        <td>{{ $extras->name }}</td>
                                        <td>{{ helper::currency_format($extras->price) }}</td>
                                        <td>
                                            @if($extras->is_available == '1')
                                                <a tooltip="{{ trans('labels.active') }}"
                                                    @if (env('Environment') == 'sendbox') onclick="myFunction()" @else onclick="StatusUpdate('{{$extras->id}}','2','{{URL::to('admin/extras/change_status')}}')" @endif
                                                    class="btn btn-sm btn-success square {{ Auth::user()->type == 4 ? (helper::check_access('role_global_extras', Auth::user()->role_id,'edit') == 1 ? '' : 'd-none') : '' }}"><i
                                                        class="fas fa-check"></i></a>
                                            @else
                                                <a tooltip="{{ trans('labels.inactive') }}"
                                                    @if (env('Environment') == 'sendbox') onclick="myFunction()" @else onclick="StatusUpdate('{{$extras->id}}','1','{{URL::to('admin/extras/change_status')}}')" @endif
                                                    class="btn btn-sm btn-danger square{{ Auth::user()->type == 4 ? (helper::check_access('role_global_extras', Auth::user()->role_id,'edit') == 1 ? '' : 'd-none') : '' }}"><i
                                                        class="fas fa-close"></i></a>
                                            @endif
                                        </td>
                                        <td>{{ helper::date_format($extras->created_at) }}<br>
                                            {{ helper::date_time_format($extras->created_at) }}
                                        </td>
                                        <td>{{ helper::date_format($extras->updated_at) }}<br>
                                            {{ helper::date_time_format($extras->updated_at) }}
                                        </td>
                                        <td>
                                            <div class="d-flex flex-wrap gap-1">

                                            <a href="{{ URL::to('admin/extras/edit-' . $extras->id) }}"
                                                tooltip="{{ trans('labels.edit') }}"
                                                class="btn btn-sm  btn-info square {{ Auth::user()->type == 4 ? (helper::check_access('role_global_extras', Auth::user()->role_id,'edit') == 1 ? '' : 'd-none') : '' }}">
                                                <i class="fa-regular fa-pen-to-square"></i></a>
                                            <a tooltip="{{ trans('labels.delete') }}"
                                                @if (env('Environment') == 'sendbox') onclick="myFunction()" @else  onclick="Delete('{{$extras->id}}','{{URL::to('admin/extras/delete')}}')" @endif
                                                class="btn btn-sm  btn-danger square {{ Auth::user()->type == 4 ? (helper::check_access('role_global_extras', Auth::user()->role_id,'delete') == 1 ? '' : 'd-none') : '' }}">
                                                <i class="fa-regular fa-trash"></i></a>
                                            </div>
                                        </td>
                                    </tr>
                                @endforeach
                            </tbody>
                        </table>
                    </div>
                </div>
            </div>
        </div>
    </div>
@endsection
@section('script')
<script src="{{url(env('ASSETSPATHURL').'admin-assets/assets/js/custom/category.js')}}"></script>
@endsection
© 2026 GrazzMean