shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : orderstable.blade.php
<table class="table table-striped table-bordered py-3 zero-configuration w-100">
    <thead>
        <tr class="fw-500">
            <th>#</th>

            <th>{{ trans('labels.order_number') }}</th>
            <th>{{ trans('labels.total') }} {{ trans('labels.amount') }}</th>
            <th>{{ trans('labels.payment_type') }}</th>
            <th>{{ trans('labels.order_type') }}</th>
            <th>{{ trans('labels.status') }}</th>
            <th>{{ trans('labels.created_date') }}</th>
            <th>{{ trans('labels.updated_date') }}</th>
            <th>{{ trans('labels.action') }}</th>
        </tr>
    </thead>
    <tbody>

        @php $i = 1; @endphp
        @foreach ($getorders as $orderdata)
            <tr id="dataid{{ $orderdata->id }}" class="fs-7">
                <td>@php echo $i++; @endphp</td>
                <td>
                    <div class="d-flex justify-content-between">
                        <a href="{{ URL::to('admin/orders/invoice/' . $orderdata->order_number) }}" class="td_a">
                            {{ $orderdata->order_number }} </a>
                        @if ($orderdata->vendor_note != '')
                            <a href="javascript:void(0)" class="btn btn-primary btn-sm"
                                tooltip="{{ $orderdata->vendor_note }}">
                                <i class="fa-solid fa-clipboard"></i>
                            </a>
                        @endif
                    </div>
                </td>
                <td>
                    {{ $orderdata->grand_total == 'NaN' || $orderdata->grand_total == '' ? '-' : helper::currency_format($orderdata->grand_total) }}
                </td>
                <td>
                    @if ($orderdata->transaction_type == 0)
                        {{ trans('labels.online') }}
                    @else
                        {{ @helper::getpayment($orderdata->transaction_type) }}
                    @endif
                    <br>
                    @if ($orderdata->payment_status == 1)
                        <small class="text-danger"><i class="far fa-clock"></i>
                            {{ trans('labels.unpaid') }}</small>
                    @else
                        <small class="text-success"><i class="far fa-clock"></i>
                            {{ trans('labels.paid') }}</small>
                    @endif
                </td>
                <td>
                    @if ($orderdata->order_type == 1)
                        {{ trans('labels.delivery') }}
                    @elseif ($orderdata->order_type == 2)
                        {{ trans('labels.pickup') }}
                    @elseif ($orderdata->order_type == 3)
                        {{ trans('labels.table') }}
                        ({{ $orderdata->dinein_tablename != '' ? $orderdata->dinein_tablename : '-' }})
                    @elseif ($orderdata->order_type == 4)
                        {{ trans('labels.pos') }}
                    @elseif ($orderdata->order_type == 5)
                        {{ trans('labels.digital') }}
                    @endif
                </td>
                <td>
                    @if ($orderdata->status_type == '1')
                        <span
                            class="badge bg-warning">{{ @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name == null ? '-' : @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name }}</span>
                    @elseif($orderdata->status_type == '2')
                        <span
                            class="badge bg-info">{{ @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name == null ? '-' : @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name }}</span>
                    @elseif($orderdata->status_type == '3')
                        <span
                            class="badge bg-success">{{ @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name == null ? '-' : @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name }}</span>
                    @elseif($orderdata->status_type == '4')
                        <span
                            class="badge bg-danger">{{ @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name == null ? '-' : @helper::gettype($orderdata->status, $orderdata->status_type, $orderdata->order_type, Auth::user()->id)->name }}</span>
                    @else
                        --
                    @endif
                </td>

                <td>{{ helper::date_format($orderdata->created_at) }}<br>
                    {{ helper::date_time_format($orderdata->created_at) }}

                </td>
                <td>{{ helper::date_format($orderdata->updated_at) }}<br>
                    {{ helper::date_time_format($orderdata->updated_at) }}
                </td>
                <td>
                    <div class="d-flex flex-wrap gap-1">
                        <a class="btn btn-sm btn-secondary square" tooltip="{{ trans('labels.view') }}"
                            href="{{ URL::to('admin/invoice/' . $orderdata->id) }}"><i class="fa fa-eye"></i></a>
                        <a class="btn btn-sm btn-dark square" tooltip="{{ trans('labels.print') }}"
                            href="{{ URL::to('admin/print/' . $orderdata->id) }}"><i
                                class="fa-regular fa-print"></i></a>
                        <a href="{{ URL::to('/admin/orders/generatepdf/' . $orderdata->order_number) }}"
                            tooltip="{{ trans('labels.pdf') }}" class="btn btn-info square"><i
                                class="fa-solid fa-file-pdf"></i></a>

                        @if (
                            ($orderdata->transaction_type == 1 || $orderdata->transaction_type == 16) &&
                                $orderdata->payment_status == 1 &&
                                $orderdata->status_type == 3 &&
                                $orderdata->status_type != 4)
                            <a class="btn btn-sm btn-warning square"
                                onclick="payment('{{ $orderdata->order_number }}','{{ $orderdata->grand_total }}','{{ $orderdata->transaction_type }}','{{ helper::image_path($orderdata->screenshot) }}')"
                                tooltip="{{ trans('labels.payment') }}"><i class="fa-solid fa-file-invoice-dollar"></i>
                            </a>
                        @endif
                    </div>
                </td>
            </tr>
        @endforeach
    </tbody>
</table>
© 2026 GrazzMean