shell bypass 403

UnknownSec Shell

: /home3/espa7358/www/admin__OLD/_sis/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.217.58
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : searchnow.php
<?php
$AdminLevel = 6;
if (!APP_SEARCH || empty($DashboardLogin) || empty($Admin) || $Admin['user_level'] < $AdminLevel):
    die('<div style="text-align: center; margin: 5% 0; color: #C54550; font-size: 1.6em; font-weight: 400; background: #fff; float: left; width: 100%; padding: 30px 0;"><b>ACESSO NEGADO:</b> Você não esta logado<br>ou não tem permissão para acessar essa página!</div>');
endif;

// AUTO INSTANCE OBJECT READ
if (empty($Read)):
    $Read = new Read;
endif;

$SearchForm = filter_input_array(INPUT_POST, FILTER_DEFAULT);
if (!empty($SearchForm['inicio']) && !empty($SearchForm['fim'])):
    $inicio = Check::Data($SearchForm['inicio']);
    $fim = Check::Data($SearchForm['fim']);
    $Where = "AND search_date BETWEEN :inicio AND :fim";
    $ParseString = "inicio={$inicio}&fim={$fim}";
else:
    $Where = "";
    $ParseString = "";
endif;
?>
<header class="dashboard_header">
    <div class="dashboard_header_title">
        <h1 class="icon-search">Relatório de Pesquisas no Site</h1>
        <p class="dashboard_header_breadcrumbs">
            &raquo; <?= ADMIN_NAME; ?>
            <span class="crumb">/</span>
            <a title="<?= ADMIN_NAME; ?>" href="dashboard.php?wc=home">Dashboard</a>
            <span class="crumb">/</span>
            Pesquisas no Site
        </p>
    </div>

    <div class="dashboard_header_search">
        <form name="searchPosts" action="" method="post" enctype="multipart/form-data" class="ajax_off">
            <input type="text" class="jwc_datepicker" data-timepicker="false" name="inicio" placeholder="Data de Início:" style="width: 38%; margin-right: 3px;" />
            <input type="text" class="jwc_datepicker" data-timepicker="false" name="fim" placeholder="Data de Término:" style="width: 38%; margin-right: 3px;" />
            <button class="btn btn_green icon icon-search icon-notext"></button>
        </form>
    </div>
</header>
<div class="dashboard_content">

    <div class="box box100 dashboard_search">
        <div class="panel_header alert">
            <h2 class="icon-search">Últimas Pesquisas:</h2>
        </div>
        <div class="panel wc_onlinenow">
            <?php
            $getPage = filter_input(INPUT_GET, 'page', FILTER_VALIDATE_INT);
            $Page = ($getPage ? $getPage : 1);
            $Pager = new Pager("dashboard.php?wc=searchnow&page=", "<<", ">>", 1);
            $Pager->ExePager($Page, 15);
            $Read->ExeRead(DB_SEARCH, " WHERE 1 = 1 {$Where} AND search_publish IS NULL ORDER BY search_commit DESC, search_count DESC LIMIT :limit OFFSET :offset", "limit={$Pager->getLimit()}&offset={$Pager->getOffset()}&{$ParseString}");
            if (!$Read->getResult()):
                $Pager->ReturnPage();
                echo Erro("<span class='icon-info al_center'>Seus usuários ainda não pesquisaram em seu site. Assim que isso acontecer você poderá receber dicas de conteúdo pelas pesquisas realizadas!</span>", E_USER_NOTICE);
            else:
                foreach ($Read->getResult() as $Search):
                    extract($Search);
                    $Read->FullRead("SELECT post_id FROM " . DB_POSTS . " WHERE post_status = 1 AND post_date <= NOW() AND (post_title LIKE '%' :s '%' OR post_subtitle LIKE '%' :s '%')", "s={$search_key}");
                    $ResultPosts = $Read->getRowCount();

                    echo "
                        <article>
                           <h1 class='icon-search'><a href='dashboard.php?wc=posts/search&s=" . urlencode($search_key) . "' title='Ver resultados'>{$search_key}</a></h1>
                           <p>DIA " . date('d/m/Y H\hi', strtotime($search_date)) . "</p>
                           <p>" . str_pad($search_count, 4, 0, STR_PAD_LEFT) . " VEZES</p>
                           <p>" . str_pad($Read->getRowCount(), 4, 0, STR_PAD_LEFT) . " RESULTADOS</p>
                           <p>
                                    <button class='btn btn_green icon-notext icon-checkmark wc_tooltip j_wc_action' data-callback='Search' data-callback-action='publish' data-value='$search_id'><span class='wc_tooltip_balloon'>Publicar</span></button>
                                    <button class='btn btn_red icon-notext icon-cross wc_tooltip j_wc_action' data-callback='Search' data-callback-action='delete' data-value='$search_id'><span class='wc_tooltip_balloon'>Deletar</span></button>
                            </p>
                        </article>
                        ";
                endforeach;
            endif;
            ?>
            <div class="clear"></div>
        </div>
    </div>

    <?php
    $Pager->ExePaginator(DB_SEARCH);
    echo $Pager->getPaginator();
    ?>
</div>
© 2026 UnknownSec