shell bypass 403

GrazzMean Shell

Uname: Linux webm016.cluster127.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
Software: Apache
PHP version: 7.4.33 [ PHP INFO ] PHP os: Linux
Server Ip: 54.36.31.145
Your Ip: 216.73.216.182
User: homesquasz (91404) | Group: users (100)
Safe Mode: OFF
Disable Function:
_dyuweyrj4,_dyuweyrj4r,dl

name : main.php
<?php $user = $this->session->userdata("auth"); ?>
<!DOCTYPE html>
<html>
    <head>
        <meta charset="utf-8">
        <meta http-equiv="X-UA-Compatible" content="IE=edge">
        <title>Groupe Hammami</title>
        <link rel="icon" href="<?php echo base_url(); ?>favicon.ico" />
        <!-- Tell the browser to be responsive to screen width -->
        <meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
        <!-- Bootstrap 3.3.6 -->
        <link rel="stylesheet" href="<?php echo site_url('resources/css/bootstrap.min.css');?>">
        <!-- Font Awesome -->
        <link rel="stylesheet" href="<?php echo site_url('resources/css/font-awesome.min.css');?>">
        <!-- Ionicons -->
        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/ionicons/2.0.1/css/ionicons.min.css">
        <!-- Datetimepicker -->
        <link rel="stylesheet" href="<?php echo site_url('resources/css/bootstrap-datetimepicker.min.css');?>">
        <link rel="stylesheet" href="<?php echo site_url('resources/bower_components/fullcalendar/dist/fullcalendar.min.css');?>">
        <link rel="stylesheet" href="<?php echo site_url('resources/bower_components/fullcalendar/dist/fullcalendar.print.min.css');?>"  media="print">
        <!-- Theme style -->
        <link rel="stylesheet" href="<?php echo site_url('resources/css/AdminLTE.min.css');?>">
        <!-- AdminLTE Skins. Choose a skin from the css/skins
             folder instead of downloading all of them to reduce the load. -->
        <link rel="stylesheet" href="<?php echo site_url('resources/css/_all-skins.min.css');?>">
        <link rel="stylesheet" href="<?php echo site_url('resources/bower_components/select2/dist/css/select2.min.css');?>">


        <link rel="stylesheet" href="<?php echo site_url('resources/bower_components/datatables.net-bs/css/dataTables.bootstrap.css');?>">


       <!-- jQuery 2.2.3 -->
       <script>
           var base_url = "<?php echo base_url(); ?>";
       </script>
        <script src="<?php echo site_url('resources/js/jquery-2.2.3.min.js');?>"></script>
             <script src="<?php echo site_url('resources/js/moment.js');?>"></script>
        <script src="<?php echo site_url('resources/js/moment-with-locales.js');?>"></script>

        <script src="<?php echo site_url('resources/bower_components/fullcalendar/dist/fullcalendar.min.js');?>"></script>
        <script src="<?php echo site_url('resources/bower_components/fullcalendar/dist/locale-all.js');?>"></script>
        <script src="<?php echo site_url('resources/bower_components/fullcalendar/dist/locale/fr.js');?>"></script>
    </head>
    
    <body class="hold-transition skin-blue sidebar-mini">
        <div class="wrapper">
            <header class="main-header">
                <!-- Logo -->
                <a href="" class="logo">
                    <!-- mini logo for sidebar mini 50x50 pixels -->
                    <span class="logo-mini">Groupe Hammami</span>
                    <!-- logo for regular state and mobile devices -->
                    <span class="logo-lg">Groupe Hammami</span>
                </a>
                <!-- Header Navbar: style can be found in header.less -->
                <nav class="navbar navbar-static-top">
                    <!-- Sidebar toggle button-->
                    <a href="#" class="sidebar-toggle" data-toggle="offcanvas" role="button">
                        <span class="sr-only">Toggle navigation</span>
                        <span class="icon-bar"></span>
                        <span class="icon-bar"></span>
                        <span class="icon-bar"></span>
                    </a>
                   
                    <div class="navbar-custom-menu">
                        <ul class="nav navbar-nav">
                            <!-- User Account: style can be found in dropdown.less -->
                            <li class="dropdown user user-menu">
                                <a href="#" class="dropdown-toggle" data-toggle="dropdown">
                                       <?php 
                                    $user = $this->session->userdata("auth");
                                    $image = "data:image/jpeg;base64,".base64_encode( $user["logo"] ); ?>
                           <img src="<?php echo $image; ?>" class="user-image" alt="User Image"/>
                               
                                    <span class="hidden-xs"><?php echo ucwords($user["name"])." ".ucwords($user["prenom"]);  ?></span>
                                </a>
                                <ul class="dropdown-menu">
                                    <!-- User image -->
                                    <li class="user-header">
                                       <img src="<?php echo $image; ?>" class="user-image" alt="User Image"/>
                                       
                                    <p>
                                        <?php echo ucwords($user["name"])." ".ucwords($user["prenom"]);  ?> - <?php echo $user["poste"];  ?>
                                        <small></small>
                                    </p>
                                    </li>
                                    <!-- Menu Footer-->
                                    <li class="user-footer">
                                        <div class="pull-left">
                                            <a href="#" class="btn btn-primary btn-flat">Profile</a>
                                        </div>
                                        <div class="pull-right">
                                            <a href="<?php echo base_url("Login/logout");?>" class="btn btn-primary btn-flat">Deconnexion</a>
                                        </div>
                                    </li>
                                </ul>
                            </li>
                        <!-- User Account: style can be found in dropdown.less -->
                            
                        </ul>
                    </div>
                </nav>
            </header>
            <!-- Left side column. contains the logo and sidebar -->
            <aside class="main-sidebar">
                <!-- sidebar: style can be found in sidebar.less -->
                <section class="sidebar">
                    <!-- Sidebar user panel -->
                    <div class="user-panel">
                        <div class="col-md-push-12 image">
                              <?php 
                                    $user = $this->session->userdata("auth");
                                    $image = "data:image/jpeg;base64,".base64_encode( $user["logo"] ); ?>
                            <a href="" target="_blank"><img src="<?php echo $image; ?>"/></a>
                        </div>
                     
                    </div>
                    <!-- sidebar menu: : style can be found in sidebar.less -->
                    <ul class="sidebar-menu">
                        <li class="header">NAVIGATION</li>
                        <?php foreach($access as $row){ ?>
                        <li>
                            <a href="#">
                                <i class="fa fa-desktop"></i> <span><?php echo $row->module;  ?></span>
                            </a>
                            <ul class="treeview-menu">
                                <?php if(in_array($add, $row->actions)){ ?>
                                <li class="active">
                                    <a href="<?php echo site_url($row->link.'/add');?>"><i class="fa fa-plus"></i> Ajouter</a>
                                </li>
                                <?php } ?>
                                <?php if(in_array($read, $row->actions)){ ?>
                                <li>
                                    <a href="<?php echo site_url($row->link.'/index');?>"><i class="fa fa-list-ul"></i> Consulter</a>
                                </li>
                                <?php } ?>
                            </ul>
                        </li>
                        <?php } ?>
                    </ul>
                </section>
                <!-- /.sidebar -->
            </aside>

            <!-- Content Wrapper. Contains page content -->
            <div class="content-wrapper">
                <!-- Main content -->
                <section class="content">
                    <?php                    
                    if(isset($_view) && $_view)
                        $this->load->view($_view);
                    ?>                    
                </section>
                <!-- /.content -->
            </div>
            <!-- /.content-wrapper -->
            <footer class="main-footer">
                <strong>&copy; <?php echo date("Y"); ?> Portail Groupe Hammami 1.0</strong>
            </footer>

            <!-- Control Sidebar -->
            <aside class="control-sidebar control-sidebar-dark">
                <!-- Create the tabs -->
                <ul class="nav nav-tabs nav-justified control-sidebar-tabs">
                    
                </ul>
                <!-- Tab panes -->
                <div class="tab-content">
                    <!-- Home tab content -->
                    <div class="tab-pane" id="control-sidebar-home-tab">

                    </div>
                    <!-- /.tab-pane -->
                    <!-- Stats tab content -->
                    <div class="tab-pane" id="control-sidebar-stats-tab">Stats Tab Content</div>
                    <!-- /.tab-pane -->
                    
                </div>
            </aside>
            <!-- /.control-sidebar -->
            <!-- Add the sidebar's background. This div must be placed
            immediately after the control sidebar -->
            <div class="control-sidebar-bg"></div>
        </div>
        <!-- ./wrapper -->

      
        <!-- Bootstrap 3.3.6 -->
        <script src="<?php echo site_url('resources/js/bootstrap.min.js');?>"></script>
        <!-- FastClick -->
        <script src="<?php echo site_url('resources/js/fastclick.js');?>"></script>
        <!-- AdminLTE App -->
        <script src="<?php echo site_url('resources/js/app.min.js');?>"></script>
        <!-- AdminLTE for demo purposes -->
        <script src="<?php echo site_url('resources/js/demo.js');?>"></script>
        <!-- DatePicker -->


        <script src="<?php echo site_url('resources/bower_components/select2/dist/js/select2.full.min.js');?>"></script>
   
        <script src="<?php echo site_url('resources/js/bootstrap-datetimepicker.min.js');?>"></script>
         <script src="<?php echo site_url('resources/bower_components/datatables.net/js/jquery.dataTables.min.js');?>"></script>
        <script src="<?php echo site_url('resources/bower_components/datatables.net-bs/js/dataTables.bootstrap.js');?>"></script>
        <!-- ChartJS -->
        <script src="<?php echo site_url('resources/bower_components/chart.js/Chart.js');?>"></script>
        <script src="<?php echo site_url('resources/js/global.js?cache='.rand ( 10000 , 99999 ));?>"></script>
	<script>
	$(function()
{

    function timeChecker()
    {
		
        setInterval(function()
        {
            var storedTimeStamp = sessionStorage.getItem("lastTimeStamp");  
            timeCompare(storedTimeStamp);
        },60000);
    }


    function timeCompare(timeString)
    {
        var maxMinutes  = 1;  //GREATER THEN 1 MIN.
        var currentTime = new Date();
        var pastTime    = new Date(timeString);
        var timeDiff    = currentTime - pastTime;
        var minPast     = Math.floor( (timeDiff/60000) ); 

        if( minPast > maxMinutes)
        {

            sessionStorage.removeItem("lastTimeStamp");
            window.location.href = "<?php echo base_url("Login/logout");?>";
            return false;
        }else
        {
            //JUST ADDED AS A VISUAL CONFIRMATION
            console.log(currentTime +" - "+ pastTime+" - "+minPast+" min past");
        }
    }

    if(typeof(Storage) !== "undefined") 
    {
        $(document).mousemove(function()
        {
            var timeStamp = new Date();
            sessionStorage.setItem("lastTimeStamp",timeStamp);
        });

        timeChecker();
    }  
});//END JQUERY
</script>
    </body>
</html>
© 2026 GrazzMean