shell bypass 403

GrazzMean Shell

Uname: Linux info 3.0 #1337 SMP Tue Jan 01 00:00:00 CEST 2000 all GNU/Linux
Software: Apache
PHP version: 5.6.40 [ PHP INFO ] PHP os: Linux
Server Ip: 217.160.0.194
Your Ip: 216.73.216.203
User: u72294154 (9179942) | Group: ftpusers (600)
Safe Mode: OFF
Disable Function:
NONE

name : BackendHelper.php
<?

class BackendHelper extends AppHelper {

    public $helpers = array('Form', 'Html');

    public function getOrden($orden, $link, $total) {
        $out = '';
        $orden = (int) $orden;
        $total = (int) $total;

        if ($orden != 1) {
            $linkUP = $link;
            $linkUP['orden'] = 'up';
            $out .= $this->Html->link('<i class="fa fa-arrow-up"></i>', $linkUP, array('escape' => false));
        }

        if ($orden != $total) {
            $linkDOWN = $link;
            $linkDOWN['orden'] = 'down';
            $out .= (($orden != 1) ? ' ' : '') . $this->Html->link('<i class="fa fa-arrow-down"></i>', $linkDOWN, array('escape' => false));
        }

        return $out;
    }

    public function getContactoOrigen($contacto, $origenes) {
        $out = null;

        if (!empty($contacto['entidad']) && !empty($contacto['entidad_id']) && array_key_exists($contacto['entidad'], $origenes)) {
            switch ($contacto['entidad']) {
                case 'inmueble':
                    $entidad = $origenes[$contacto['entidad']][(int) $contacto['entidad_id']]['Inmueble'];
                    $action = (empty($entidad['origen_inmueble_id'])) ? 'edit' : 'show';
                    $out = $this->Html->link($entidad['titulo_corto'] . ' (Ref. ' . $entidad['referencia'] . ')', array('controller' => 'private_inmuebles', 'action' => $action, 'id' => $entidad['id']));
                    break;
            }
        } else {
            $out = $contacto['pagina'];
        }

        return $out;
    }

    public function getGaleriaShow($galeria) {
        $out = null;

        if (empty($galeria['video_code'])) {
            $out = $galeria['imagen'];
        } else {
            switch ($galeria['video_source']) {
                case 'youtube':
                    $out = 'https://www.youtube.com/watch?v=' . $galeria['video_code'];
                    break;
                case 'vimeo':
                    $out = 'http://vimeo.com/' . $galeria['video_code'];
                    break;
            }
        }

        return $out;
    }

}
© 2026 GrazzMean