shell bypass 403

GrazzMean Shell

Uname: Linux info 3.0 #1337 SMP Tue Jan 01 00:00:00 CEST 2000 all GNU/Linux
Software: Apache
PHP version: 5.6.40 [ PHP INFO ] PHP os: Linux
Server Ip: 217.160.0.194
Your Ip: 216.73.216.90
User: u72294154 (9179942) | Group: ftpusers (600)
Safe Mode: OFF
Disable Function:
NONE

name : PrivateController.php
<?

App::uses('BackendController', 'Controller');

class PrivateController extends BackendController {

    public $layout = 'private';

    public function beforeRender() {
        parent::beforeRender();

        //Contactos sin leer
        array_push($this->uses, 'Contacto', 'Inmueble');
        $this->set('contactosNoLeidos', $this->Contacto->find('all', array('conditions' => array('Contacto.leido' => false), 'order' => $this->App->getOrden('Contacto'))));
    }

    public function home() {

        array_push($this->uses, 'Inmueble', 'Usuario', 'Noticia', 'Slider', 'InmuebleInmuebleListado');

        $this->set('inmuebles', $this->Inmueble->find('count', array('conditions' => array('Inmueble.publicado' => true), 'order' => $this->App->getOrden('Inmueble'))));
        $this->set('usuarios', $this->Usuario->find('count', array('conditions' => array('Usuario.validado' => true), 'order' => $this->App->getOrden('Usuario'))));
        $this->set('noticias', $this->Noticia->find('count', array('conditions' => array('Noticia.publicado' => true), 'order' => $this->App->getOrden('Noticia'))));
        $this->set('sliders', $this->Slider->find('count', array('conditions' => array('Slider.publicado' => true), 'order' => $this->App->getOrden('Slider'))));
        $this->set('viviendas_destacadas', $this->InmuebleInmuebleListado->find('count', array('conditions' => array(), 'order' => $this->App->getOrden('InmuebleInmuebleListado'))));

        $this->renderView(false);
    }

    protected function renderView($controller = true) {
        $this->render('/Backend/Private/' . (($controller) ? Inflector::camelize(str_replace('private_', '', $this->params->controller)) : '') . '/' . Inflector::slug($this->params->action));
    }

}
© 2026 GrazzMean