shell bypass 403

Cubjrnet7 Shell


name : payment-gateway.php
 <?php 
	$page_title='Payment Gateway';
	$reference_no = (isset($_REQUEST['o']) ? $_REQUEST['o'] : ''); 
	$amount = (isset($_REQUEST['amount']) ? $_REQUEST['amount'] : '');
	$url = (isset($_REQUEST['url']) ? $_REQUEST['url'] : '');  
	$mode = (isset($_REQUEST['mode']) ? $_REQUEST['mode'] : '');  

	$TransactionNumber = rand();
	
	$ResponseCode = 1; //rand(0, 1);
	if($ResponseCode)
	{
		$message = 'Transaction completed successfully';	
	}else
	{
		$message = 'Error 412:Transaction unsuccessfull';
	}
	?>
	<script language="JavaScript" type="text/javascript">
<!--
	function changeMessage(val)
	{
		
		if(val)
		{
			var message = 'Transaction completed successfully';		
			document.getElementById('message').value = message;
			document.getElementById('showMessage').innerHTML = message;			
		}else
		{
			var message = 'Error 412:Transaction unsuccessfull';
			document.getElementById('message').value = message;
			document.getElementById('showMessage').innerHTML = message;
		}
	}
//-->
</script>
<div style="text-align:center;">
	<form action="<?php echo $url;?>" method="post">
		<?php 
		foreach($_GET AS $name => $value)
		{
			echo '<input type="hidden" name="'.$name.'" value="'.$value.'" />';
		}
		 ?>
		<input type="hidden" name="message" id="message" value="<?php echo $message?>">
		<input type="hidden" name="DateCreated" value="<?php echo date('d-M-Y')?>">
		<input type="hidden" name="TransactionNumber" value="<?php echo $TransactionNumber?>">
		<input type="hidden" name="reference_no" value="<?php echo  $reference_no; ?>">
		<input type="hidden" name="Amount" value="<?php echo $amount?>">
		<input type="hidden" name="mode" value="<?php echo $mode?>">
		<h1> Payment gateway simulator </h1>
		<?php 
			$yes = '';
			$no = '';
			if($ResponseCode)
				 $yes = ' checked="checked"';
			else	 
				$no = ' checked="checked"';
		?>
		
		<fieldset style="width:500px;text-align:left;margin:auto;padding:1em;">
		<legend><h2>Choose response</h2></legend>
		Response Code: <input type="radio" name="ResponseCode" id="ResponseCodeYes" value="1" <?php echo $yes ?> onclick="changeMessage(1)" />Success 
		<input type="radio" name="ResponseCode" id="ResponseCodeNo" value="0" <?php echo $no ?>  onclick="changeMessage(0)"/> Error<br />
		Responce Message: <span id="showMessage"><?php echo $message; ?></span><br />
		Date Created: <?php echo date('d-M-Y'); ?><br />
		Transaction Number: <?php echo $TransactionNumber; ?><br />
		Reference No: <?php echo $reference_no; ?><br />
		Amount: <?php echo $amount; ?><br />
		<input type="submit" name="action" value="Click here to proceed">
		</fieldset>
	</form>
</div>

© 2025 Cubjrnet7