shell bypass 403
<?php session_start(); // generate random number and store in session $randomnr = rand(1000, 9999); $_SESSION['sCaptcha'] = $randomnr; //generate image $im = imagecreatetruecolor(80, 38); //colors: $white = imagecolorallocate($im, 255, 255, 255); $grey = imagecolorallocate($im, 128, 128, 128); $black = imagecolorallocate($im, 0, 0, 0); imagefilledrectangle($im, 0, 0, 200, 35, $black); //path to font: $font = 'BaroqueScript.ttf'; //draw text: $rand = rand(1,30); imagettftext($im, 13, 0, $rand, 24, $grey, $font, $randomnr); imagettftext($im, 13, 0, $rand+2, 26, $white, $font, $randomnr); // prevent client side caching header("Expires: Wed, 1 Jan 1997 00:00:00 GMT"); header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); header("Cache-Control: no-store, no-cache, must-revalidate"); header("Cache-Control: post-check=0, pre-check=0", false); header("Pragma: no-cache"); //send image to browser header("Content-type: image/gif"); imagegif($im); imagedestroy($im); ?>