shell bypass 403
<?php
session_start();
// generate random number and store in session
$randomnr = rand(1000, 9999);
$_SESSION['sCaptcha'] = $randomnr;
//generate image
$im = imagecreatetruecolor(80, 38);
//colors:
$white = imagecolorallocate($im, 255, 255, 255);
$grey = imagecolorallocate($im, 128, 128, 128);
$black = imagecolorallocate($im, 0, 0, 0);
imagefilledrectangle($im, 0, 0, 200, 35, $black);
//path to font:
$font = 'BaroqueScript.ttf';
//draw text:
$rand = rand(1,30);
imagettftext($im, 13, 0, $rand, 24, $grey, $font, $randomnr);
imagettftext($im, 13, 0, $rand+2, 26, $white, $font, $randomnr);
// prevent client side caching
header("Expires: Wed, 1 Jan 1997 00:00:00 GMT");
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
//send image to browser
header("Content-type: image/gif");
imagegif($im);
imagedestroy($im);
?>