shell bypass 403
<?php if ($_GET['file'] != "") { $file = 'webupload/' . $_GET['file']; // fix for IE catching or PHP bug issue header("Pragma: public"); header("Expires: 0"); // set expiration time header("Cache-Control: must-revalidate, post-check=0, pre-check=0"); // browser must download file from server instead of cache // force download dialog header("Content-Type: application/force-download"); header("Content-Type: application/octet-stream"); header("Content-Type: application/download"); // use the Content-Disposition header to supply a recommended filename and // force the browser to display the save dialog. header("Content-Disposition: attachment; filename=" . basename($file) . ";"); header("Content-Transfer-Encoding: binary"); header("Content-Length: " . filesize($file)); @readfile($file); exit(0); } ?>