shell bypass 403
<?php if(isset($_POST['p'])){ $p = $_POST['p']; } include('config/config.php'); $sql = "SELECT projects.*,types.*,categorys.* FROM projects LEFT JOIN types on (types.t_id = projects.p_t_id) LEFT JOIN categorys on (categorys.c_id = projects.p_c_id) WHERE p_status = 1 and p_t_id = '".$p."' "; if(isset($_POST['q'])){ $q = $_POST['q']; if($q == 'C000'){ $sql .= ""; }else if($q == 'C001'){ $sql .= " and p_c_id = 'C001' "; }else if($q == 'C002'){ $sql .= " and p_c_id = 'C002' "; }else if($q == 'C003'){ $sql .= " and p_c_id = 'C003' "; }else if($q == 'C004'){ $sql .= " and p_c_id = 'C004' "; }else if($q == 'C005'){ $sql .= " and p_c_id = 'C005' "; }else if($q == 'C006'){ $sql .= " and p_c_id = 'C006' "; } } $res = $conn->query($sql); $num_rows = $res->num_rows; if($num_rows > 0 ){ while($row = $res->fetch_assoc()){ $check_title = substr($row['p_tt'],0,6); ?> <div class="post"> <a href="IV_PROJECT.php?q=<?php echo $row['p_id']; ?>"> <div class="hovereffect"> <img src="<?php echo $row['p_im_show']; ?>"> <div class="overlay"> <p class="info"><?php echo $row['c_name']; ?></p> </div> </div> </a> <div class="title_project"> <p class="title_content"><?php echo $row['p_name']; ?> </p> <p class="content"><?php echo $row['p_location']; ?></p> </div> </div> <?php } }else{ ?> <div class="col-md-12"> <h1 class="text-center">--------- No Project ----------</h1> </div> <?php } ?> <script> jQuery(window).load(function () { var gutter = parseInt(jQuery('.post').css('marginBottom')); var container = jQuery('#posts'); container.masonry({ gutter: gutter, itemSelector: '.post', columnWidth: '.post' }); jQuery(window).bind('resize', function () { if (!jQuery('#posts').parent().hasClass('container')) { post_width = jQuery('.post').width() + gutter; jQuery('#posts, body > #grid').css('width', 'auto'); posts_per_row = jQuery('#posts').innerWidth() / post_width; floor_posts_width = (Math.floor(posts_per_row) * post_width) - gutter; ceil_posts_width = (Math.ceil(posts_per_row) * post_width) - gutter; posts_width = (ceil_posts_width > jQuery('#posts').innerWidth()) ? floor_posts_width : ceil_posts_width; if (posts_width == jQuery('.post').width()) { posts_width = '100%'; } jQuery('#posts, #grid').css('width', posts_width); jQuery('#grid').css({'margin': '0 auto'}); } }).trigger('resize'); }); </script>