Unless somebody has an identical source, or at least similar, nobody can help you 100%.
However, I can make it easier for you to understand the logic. When you press a button, the ACTION bypass is sent to the server/core, in this case _bbspage:shop-2, as a string, meaning the bypass will then be...