Curling

can anyone help a noob privesc from www-data to user? unless I went about getting a shell the wrong way?