shell bypass 403
<?php
/**
* @package admintools
* @copyright Copyright (c)2010-2024 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU General Public License version 3, or later
*/
defined('_JEXEC') or die;
/** @var \Akeeba\Component\AdminTools\Administrator\View\Adminpassword\HtmlView $this */
use Joomla\CMS\Factory;
use Joomla\CMS\HTML\HTMLHelper;
use Joomla\CMS\Language\Text;
use Joomla\CMS\Router\Route;
$modeOptions = [
HTMLHelper::_('select.option', 'joomla', Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_MODE_JOOMLA')),
HTMLHelper::_('select.option', 'php', Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_MODE_PHP')),
HTMLHelper::_('select.option', 'everything', Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_MODE_EVERYTHING')),
];
?>
<div class="card mb-2">
<h3 class="card-header bg-info text-white">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_HOWITWORKS') ?>
</h3>
<div class="card-body">
<p class="card-text">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_INFO') ?>
</p>
<div class="alert alert-warning text-dark">
<span class="fa fa-exclamation-triangle" aria-hidden="true"></span>
<span class="visually-hidden"><?= Text::_('WARNING'); ?></span>
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_WARN') ?>
</div>
</div>
</div>
<div class="card">
<h3 class="card-header bg-primary text-white">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_PASSWORDPROTECTION') ?>
</h3>
<div class="card-body">
<form action="<?= Route::_('index.php?option=com_admintools&view=Adminpassword&task=protect') ?>"
id="adminForm" method="post" name="adminForm">
<div class="row mb-3">
<label for="mode" class="col-sm-3 col-form-label">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_MODE') ?>
</label>
<div class="col-sm-9">
<?= HTMLHelper::_('select.genericlist', $modeOptions, 'mode', [
'id' => 'mode',
'list.select' => $this->mode,
'list.attr' => ['class' => 'form-select'],
]) ?>
<p class="form-text">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_MODE_HELP') ?>
</p>
</div>
</div>
<div class="row mb-3">
<label for="resetErrorPages" class="col-sm-3 col-form-label">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_RESETERRORPAGES') ?>
</label>
<div class="col-sm-9">
<?= HTMLHelper::_('admintools.booleanList', 'resetErrorPages', $this->resetErrorPages == 1, Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_RESETERRORPAGES')) ?>
<p class="form-text">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_RESETERRORPAGES_HELP') ?>
</p>
</div>
</div>
<div class="row mb-3">
<label for="username" class="col-sm-3 col-form-label">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_USERNAME') ?>
</label>
<div class="col-sm-9">
<input autocomplete="off" id="username" name="username" type="text"
class="form-control"
value="<?= $this->escape($this->username) ?>" />
<p class="form-text">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_USERNAME_HELP') ?>
</p>
</div>
</div>
<div class="row mb-3">
<label for="password" class="col-sm-3 col-form-label">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_PASSWORD') ?>
</label>
<div class="col-sm-9">
<input autocomplete="off" id="password" name="password" type="password"
class="form-control"
value="<?= $this->escape($this->password) ?>" />
<p class="form-text">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_PASSWORD_HELP') ?>
</p>
</div>
</div>
<div class="row mb-3">
<label for="password2" class="col-sm-3 col-form-label">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_PASSWORD2') ?>
</label>
<div class="col-sm-9">
<input autocomplete="off" id="password2" name="password2" type="password"
class="form-control"
value="<?= $this->escape($this->password) ?>" />
<p class="form-text">
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_PASSWORD2_HELP') ?>
</p>
</div>
</div>
<div class="row mb-3">
<div class="col-sm-9 offset-sm-3">
<button type="submit" class="btn btn-success">
<span class="fa fa-user-lock"></span>
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_PROTECT') ?>
</button>
<?php if ($this->adminLocked): ?>
<a class="btn btn-danger"
href="<?= Route::_('index.php?option=com_admintools&view=Adminpassword&task=unprotect&' . Factory::getApplication()->getFormToken() . '=1') ?>"
>
<span class="fa fa-unlock-alt"></span>
<?= Text::_('COM_ADMINTOOLS_ADMINPASSWORD_LBL_UNPROTECT') ?>
</a>
<?php endif ?>
</div>
</div>
<?= HTMLHelper::_('form.token') ?>
</form>
</div>
</div>