shell bypass 403
<?php
/**
* @package akeebabackup
* @copyright Copyright (c)2006-2024 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU General Public License version 3, or later
*/
defined('_JEXEC') || die;
/** @var \Akeeba\Component\AkeebaBackup\Administrator\View\Profile\HtmlView $this */
use Joomla\CMS\Factory as JoomlaFactory;
use Joomla\CMS\HTML\HTMLHelper;
use Joomla\CMS\Language\Text;
use Joomla\CMS\Router\Route;
$user = JoomlaFactory::getApplication()->getIdentity();
$wa = $this->document->getWebAssetManager();
$wa->useScript('keepalive')
->useScript('form.validate');
?>
<form action="<?php echo Route::_('index.php?option=com_akeebabackup&view=Profile&layout=edit&id=' . (int) $this->item->id); ?>"
method="post" name="adminForm" id="profile-form"
aria-label="<?php echo Text::_('COM_AKEEBABACKUP_PROFILES_PAGETITLE_' . ( (int) $this->item->id === 0 ? 'NEW' : 'EDIT'), true); ?>"
class="form-validate">
<div>
<div class="card">
<div class="card-body">
<?php echo $this->form->renderField('description'); ?>
<?php echo $this->form->renderField('quickicon'); ?>
<?php
// If we're working on the default profile (ID=1), hide the access level field. Since this is our fallback
// field, it MUST be always available to everyone
if ($this->item->id != 1 && $user->authorise('core.manage', 'com_akeebabackup'))
{
echo $this->form->renderField('access');
}
?>
</div>
</div>
</div>
<input type="hidden" name="task" value="">
<?php echo HTMLHelper::_('form.token'); ?>
</form>