shell bypass 403
<?xml version="1.0" encoding="utf-8"?> <form> <fieldset addfieldpath="/administrator/components/com_phocagallery/models/fields"> <field name="id" type="text" default="0" label="JGLOBAL_FIELD_ID_LABEL" required="true" readonly="true" class="readonly" /> <field name="title" type="text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_TITLE_LABEL" description="COM_PHOCAGALLERY_FIELD_TITLE_DESC" /> <field name="alias" type="text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_ALIAS_LABEL" description="COM_PHOCAGALLERY_FIELD_ALIAS_DESC" /> <field name="catid" type="phocagallerycategory" onchange="changeCatid()" label="COM_PHOCAGALLERY_FIELD_CATEGORY_LABEL" description="COM_PHOCAGALLERY_FIELD_CATEGORY_DESC" required="true" /> <field name="ordering" type="PhocaGalleryOrdering" table="image" class="form-select" label="COM_PHOCAGALLERY_FIELD_ORDERING_LABEL" description="COM_PHOCAGALLERY_FIELD_ORDERING_DESC" /> <field name="filename" type="phocaselectfilename" label="COM_PHOCAGALLERY_FIELD_FILENAME_LABEL" required="true" description="COM_PHOCAGALLERY_FIELD_FILENAME_DESC" class="form-control" size="40" /> <field name="extid" type="hidden" /> <field name="latitude" type="phocaselectmap" label="COM_PHOCAGALLERY_FIELD_LATITUDE_LABEL" description="COM_PHOCAGALLERY_FIELD_LATITUDE_DESC" class="form-control" size="40" /> <field name="longitude" type="phocaselectmap" label="COM_PHOCAGALLERY_FIELD_LONGITUDE_LABEL" description="COM_PHOCAGALLERY_FIELD_LONGITUDE_DESC" class="form-control" size="40" /> <field name="zoom" type="phocaselectmap" label="COM_PHOCAGALLERY_FIELD_ZOOM_LABEL" description="COM_PHOCAGALLERY_FIELD_ZOOM_DESC" class="form-control" size="40" /> <field name="geotitle" type="text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_GEOTITLE_LABEL" description="COM_PHOCAGALLERY_FIELD_GEOTITLE_DESC" /> <field name="videocode" type="phocaselectytb" rows="3" cols="5" label="COM_PHOCAGALLERY_FIELD_VIDEOCODE_LABEL" class="form-control" description="COM_PHOCAGALLERY_FIELD_VIDEOCODE_DESC" filter="raw" /> <field name="pcproductid" type="text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_PCPRODUCT_ID_LABEL" description="COM_PHOCAGALLERY_FIELD_PCPRODUCT_ID_DESC" /> <field name="vmproductid" type="text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_VMPRODUCT_ID_LABEL" description="COM_PHOCAGALLERY_FIELD_VMPRODUCT_ID_DESC" /> <field name="description" type="editor" buttons="true" hide="pagebreak,readmore" class="form-control" label="COM_PHOCAGALLERY_FIELD_DESCRIPTION_LABEL" filter="\Joomla\CMS\Component\ComponentHelper::filterText" description="COM_PHOCAGALLERY_FIELD_DESCRIPTION_DESC" /> <field name="extu" type="Text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_PICASA_USER_LABEL" description="COM_PHOCAGALLERY_FIELD_PICASA_USER_DESC" /> <field name="exta" type="Text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_PICASA_ALBUM_LABEL" description="COM_PHOCAGALLERY_FIELD_PICASA_ALBUM_DESC" /> <field name="extauth" type="Text" class="form-control" size="40" label="COM_PHOCAGALLERY_FIELD_PICASA_AUTHKEY_LABEL" description="COM_PHOCAGALLERY_FIELD_PICASA_AUTHKEY_DESC" /> <field name="extlink1link" type="Text" class="form-control" size="40" label="COM_PHOCAGALLERY_EXTERNAL_LINK_LINK_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_LINK_DESC" /> <field name="extlink1title" type="Text" class="form-control" size="40" label="COM_PHOCAGALLERY_EXTERNAL_LINK_TITLE_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_TITLE_DESC" /> <field name="extlink1target" type="list" class="form-select" label="COM_PHOCAGALLERY_EXTERNAL_LINK_TARGET_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_TARGET_DESC" default="_self" > <option value="_self">COM_PHOCAGALLERY_OPEN_WINDOW_SELF</option> <option value="_blank">COM_PHOCAGALLERY_OPEN_WINDOW_BLANK</option> <option value="_parent">COM_PHOCAGALLERY_OPEN_WINDOW_PARENT</option> <option value="_top">COM_PHOCAGALLERY_OPEN_WINDOW_TOP</option> </field> <field name="extlink1icon" type="list" class="form-select" label="COM_PHOCAGALLERY_EXTERNAL_LINK_ICON_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_ICON_DESC" default="1" > <option value="0">COM_PHOCAGALLERY_NO</option> <option value="1">COM_PHOCAGALLERY_YES</option> </field> <field name="extlink2link" type="Text" class="form-control" size="40" label="COM_PHOCAGALLERY_EXTERNAL_LINK_LINK2_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_LINK2_DESC" /> <field name="extlink2title" type="Text" class="form-control" size="40" label="COM_PHOCAGALLERY_EXTERNAL_LINK_TITLE2_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_TITLE2_DESC" /> <field name="extlink2target" type="list" class="form-select" label="COM_PHOCAGALLERY_EXTERNAL_LINK_TARGET2_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_TARGET2_DESC" default="_self" > <option value="_self">COM_PHOCAGALLERY_OPEN_WINDOW_SELF</option> <option value="_blank">COM_PHOCAGALLERY_OPEN_WINDOW_BLANK</option> <option value="_parent">COM_PHOCAGALLERY_OPEN_WINDOW_PARENT</option> <option value="_top">COM_PHOCAGALLERY_OPEN_WINDOW_TOP</option> </field> <field name="extlink2icon" type="list" class="form-select" label="COM_PHOCAGALLERY_EXTERNAL_LINK_ICON2_LABEL" description="COM_PHOCAGALLERY_FIELD_EXTERNAL_LINK_ICON2_DESC" default="1" > <option value="0">COM_PHOCAGALLERY_NO</option> <option value="1">COM_PHOCAGALLERY_YES</option> </field> <field name="metakey" type="textarea" label="JField_Meta_Keywords_Label" description="JField_Meta_Keywords_Desc" class="form-control" rows="3" cols="30" /> <field name="metadesc" type="textarea" label="JField_Meta_Description_Label" description="JField_Meta_Description_Desc" class="form-control" rows="3" cols="30" /> </fieldset> <fieldset name="publish" label="COM_PHOCAGALLERY_GROUP_LABEL_PUBLISHING_DETAILS" > <field name="published" type="list" label="COM_PHOCAGALLERY_FIELD_PUBLISHED_LABEL" description="COM_PHOCAGALLERY_FIELD_PUBLISHED_DESC" class="form-select" size="1" default="1"> <option value="1">JPUBLISHED</option> <option value="0">JUNPUBLISHED</option> </field> <field name="approved" type="list" label="COM_PHOCAGALLERY_FIELD_APPROVED_LABEL" description="COM_PHOCAGALLERY_FIELD_APPROVED_DESC" class="form-select" size="1" default="1"> <option value="1">COM_PHOCAGALLERY_APPROVED</option> <option value="0">COM_PHOCAGALLERY_NOT_APPROVED</option> </field> <field name="date" type="Calendar" class="form-control" label="COM_PHOCAGALLERY_FIELD_DATE_LABEL" description="COM_PHOCAGALLERY_FIELD_DATE_DESC" filter="user_utc" translateformat="true" /> <field name="hits" type="Text" class="form-control" size="6" label="COM_PHOCAGALLERY_FIELD_HITS" description="COM_PHOCAGALLERY_FIELD_HITS_DESC" /> <field name="language" type="contentlanguage" label="JFIELD_LANGUAGE_LABEL" description="COM_PHOCAGALLERY_FIELD_LANGUAGE_IMAGE_DESC" class="form-select"> <option value="*">JALL</option> </field> <field name="tags" type="phocatags" multiple="1" label="COM_PHOCAGALLERY_FIELD_TAGS_LABEL" description="COM_PHOCAGALLERY_FIELD_TAGS_DESC" layout="joomla.form.field.list-fancy-select" size="1" /> </fieldset> <fields name="metadata"> <fieldset name="metadata" label="JGLOBAL_FIELDSET_METADATA_OPTIONS"> <!-- <field name="robots" type="list" label="JField_Metadata_Robots_Label" description="JField_Metadata_Robots_Desc" > <option value="">JGLOBAL_USE_GLOBAL</option> <option value="0">JGLOBAL_INDEX_FOLLOW</option> <option value="1">JGLOBAL_NOINDEX_FOLLOW</option> <option value="2">JGLOBAL_INDEX_NOFOLLOW</option> <option value="3">JGLOBAL_NOINDEX_NOFOLLOW</option> <option value="4">JGLOBAL_NO_ROBOTS_TAG</option> </field> <field name="author" type="text" label="JAUTHOR" description="JField_Metadata_Author_Desc" size="20" /> <field name="rights" type="text" label="JFIELD_META_RIGHTS_LABEL" description="JFIELD_META_RIGHTS_DESC" required="" filter="string" cols="30" rows="2" /> --> </fieldset> </fields> </form>