shell bypass 403
<?php
/**
* @package Joomla.Administrator
* @subpackage com_scheduler
*
* @copyright (C) 2021 Open Source Matters, Inc. <https://www.joomla.org>
* @license GNU General Public License version 2 or later; see LICENSE.txt
*/
namespace Joomla\Component\Scheduler\Administrator\Controller;
use Joomla\CMS\Language\Text;
use Joomla\CMS\MVC\Controller\AdminController;
use Joomla\CMS\MVC\Model\BaseDatabaseModel;
use Joomla\CMS\Router\Route;
use Joomla\Component\Scheduler\Administrator\Model\TaskModel;
use Joomla\Utilities\ArrayHelper;
// phpcs:disable PSR1.Files.SideEffects
\defined('_JEXEC') or die;
// phpcs:enable PSR1.Files.SideEffects
/**
* MVC Controller for TasksView.
*
* @since 4.1.0
*/
class TasksController extends AdminController
{
/**
* Proxy for the parent method.
*
* @param string $name The name of the model.
* @param string $prefix The prefix for the PHP class name.
* @param array $config Array of configuration parameters.
*
* @return BaseDatabaseModel
*
* @since 4.1.0
*/
public function getModel($name = 'Task', $prefix = 'Administrator', $config = ['ignore_request' => true]): BaseDatabaseModel
{
return parent::getModel($name, $prefix, $config);
}
/**
* Unlock a locked task, i.e., a task that is presumably still running but might have crashed and got stuck in the
* "locked" state.
*
* @return void
*
* @since 4.1.0
*/
public function unlock(): void
{
// Check for request forgeries
$this->checkToken();
/** @var integer[] $cid Items to publish (from request parameters). */
$cid = (array) $this->input->get('cid', [], 'int');
// Remove zero values resulting from input filter
$cid = array_filter($cid);
if (empty($cid)) {
$this->app->getLogger()
->warning(Text::_($this->text_prefix . '_NO_ITEM_SELECTED'), ['category' => 'jerror']);
} else {
/** @var TaskModel $model */
$model = $this->getModel();
// Make sure the item IDs are integers
$cid = ArrayHelper::toInteger($cid);
// Unlock the items.
try {
$model->unlock($cid);
$errors = $model->getErrors();
$noticeText = null;
if ($errors) {
$this->app->enqueueMessage(Text::plural($this->text_prefix . '_N_ITEMS_FAILED_UNLOCKING', \count($cid)), 'error');
} else {
$noticeText = $this->text_prefix . '_N_ITEMS_UNLOCKED';
}
if (\count($cid)) {
$this->setMessage(Text::plural($noticeText, \count($cid)));
}
} catch (\Exception $e) {
$this->setMessage($e->getMessage(), 'error');
}
}
$this->setRedirect(
Route::_(
'index.php?option=' . $this->option . '&view=' . $this->view_list
. $this->getRedirectToListAppend(),
false
)
);
}
}