shell bypass 403
<?php /** * @package RSForm! Pro * @copyright (C) 2007-2019 www.rsjoomla.com * @license GPL, http://www.gnu.org/copyleft/gpl.html */ defined('_JEXEC') or die; use Joomla\CMS\MVC\View\HtmlView; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\HTML\HTMLHelper; class RsformViewConditions extends HtmlView { public function display($tpl = null) { if (!Factory::getUser()->authorise('forms.manage', 'com_rsform')) { throw new Exception(Text::_('COM_RSFORM_NOT_AUTHORISED_TO_USE_THIS_SECTION')); } $lists = array(); $condition = $this->get('condition'); $allFields = $this->get('allFields'); $lists['allfields'] = HTMLHelper::_('select.genericlist', $allFields, 'component_id[]', array('multiple' => 'multiple', 'size' => 5, 'class' => 'advancedSelect conditionsSelect'), 'ComponentId', 'PropertyValue', $condition->component_id); $actions = array( HTMLHelper::_('select.option', 'show', Text::_('RSFP_CONDITION_SHOW')), HTMLHelper::_('select.option', 'hide', Text::_('RSFP_CONDITION_HIDE')) ); $lists['action'] = HTMLHelper::_('select.genericlist', $actions, 'action', array('class' => 'form-select d-inline-block w-auto'), 'value', 'text', $condition->action); $blocks = array( HTMLHelper::_('select.option', 1, Text::_('RSFP_CONDITION_BLOCK')), HTMLHelper::_('select.option', 0, Text::_('RSFP_CONDITION_FIELD')) ); $lists['block'] = HTMLHelper::_('select.genericlist', $blocks, 'block', array('class' => 'form-select d-inline-block w-auto'), 'value', 'text', $condition->block); $conditions = array( HTMLHelper::_('select.option', 'all', Text::_('RSFP_CONDITION_ALL')), HTMLHelper::_('select.option', 'any', Text::_('RSFP_CONDITION_ANY')) ); $lists['condition'] = HTMLHelper::_('select.genericlist', $conditions, 'condition', array('class' => 'form-select d-inline-block w-auto'), 'value', 'text', $condition->condition); $operators = array( HTMLHelper::_('select.option', 'is', Text::_('RSFP_CONDITION_IS')), HTMLHelper::_('select.option', 'is_not', Text::_('RSFP_CONDITION_IS_NOT')) ); $this->lang = $this->get('lang'); $this->operators = $operators; $this->allFields = $allFields; $this->optionFields = $this->get('optionFields'); $this->formId = $this->get('formId'); $this->close = Factory::getApplication()->input->getInt('close'); $this->condition = $condition; $this->lists = $lists; parent::display($tpl); } }