shell bypass 403
Cubjrnet7 Shell
: /home/eklavya/backups/joomla3oldsite/administrator/components/com_rsform/models/fields/ [ drwxr-xr-x ]
<?php /** * @package RSForm! Pro * @copyright (C) 2007-2019 www.rsjoomla.com * @license GPL, http://www.gnu.org/licenses/gpl-2.0.html */ defined('JPATH_PLATFORM') or die; require_once JPATH_ADMINISTRATOR . '/components/com_rsform/helpers/rsform.php'; JFormHelper::loadFieldClass('list'); class JFormFieldForms extends JFormFieldList { protected $type = 'Forms'; protected $firstValue; protected function getOptions() { $app = JFactory::getApplication(); $db = JFactory::getDbo(); $sortColumn = $app->getUserState('com_rsform.forms.filter_order', 'FormId'); $sortOrder = $app->getUserState('com_rsform.forms.filter_order_Dir', 'ASC'); $options = array(); $query = $db->getQuery(true) ->select($db->qn('FormId')) ->select($db->qn('FormTitle')) ->select($db->qn('Lang')) ->from($db->qn('#__rsform_forms')) ->order($db->qn($sortColumn) . ' ' . $db->escape($sortOrder)); if ($results = $db->setQuery($query)->loadObjectList()) { foreach ($results as $result) { $lang = RSFormProHelper::getCurrentLanguage($result->FormId); if ($lang != $result->Lang) { if ($translations = RSFormProHelper::getTranslations('forms', $result->FormId, $lang)) { foreach ($translations as $field => $value) { if (isset($result->$field)) { $result->$field = $value; } } } } $options[] = JHtml::_('select.option', $result->FormId, sprintf('(%d) %s', $result->FormId, $result->FormTitle)); } $first = reset($results); $this->firstValue = $first->FormId; } reset($options); return $options; } public function getInput() { $html = parent::getInput(); if (!empty($this->element['nobutton'])) { return $html; } if ($this->value) { $url = JRoute::_('index.php?option=com_rsform&view=forms&layout=edit&formId=' . $this->value); } elseif ($this->firstValue) { $url = JRoute::_('index.php?option=com_rsform&view=forms&layout=edit&formId=' . $this->firstValue); } else { $url = '#'; } $html .= ' <a id="formLink" target="_blank" href="' . $url . '" class="btn btn-primary">' . JText::_('COM_RSFORM_EDIT_FORM') . '</a>'; JFactory::getDocument()->addScriptDeclaration("function generateFormLink() { document.getElementById('formLink').setAttribute('href', 'index.php?option=com_rsform&view=forms&layout=edit&formId=' + document.getElementById('{$this->id}').value); }"); return $html; } }