shell bypass 403
<?php /* * @package Joomla * @copyright Copyright (C) 2005 Open Source Matters. All rights reserved. * @license http://www.gnu.org/copyleft/gpl.html GNU/GPL, see LICENSE.php * * @component Phoca Gallery * @copyright Copyright (C) Jan Pavelka www.phoca.cz * @license http://www.gnu.org/copyleft/gpl.html GNU/GPL */ // Check to ensure this file is included in Joomla! defined('_JEXEC') or die(); use Joomla\CMS\MVC\Controller\FormController; use Joomla\CMS\Factory; use Joomla\CMS\Language\Text; use Joomla\CMS\Session\Session; use Joomla\CMS\Router\Route; jimport('joomla.application.component.controllerform'); class PhocaGalleryCpControllerPhocaGalleryImg extends FormController { protected $option = 'com_phocagallery'; function __construct($config=array()) { parent::__construct($config); } protected function allowAdd($data = array()) { $user = Factory::getUser(); $allow = null; $allow = $user->authorise('core.create', 'com_phocagallery'); if ($allow === null) { return parent::allowAdd($data); } else { return $allow; } } protected function allowEdit($data = array(), $key = 'id') { $user = Factory::getUser(); $allow = null; $allow = $user->authorise('core.edit', 'com_phocagallery'); if ($allow === null) { return parent::allowEdit($data, $key); } else { return $allow; } } /* function deletethumbs() { $cid = Factory::getApplication()->input->get( 'cid', array(0), 'get', 'array' ); $model = &$this->getModel( 'phocagallery' ); if ($model->deletethumbs($cid[0])) { $msg = Text::_( 'COM_PHOCAGALLERY_SUCCESS_THUMBNAIL_DELETE' ); } else { $msg = Text::_( 'COM_PHOCAGALLERY_ERROR_THUMBNAIL_DELETE' ); } $link = 'index.php?option=com_phocagallery&view=phocagalleryimgs'; $this->setRedirect($link, $msg); } */ function rotate() { $id = Factory::getApplication()->input->get( 'id', 0, 'get', 'int' ); $angle = Factory::getApplication()->input->get( 'angle', 90, 'get', 'int' ); $model = $this->getModel( 'phocagalleryimg' ); $message = ''; $rotateReturn = $model->rotate($id, $angle, $message); if (!$rotateReturn) { $message = PhocaGalleryUtils::setMessage($message, Text::_( 'COM_PHOCAGALLERY_ERROR_IMAGE_ROTATE' )); } else { $message = Text::_( 'COM_PHOCAGALLERY_SUCCESS_IMAGE_ROTATE' ); } $link = 'index.php?option=com_phocagallery&view=phocagalleryimgs'; $this->setRedirect($link, $message); } /* *if thumbnails are created - show message after creating thumbnails - show that files was saved in database */ function thumbs() { $msg = Text::_( 'COM_PHOCAGALLERY_SUCCESS_SAVE_MULTIPLE' ); $countcat = Factory::getApplication()->input->get( 'countcat', 0, 'get', 'int' ); $countimg = Factory::getApplication()->input->get( 'countimg', 0, 'get', 'int' ); //$imagesid = JFactory::getApplication()->input->get( 'imagesid', 0, 'get', 'int' ); $link = 'index.php?option=com_phocagallery&view=phocagalleryimgs&countcat='.$countcat.'&countimg='.$countimg.'&imagesid='.md5(time()); //$link = 'index.php?option=com_phocagallery&view=phocagalleryimgs'; $this->setRedirect($link, $msg); } function disablethumbs() { $model = $this->getModel( 'phocagalleryimg' ); if ($model->disableThumbs()) { $msg = Text::_('COM_PHOCAGALLERY_SUCCESS_DISABLE_THUMBS'); } else { $msg = Text::_('COM_PHOCAGALLERY_ERROR_DISABLE_THUMBS'); } $link = 'index.php?option=com_phocagallery&view=phocagalleryimgs'; $this->setRedirect($link, $msg); } function recreate() { $cid = Factory::getApplication()->input->get( 'cid', array(), '', 'array' ); \Joomla\Utilities\ArrayHelper::toInteger($cid); if (count( $cid ) < 1) { throw new Exception(Text::_( 'COM_PHOCAGALLERY_SELECT_ITEM_RECREATE' ), 500); return false; } $message = ''; $model = $this->getModel( 'phocagalleryimg' ); if(!$model->recreate($cid, $message)) { $message = PhocaGalleryUtils::setMessage($message, Text::_( 'COM_PHOCAGALLERY_ERROR_THUMBS_REGENERATING' )); } else { $message = Text::_( 'COM_PHOCAGALLERY_SUCCESS_THUMBS_REGENERATING' ); } $this->setRedirect( 'index.php?option=com_phocagallery&view=phocagalleryimgs', $message ); } public function batch($model = null) { Session::checkToken() or jexit(Text::_('JINVALID_TOKEN')); // Set the model $model = $this->getModel('phocagalleryimg', '', array()); // Preset the redirect $this->setRedirect(Route::_('index.php?option=com_phocagallery&view=phocagalleryimgs'.$this->getRedirectToListAppend(), false)); return parent::batch($model); } } ?>