shell bypass 403
<?php
/**
* @package RSForm! Pro
* @copyright (C) 2007-2019 www.rsjoomla.com
* @license GPL, http://www.gnu.org/copyleft/gpl.html
*/
defined('_JEXEC') or die;
use Joomla\CMS\HTML\HTMLHelper;
use Joomla\CMS\Router\Route;
use Joomla\CMS\Language\Text;
use Joomla\CMS\Factory;
$showDescriptions = $this->params->get('show_descriptions', 0);
HTMLHelper::_('behavior.keepalive');
HTMLHelper::_('script', 'com_rsform/script.js', array('relative' => true, 'version' => 'auto'));
HTMLHelper::_('script', 'com_rsform/directory-edit.js', array('relative' => true, 'version' => 'auto'));
HTMLHelper::_('stylesheet', 'com_rsform/front.css', array('relative' => true, 'version' => 'auto'));
try
{
eval($this->directory->EditScript);
}
catch (Throwable $e)
{
Factory::getApplication()->enqueueMessage(htmlspecialchars($e->getMessage(), ENT_COMPAT, 'utf-8'), 'warning');
}
?>
<form action="<?php echo Route::_('index.php?option=com_rsform&view=directory&layout=edit&id='.$this->app->input->getInt('id',0)); ?>" method="post" name="adminForm" id="directoryEditForm" enctype="multipart/form-data">
<div class="rsform-dir-edit-container">
<?php
foreach ($this->fields as $field)
{
$caption = $field[RSFORM_DIR_CAPTION] . $field[RSFORM_DIR_REQUIRED];
$showTooltip = $showDescriptions && $field[RSFORM_DIR_DESCRIPTION];
?>
<div class="rsform-dir-row">
<div class="rsform-dir-caption">
<?php
if ($showTooltip)
{
echo '<div class="rsform-dir-tooltip">';
}
echo !empty($field[RSFORM_DIR_ID]) ? '<label for="'. $field[RSFORM_DIR_ID] . '">' . $caption . '</label>' : $caption;
if ($showTooltip)
{
echo '<span class="rsform-dir-tooltiptext">' . $field[RSFORM_DIR_DESCRIPTION] . '</span>';
echo '</div>';
}
?>
</div>
<div class="rsform-dir-input">
<?php
echo $field[RSFORM_DIR_INPUT];
if (!empty($field[RSFORM_DIR_VALIDATION]))
{
echo $field[RSFORM_DIR_VALIDATION];
}
?>
</div>
</div>
<?php
}
?>
</div>
<div class="form-actions">
<button type="button" data-directory-task="apply" class="btn btn-primary button"><?php echo Text::_('RSFP_SUBM_DIR_APPLY'); ?></button>
<button type="button" data-directory-task="save" class="btn btn-primary button"><?php echo Text::_('RSFP_SUBM_DIR_SAVE'); ?></button>
<button type="button" data-directory-task="back" class="btn btn-secondary"><?php echo Text::_('RSFP_SUBM_DIR_BACK'); ?></button>
</div>
<input type="hidden" name="option" value="com_rsform">
<input type="hidden" name="controller" value="directory">
<input type="hidden" name="task" value="">
<input type="hidden" name="id" value="<?php echo $this->app->input->getInt('id',0); ?>">
<input type="hidden" name="formId" value="<?php echo $this->params->get('formId'); ?>">
<input type="hidden" name="form[formId]" value="<?php echo $this->params->get('formId'); ?>">
</form>