shell bypass 403
<?php namespace App\Http\Controllers\Auth; use App\Http\Controllers\Controller; use Illuminate\Contracts\Foundation\Application; use Illuminate\Contracts\View\Factory; use Illuminate\Contracts\View\View; use Illuminate\Foundation\Auth\SendsPasswordResetEmails; use Illuminate\Http\RedirectResponse; use Illuminate\Http\Request; use Illuminate\Support\Facades\Password; use Illuminate\Support\Facades\Validator; class ForgotPasswordController extends Controller { /* |-------------------------------------------------------------------------- | Password Reset Controller |-------------------------------------------------------------------------- | | This controller is responsible for handling password reset emails and | includes a trait which assists in sending these notifications from | your application to your users. Feel free to explore this trait. | */ use SendsPasswordResetEmails; /** * Create a new controller instance. * * @return void */ public function __construct() { $this->middleware('guest'); } /** * @return Application|Factory|View */ public function showLinkRequestForm(): View|Factory|Application { $pageConfigs = [ 'bodyClass' => "bg-full-screen-image", 'blankPage' => true, ]; return view('/auth/passwords/email', [ 'pageConfigs' => $pageConfigs, ]); } public function sendResetLinkEmail(Request $request): RedirectResponse { if (config('app.stage') == 'demo') { return redirect()->route('password.request')->withInput($request->only('email'))->with([ 'status' => 'error', 'message' => 'Sorry! This option is not available in demo mode', ]); } $rules = [ 'email' => 'required|email|exists:users', ]; $messages = [ 'email.exists' => __('locale.auth.user_not_exist'), ]; $validator = Validator::make($request->all(), $rules, $messages); if ($validator->fails()) { return redirect()->route('password.request')->withInput($request->only('email'))->with([ 'status' => 'warning', 'message' => $validator->errors()->first(), ]); } $status = Password::sendResetLink( $request->only('email') ); return $status === Password::RESET_LINK_SENT ? back()->with([ 'status' => 'success', 'message' => __('locale.auth.reset_link_sent'), ]) : back()->with([ 'status' => 'error', 'message' => __($status), ]); } }