shell bypass 403
<div class="modal fade admin-query admin_view_modal" id="viewAttachment{{$submit_info->id}}"> <div class="modal-dialog modal_1000px modal-dialog-centered"> <div class="modal-content"> <div class="modal-header"> <h4 class="modal-title">{{__('common.View')}} {{__('assignment.Attachment')}}</h4> <button type="button" class="close " data-dismiss="modal"> <i class="ti-close "></i> </button> </div> <div class="modal-body"> {{-- {!! @$submit_info->answer !!} <hr> --}} @php $std_file =$submit_info->file; $ext =strtolower(str_replace('"]','',pathinfo($std_file, PATHINFO_EXTENSION))); $attached_file=str_replace('"]','',$std_file); $attached_file=str_replace('["','',$attached_file); $preview_files=['jpg','jpeg','png','heic','mp4','mov','mp3','mp4','pdf']; @endphp @if ($ext=='jpg' || $ext=='jpeg' || $ext=='png' || $ext=='heic') <img class="img-responsive mt-20" style="width: 100%; height:auto" src="{{asset($attached_file)}}"> @elseif($ext=='mp4' || $ext=='mov') <video class="mt-20 video_play" width="100%" controls> <source src="{{asset($attached_file)}}" type="video/mp4"> <source src="mov_bbb.ogg" type="video/ogg"> Your browser does not support HTML video. </video> @elseif($ext=='mp3') <audio class="mt-20 audio_play" controls style="width: 100%"> <source src="{{asset($attached_file)}}" type="audio/ogg"> <source src="horse.mp3" type="audio/mpeg"> Your browser does not support the audio element. </audio> @elseif($ext=='pdf') <object data='{{asset($attached_file)}}' type="application/pdf" width="100%" height="800"> <iframe src='{{asset($attached_file)}}' width="100%"height="800"> <p>This browser does not support PDF!</p> </iframe> </object> @endif @if (!in_array($ext,$preview_files)) <div class="alert alert-warning"> {{$ext}} File Not Previewable</a>. </div> @endif <div class="mt-40 d-flex justify-content-between" style="margin-top: 40px;"> {{-- <button type="button" class="primary-btn tr-bg" data-dismiss="modal">@lang('lang.cancel')</button> --}} @php $set_filename=time().'_'.$std_file; @endphp @if (file_exists($attached_file)) <a class="link_value theme_btn small_btn4" download="{{$set_filename}}" href="{{asset($attached_file)}}"> <span class="pl ti-download"> {{__('common.Download')}}</span></a> @endif </div> <hr> </div> </div> </div> </div>