shell bypass 403
<?php
namespace App\Http\Controllers\Customer;
use App\Http\Requests\Blacklists\StoreBlacklist;
use App\Models\Blacklists;
use App\Repositories\Contracts\BlacklistsRepository;
use Illuminate\Auth\Access\AuthorizationException;
use Illuminate\Contracts\Foundation\Application;
use Illuminate\Contracts\View\Factory;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\View\View;
use JetBrains\PhpStorm\NoReturn;
class BlacklistsController extends CustomerBaseController
{
protected BlacklistsRepository $blacklists;
/**
* BlacklistsController constructor.
*
* @param BlacklistsRepository $blacklists
*/
public function __construct(BlacklistsRepository $blacklists)
{
$this->blacklists = $blacklists;
}
/**
* @return Application|Factory|View
* @throws AuthorizationException
*/
public function index(): Factory|View|Application
{
$this->authorize('view_blacklist');
$breadcrumbs = [
['link' => url("dashboard"), 'name' => __('locale.menu.Dashboard')],
['name' => __('locale.menu.Blacklist')],
];
return view('customer.Blacklists.index', compact('breadcrumbs'));
}
/**
* @param Request $request
*
* @return void
* @throws AuthorizationException
*/
#[NoReturn] public function search(Request $request): void
{
$this->authorize('view_blacklist');
$columns = [
0 => 'responsive_id',
1 => 'uid',
2 => 'uid',
3 => 'number',
4 => 'reason',
5 => 'actions',
];
$totalData = Blacklists::where('user_id', Auth::user()->id)->count();
$totalFiltered = $totalData;
$limit = $request->input('length');
$start = $request->input('start');
$order = $columns[$request->input('order.0.column')];
$dir = $request->input('order.0.dir');
if (empty($request->input('search.value'))) {
$blacklists = Blacklists::where('user_id', Auth::user()->id)->offset($start)
->limit($limit)
->orderBy($order, $dir)
->get();
} else {
$search = $request->input('search.value');
$blacklists = Blacklists::where('user_id', Auth::user()->id)->whereLike(['uid', 'number', 'reason'], $search)
->offset($start)
->limit($limit)
->orderBy($order, $dir)
->get();
$totalFiltered = Blacklists::where('user_id', Auth::user()->id)->whereLike(['uid', 'number', 'reason'], $search)->count();
}
$data = [];
if ( ! empty($blacklists)) {
foreach ($blacklists as $blacklist) {
if ($blacklist->reason) {
$reason = $blacklist->reason;
} else {
$reason = '--';
}
$nestedData['responsive_id'] = '';
$nestedData['uid'] = $blacklist->uid;
$nestedData['number'] = $blacklist->number;
$nestedData['reason'] = $reason;
$data[] = $nestedData;
}
}
$json_data = [
"draw" => intval($request->input('draw')),
"recordsTotal" => intval($totalData),
"recordsFiltered" => intval($totalFiltered),
"data" => $data,
];
echo json_encode($json_data);
exit();
}
/**
* @return Application|Factory|View
* @throws AuthorizationException
*/
public function create(): Factory|View|Application
{
$this->authorize('create_blacklist');
$breadcrumbs = [
['link' => url("dashboard"), 'name' => __('locale.menu.Dashboard')],
['link' => url('blacklists'), 'name' => __('locale.menu.Blacklist')],
['name' => __('locale.blacklist.add_new_blacklist')],
];
return view('customer.Blacklists.create', compact('breadcrumbs'));
}
/**
* @param StoreBlacklist $request
*
* @return RedirectResponse
*/
public function store(StoreBlacklist $request): RedirectResponse
{
if (config('app.stage') == 'demo') {
return redirect()->route('customer.blacklists.index')->with([
'status' => 'error',
'message' => 'Sorry! This option is not available in demo mode',
]);
}
$this->blacklists->store($request->input());
return redirect()->route('customer.blacklists.index')->with([
'status' => 'success',
'message' => __('locale.blacklist.blacklist_successfully_added'),
]);
}
/**
* @param Blacklists $blacklist
*
* @return JsonResponse
*
* @throws AuthorizationException
*/
public function destroy(Blacklists $blacklist): JsonResponse
{
if (config('app.stage') == 'demo') {
return response()->json([
'status' => 'error',
'message' => 'Sorry! This option is not available in demo mode',
]);
}
$this->authorize('delete_blacklist');
$this->blacklists->destroy($blacklist);
return response()->json([
'status' => 'success',
'message' => __('locale.blacklist.blacklist_successfully_deleted'),
]);
}
/**
* Bulk Action with Enable, Disable and Delete
*
* @param Request $request
*
* @return JsonResponse
* @throws AuthorizationException
*/
public function batchAction(Request $request): JsonResponse
{
if (config('app.stage') == 'demo') {
return response()->json([
'status' => 'error',
'message' => 'Sorry! This option is not available in demo mode',
]);
}
$action = $request->get('action');
$ids = $request->get('ids');
if ($action == 'destroy') {
$this->authorize('delete_blacklist');
$this->blacklists->batchDestroy($ids);
return response()->json([
'status' => 'success',
'message' => __('locale.blacklist.blacklists_deleted'),
]);
}
return response()->json([
'status' => 'error',
'message' => __('locale.exceptions.invalid_action'),
]);
}
}