shell bypass 403
<?php namespace Modules\Zoom\Http\Controllers; use App\Http\Controllers\Controller; use Brian2694\Toastr\Facades\Toastr; use Exception; use Illuminate\Http\Request; use Illuminate\Support\Facades\Artisan; use Illuminate\Support\Facades\Auth; use Modules\Zoom\Entities\ZoomSetting; class SettingController extends Controller { public function settings() { $user = Auth::user(); $setting = ZoomSetting::where('user_id', Auth::id())->first(); if ($setting) { $setting->zoom_api_key_of_user = $user->zoom_api_key_of_user ?? ''; $setting->zoom_api_serect_of_user = $user->zoom_api_serect_of_user ?? ''; } return view('zoom::settings', compact('setting')); } public function updateSettings(Request $request) { if (demoCheck()) { return redirect()->back(); } $user = Auth::user(); $rules = [ 'package_id' => 'required', 'host_video' => 'required', 'participant_video' => 'required', 'join_before_host' => 'required', 'audio' => 'required', 'auto_recording' => 'required', 'approval_type' => 'required', 'mute_upon_entry' => 'required', 'waiting_room' => 'required', 'api_key' => 'required', 'secret_key' => 'required', ]; $this->validate($request, $rules, validationMessage($rules)); try { ZoomSetting::updateOrCreate([ 'user_id' => $user->id, ], [ 'user_id' => Auth::id() ?? 1, 'package_id' => $request['package_id'], 'host_video' => $request['host_video'], 'participant_video' => $request['participant_video'], 'join_before_host' => $request['join_before_host'], 'audio' => $request['audio'], 'auto_recording' => $request['auto_recording'], 'approval_type' => $request['approval_type'], 'mute_upon_entry' => $request['mute_upon_entry'], 'waiting_room' => $request['waiting_room'], ]); $user->zoom_api_key_of_user = $request->get('api_key'); $user->zoom_api_serect_of_user = $request->get('secret_key'); $user->save(); Artisan::call('config:clear'); Toastr::success(trans('common.Operation successful'), trans('common.Success')); return redirect()->back(); } catch (Exception $e) { GettingError($e->getMessage(), url()->current(), request()->ip(), request()->userAgent()); } } }