shell bypass 403
<?php
namespace App\Http\Controllers\front;
use App\Http\Controllers\Controller;
use App\Models\Gallery;
use App\Models\Team;
use App\Models\Faq;
use App\Models\PrivacyPolicy;
use App\Models\RefundPolicy;
use App\Models\TermsCondition;
use App\Models\About;
use App\Models\Contact;
use App\Models\Subscriber;
use App\Helpers\helper;
use App\Models\Time;
use App\Models\Ratting;
use Illuminate\Http\Request;
use Lunaweb\RecaptchaV3\Facades\RecaptchaV3;
class OtherPagesController extends Controller
{
public function faq(Request $request)
{
$getfaqs = Faq::select("id", "title", "description")->orderBy('reorder_id')->get();
return view('web.faq', compact('getfaqs'));
}
public function privacypolicy(Request $request)
{
$getprivacypolicy = PrivacyPolicy::first();
return view('web.privacypolicy', compact('getprivacypolicy'));
}
public function termsconditions(Request $request)
{
$gettermscondition = TermsCondition::first();
return view('web.termsconditions', compact('gettermscondition'));
}
public function gallery(Request $request)
{
$getgalleries = Gallery::select(\DB::raw("CONCAT('" . url(env('ASSETSPATHURL') . 'admin-assets/images/about') . "/', image) AS image_url"))->orderByDesc('id')->get();
return view('web.gallery', compact('getgalleries'));
}
public function ourteam(Request $request)
{
$getteams = Team::select("id", "title", "subtitle", "fb", "youtube", "insta", "description", \DB::raw("CONCAT('" . url(env('ASSETSPATHURL') . 'admin-assets/images/about') . "/', image) AS image_url"))->orderBydesc('id')->get();
return view('web.ourteam', compact('getteams'));
}
public function aboutus(Request $request)
{
$getaboutus = About::first();
return view('web.aboutus', compact('getaboutus'));
}
// contact-us
public function contactindex(Request $request)
{
$timedata = Time::where('day', date('l'))->first();
$gettimings = Time::all();
return view('web.contactus', compact('timedata', 'gettimings'));
}
public function contactstore(Request $request)
{
if (@helper::checkaddons('recaptcha')) {
if (helper::appdata('')->recaptcha_version == 'v2') {
$request->validate([
'g-recaptcha-response' => 'required'
], [
'g-recaptcha-response.required' => 'The g-recaptcha-response field is required.'
]);
}
if (helper::appdata('')->recaptcha_version == 'v3') {
$score = RecaptchaV3::verify($request->get('g-recaptcha-response'), 'contact');
if ($score <= helper::appdata()->score_threshold) {
return redirect()->back()->with('error', trans('messages.recaptcha_msg'));
}
}
}
$contact = new Contact();
$contact->firstname = $request->fname;
$contact->lastname = $request->lname;
$contact->email = $request->email;
$contact->message = $request->message;
$contact->save();
return redirect()->back()->with('success', trans('messages.success'));
}
// testimonials
public function testimonials(Request $request)
{
$testimonials = Ratting::with('user_info')->orderByDesc('ratting.id')->paginate(9);
return view('web.testimonials', compact('testimonials'));
}
// refund-policy
public function refundpolicy(Request $request)
{
$getrefundpolicy = RefundPolicy::first();
return view('web.refundpolicy', compact('getrefundpolicy'));
}
public function Subscribe(Request $request)
{
$newsubscribe = new Subscriber();
$newsubscribe->email = $request->email;
$newsubscribe->save();
return redirect()->back()->with('success', trans('messages.success'));
}
}