shell bypass 403
<!DOCTYPE html>
<html lang="en" dir="{{ session('direction') == 2 ? 'rtl' : 'ltr' }}" class="light">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="csrf-token" content="{{ csrf_token() }}" />
<meta name="viewport" content="width=device-width,initial-scale=1">
<script>
const theme = localStorage.getItem('theme');
if (theme === 'dark') {
document.documentElement.classList.add('dark');
} else {
document.documentElement.classList.add('light');
}
</script>
<title>{{ @helper::appdata()->title }}</title>
<link rel="icon" type="image/png" sizes="16x16" href="{{ helper::image_path(@helper::appdata()->favicon) }}">
<!-- Favicon icon -->
<link rel="stylesheet"
href="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/css/bootstrap/bootstrap.min.css') }}">
<!-- Bootstrap CSS -->
<link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/css/fontawesome/all.min.css') }}">
<!-- FontAwesome CSS -->
<link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/css/toastr/toastr.min.css') }}">
<!-- FontAwesome CSS -->
<link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/css/style.css') }}">
<!-- Custom CSS -->
<link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/css/responsive.css') }}">
<!-- Responsive CSS -->
<style>
:root {
/* Color */
--bs-primary: {{ helper::appdata('')->web_primary_color }};
--bs-secondary: {{ helper::appdata('')->web_secondary_color }};
}
</style>
</head>
<body>
<div class="row align-items-center g-0 w-100 h-100vh position-relative">
<div class="col-lg-7 col-md-6 d-md-block d-none">
<div class="login-left-content">
<img src="{{ helper::image_path(@helper::appdata()->admin_auth_bg_image) }}"
class="h-100 w-100 object-fit-cover" alt="">
</div>
</div>
<div class="col-lg-5 col-md-6 overflow-hidden">
<div class="login-right-content login-forgot-padding row m-0">
<div class="pb-0 px-0">
<div class="login-logo mb-3">
<img src="{{ helper::image_path(@helper::appdata()->logo) }}" class="logo-img" alt="">
</div>
<div class="text-primary d-flex justify-content-between">
<div>
<h3 class="fw-bold text-color color-changer title-text mb-2">{{ trans('labels.sign_in') }}
</h3>
<p class="text-color color-changer">Please Login to continue to your account</p>
</div>
<!-- language -->
<div class="lag-btn dropdown border-0 shadow-none login-lang">
<a class="btn btn-sm border-0 p-0" role="button" data-bs-toggle="dropdown"
aria-expanded="false">
<img src="{{ helper::image_path(session()->get('flag')) }}" alt=""
class="rounded-5 language-width">
</a>
<ul
class="dropdown-menu rounded-1 p-0 mt-1 rounded-3 border-0 bg-body-secondary shadow overflow-hidden {{ session()->get('direction') == '2' ? 'min-dropdown-rtl' : 'min-dropdown' }}">
@foreach (helper::language() as $lang)
<li>
<a class="dropdown-item text-dark d-flex gap-2 align-items-center text-left px-2 py-2"
href="{{ URL::to('/language-' . $lang->code) }}">
<img src="{{ helper::image_path($lang->image) }}" alt=""
class="lag-img rounded-circle w-25">
{{ $lang->name }}
</a>
</li>
@endforeach
</ul>
</div>
</div>
<form class="my-3" method="POST" action="{{ URL::to('admin/check-login') }}" id="login-form">
@csrf
<div class="g-3 row">
<div class="form-group">
<label for="email"
class="form-label fs-7 text-color">{{ trans('labels.email') }}<span
class="text-danger"> *
</span></label>
<input id="email" type="email"
class="form-control extra-padding @error('email') is-invalid @enderror"
name="email" required="" autocomplete="email" autofocus
placeholder="{{ trans('labels.email') }}">
@error('email')
<span class="invalid-feedback"
role="alert"><strong>{{ $message }}</strong></span>
@enderror
</div>
<div class="form-group">
<label for="password"
class="form-label fs-7 text-color">{{ trans('labels.password') }}<span
class="text-danger">
* </span></label>
<div class="form-control extra-padding d-flex align-items-center gap-3">
<input id="password" type="password"
class="form-control border-0 p-0 @error('password') is-invalid @enderror"
name="password" required autocomplete="current-password"
placeholder="{{ trans('labels.password') }}">
@error('password')
<span class="invalid-feedback"
role="alert"><strong>{{ $message }}</strong></span>
@enderror
<span>
<a href="#"><i class="fa-light fa-eye-slash color-changer"
id="eye"></i></a>
</span>
</div>
</div>
</div>
<div class="d-flex mt-2 justify-content-between align-items-center gap-2">
<div class="form-group m-0 d-flex align-items-center">
<input class="form-check-input mt-0" type="checkbox" value="" name="check_terms"
id="check_terms" checked="" required="">
<label class="form-check-label cursor-pointer mx-1" for="check_terms">
<span class="fs-7 text-color">
{{ trans('labels.remember_me') }}
</span>
</label>
</div>
<div>
<a href="{{ URL::to('admin/forgot-password') }}" class="fs-7 fw-600 color-changer">
{{ trans('labels.forgot_password_q') }}
</a>
</div>
</div>
<button class="btn btn-primary px-4 login-btn w-100 my-3"
type="submit">{{ trans('labels.signin') }}</button>
@if (env('Environment') == 'sendbox')
<div class="border-bottom my-3">
</div>
<p class="text-center text-danger">Explore with <b
class="text-black color-changer">FREE</b> addons</p>
<div class="d-flex">
<button class="btn btn-secondary w-100 mt-2 mb-3 padding mx-2"
id="admin_free_addon_login">Admin login</button>
</div>
<p class="text-center text-danger">Explore with <b
class="text-black color-changer">ALL</b> addons</p>
<div class="d-flex">
<button class="btn btn-secondary w-100 mt-2 mb-3 padding mx-2" id="all-addon">Admin
login</button>
</div>
<p class="text-center text-danger"><b class="text-black color-changer">Demo Themes</b></p>
<div class="d-flex">
<a href="https://grocerygo.infotechgravity.com/?theme_id=1" target="_blank"
class="btn btn-primary w-100 mt-2 mb-3 padding mx-2">Theme - 1 (Included)</a>
<a href="https://grocerygo.infotechgravity.com/?theme_id=2" target="_blank"
class="btn btn-secondary w-100 mt-2 mb-3 padding mx-2">Theme - 2 (Addon)</a>
<a href="https://grocerygo.infotechgravity.com/?theme_id=3" target="_blank"
class="btn btn-secondary w-100 mt-2 mb-3 padding mx-2">Theme - 3 (Addon)</a>
</div>
@endif
</form>
</div>
</div>
</div>
</div>
<script src="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/js/jquery/jquery.min.js') }}"></script><!-- jQuery JS -->
<script src="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/js/bootstrap/bootstrap.bundle.min.js') }}"></script><!-- Bootstrap JS -->
<script src="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/js/toastr/toastr.min.js') }}"></script><!-- Toastr JS -->
<script>
toastr.options = {
"closeButton": true,
"progressBar": true
}
@if (Session::has('success'))
toastr.success("{{ session('success') }}");
@endif
@if (Session::has('error'))
toastr.error("{{ session('error') }}");
@endif
$(window).on("load", function() {
"use strict";
$('#preloader').fadeOut('slow')
});
</script>
<script>
function setLightMode() {
document.documentElement.classList.remove('dark');
document.documentElement.classList.add('light');
localStorage.setItem('theme', 'light');
}
function setDarkMode() {
document.documentElement.classList.remove('light');
document.documentElement.classList.add('dark');
localStorage.setItem('theme', 'dark');
}
</script>
<script>
function AdminFill(email, password) {
$('#email').val(email);
$('#password').val(password);
}
$(document).on("click", "#admin_free_addon_login", function() {
$("#admin_free_addon_login").attr("disabled", true);
$("#email").val('admin@gmail.com');
$("#password").val('123456');
SessionSave('free-addon');
});
$(document).on("click", "#all-addon", function() {
$("#all-addon").attr("disabled", true);
$("#email").val('admin@gmail.com');
$("#password").val('123456');
SessionSave('all-addon');
});
function SessionSave(addon = null) {
$.ajax({
headers: {
'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
},
type: "POST",
dataType: "json",
url: "{{ URL::to('add-on/session/save') }}",
data: {
'demo_type': addon,
},
success: function(response) {
$('#login-form').submit();
}
});
}
</script>
</body>
</html>