shell bypass 403
<section class="properties pt-0" style="margin-top: 35px;">
<div class="content-properties-searcher">
<div class="container">
<div class="content-searcher-submit-extra">
<?php echo $this->Form->create('Inmueble', array('url' => array('controller' => 'inmuebles', 'action' => 'home'), 'class' => 'form', 'role' => 'form', 'type' => 'get', 'style' => 'margin-bottom:0px;'));
?>
<div>
<div>
<div class="content-searcher-submit">
<div class="row">
<div class="col-lg-2">
<?php echo $this->Form->input('id_gestion', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => '¿Qué buscas?', 'options' => array('1' => 'Comprar', '2' => 'Alquiler'), 'value' => (!empty($this->params->query['id_gestion'])) ? $this->params->query['id_gestion'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select">', 'after' => '</div>', 'div' => 'input select clearfix')) ?>
</div>
<div class="col-lg-3">
<?php echo $this->Form->input('id_tipo_inmueble', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Tipo de inmueble', 'options' => $buscadorTipos, 'value' => (!empty($this->params->query['id_tipo_inmueble'])) ? $this->params->query['id_tipo_inmueble'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select">', 'after' => '</div>', 'div' => 'input select clearfix')) ?>
</div>
<div class="col-lg-2">
<?php echo $this->Form->input('id_provincia', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Provincia', 'options' => $buscadorProvincias, 'value' => (!empty($this->params->query['id_provincia'])) ? $this->params->query['id_provincia'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select">', 'after' => '</div>', 'div' => 'input select clearfix')) ?>
</div>
<div class="col-lg-3">
<?php echo $this->Form->input('id_localidad', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Localidad', 'options' => $buscadorLocalidades, 'value' => (!empty($this->params->query['id_localidad'])) ? $this->params->query['id_localidad'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select">', 'after' => '</div>', 'div' => 'input select clearfix')) ?>
</div>
<div class="col-lg-2">
<?php echo $this->Form->input('id_zona', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Zona', 'options' => $buscadorZonas, 'value' => (!empty($this->params->query['id_zona'])) ? $this->params->query['id_zona'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select">', 'after' => '</div>', 'div' => 'input select clearfix')) ?>
</div>
</div>
</div>
</div>
</div>
<div class="row">
<div class="col-lg-2">
<?php echo $this->Form->input('habitaciones', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Habs.', 'options' => array('1' => 'Mínimo 1', '2' => 'Mínimo 2', '3' => 'Mínimo 3', '4' => '4 o +'), 'value' => (!empty($this->params->query['habitaciones'])) ? $this->params->query['habitaciones'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select d-inline">', 'after' => '</div>', 'div' => 'input select d-inline')) ?>
</div>
<div class="col-lg-2">
<?php echo $this->Form->input('banos', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Baños', 'options' => array('1' => '1', '2' => '2', '3' => '3', '4' => '4'), 'value' => (!empty($this->params->query['banos'])) ? $this->params->query['banos'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select d-inline">', 'after' => '</div>', 'div' => 'input select d-inline')) ?>
</div>
<div class="col-lg-2">
<?php echo $this->Form->input('precio_min', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Precio desde', 'options' => array('10000' => '10.000 €', '30000' => '30.000 €', '100000' => '100.000 €', '150000' => '150.000 €', '200000' => '200.000 €', '300000' => '300.000 €', '400000' => '400.000 €', '500000' => '500.000 €'), 'value' => (!empty($this->params->query['precio_min'])) ? $this->params->query['precio_min'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select d-inline">', 'after' => '</div>', 'div' => 'input select d-inline')) ?>
</div>
<div class="col-lg-2">
<?php echo $this->Form->input('precio_max', array('onchange' => 'this.form.submit()', 'label' => false, 'empty' => 'Precio hasta', 'options' => array('10000' => '10.000 €', '30000' => '30.000 €', '100000' => '100.000 €', '150000' => '150.000 €', '200000' => '200.000 €', '300000' => '300.000 €', '400000' => '400.000 €', '500000' => '500.000 €'), 'value' => (!empty($this->params->query['precio_max'])) ? $this->params->query['precio_max'] : '', 'format' => array('before', 'between', 'input', 'after', 'label', 'error'), 'before' => '<div class="div-select d-inline">', 'after' => '</div>', 'div' => 'input select d-inline')) ?>
</div>
<div class="col-lg-4">
<div class="row" style="margin-top: 18px;">
<div class="col-lg-4">
<input type="checkbox" name="jardin" onchange="this.form.submit()" <?php if(!empty($this->params->query['jardin']) && $this->params->query['jardin'] == 'on') { echo "checked"; } ?> > <span>Jardín</span>
</div>
<div class="col-lg-4">
<input type="checkbox" name="ascensor" onchange="this.form.submit()" <?php if(!empty($this->params->query['ascensor']) && $this->params->query['ascensor'] == 'on') { echo "checked"; } ?>> <span>Ascensor</span>
</div>
<div class="col-lg-4">
<input type="checkbox" name="terraza" onchange="this.form.submit()" <?php if(!empty($this->params->query['terraza']) && $this->params->query['terraza'] == 'on') { echo "checked"; } ?>> <span>Terraza</span>
</div>
<div class="col-lg-4">
<input type="checkbox" name="garaje" onchange="this.form.submit()" <?php if(!empty($this->params->query['garaje']) && $this->params->query['garaje'] == 'on') { echo "checked"; } ?>> <span>Garaje</span>
</div>
<div class="col-lg-4">
<input type="checkbox" name="calefaccion" onchange="this.form.submit()" <?php if(!empty($this->params->query['calefaccion']) && $this->params->query['calefaccion'] == 'on') { echo "checked"; } ?>> <span>Calefacción</span>
</div>
<div class="col-lg-4">
<input type="checkbox" name="piscina" onchange="this.form.submit()" <?php if(!empty($this->params->query['piscina']) && $this->params->query['piscina'] == 'on') { echo "checked"; } ?>> <span>Piscina</span>
<?php //echo $this->Form->input('order', array('type' => 'hidden')); ?>
</div>
</div>
</div>
<div class="offset-lg-3 col-lg-3 mt-3 text-center">
<input type="checkbox" name="tour_virtual" onchange="this.form.submit()" <?php if(!empty($this->params->query['tour_virtual']) && $this->params->query['tour_virtual'] == 'on') { echo "checked"; } ?>> <span style="color: #ff141a;">Ver inmuebles con tour virtual</span>
<?php echo $this->Form->input('order', array('type' => 'hidden')); ?>
</div>
<div class="col-lg-3 mt-3 text-center">
<a href="/inmuebles/vista-mapa" style="font-style: normal;font-weight: 600;font-size: 17px;line-height: 30px;color: #999999;"><i class="fa fa-map-marker"></i> Búsqueda por mapa</a>
</div>
</div>
<div class="advanced-filter-properties" style="display: none;">
<div class="row">
<div class="col-lg-auto col-12 p-0">
<?php
if(!empty($this->params->parametros) && $this->params->parametros == 'alquiler') {
$gestionBuscador = '2';
}elseif(!empty($this->data['Inmueble']['id_gestion'])) {
$gestionBuscador = $this->data['Inmueble']['id_gestion'];
}else {
$gestionBuscador = '';
}
debug($this->params->query['vista']);
?>
<?php echo $this->Form->input('limit', array('type' => 'hidden', 'value' => '0')); ?>
<?php echo $this->Form->input('vista', array('type' => 'hidden', 'value' => (!empty($this->params->query['vista'])) ? $this->params->query['vista'] : 'lista')) ?>
</div>
</div>
</div>
<?php echo $this->Form->end() ?>
</div>
</div>
</div>
</section>