shell bypass 403
<?
class BackendHelper extends AppHelper {
public $helpers = array('Form', 'Html');
public function getOrden($orden, $link, $total) {
$out = '';
$orden = (int) $orden;
$total = (int) $total;
if ($orden != 1) {
$linkUP = $link;
$linkUP['orden'] = 'up';
$out .= $this->Html->link('<i class="fa fa-arrow-up"></i>', $linkUP, array('escape' => false));
}
if ($orden != $total) {
$linkDOWN = $link;
$linkDOWN['orden'] = 'down';
$out .= (($orden != 1) ? ' ' : '') . $this->Html->link('<i class="fa fa-arrow-down"></i>', $linkDOWN, array('escape' => false));
}
return $out;
}
public function getContactoOrigen($contacto, $origenes) {
$out = null;
if (!empty($contacto['entidad']) && !empty($contacto['entidad_id']) && array_key_exists($contacto['entidad'], $origenes)) {
switch ($contacto['entidad']) {
case 'inmueble':
$entidad = $origenes[$contacto['entidad']][(int) $contacto['entidad_id']]['Inmueble'];
$action = (empty($entidad['origen_inmueble_id'])) ? 'edit' : 'show';
$out = $this->Html->link($entidad['titulo_corto'] . ' (Ref. ' . $entidad['referencia'] . ')', array('controller' => 'private_inmuebles', 'action' => $action, 'id' => $entidad['id']));
break;
}
} else {
$out = $contacto['pagina'];
}
return $out;
}
public function getGaleriaShow($galeria) {
$out = null;
if (empty($galeria['video_code'])) {
$out = $galeria['imagen'];
} else {
switch ($galeria['video_source']) {
case 'youtube':
$out = 'https://www.youtube.com/watch?v=' . $galeria['video_code'];
break;
case 'vimeo':
$out = 'http://vimeo.com/' . $galeria['video_code'];
break;
}
}
return $out;
}
}