shell bypass 403
<?php
namespace App\Http\Controllers\admin;
use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Validator;
use App\Models\User;
use Auth;
class UserController extends Controller
{
//
public function __construct()
{
$this->middleware('auth');
$this->middleware('isAdmin');
}
public function index()
{
$data['users'] = User::all();
return view('admin/user',$data);
}
public function add_user()
{
return view('admin/add_user');
}
public function insert(Request $req)
{
$validation = Validator::make($req->all(),[
'UserName' => 'required',
'UserEmail' => 'required',
'Password' => 'required|same:ConformPassword',
],[
'UserName.required' => 'Name Is Required',
'UserEmail.required' => 'Email Is Required',
'Password.required' => 'Password Is Required',
'Password.same' => 'Password Not Match',
]);
if(!$validation->passes())
{
return response()->json(['error'=>$validation->errors()]);
}
else
{
$AddUser = new User;
$AddUser->name = $req->UserName;
$AddUser->email = $req->UserEmail;
$AddUser->password = hash::make($req->Password);
$AddUser->save();
return response()->json(['success'=>'User Add Successfully']);
}
}
public function update(Request $req)
{
$validation = Validator::make($req->all(),[
'UserName' => 'required',
'UserEmail' => 'required',
'NewPassword' => 'required|same:ConformPassword',
],[
'UserName.required' => 'Name Is Required',
'UserEmail.required' => 'Email Is Required',
'NewPassword.required' => 'Password Is Required',
'NewPassword.same' => 'Password Not Match',
]);
if(!$validation->passes())
{
return response()->json(['error'=>$validation->errors()]);
}
else
{
$id = $req->UserId;
$UpdateUser = User::find($id);
$UpdateUser->name = $req->UserName;
$UpdateUser->email = $req->UserEmail;
$UpdateUser->password = hash::make($req->NewPassword);
$UpdateUser->save();
if(auth::user()->id == $id)
{
auth::logout();
return redirect('/');
}
return response()->json(['success'=>'User Update Successfully']);
}
}
public function delete(Request $req)
{
$id = $req->id;
$DeleteUser = User::find($id);
$DeleteUser->delete();
}
}