shell bypass 403

UnknownSec Shell


name : CourseNoticeboardController.php
<?php

namespace App\Http\Controllers\Admin;

use App\Http\Controllers\Controller;
use App\Models\CourseNoticeboard;
use App\Models\CourseNoticeboardStatus;
use App\Models\Webinar;
use App\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Validator;

class CourseNoticeboardController extends Controller
{
    public function index(Request $request)
    {
        $this->authorize('admin_course_noticeboards_list');

        $query = $this->filters(CourseNoticeboard::query(), $request);

        $noticeboards = $query->with([
            'webinar',
            'creator' => function ($query) {
                $query->select('id', 'full_name');
            }
        ])
            ->orderBy('created_at', 'desc')
            ->paginate(10);

        $data = [
            'pageTitle' => trans('update.course_notices'),
            'noticeboards' => $noticeboards,
            'isCourseNotice' => true,
        ];

        $senderId = $request->get('sender_id');
        if (!empty($senderId)) {
            $data['sender'] = User::find($senderId);
        }

        return view('admin.noticeboards.lists', $data);
    }

    private function filters($query, $request)
    {
        $from = $request->get('from', null);
        $to = $request->get('to', null);
        $search = $request->get('search', null);
        $senderId = $request->get('sender_id', null);
        $color = $request->get('color', null);

        $query = fromAndToDateFilter($from, $to, $query, 'created_at');

        if (!empty($search)) {
            $query->where('title', 'like', "%$search%");
        }

        if (!empty($senderId)) {
            $query->where('creator_id', $senderId);
        }

        if (!empty($color)) {
            $query->where('color', $color);
        }

        return $query;
    }

    public function create()
    {
        $this->authorize('admin_course_noticeboards_send');

        $data = [
            'pageTitle' => trans('panel.new_noticeboard'),
            'isCourseNotice' => true,
        ];

        return view('admin.noticeboards.send', $data);
    }

    public function store(Request $request)
    {
        $this->authorize('admin_course_noticeboards_send');

        $data = $request->all();

        $this->validate($request, [
            'title' => 'required|string|max:255',
            'webinar_id' => 'required',
            'color' => 'required',
            'message' => 'required',
        ]);

        $webinar = Webinar::findOrFail($data['webinar_id']);

        CourseNoticeboard::create([
            'creator_id' => $webinar->teacher_id,
            'webinar_id' => $webinar->id,
            'color' => $data['color'],
            'title' => $data['title'],
            'message' => $data['message'],
            'created_at' => time()
        ]);

        $studentsIds = $webinar->getStudentsIds();
        if (count($studentsIds)) {
            $notifyOptions = [
                '[c.title]' => $webinar->title,
                '[item_title]' => $data['title'],
                '[time.date]' => dateTimeFormat(time(), 'j M Y H:i')
            ];

            foreach ($studentsIds as $studentId) {
                sendNotification("new_course_notice", $notifyOptions, $studentId);
            }
        }

        $toastData = [
            'title' => trans('public.request_success'),
            'msg' => trans('admin/main.send_noticeboard_success'),
            'status' => 'success'
        ];
        return redirect(getAdminPanelUrl().'/course-noticeboards')->with(['toast' => $toastData]);
    }

    public function edit($noticeboard_id)
    {
        $this->authorize('admin_course_noticeboards_edit');

        $noticeboard = CourseNoticeboard::where('id', $noticeboard_id)
            ->first();

        if (!empty($noticeboard)) {
            $data = [
                'pageTitle' => trans('panel.noticeboards'),
                'noticeboard' => $noticeboard,
                'isCourseNotice' => true,
            ];

            return view('admin.noticeboards.send', $data);
        }

        abort(404);
    }

    public function update(Request $request, $noticeboard_id)
    {
        $this->authorize('admin_course_noticeboards_edit');

        $noticeboard = CourseNoticeboard::where('id', $noticeboard_id)
            ->first();

        if (!empty($noticeboard)) {
            $data = $request->all();

            $this->validate($request, [
                'title' => 'required|string|max:255',
                'webinar_id' => 'required',
                'color' => 'required',
                'message' => 'required',
            ]);

            $webinar = Webinar::where('id', $data['webinar_id'])->first();

            if (!empty($webinar)) {

                $noticeboard->update([
                    'webinar_id' => $webinar->id,
                    'color' => $data['color'],
                    'title' => $data['title'],
                    'message' => $data['message'],
                    'created_at' => time()
                ]);

                CourseNoticeboardStatus::where('noticeboard_id', $noticeboard->id)->delete();

                $toastData = [
                    'title' => trans('public.request_success'),
                    'msg' => trans('admin/main.edit_noticeboard_success'),
                    'status' => 'success'
                ];
                return redirect(getAdminPanelUrl().'/course-noticeboards')->with(['toast' => $toastData]);
            }
        }

        abort(404);
    }

    public function delete($noticeboard_id)
    {
        $this->authorize('admin_course_noticeboards_delete');

        $noticeboard = CourseNoticeboard::where('id', $noticeboard_id)
            ->first();

        if (!empty($noticeboard)) {
            $noticeboard->delete();

            $toastData = [
                'title' => trans('public.request_success'),
                'msg' => trans('admin/main.delete_noticeboard_success'),
                'status' => 'success'
            ];
            return redirect(getAdminPanelUrl().'/course-noticeboards')->with(['toast' => $toastData]);
        }

        abort(404);
    }
}

© 2025 UnknownSec
Courses | Anyleson - Learning Platform
INR (₹)
India Rupee
$
United States Dollar

Courses

17 Courses
Course
Full Stack Web Development

Full Stack Web Development

in Web Development
83:20 Hours
10 Oct 2024
₹28,318.82
Course
Installment and Secure Host

Installment and Secure Host

in Business Strategy
5.00
1:30 Hours
16 Mar 2023
₹118
Course
New Update Features

New Update Features

in Language
4.00
1:30 Hours
21 Jun 2022
Free
Not conducted
Bestseller
New In-App Live System

New In-App Live System

in Communications
5.00
2:30 Hours
1 Mar 2026
₹11.80
Featured
New Learning Page

New Learning Page

in Lifestyle
5.00
3:30 Hours
1 Mar 2022
Free
Finished
How to Travel Around the World

How to Travel Around the World

in Lifestyle
5.00
2:30 Hours
2 Mar 2022
₹29.50

Type

More options