shell bypass 403
<?php namespace App\Http\Controllers\Admin; use App\Http\Controllers\Controller; use App\Models\Quiz; use App\Models\WebinarChapterItem; use Illuminate\Http\Request; class WebinarQuizController extends Controller { public function store(Request $request) { $this->authorize('admin_webinars_edit'); $this->validate($request, [ 'webinar_id' => 'required|exists:webinars,id', 'quiz_id' => 'required', ]); $data = $request->all(); $quiz = Quiz::where('id', $data['quiz_id']) ->where('webinar_id', null) ->first(); if (!empty($quiz)) { $quiz->webinar_id = $data['webinar_id']; $quiz->chapter_id = $data['chapter_id'] ?? null; $quiz->save(); $this->handleChapterItem($quiz); return response()->json([ 'code' => 200, ], 200); } return response()->json([], 422); } public function edit(Request $request, $id) { $this->authorize('admin_webinars_edit'); $webinarQuiz = Quiz::where('id', $id) ->first(); if (!empty($webinarQuiz)) { return response()->json([ 'webinarQuiz' => $webinarQuiz ], 200); } return response()->json([], 422); } public function update(Request $request, $id) { $this->authorize('admin_webinars_edit'); $this->validate($request, [ 'webinar_id' => 'required', 'quiz_id' => 'required', ]); $data = $request->all(); $quiz = Quiz::findOrFail($data['quiz_id']); if (!empty($quiz)) { $quiz->update([ 'webinar_id' => $data['webinar_id'], 'chapter_id' => !empty($data['chapter_id']) ? $data['chapter_id'] : null, ]); $this->handleChapterItem($quiz); return response()->json([ 'code' => 200, ], 200); } return response()->json([], 422); } public function destroy(Request $request, $id) { $this->authorize('admin_webinars_edit'); $quiz = Quiz::where('id', $id)->first(); if (!empty($quiz)) { $quiz->delete(); } return redirect()->back(); } private function handleChapterItem($quiz) { $user = $quiz->creator; $checkChapterItem = WebinarChapterItem::where('user_id', $user->id) ->where('item_id', $quiz->id) ->where('type', WebinarChapterItem::$chapterQuiz) ->first(); if (!empty($quiz->chapter_id)) { if (empty($checkChapterItem)) { WebinarChapterItem::makeItem($user->id, $quiz->chapter_id, $quiz->id, WebinarChapterItem::$chapterQuiz); } elseif ($checkChapterItem->chapter_id != $quiz->chapter_id) { $checkChapterItem->delete(); // remove quiz from old chapter and assign it to new chapter WebinarChapterItem::makeItem($user->id, $quiz->chapter_id, $quiz->id, WebinarChapterItem::$chapterQuiz); } } else if (!empty($checkChapterItem)) { $checkChapterItem->delete(); } } }