shell bypass 403
<?php
$b_title = "";
$b_desc = "";
$b_image = "";
$meta_title = "";
$meta_desc = "";
$meta_keyword = "";
if(isset($blog_res)){
$btnname = "Update";
foreach($blog_res as $row){
$blog_id = $row->id;
$b_title = $row->title;
$b_image = $row->image;
$b_desc = $row->description;
$meta_title = $row->meta_title;
$meta_desc = $row->meta_desc;
$meta_keyword = $row->meta_keyword;
}
$method = "admin/blog_update/".base64_encode($blog_id);
}else{
$method = "admin/blog_process";
$btnname = "Submit";
}
?>
<?php $this->load->view('admin/sidebar');?>
</div>
<div class="content-right">
<?php $this->load->view('admin/header');?>
<div class="main-content">
<div class="dash-block">
<h5 class="border-bottom pb-3">Add Blog</h5>
<div class="form-element">
<?=$this->session->flashdata('success_msg')?>
<form method="post" action="<?=base_url($method)?>" enctype= 'multipart/form-data'>
<div class="row">
<div class="col-md-12">
<div class="form-group row">
<label for="inputPassword" class="col-sm-2 col-form-label"> Title </label>
<div class="col-sm-10">
<input type="text" class="form-control" id="inputPassword" placeholder="Enter Blog Title" name="b_title" required value="<?=$b_title?>">
<span class="text-danger"><?=form_error("b_title")?></span>
</div>
</div>
</div>
<div class="col-md-12">
<div class="form-group row">
<label for="inputPassword" class="col-sm-2 col-form-label"> Description </label>
<div class="col-sm-8">
<textarea class="form-control ckeditor" id="editor" style="height: 80px !important;" name="b_desc" required="required"><?=$b_desc?></textarea>
</div>
</div>
</div>
<div class="col-md-12">
<div class="form-group row">
<label for="inputPassword" class="col-sm-2 col-form-label"> Meta Title </label>
<div class="col-sm-8">
<input type="text" class="form-control" id="inputPassword" placeholder="Enter Meta Title" name="meta_title" required value="<?=$meta_title?>">
<span class="text-danger"><?=form_error("meta_title")?></span>
</div>
</div>
</div>
<div class="col-md-12">
<div class="form-group row">
<label for="inputPassword" class="col-sm-2 col-form-label"> Meta Description </label>
<div class="col-sm-8">
<input type="text" class="form-control" id="inputPassword" placeholder="Enter Meta Description" name="meta_desc" required value="<?=$meta_desc?>">
<span class="text-danger"><?=form_error("meta_desc")?></span>
</div>
</div>
</div>
<div class="col-md-12">
<div class="form-group row">
<label for="inputPassword" class="col-sm-2 col-form-label"> Meta Keyword </label>
<div class="col-sm-8">
<input type="text" class="form-control" id="inputPassword" placeholder="Enter Meta Keyword" name="meta_keyword" required value="<?=$meta_keyword?>">
<span class="text-danger"><?=form_error("meta_keyword")?></span>
</div>
</div>
</div>
<div class="col-md-12">
<div class="row">
<div class="col-md-16">
<div class="form-group row">
<label for="inputPassword" class="col-sm-4 col-form-label"> Image </label>
<div class="col-sm-8">
<div class="input-group">
<div class="custom-file">
<input type="file" class="custom-file-input p_image" id="inputGroupFile04" name="blogfile[]">
<label class="custom-file-label file_name" for="inputGroupFile04"></label>
</div>
</div>
<small>File format should be valid JPG,PNG. <strong>(680*1055)</strong></small>
<?php
if($b_image!=""){?>
<img src="<?=base_url('assets/uploads/blog/medium/'.$b_image)?>" width="100px"/>
<?php
}
?>
</div>
</div>
</div>
</div>
</div>
<div class="col-md-8 offset-md-2 mt-2">
<button class="btn btn-submit"><?=$btnname?></button>
</div>
</div>
</form>
</div>
</div>
</div>
<?php include'footer.php';?>
</div>
</div>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/bootstrap.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/select2.min.js')?>"></script>
<script type="text/javascript" src="<?=base_url('admin_assets/js/custom.js')?>"></script>
<script src="<?=base_url('admin_assets/js/css3-animate-it.js')?>"></script>
<script src="<?=base_url('admin_assets/ckeditor/ckeditor.js')?>"></script>
<script src="<?=base_url('admin_assets/ckeditor/samples/js/sample.js')?>"></script>
<script type="text/javascript">
$(document).ready(function() {
$('.js-example-basic-multiple').select2();
});
$(document).ready(function(){
$('.p_image').change(function(e){
var fileName = e.target.files[0].name;
//alert('The file "' + fileName + '" has been selected.');
$(".file_name").text(fileName);
});
});
</script>
</body>
</html>