hestiacp/web/add/cron/index.php

<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();
$TAB = 'CRON';

// Main include
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

// Check POST request
if (!empty($_POST['ok'])) {

    // Check token
    verify_csrf($_POST);

    // Check empty fields
    if ((!isset($_POST['v_min'])) || ($_POST['v_min'] == '')) {
        $errors[] = _('minute');
    }
    if ((!isset($_POST['v_hour'])) || ($_POST['v_hour'] == '')) {
        $errors[] = _('hour');
    }
    if ((!isset($_POST['v_day'])) || ($_POST['v_day'] == '')) {
        $errors[] = _('day');
    }
    if ((!isset($_POST['v_month'])) || ($_POST['v_month'] == '')) {
        $errors[] = _('month');
    }
    if ((!isset($_POST['v_wday'])) || ($_POST['v_wday'] == '')) {
        $errors[] = _('day of week');
    }
    if ((!isset($_POST['v_cmd'])) || ($_POST['v_cmd'] == '')) {
        $errors[] = _('cmd');
    }
    if (!empty($errors[0])) {
        foreach ($errors as $i => $error) {
            if ($i == 0) {
                $error_msg = $error;
            } else {
                $error_msg = $error_msg.", ".$error;
            }
        }
        $_SESSION['error_msg'] = sprintf(_('Field "%s" can not be blank.'), $error_msg);
    }

    // Protect input
    $v_min = quoteshellarg($_POST['v_min']);
    $v_hour = quoteshellarg($_POST['v_hour']);
    $v_day = quoteshellarg($_POST['v_day']);
    $v_month = quoteshellarg($_POST['v_month']);
    $v_wday = quoteshellarg($_POST['v_wday']);
    $v_cmd = quoteshellarg($_POST['v_cmd']);

    // Add cron job
    if (empty($_SESSION['error_msg'])) {
        exec(HESTIA_CMD."v-add-cron-job ".$user." ".$v_min." ".$v_hour." ".$v_day." ".$v_month." ".$v_wday." ".$v_cmd, $output, $return_var);
        check_return_code($return_var, $output);
        unset($output);
    }

    // Flush field values on success
    if (empty($_SESSION['error_msg'])) {
        $_SESSION['ok_msg'] = _('CRON_CREATED_OK');
        unset($v_min);
        unset($v_hour);
        unset($v_day);
        unset($v_month);
        unset($v_wday);
        unset($v_cmd);
        unset($output);
    }
}

if (empty($v_cmd)) {
    $v_cmd = '';
}
if (empty($v_month)) {
    $v_month = '';
}
if (empty($v_day)) {
    $v_day = '';
}
if (empty($v_wday)) {
    $v_wday = '';
}
if (empty($v_hour)) {
    $v_hour = '';
}
if (empty($v_min)) {
    $v_min = '';
}
// Render
render_page($user, $TAB, 'add_cron');

// Flush session messages
unset($_SESSION['error_msg']);
unset($_SESSION['ok_msg']);