hestiacp/web/inc/secure_login.php

<?php

$login_url_skip = 0;
if (($_SERVER['SCRIPT_FILENAME']=='/usr/local/hestia/web/reset/mail/index.php') ||
    ($_SERVER['SCRIPT_FILENAME']=='/usr/local/hestia/web//reset/mail/index.php') ||
    ($_SERVER['SCRIPT_FILENAME']=='/usr/local/hestia/web/reset/mail/set-ar.php') ||
    ($_SERVER['SCRIPT_FILENAME']=='/usr/local/hestia/web//reset/mail/set-ar.php') ||
    ($_SERVER['SCRIPT_FILENAME']=='/usr/local/hestia/web/reset/mail/get-ar.php') ||
    ($_SERVER['SCRIPT_FILENAME']=='/usr/local/hestia/web//reset/mail/get-ar.php') ||
    (substr($_SERVER['SCRIPT_FILENAME'], 0, 21)=='/usr/local/hestia/bin/')) $login_url_skip = 1;

if ($login_url_skip == 0) {
    if (!isset($login_url_loaded)) {
        $login_url_loaded=1;
        if (file_exists('/usr/local/hestia/web/inc/login_url.php')) {
            require_once('/usr/local/hestia/web/inc/login_url.php');
            if (isset($_GET[$login_url])) {
                setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
                header ("Location: /login/");
                exit;
            }
            if (!isset($_COOKIE[$login_url])) exit;
        }
    }
}