hestiacp/web/schedule/restore/index.php

<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();

include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

// Check token
verify_csrf($_GET);

$backup = quoteshellarg($_GET['backup']);

$web = 'no';
$dns = 'no';
$mail = 'no';
$db = 'no';
$cron = 'no';
$udir = 'no';

if ($_GET['type'] == 'web') {
    $web = quoteshellarg($_GET['object']);
}
if ($_GET['type'] == 'dns') {
    $dns = quoteshellarg($_GET['object']);
}
if ($_GET['type'] == 'mail') {
    $mail = quoteshellarg($_GET['object']);
}
if ($_GET['type'] == 'db') {
    $db = quoteshellarg($_GET['object']);
}
if ($_GET['type'] == 'cron') {
    $cron = 'yes';
}
if ($_GET['type'] == 'udir') {
    $udir = quoteshellarg($_GET['object']);
}

if (!empty($_GET['type'])) {
    $restore_cmd = HESTIA_CMD."v-schedule-user-restore ".$user." ".$backup." ".$web." ".$dns." ".$mail." ".$db." ".$cron." ".$udir;
} else {
    $restore_cmd = HESTIA_CMD."v-schedule-user-restore ".$user." ".$backup;
}

exec($restore_cmd, $output, $return_var);
if ($return_var == 0) {
    $_SESSION['error_msg'] = _('RESTORE_SCHEDULED');
} else {
    $_SESSION['error_msg'] = implode('<br>', $output);
    if (empty($_SESSION['error_msg'])) {
        $_SESSION['error_msg'] = _('Error: Hestia did not return any output.');
    }
    if ($return_var == 4) {
        $_SESSION['error_msg'] = _('RESTORE_EXISTS');
    }
}

header("Location: /list/backup/?backup=" . $_GET['backup']);