index.php 934 B

1234567891011121314151617181920212223242526272829303132333435363738
  1. <?php
  2. use function Hestiacp\quoteshellarg\quoteshellarg;
  3. $TAB = 'SEARCH';
  4. $_SESSION['back'] = $_SERVER['REQUEST_URI'];
  5. // Main include
  6. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  7. // Check token
  8. verify_csrf($_GET);
  9. if (empty($_GET['u'])){
  10. $_GET['u'] = '';
  11. }
  12. if (empty($_GET['q'])){
  13. $_GET['q'] = '';
  14. }
  15. // Data
  16. $q = quoteshellarg($_GET['q']);
  17. $u = quoteshellarg($_GET['u']);
  18. if (($_SESSION['userContext'] === 'admin') && (!isset($_SESSION['look']))) {
  19. if (!empty($_GET['u'])) {
  20. $user = $u;
  21. exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
  22. } else {
  23. exec(HESTIA_CMD . "v-search-object " .$q. " json", $output, $return_var);
  24. }
  25. } else {
  26. exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
  27. }
  28. $data = json_decode(implode('', $output), true);
  29. // Render page
  30. render_page($user, $TAB, 'list_search');