| 1234567891011121314151617181920212223242526272829303132333435363738 |
- <?php
- use function Hestiacp\quoteshellarg\quoteshellarg;
- $TAB = 'SEARCH';
- $_SESSION['back'] = $_SERVER['REQUEST_URI'];
- // Main include
- include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
- // Check token
- verify_csrf($_GET);
- if (empty($_GET['u'])){
- $_GET['u'] = '';
- }
- if (empty($_GET['q'])){
- $_GET['q'] = '';
- }
- // Data
- $q = quoteshellarg($_GET['q']);
- $u = quoteshellarg($_GET['u']);
- if (($_SESSION['userContext'] === 'admin') && (!isset($_SESSION['look']))) {
- if (!empty($_GET['u'])) {
- $user = $u;
- exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
- } else {
- exec(HESTIA_CMD . "v-search-object " .$q. " json", $output, $return_var);
- }
- } else {
- exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
- }
- $data = json_decode(implode('', $output), true);
- // Render page
- render_page($user, $TAB, 'list_search');
|