hestiacp/web/add/webapp/index.php

<?php
ob_start();
$TAB = 'WEB';

// Main include
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
require_once $_SERVER['DOCUMENT_ROOT']."/src/init.php";

// Check domain argument
if (empty($_GET['domain'])) {
    header("Location: /list/web/");
    exit;
}

// Edit as someone else?
if (($_SESSION['user'] == 'admin') && (!empty($_GET['user']))) {
    $user=escapeshellarg($_GET['user']);
}

// Get all user domains 
exec (HESTIA_CMD."v-list-web-domains ".escapeshellarg($user)." json", $output, $return_var);
$user_domains = json_decode(implode('', $output), true);
$user_domains = array_keys($user_domains);
unset($output);

// List domain
$v_domain = $_GET['domain'];
if(!in_array($v_domain, $user_domains)) {
    header("Location: /list/web/");
    exit;
}

// Check GET request
if (!empty($_GET['app'])) {
    $app = basename($_GET['app']);
    
    $hestia = new \Hestia\System\HestiaApp();
    $app_installer_class = '\Hestia\WebApp\Installers\\'.$app.'\\' . $app . 'Setup';
    if(class_exists($app_installer_class)) {
        try {
            $app_installer = new $app_installer_class($v_domain, $hestia);
            $info = $app_installer -> info();
            if ($info['enabled'] != true){
                $_SESSION['error_msg'] = sprintf(_('%s installer missing'),$app);
            }else{
                $installer = new \Hestia\WebApp\AppWizard($app_installer, $v_domain, $hestia);
                $GLOBALS['WebappInstaller'] = $installer;
            }
        } catch (Exception $e) {
            $_SESSION['error_msg'] = $e->getMessage();
            header('Location: /add/webapp/?domain=' . $v_domain);
            exit();
        }
    } else {
        $_SESSION['error_msg'] = sprintf(_('%s installer missing'),$app);
    }
}

// Check POST request
if (!empty($_POST['ok']) && !empty($app) ) {

    // Check token
    if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
        header('location: /login/');
        exit();
    }

    if ($installer) {
        try{
            if (!$installer->execute($_POST)){
                $result = $installer->getStatus();
                if(!empty($result))
                    $_SESSION['error_msg'] = implode(PHP_EOL, $result);
            } else {
                $_SESSION['ok_msg'] = sprintf(_('%s App was installed succesfully!'),htmlspecialchars($app));
                header('Location: /add/webapp/?domain=' . $v_domain);
                exit();
            }
        } catch (Exception $e) {
           $_SESSION['error_msg'] = $e->getMessage();
           header('Location: /add/webapp/?app='.rawurlencode($app).'&domain=' . $v_domain);
           exit();
        }
    }
}

if(!empty($installer)) {
    render_page($user, $TAB, 'setup_webapp');
} else {
    $appInstallers = glob(__DIR__.'/../../src/app/WebApp/Installers/*/*.php');
    $v_web_apps = array();
    foreach($appInstallers as $app){
        $hestia = new \Hestia\System\HestiaApp();
        if( preg_match('/Installers\/([a-zA-Z][a-zA-Z0,9].*)\/([a-zA-Z][a-zA-Z0,9].*).php/', $app, $matches)){
            if ($matches[1] != "Resources"){
                $app_installer_class = '\Hestia\WebApp\Installers\\'.$matches[1].'\\' . $matches[1] . 'Setup';
                $app_installer = new $app_installer_class($v_domain, $hestia);
                $v_web_apps[] = $app_installer -> info();
                
            }
        }
    }
    render_page($user, $TAB, 'list_webapps');
}


// Flush session messages
unset($_SESSION['error_msg']);
unset($_SESSION['ok_msg']);