hestiacp/web/search/index.php

<?php

$TAB = 'SEARCH';

$_SESSION['back'] = $_SERVER['REQUEST_URI'];

// Main include
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

// Check token
verify_csrf($_GET);

// Data
$q = escapeshellarg($_GET['q']);
$u = escapeshellarg($_GET['u']);

if (($_SESSION['userContext'] === 'admin') && (!isset($_SESSION['look']))) {
    if (!empty($_GET['u'])) {
        $user = $u;
        exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
    } else {
        exec(HESTIA_CMD . "v-search-object " .$q. " json", $output, $return_var);
    }
} else {
    exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
}

$data = json_decode(implode('', $output), true);

// Render page
render_page($user, $TAB, 'list_search');