hestiacp/web/copy/package/index.php

<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();
include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";

// Check token
verify_csrf($_GET);

// Check user
if ($_SESSION["userContext"] != "admin") {
	header("Location: /list/user");
	exit();
}

// Check package argument
if (empty($_GET["package"])) {
	header("Location: /list/package/");
	exit();
}

if ($_SESSION["userContext"] === "admin") {
	if (!empty($_GET["package"])) {
		$v_package = quoteshellarg($_GET["package"]);
		exec(
			HESTIA_CMD . "v-copy-user-package " . $v_package . " " . $v_package . "-copy",
			$output,
			$return_var,
		);
	}

	if ($return_var != 0) {
		$_SESSION["error_msg"] = implode("<br>", $output);
		if (empty($_SESSION["error_msg"])) {
			$_SESSION["error_msg"] = _("Error: unable to copy package.");
		}
	}
	unset($output);
}

header("Location: /list/package/");
exit();