index.php 1009 B

12345678910111213141516171819202122232425262728293031323334353637383940
  1. <?php
  2. // Init
  3. error_reporting(NULL);
  4. session_start();
  5. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  6. // Check token
  7. if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
  8. header('location: /login/');
  9. exit();
  10. }
  11. // Check if administrator is viewing system log (currently 'admin' user)
  12. if (($_SESSION['userContext'] === "admin") && (!empty($_GET['user']))) {
  13. $user=$_GET['user'];
  14. $token=$_SESSION['token'];
  15. }
  16. // Set correct page reload target
  17. if (($_SESSION['userContext'] === "admin") && (!empty($_GET['user']))) {
  18. header("Location: /list/log/?user=$user&token=$token");
  19. } else {
  20. header("Location: /list/log/");
  21. }
  22. // Clear log
  23. $v_username = escapeshellarg($user);
  24. exec (HESTIA_CMD."v-delete-user-log ".$v_username." ".$output, $return_var);
  25. check_return_code($return_var,$output);
  26. unset($output);
  27. unset($token);
  28. // Render page
  29. render_page($user, $TAB, 'list_log');
  30. // Flush session messages
  31. unset($_SESSION['error_msg']);
  32. unset($_SESSION['ok_msg']);
  33. exit;