hestiacp/web/bulk/user/index.php

<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();

include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";

// Check token
verify_csrf($_POST);

$user = $_POST["user"];
$action = $_POST["action"];

if ($_SESSION["userContext"] === "admin") {
	switch ($action) {
		case "delete":
			$cmd = "v-delete-user";
			$restart = "no";
			break;
		case "suspend":
			$cmd = "v-suspend-user";
			$restart = "no";
			break;
		case "unsuspend":
			$cmd = "v-unsuspend-user";
			$restart = "no";
			break;
		case "update counters":
			$cmd = "v-update-user-counters";
			break;
		case "rebuild":
			$cmd = "v-rebuild-all";
			$restart = "no";
			break;
		case "rebuild user":
			$cmd = "v-rebuild-user";
			$restart = "no";
			break;
		case "rebuild web":
			$cmd = "v-rebuild-web-domains";
			$restart = "no";
			break;
		case "rebuild dns":
			$cmd = "v-rebuild-dns-domains";
			$restart = "no";
			break;
		case "rebuild mail":
			$cmd = "v-rebuild-mail-domains";
			break;
		case "rebuild db":
			$cmd = "v-rebuild-databases";
			break;
		case "rebuild cron":
			$cmd = "v-rebuild-cron-jobs";
			break;
		default:
			header("Location: /list/user/");
			exit();
	}
} else {
	switch ($action) {
		case "update counters":
			$cmd = "v-update-user-counters";
			break;
		default:
			header("Location: /list/user/");
			exit();
	}
}

foreach ($user as $value) {
	$value = quoteshellarg($value);
	exec(HESTIA_CMD . $cmd . " " . $value . " " . $restart, $output, $return_var);
	$changes = "yes";
}

header("Location: /list/user/");