hestiacp/web/bulk/backup/incremental/index.php

<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();
include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";

if (empty($_POST["backup"])) {
	header("Location: /list/backup/incremental/");
	exit();
}
if (empty($_POST["action"])) {
	header("Location: /list/backup/incremental/");
	exit();
}

$backup = $_POST["backup"];
$action = $_POST["action"];

// Check token
verify_csrf($_POST);

switch ($action) {
	case "delete":
		$cmd = "v-delete-user-backup-restic";
		break;
	default:
		header("Location: /list/backup/");
		exit();
}

foreach ($backup as $value) {
	$value = quoteshellarg($value);
	exec(HESTIA_CMD . $cmd . " " . $user . " " . $value, $output, $return_var);
	if ($return_var != 0) {
		$_SESSION["error_msg"] = implode("<br>", $output);
		if (empty($_SESSION["error_msg"])) {
			$_SESSION["error_msg"] = _("Error: Hestia did not return any output.");
		}
	}
}

header("Location: /list/backup/incremental/");