index.php 861 B

1234567891011121314151617181920212223242526272829303132333435
  1. <?php
  2. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  3. // Check token
  4. verify_csrf($_GET);
  5. // Check if administrator is viewing system log (currently 'admin' user)
  6. if (($_SESSION['userContext'] === "admin") && (!empty($_GET['user']))) {
  7. $user=$_GET['user'];
  8. $token=$_SESSION['token'];
  9. }
  10. // Set correct page reload target
  11. if (($_SESSION['userContext'] === "admin") && (!empty($_GET['user']))) {
  12. header("Location: /list/log/?user=$user&token=$token");
  13. } else {
  14. header("Location: /list/log/");
  15. }
  16. // Clear log
  17. $v_username = escapeshellarg($user);
  18. exec(HESTIA_CMD."v-delete-user-log ".$v_username." ".$output, $return_var);
  19. check_return_code($return_var, $output);
  20. unset($output);
  21. unset($token);
  22. // Render page
  23. render_page($user, $TAB, 'list_log');
  24. // Flush session messages
  25. unset($_SESSION['error_msg']);
  26. unset($_SESSION['ok_msg']);
  27. exit;