index.php 840 B

1234567891011121314151617181920212223242526272829303132
  1. <?php
  2. use function Hestiacp\quoteshellarg\quoteshellarg;
  3. $TAB = 'SEARCH';
  4. $_SESSION['back'] = $_SERVER['REQUEST_URI'];
  5. // Main include
  6. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  7. // Check token
  8. verify_csrf($_GET);
  9. // Data
  10. $q = quoteshellarg($_GET['q']);
  11. $u = quoteshellarg($_GET['u']);
  12. if (($_SESSION['userContext'] === 'admin') && (!isset($_SESSION['look']))) {
  13. if (!empty($_GET['u'])) {
  14. $user = $u;
  15. exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
  16. } else {
  17. exec(HESTIA_CMD . "v-search-object " .$q. " json", $output, $return_var);
  18. }
  19. } else {
  20. exec(HESTIA_CMD . "v-search-user-object " .$user. " " .$q. " json", $output, $return_var);
  21. }
  22. $data = json_decode(implode('', $output), true);
  23. // Render page
  24. render_page($user, $TAB, 'list_search');