index.php 1.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344
  1. <?php
  2. // Init
  3. error_reporting(NULL);
  4. session_start();
  5. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  6. // Check token
  7. if ((!isset($_GET['token'])) || ($_SESSION['token'] != $_GET['token'])) {
  8. header('location: /login/');
  9. exit();
  10. }
  11. // Clear log
  12. $v_username = escapeshellarg($user);
  13. exec (HESTIA_CMD."v-delete-user-auth-log ".$v_username, $output, $return_var);
  14. check_return_code($return_var,$output);
  15. unset($output);
  16. $ip = $_SERVER['REMOTE_ADDR'];
  17. if(isset($_SERVER['HTTP_CF_CONNECTING_IP'])){
  18. if(!empty($_SERVER['HTTP_CF_CONNECTING_IP'])){
  19. $ip = $_SERVER['HTTP_CF_CONNECTING_IP'];
  20. }
  21. }
  22. $v_ip = escapeshellarg($ip);
  23. $user_agent = $_SERVER['HTTP_USER_AGENT'];
  24. $v_user_agent = escapeshellarg($user_agent);
  25. $v_session_id = escapeshellarg($_SESSION['token']);
  26. // Add current user session back to log unless impersonating another user
  27. if (!isset($_SESSION['look'])) {
  28. exec(HESTIA_CMD."v-log-user-login ".$v_username." ".$v_ip." success ".$v_session_id." ".$v_user_agent, $output, $return_var);
  29. }
  30. // Flush session messages
  31. unset($_SESSION['error_msg']);
  32. unset($_SESSION['ok_msg']);
  33. // Return to authentication history
  34. header("Location: /list/log/auth/");
  35. exit;