index.php 802 B

12345678910111213141516171819202122232425262728293031323334353637383940
  1. <?php
  2. // Init
  3. error_reporting(null);
  4. ob_start();
  5. session_start();
  6. // Main include
  7. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  8. // Check token
  9. verify_csrf($_POST);
  10. // Check user
  11. if ($_SESSION['userContext'] != 'admin') {
  12. header("Location: /list/user");
  13. exit;
  14. }
  15. $rule = $_POST['rule'];
  16. $action = $_POST['action'];
  17. switch ($action) {
  18. case 'delete': $cmd='v-delete-firewall-rule';
  19. break;
  20. case 'suspend': $cmd='v-suspend-firewall-rule';
  21. break;
  22. case 'unsuspend': $cmd='v-unsuspend-firewall-rule';
  23. break;
  24. default: header("Location: /list/firewall/"); exit;
  25. }
  26. foreach ($rule as $value) {
  27. $value = escapeshellarg($value);
  28. exec(HESTIA_CMD.$cmd." ".$value, $output, $return_var);
  29. $restart = 'yes';
  30. }
  31. header("Location: /list/firewall/");