index.php 1003 B

123456789101112131415161718192021222324252627282930313233343536373839
  1. <?php
  2. use function Hestiacp\quoteshellarg\quoteshellarg;
  3. include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";
  4. // Check token
  5. verify_csrf($_GET);
  6. // Check if administrator is viewing system log (currently 'admin' user)
  7. if ($_SESSION["userContext"] === "admin" && !empty($_GET["user"])) {
  8. $user = quoteshellarg($_GET["user"]);
  9. $token = $_SESSION["token"];
  10. }
  11. // Clear log
  12. exec(HESTIA_CMD . "v-delete-user-log " . $user, $output, $return_var);
  13. check_return_code($return_var, $output);
  14. unset($output);
  15. if ($return_var > 0) {
  16. header("Location: /list/log/");
  17. } else {
  18. // Set correct page reload target
  19. if ($_SESSION["userContext"] === "admin" && !empty($_GET["user"])) {
  20. if ($_GET["user"] != "system") {
  21. header("Location: /list/log/?user=" . $_GET["user"] . "&token=$token");
  22. } else {
  23. header("Location: /list/log/?user=system&token=$token");
  24. }
  25. } else {
  26. header("Location: /list/log/");
  27. }
  28. }
  29. // Flush session messages
  30. unset($_SESSION["error_msg"]);
  31. unset($_SESSION["ok_msg"]);
  32. exit();