index.php 871 B

1234567891011121314151617181920212223242526272829303132333435
  1. <?php
  2. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  3. // Check token
  4. verify_csrf($_GET);
  5. // Check if administrator is viewing system log (currently 'admin' user)
  6. if (($_SESSION['userContext'] === "admin") && (!empty($_GET['user']))) {
  7. $user=escapeshellarg($_GET['user']);
  8. $token=$_SESSION['token'];
  9. }
  10. // Clear log
  11. exec(HESTIA_CMD."v-delete-user-log ".$user, $output, $return_var);
  12. check_return_code($return_var, $output);
  13. unset($output);
  14. unset($token);
  15. if ($return_var > 0) {
  16. header("Location: /list/log/");
  17. } else {
  18. // Set correct page reload target
  19. if (($_SESSION['userContext'] === "admin") && (!empty($_GET['user']))) {
  20. header("Location: /list/log/?user=$user&token=$token");
  21. } else {
  22. header("Location: /list/log/");
  23. }
  24. }
  25. // Flush session messages
  26. unset($_SESSION['error_msg']);
  27. unset($_SESSION['ok_msg']);
  28. exit;