index.php 896 B

123456789101112131415161718192021222324252627282930313233343536373839404142
  1. <?php
  2. // Init
  3. error_reporting(NULL);
  4. ob_start();
  5. session_start();
  6. // Main include
  7. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  8. // Check token
  9. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  10. header('location: /login/');
  11. exit();
  12. }
  13. // Check user
  14. if ($_SESSION['user'] != 'admin') {
  15. header("Location: /list/user");
  16. exit;
  17. }
  18. $rule = $_POST['rule'];
  19. $action = $_POST['action'];
  20. switch ($action) {
  21. case 'delete': $cmd='v-delete-firewall-rule';
  22. break;
  23. case 'suspend': $cmd='v-suspend-firewall-rule';
  24. break;
  25. case 'unsuspend': $cmd='v-unsuspend-firewall-rule';
  26. break;
  27. default: header("Location: /list/firewall/"); exit;
  28. }
  29. foreach ($rule as $value) {
  30. $value = escapeshellarg($value);
  31. exec (VESTA_CMD.$cmd." ".$value, $output, $return_var);
  32. $restart = 'yes';
  33. }
  34. header("Location: /list/firewall/");