wcp/web/bulk/db/index.php at main · ghzhost/wcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();

include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";

// Check token
verify_csrf($_POST);

if (empty($_POST["database"])) {
	header("Location: /list/db/");
	exit();
}

if (empty($_POST["action"])) {
	header("Location: /list/db/");
	exit();
}
$database = $_POST["database"];
$action = $_POST["action"];

if ($_SESSION["userContext"] === "admin") {
	switch ($action) {
		case "rebuild":
			$cmd = "v-rebuild-database";
			break;
		case "delete":
			$cmd = "v-delete-database";
			break;
		case "suspend":
			$cmd = "v-suspend-database";
			break;
		case "unsuspend":
			$cmd = "v-unsuspend-database";
			break;
		default:
			header("Location: /list/db/");
			exit();
	}
} else {
	switch ($action) {
		case "delete":
			$cmd = "v-delete-database";
			break;
		case "suspend":
			$cmd = "v-suspend-database";
			break;
		case "unsuspend":
			$cmd = "v-unsuspend-database";
			break;
		default:
			header("Location: /list/db/");
			exit();
	}
}

foreach ($database as $value) {
	$value = quoteshellarg($value);
	exec(HESTIA_CMD . $cmd . " " . $user . " " . $value, $output, $return_var);
}

header("Location: /list/db/");