Log out user automatically if DEBUG_MODE is not set

Kristan Kenney · Kristan Kenney · commit 65ec0fa23171 · 2021-04-03T14:48:53.000-03:00
diff --git a/web/inc/main.php b/web/inc/main.php
@@ -146,14 +146,21 @@ function top_panel($user, $TAB) {
     $command = HESTIA_CMD."v-list-user ".escapeshellarg($user)." 'json'";
     exec ($command, $output, $return_var);
     if ( $return_var > 0 ) {
-        echo "<b>ERROR: Unable to retrieve account details.</b><br>Please log in again.";
+        echo "<span style='font-size: 18px;'><b>ERROR: Unable to retrieve account details.</b><br>Please <b><a href='/login/'>log in</a></b> again.</span>";
         session_destroy();
         header("Location: /login/");
         exit;
     }
     $panel = json_decode(implode('', $output), true);
     unset($output);
 
+    // Log out active sessions for suspended users
+    if ($panel[$user]['SUSPENDED'] === 'yes') {
+        $_SESSION['error_msg'] = "You have been logged out. Please log in again.";
+        session_destroy();
+        header("Location: /login/");
+    }
+
     // Load user's selected theme and do not change it when impersonting user
     if ( (isset($panel[$user]['THEME'])) && (!isset($_SESSION['look']) )) {
         $_SESSION['userTheme'] = $panel[$user]['THEME'];
diff --git a/web/templates/header.html b/web/templates/header.html
@@ -17,7 +17,7 @@
   </script>
 </head>
 
-<body class="body-<?=strtolower($TAB)?> lang-<?=$_SESSION['language']?>">
+<body class="body-<?=strtolower($TAB)?> lang-<?=$_SESSION['language']?>"><!--
   <?php if (($_SESSION['DEBUG_MODE']) == "true" ) {?>
   <?php require ''.$_SERVER['HESTIA'].'/web/templates/pages/debug_panel.html'; ?>
-  <?php } ?>
+  <?php } ?>-->
