Merge pull request hestiacp#507 from SysVoid/patch-4

+backup directory check, -closing PHP tag.

Author: serghey-rodin

web/download/backup/index.php

@@ -5,6 +5,11 @@
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 $backup = $_GET['backup'];
 
+// Check if the backup exists
+if (!file_exists($backup)) {
+    exit(0);
+}
+
 // Data
 if ($_SESSION['user'] == 'admin') {
     header('Content-type: application/gzip');
@@ -19,5 +24,3 @@
         header("X-Accel-Redirect: /backup/" . $backup);
     }
 }
-
-?>