HEX
Server: LiteSpeed
System: Linux srv1.dhviews.com 5.14.0-570.23.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Jun 24 11:27:16 EDT 2025 x86_64
User: bdedition (1723)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: //proc/thread-self/root/opt/cpvendor/bin/sess.php
<?php

$file = '/var/webuzo/sessions/sess_'.$argv[1];
if(!file_exists($file)){
	echo '{}';die();
}

function webuzo_version(){
	include('/usr/local/webuzo/universal.php');
	include('/usr/local/webuzo/globals.php');
	return $globals['version'];
}

// Load session
$SESS = json_decode(file_get_contents($file), true);

// Root users not allowed !
if($SESS['user'] == 'root'){
	//echo '{}';die();
	
	$webuzo_version = webuzo_version();
	
	// If version is not found, which is impossible or if its more than 4.1.3
	if(empty($webuzo_version) || version_compare($webuzo_version, '4.1.3', '>=')){
		$soft_euid = getenv('soft_euid');
		if(!empty($soft_euid)){
			$euser_data = posix_getpwuid($soft_euid);
			if(!empty($euser_data) && !empty($euser_data['name']) && $euser_data['name'] != 'webuzo'){
				$SESS['user'] = $euser_data['name'];
			}
		}
	}
}

$tmp = posix_getpwnam($SESS['user']);

// Load User
$user = [];
if($SESS['user'] != 'root'){
	$user = json_decode(file_get_contents('/var/webuzo/users/'.$SESS['user'].'/info'), true);
	$user_domain = $user['domain'];
}else{
	$user_domain = $globals['WU_PRIMARY_DOMAIN'];
}

// Return array
$ret['userName'] = $SESS['user'];
$ret['userId'] = $tmp['uid'];
$ret['baseUri'] = './';
$ret['assetsUri'] = '.';
$ret['lang'] = 'en';
$ret['userDomain'] = $user_domain;

if($SESS['user'] == 'root'){
	$ret['userType'] = 'admin';
}elseif(!empty($user['reseller'])){
	$ret['userType'] = 'reseller';
}else{
	$ret['userType'] = 'user';
}

echo json_encode($ret, JSON_PRETTY_PRINT);