<h2>Editing File: /usr/local/sitepad/lib/panels/directadmin/admin/index.html</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php

// Better check its not someone who is trying to hack us
if(empty($_SERVER['REMOTE_ADDR'])){
	die('CLI MODE INITIATED. ISSUE REPORTED');
}

if($_SERVER['REQUEST_METHOD'] != 'GET' &amp;&amp; $_SERVER['REQUEST_METHOD'] != 'POST'){
	echo &quot;HTTP/1.1 405 Method Not Allowed\n&quot;;
	echo &quot;Content-Type: text/html\n&quot;;
	echo &quot;\n&quot;;
	echo &quot;&lt;h1&gt;405 Method Not Allowed&lt;/h1&gt;&quot;;
	exit(0);
}

//print_r($GLOBALS);

// Check if the user is a valid ADMIN user
$opts = array(
			'http' =&gt; array(
			'method'=&gt;&quot;GET&quot;,
			'header'=&gt;&quot;Accept-language: en\r\n&quot; . 
					&quot;User-Agent: Sitepad\r\n&quot; . 
					&quot;Cookie: session={$_SERVER['SESSION_ID']}; key={$_SERVER['SESSION_KEY']}\r\n&quot;
			)
		);
		
//Create a context
$context = stream_context_create($opts);

function da_verify_query($command, $parse = true, $retry = 0){
	
	// Read the conf file if we need to use http for local API calls
	/* if(file_exists('/usr/local/directadmin/conf/directadmin.conf')){
		$cdata = file_get_contents('/usr/local/directadmin/conf/directadmin.conf');
		if(preg_match('/ssl_ignore_when_local=1/is', $cdata) &amp;&amp; preg_match('/SSL=1/is', $cdata)){
			$GLOBALS['nossl'] = 1;
		}
	} */
	
	$ssl = (empty($_SERVER['SSL']) || !empty($retry) || !empty($GLOBALS['nossl']) ? '' : 's');	
	$url = 'http'.$ssl.'://127.0.0.1:'.$_SERVER['SERVER_PORT'].'/'.$command;
	
	$allow_url_fopen = ini_get('allow_url_fopen');
	
	// Is curl there ?
	if(function_exists('curl_init')){
		// Set the curl parameters.
		$ch = curl_init();
		curl_setopt($ch, CURLOPT_URL, $url);
	
		// Turn off the server and peer verification (TrustManager Concept).
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
		
		// UserAgent and Cookies
		curl_setopt($ch, CURLOPT_USERAGENT, 'Sitepad');
		curl_setopt($ch, CURLOPT_COOKIE, &quot;session={$_SERVER['SESSION_ID']}; key={$_SERVER['SESSION_KEY']}&quot;);
		
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
		
		// Get response from the server.
		$chunk = curl_exec($ch);
		//echo curl_error($ch);
			
	// Try FOPEN		
	}elseif(!empty($allow_url_fopen)){
		$fp = fopen($url, 'r', false, $GLOBALS['context']);
		$chunk = '';
		if($fp){				
			while ( !feof($fp) ){
				$chunk .= fgets($fp,1024);
			}
			fclose($fp);
		}
	}else{
		$chunk = '';
	}
		
	// If it failed with https we will retry with http
	if(empty($chunk) &amp;&amp; empty($retry) &amp;&amp; !empty($ssl)){
		return da_verify_query($command, $parse, 1);
	}
	
	if($parse){
		parse_str($chunk, $ctmp);
		return $ctmp;
	}else{
		return $chunk;
	}
}

$response = da_verify_query('CMD_API_SHOW_USER_CONFIG');
//print_r($response);
//print_r($argv);

if($response['usertype'] == 'reseller'){
	
	define('IS_DA_RESELLER', 1);
	
}elseif($response['usertype'] == 'admin'){

	define('IS_DA_ADMIN', 1);

}else{
	echo &quot;HTTP/1.1 200 OK\n&quot;;
	echo &quot;Content-Type: text/html\n&quot;;
	echo &quot;\n&quot;;
	die(&quot;You are not allowed to access this. This has been reported to the ADMIN ! \n&quot;);
}

unset($opts);
unset($context);


if(!empty($_SERVER['QUERY_STRING'])){
	parse_str($_SERVER['QUERY_STRING'], $_GET);

	foreach($_GET as $k =&gt; $v){
		$_REQUEST[$k] = $v;
	}
}

if(!empty($_SERVER['POST'])){
	parse_str($_SERVER['POST'], $_POST);

	foreach($_POST as $k =&gt; $v){
		$_REQUEST[$k] = $v;
	}
}

echo &quot;HTTP/1.1 200 OK\n&quot;;
echo &quot;Content-Type: text/html\n&quot;;
if(@$_GET['act'] == 'import_export' &amp;&amp; !empty($_GET['download']) &amp;&amp; $response['usertype'] == 'admin' &amp;&amp; substr_count($_GET['download'], './') == 0){
	echo &quot;Content-Disposition: attachment; filename=\&quot;&quot;.$_GET['download'].&quot;\&quot;&quot;.&quot;\n&quot;;
}

unset($response);

putenv('soft_egid');
putenv('soft_euid');

echo &quot;\n&quot;;
$da_version = @shell_exec('/usr/local/directadmin/directadmin v');

include_once('/usr/local/sitepad/admin.php');
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fsitepad%2Flib%2Fpanels%2Fdirectadmin%2Fadmin'>Back to Directory</a>