FM / plugin

/opt/backups/panels/cpanel_plugin/plugin/

/opt/backups/panels/cpanel_plugin/plugin

Name	Size	Mode	Actions
3rdparty/	-	0755	rm
file_browse_imgs/	-	0755	rm
backup_mgr.css	8213	0644	edit dl rm
backup_mgr.js	55324	0644	edit dl rm
backup_mgr.live.php	1125	0644	edit dl rm
file_browse.js	23766	0644	edit dl rm
post.live.php	1091	0644	edit dl rm

Edit: /opt/backups/panels/cpanel_plugin/plugin/post.live.php (1091B)

<?php
header('Content-Type: application/json; charset=UTF-8');
include("/usr/local/cpanel/php/cpanel.php");
$cpanel = new CPANEL();
// CSRF: backup_mgr.live.php handed the browser the cPanel session security
// token; require it back on every ajax call.
$expected = (string) getenv('cp_security_token');
$token = isset($_POST['token']) ? (string) $_POST['token'] : '';
if ($expected === '' || !hash_equals($expected, $token)) {
    http_response_code(403);
    die(json_encode(array(
        'status' => 1,
        'error' => 'Invalid or missing CSRF token. Please reload the page and try again.',
    )));
}
$action = $_POST['action'];
$args = $_POST['args'];
$result = $cpanel->uapi(
    'Backups', 'backups',
    array('action' => $action, 'args' => $args)
);
if ( $result['cpanelresult']['result']['status'] === 1 ) {
    $result = $result['cpanelresult']['result']['data'];
} else {
    die('unable to process request. grep for /opt/backups/panels/cpanel_plugin/backend in /usr/local/cpanel/logs/error_log');
}
header('Content-Type: application/json; charset=UTF-8');
echo($result);
?>

cmd: