jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /proc/self/root/var/www/santgyaneshwarji/cpanel/ [ drwxr-xr-x ]
name : save_update_slider.php

 <?php
include "../config.php";

  if(empty($_FILES['new-image']['name'])){
    $target=$_POST['old_image'];
  }else {
    $error=array();

    $file_name=$_FILES['new-image']['name'];
    $file_size=$_FILES['new-image']['size'];
    $file_tmp=$_FILES['new-image']['tmp_name'];
    $file_type=$_FILES['new-image']['type'];
    $file_ext=strtolower(end(explode('.',$file_name)));
    $extensions=array("jpeg","jpg","png");

    if(in_array($file_ext,$extensions)===false){
      $error[]="This extension file is not allowed, Please choose a JPG or PNG file.";
    }

    if($file_size > 2097152)
    {
      $error="File size must be 2mb or lower.";
    }
    $new_name=time()."-".basename($file_name);
    $target="slider/".$new_name;
    $image_name=$new_name;
    if(empty($errors)==true){
      move_uploaded_file($file_tmp,$target);
    }else{
      print_r($error);
      die();
    }
  }

   $sql="UPDATE slidertb SET post_img='{$image_name}'
        WHERE id={$_POST["id"]};";
   $result=mysqli_query($conn,$sql);
   if($result){
     header("Location: {$hostname}/cpanel/list_slider.php");
   }else {
     echo "Query Failed.";
   }

?>