UnknownSec Bypass 403

: /proc/self/root/var/www/zenithentcare/stmedicosoftware/prescription/ [ drwxrwxr-x ]
name : select_edit_prescription.php <?php require_once "../config.php"; session_start(); $docid= $_SESSION['doctorid']; $search=$_POST['search']; if($search=="Today") { $currentdate = date("Y-m-d"); $backdate = date("Y-m-d"); } else if($search=="Weekly") { $currentdate = date("Y-m-d"); $backdate = date('Y-m-d', strtotime($currentdate . ' -7 days')); } else if($search=="Monthly") { $currentdate = date("Y-m-d"); $backdate = date('Y-m-d', strtotime($currentdate . ' -30 days')); } else { $currentdate = date("Y-m-d"); $backdate = date('Y-m-d', strtotime($currentdate . ' -365 days')); } $sql="Select pat.suhid,pat.sfileno,visit.uhid,visit.opdno,visit.visitno,DATE_FORMAT(visit.visitdate, '%d-%m-%Y') as visitdate,pat.name,pat.agey ,pat.pntageyrs,pat.sex from visitdetailstb as visit,patientdetailstb as pat where visit.consultantid='".$docid."' and visit.visitdate>='".$backdate."' and visit.visitdate<='".$currentdate."' and visit.opdno=pat.fileno and visit.isdeleted=0 order by sfileno DESC"; $resultset = mysqli_query($conn, $sql) or die("database error:". mysqli_error($conn)); $data = array(); while( $rows = mysqli_fetch_assoc($resultset) ) { $data[] = $rows; } $results = array( "sEcho" => 1, "iTotalRecords" => count($data), "iTotalDisplayRecords" => count($data), "aaData" => $data ); echo json_encode($results); ?>