jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /proc/self/root/var/www/zenithentcare/upanel/ [ drwxrwxr-x ]
name : delete_account.php
 <?php include "top.php";?>
<div id="layoutSidenav_content">
    <main>
        <div class="container-fluid px-4">
            <h1 class="mt-4">Delete Account</h1>
            <ol class="breadcrumb mb-4 justify-content-between">
                <li class="breadcrumb-item active">Delete Complete Account</li>
                <!-- <a class="btn btn-primary" href="change_password.php">Change Password</a> -->
            </ol>
            <div class="row">
                <div class="col-lg-12">
                    <div class="card shadow-lg border-0 rounded-lg mb-5">
                        <?php
                        $query = "select * from tokenregistertb where mobileno= '".$_SESSION['mobileno']."' and isactive='1' and isdeleted='0'";
                        $result=mysqli_query($conn,$query) or die("Query Failed.");
                        if(mysqli_num_rows($result)>0){
                            while ($row = mysqli_fetch_assoc($result)) {
                           
                        ?>
                        <div class="card-body">
                            <form>
                                <div class="row">
                                    <div class="col-md-6">
                                        <div class="form-floating mb-3">
                                            <input class="form-control" name="txtName" id="txtName" type="text"
                                                value="<?php echo $row['uname'];?>" readonly />
                                            <label for="txtName">Name</label>
                                        </div>
                                    </div>
                                    <div class="col-md-6">
                                        <div class="form-floating mb-3">
                                            <input class="form-control" name="txtMobileNo" id="txtMobileNo"
                                                type="number" value="<?php echo $row['mobileno'];?>" readonly />
                                            <label for="txtMobileNo">Mobile No.</label>
                                        </div>
                                    </div>
                                </div>

                                <div class="row">
                                    <div class="col-md-12" align="center">
                                        <div class="form-floating mb-3">
                                            <a class="btn btn-danger" onclick="deleterequest();">Delete Account</a>
                                        </div>
                                    </div>

                                </div>

                            </form>
                        </div>
                        <?php
                        }
                    }
                        ?>
                        <div class="card-footer text-center py-3">
                            <!-- <div class="small">
                                <a href="register.html">Need an account? Sign up!</a>
                            </div> -->
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </main>


    <?php include "footer.php";?>
    <script>
    function deleterequest() {
        var flag = true;
        var inputField1 = document.getElementById("txtName");
        if (inputField1.value == "") {
            flag = false;
            alert("Please enter mobile no.");
            document.getElementById("txtName").focus();
            return false;
        }
        var inputField2 = document.getElementById("txtMobileNo");
        if (inputField2.value == "") {
            flag = false;
            alert("Please enter old password.");
            document.getElementById("txtMobileNo").focus();
            return false;
        }

        var uname = document.getElementById("txtName").value;
        var mobileno = document.getElementById("txtMobileNo").value;

        var text = "Do you want delete your account?";

        if (confirm(text) == false) {

            flag = false;
            return false;
        }
        try {

            if (flag == true) {
                var urlgetcode = 'save_delete_account_request.php';

                $.ajax({
                    method: 'POST',
                    url: urlgetcode,
                    data: '&uname=' + uname + '&mobileno=' + mobileno,
                    dataType: 'json',
                    async: true,
                    cache: false,

                    success: function(msg) {
                        if (msg == "1") {
                            alert("Account Delete Request Send Successfully.");
                            window.location.href = "logout.php";
                        }
                    },
                    error: function(request) {

                        alert(request.responseText);
                    }
                });
            }
        } catch (Error) {
            alert(Error);
        }

        return;
    }
    </script>