jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /proc/thread-self/root/var/www/cotutilitydash/ [ drwxrwxr-x ]
name : manage_areawiser_per.php
 <?php

require_once "config.php";
$msg="";
$creationdatetime = date("Y-m-d H:m:s");
$area=trim($_POST['area']);
$equipment=trim($_POST['equipment']);
$subarea=trim($_POST['subarea']);
$user= trim($_POST['user']);

$id=   $_POST['id'];
$userid=0;
$btnopration=   $_POST['btnopration'];


 if($btnopration=="SAVE")
       {
$query="select * from areapermissiontb Where area='".$area."' and equipment='".$equipment."' and subarea='".$subarea."' and userid='".$user."'
  and isdeleted='" . $gnotdeleted . "' ";
$cnt= get_noof_rows($conn,$query);

if($cnt==0)
{
$query="insert into areapermissiontb(area,equipment,subarea,userid,isdeleted,createdbyuserid,creationdatetime)
        values('".$area."','".$equipment."','".$subarea."','".$user."','".$gnotdeleted."','".$userid."', '".$creationdatetime."')";

$result=insertrecord($conn,$query);

          if($result==true)
              $msg="Record save successfully";
          else
              $msg="There is problem to save Record";
}
else
{
    $msg="Record is already exist";

}

}
else if($btnopration=="UPDATE")
       {
$query="select * from areapermissiontb Where id!='".$id."' and area='".$area."' and equipment='".$equipment."' and subarea='".$subarea."' and userid='".$user."'  and isdeleted='" . $gnotdeleted . "' ";

$cnt= get_noof_rows($conn,$query);

if($cnt==0)
{

 $sql="Update areapermissiontb set area='".$area."',equipment='".$equipment."',subarea='".$subarea."', userid='".$user."'
      where id='".$id."' ";
$result=updaterecord($conn,$sql);

          if($result==true)
              $msg=  "Record update successfully";
          else
              $msg="There is problem to save Record";
}
else
{
    $msg="Record is already exist";

}

}
else if($btnopration=="DEACTIVE")
       {
         $sql="Update areapermissiontb set isdeleted=1 where id='".$id."' ";
         $result=updaterecord($conn,$sql);

                  if($result==true)
                      $msg=  "Area wise permission deactive successfully";
                  else
                      $msg="There is problem to deactive the record";

       }
else if($btnopration=="ACTIVE")
       {
         $sql="Update areapermissiontb set isdeleted=0 where id='".$id."' ";
         $result=updaterecord($conn,$sql);

                  if($result==true)
                      $msg=  "Area wise permission active successfully";
                  else
                      $msg="There is problem to active the record";


       }

  echo json_encode ($msg);

?>