UnknownSec Bypass 403

: /var/www/stsupport/admin/ [ drwxrwxr-x ]
name : delete-user.php <?php include "config.php"; if($_SESSION["user_role"]=='0'){ header("Location: {$hostname}/admin/license.php"); } $userid=$_GET['id']; $sql="DELETE FROM user WHERE user_id={$userid}"; if(mysqli_query($conn,$sql)){ header("Location: {$hostname}/admin/users.php"); }else{ echo "<p style='color:red, margin: 10px 0px'>Can not delete user record.</p>"; } mysqli_close($conn); ?>