UnknownSec Bypass 403

: /var/www/stsupport/admin/ [ drwxrwxr-x ]
name : product-details.php <?php include "header.php"; ?> <div id="admin-content"> <div class="container"> <div class="row"> <div class="col-md-9"> <h1 class="admin-heading">Product Details</h1> </div> <div class="col-md-3"> <a class="add-new" href="add-product-details.php">add product details</a> </div> <div class="col-md-12"> <?php include "config.php"; $limit=10; if(isset($_GET['page'])){ $page=$_GET['page']; }else{ $page=1; } $offset= ($page-1)*$limit; if($_SESSION["user_role"]=='1'){ $sql="SELECT * FROM v_productdetails ORDER BY productcode DESC LIMIT {$offset},{$limit}"; }elseif($_SESSION["user_role"]=='0'){ /*$sql="SELECT post.post_id, post.title, post.description, post.post_date, category.category_name, user.username,post.category FROM post LEFT JOIN category ON post.category=category.category_id LEFT JOIN user ON post.author=user.user_id WHERE post.author={$_SESSION['userid']} ORDER BY post.post_id DESC LIMIT {$offset},{$limit}";*/ } $result=mysqli_query($conn,$sql) or die("Query Failed."); if(mysqli_num_rows($result)>0){ ?> <table class="content-table"> <thead> <th>S.No.</th> <th>Date</th> <th>ClientName</th> <th>P-Code</th> <th>ClientCode</th> <th>S/W-Name</th> <th>Version</th> <th>Temp License Days</th> <th>L-Allowed </th> <th>L-Registered</th> <th>L-Renewed</th> <th>IsActive</th> <th>Edit</th> <!--<th>Delete</th>--> </thead> <tbody> <?php $serial=$offset+1; while ($row = mysqli_fetch_assoc($result)) { ?> <tr> <td><?php echo $serial; ?></td> <td class='id'><?php echo $row['DateOfEntry']; ?></td> <td><?php echo $row['LicensedTo']; ?></td> <td><?php echo $row['ProductCode']; ?></td> <td><?php echo $row['ClientCode']; ?></td> <td><?php echo $row['SoftwareName']; ?></td> <td><?php echo $row['SoftwareVersion']; ?></td> <td><?php echo $row['TempLicenseDays']; ?></td> <!--<td><?php //echo $row['NoOfLicensesAllowed']; ?></td>--> <td><a href='license.php?id=<?php echo $row['ProductCode']; ?>' onclick="return confirm('Are you sure to view details?')"><?php echo $row['NoOfLicensesAllowed'];?></a></td> <!--<td><?php //echo $row['NoOfLicensesRegistered']; ?></td>--> <td><a href='license-permission.php?id=<?php echo $row['ProductCode']; ?>' onclick="return confirm('Are you sure to view details?')"><?php echo $row['NoOfLicensesRegistered'];?></a></td> <!--<td><?php //echo $row['NoOfLicensesRenewed']; ?></td>--> <td><a href='renewal-list.php?id=<?php echo $row['ProductCode']; ?>' onclick="return confirm('Are you sure to view details?')"><?php echo $row['NoOfLicensesRenewed'];?></a></td> <td><?php echo $row['IsLicenseActive']; ?></td> <td class='edit'><a href='update-product-details.php?id=<?php echo $row['ClientCode']; ?>' onclick="return confirm('Are you sure to edit?')"><i class='fa fa-edit'></i></a></td> <!--<td class='delete'><a href='delete-product-details.php?id=<?php echo $row['ClientCode']; ?>' onclick="return confirm('Are you sure to delete?')"> <i class='fa fa-trash-o'></i></a></td>--> </tr> <?php $serial++; } ?> </tbody> </table> <?php } $sql1="SELECT * FROM v_productdetails"; $result1=mysqli_query($conn,$sql1) or die("Query Failed."); if(mysqli_num_rows($result1)>0){ $total_record=mysqli_num_rows($result1); $total_page= ceil($total_record/$limit); echo "<ul class='pagination admin-pagination'>"; if($page > 1){ echo '<li><a href="product-details.php?page='.($page - 1).'">Prev</a></li>'; } for($i=1; $i<=$total_page; $i++){ if($i==$page) { $active="active"; }else { $active=""; } echo '<li class="'. $active .'"><a href="product-details.php?page=' .$i. '">' .$i. '</a></li>'; } if($total_page>$page){ echo '<li><a href="product-details.php?page='.($page + 1).'">Next</a></li>'; } echo "</ul>"; } ?> </div> </div> </div> </div> <?php include "footer.php"; ?>