jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/stsupport/admin/ [ drwxrwxr-x ]
name : renewal-list.php
 <?php include "header.php"; ?>
  <div id="admin-content">
      <div class="container">
          <div class="row">
              <div class="col-md-10">
                  <h1 class="admin-heading">All Renewal List</h1>
              </div>
              <div class="col-md-2">
                  <!--<a class="add-new" href="add-post.php">add post</a>-->
              </div>
              <div class="col-md-12">
                <?php
                  include "config.php";
                  if(isset($_GET['id'])){
                  $product_code = $_GET['id'];
                }
                else {
                  $product_code='';
                }
                  $limit=10;
                  if(isset($_GET['page'])){
                    $page=$_GET['page'];
                  }else{
                    $page=1;
                  }

                  $offset= ($page-1)*$limit;

                  if($_SESSION["user_role"]=='1'){
                    if($product_code=='')
                    {
                        $sql="SELECT * FROM v_licenserenewaldetails ORDER BY productcode DESC LIMIT {$offset},{$limit}";

                    }
                    else {
                        $limit=100;
                     $sql="SELECT * FROM v_licenserenewaldetails where ProductCode='$product_code' ORDER BY productcode DESC LIMIT {$offset},{$limit}";
                    }


                  }elseif($_SESSION["user_role"]=='0'){
                    /*$sql="SELECT post.post_id, post.title, post.description, post.post_date,
                    category.category_name, user.username,post.category FROM post
                    LEFT JOIN category ON post.category=category.category_id
                    LEFT JOIN user ON post.author=user.user_id
                    WHERE post.author={$_SESSION['userid']}
                    ORDER BY post.post_id DESC LIMIT {$offset},{$limit}";*/
                  }


                  $result=mysqli_query($conn,$sql) or die("Query Failed.");

                  if(mysqli_num_rows($result)>0){
                ?>
                  <table class="content-table">
                      <thead>
                          <th>S.No.</th>
                          <th>Date</th>
                          <th>Product Code</th>
                          <th>S/W Name</th>
                          <th>Licensed To</th>
                          <th>Computer Name</th>
                          <!--<th>F-Date</th>
                          <th>T-Date</th>
                          <th>Entry Date</th>-->
                          <th>L Valid Date</th>
                          <th>License Renewed</th>
                          <!--<th>Edit</th>
                          <th>Delete</th>-->
                      </thead>
                      <tbody>
                        <?php
                        $serial=$offset+1;
                        while ($row = mysqli_fetch_assoc($result)) { ?>
                          <tr>
                              <td><?php echo $serial;  ?></td>
                              <td class='id'><?php echo $row['ServerDateTime'];  ?></td>
                              <td><?php echo $row['ProductCode'];  ?></td>
                              <td><?php echo $row['SoftwareName']  ?></td>
                              <td><?php echo $row['LicensedTo'];  ?></td>
                              <td><?php echo $row['ComputerName'];  ?></td>
                              <td><?php echo $row['LicenseValidityDate'];  ?></td>
                              <td><?php echo $row['LicenseRenewedBy'];  ?></td>
                              <!--<td class='edit'><a href='update-license-permission.php?id=<?php echo $row['LicenseUniqueId'];  ?>' onclick="return confirm('Are you sure to update?')"><i class='fa fa-edit'></i></a></td>-->
                              <!--<td class='delete'><a href='delete-license-permission.php?id=<?php echo $row['LicenseUniqueId'];  ?>' onclick="return confirm('Are you sure to delete?')"><i class='fa fa-trash-o'></i></a></td>-->
                          </tr>
                        <?php
                        $serial++;
                      }  ?>
                      </tbody>
                  </table>
                  <?php
                    }

                    if($product_code=='')
                    {
                    $sql1="SELECT * FROM v_licenserenewaldetails";
                  }
                  else {
                    $sql1="SELECT * FROM v_licenserenewaldetails where ProductCode='$product_code'";
                  }
                    $result1=mysqli_query($conn,$sql1) or die("Query Failed.");
                    if(mysqli_num_rows($result1)>0){
                      if($product_code=='')
                      {
                      $total_record=mysqli_num_rows($result1);
                      $total_page= ceil($total_record/$limit);

                      echo "<ul class='pagination admin-pagination'>";
                      if($page > 1){
                        echo '<li><a href="renewal-list.php?page='.($page - 1).'">Prev</a></li>';
                      }
                      for($i=1; $i<=$total_page; $i++){
                        if($i==$page)
                        {
                          $active="active";
                        }else {
                          $active="";
                        }
                        echo '<li class="'. $active .'"><a href="renewal-list.php?page=' .$i. '">' .$i. '</a></li>';
                      }
                      if($total_page>$page){
                        echo '<li><a href="renewal-list.php?page='.($page + 1).'">Next</a></li>';
                      }
                      echo "</ul>";
                    }
                    }
                  ?>

              </div>
          </div>
      </div>
  </div>
<?php include "footer.php"; ?>