jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/stsupport/admin/ [ drwxrwxr-x ]
name : save-update-post.php

 <?php
include "config.php";

if(empty($_FILES['new-image']['name'])){
  $file_name=$_POST['old_image'];
}else {
  $error=array();

  $file_name=$_FILES['new-image']['name'];
  $file_size=$_FILES['new-image']['size'];
  $file_tmp=$_FILES['new-image']['tmp_name'];
  $file_type=$_FILES['new-image']['type'];
  $file_ext=strtolower(end(explode('.',$file_name)));
  $extensions=array("jpeg","jpg","png");

  if(in_array($file_ext,$extensions)===false){
    $error[]="This extension file is not allowed, Please choose a JPG or PNG file.";
  }

  if($file_size > 2097152)
  {
    $error="File size must be 2mb or lower.";
  }

  if(empty($errors)==true){
    move_uploaded_file($file_tmp,"upload/".$file_name);
  }else{
    print_r($error);
    die();
  }
}

 $sql="UPDATE post SET title='{$_POST["post_title"]}', description='{$_POST["postdesc"]}',category={$_POST["category"]},post_img='{$file_name}'
      WHERE post_id={$_POST["post_id"]}";
 $result=mysqli_query($conn,$sql);
 if($result){
   header("Location: {$hostname}/admin/post.php");
 }else {
   echo "Query Failed.";
 }
?>