jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/cotutilitydash/ [ drwxrwxr-x ]
name : get_graphreport.php
 <?php
require_once "config.php";
session_start();
$area=$_POST['area'];
$equipment=$_POST['equipment'];
$subarea=$_POST['subarea'];
$fromdate=$_POST['fromdate'];
$todate=$_POST['todate'];
$query="truncate table tempconsumptiontb";
$result = mysqli_query($conn, $query);


if(trim($subarea)=="")
{
 $query=mysqli_query($conn,"insert into tempconsumptiontb (consumptiondate,area,equipment,subarea,totalconsumption,isdeleted,userid) SELECT consuptiondate,area,equipment,subarea,totalconsumption,isdeleted,	'".$_SESSION['userid']."'
         FROM v_consumptiondetails where
        consuptiondate between '".$fromdate."' and '".$todate."' and	area='".$area."'
         and equipment='".$equipment."' and (subarea='".$subarea."' or '".$subarea."'='')    and isdeleted='".$gnotdeleted."'");

         $result = mysqli_query($conn, $query);


}
else

{

$newStr = explode(",", $subarea);
  //$newStr=  json_decode($_POST["subarea"], true);
  $subdata="";
  $arrLength = count($newStr);
  for($i = 0; $i < $arrLength; $i++)
  {

  if($i==$arrLength-1)
  {
  $subdata= $subdata. "'".$newStr[$i]."'";

  }
  else {
   $subdata= $subdata."'".$newStr[$i]."'".',';
  }

   }

$query=mysqli_query($conn,"insert into tempconsumptiontb (consumptiondate,area,equipment,subarea,totalconsumption,isdeleted,userid) SELECT consuptiondate,area,equipment,subarea,totalconsumption,isdeleted,	'".$_SESSION['userid']."'
         FROM v_consumptiondetails where
        consuptiondate between '".$fromdate."' and '".$todate."' and	area='".$area."'
         and equipment='".$equipment."' and subarea in (".$subdata.")    and isdeleted='".$gnotdeleted."'");

         $result = mysqli_query($conn, $query);



}

  echo json_encode($result)
?>