jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/cotutilitydash/ [ drwxrwxr-x ]
name : get_userwise_equipment.php

 <?php
require_once "config.php";

session_start();
$userid=$_SESSION['userid'];
$area=$_POST['area'];
$usertype="";
$query="Select usertype from createusertb
        where id='".$userid."' and isdeleted='".$gnotdeleted."'";
        $result1 = mysqli_query($conn, $query);
while ($row=mysqli_fetch_array($result1)) {
   $usertype = $row["usertype"];
   }

   if($usertype=="Admin")
   {

     $query=mysqli_query($conn,"SELECT id, equipment FROM mastertb where
          area='".$area."'  and equipment is not null and  identifier='3' and isdeleted='".$gnotdeleted."'");
    while($row=mysqli_fetch_array($query))
    {

      $result[] = array(

         'tname' => $row['equipment'],
       );
    }
    echo json_encode($result);


   }
else {



$query=mysqli_query($conn,"SELECT distinct equipment FROM areapermissiontb where area='".$area."' and
    userid='".$userid."' and equipment is not null and isdeleted='".$gnotdeleted."'");

while($row=mysqli_fetch_array($query))
{
$result[] = array(
'tname' => $row['equipment'],
);
}
echo json_encode($result);

}
?>