jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/cotutilitydash/ [ drwxrwxr-x ]
name : mst_curd_subarea.php
 <?php

require_once "config.php";
$msg="";
$creationdatetime = date("Y-m-d H:m:s");
$area=$_POST['area'];
$equipment=$_POST['equipment'];
$subarea=$_POST['subarea'];

$identifier=$_POST['identifier'];
$id=   $_POST['id'];
$userid=0;
$btnopration=   $_POST['btnopration'];


 if($btnopration=="SAVE")
       {
$query=" select * from mastertb Where area='".$area."' and equipment='".$equipment."'
         and subarea='".$subarea."' and identifier= '" . $identifier . "'
         and isdeleted='" . $gnotdeleted . "' ";
$cnt= get_noof_rows($conn,$query);

if($cnt==0)
{
$query="insert into mastertb(area,equipment,subarea,identifier,isdeleted,creationdatetime,userid)
        values('".$area."', '".$equipment."','".$subarea."','".$identifier."','".$gnotdeleted."','".$creationdatetime."','".$userid."')";

$result=insertrecord($conn,$query);

          if($result==true)
              $msg="Record save successfully";
          else
              $msg="There is problem to save Record";
}
else
{
    $msg="Record is already exist";

}

}
else if($btnopration=="UPDATE")
       {
         $query=" select * from mastertb Where id!='".$id."' and area='".$area."' and equipment='".$equipment."'
                 and subarea='".$subarea."' and identifier= '" . $identifier . "'
                 and isdeleted='" . $gnotdeleted . "' ";
$cnt= get_noof_rows($conn,$query);

if($cnt==0)
{

 $sql=" Update mastertb set area='".$area."',subarea='".$subarea."',equipment='".$equipment."'
       where id='".$id."' ";

$result=updaterecord($conn,$sql);

          if($result==true)
              $msg=  "Record update successfully";
          else
              $msg="There is problem to save Record";
}
else
{
    $msg="Record is already exist";

}

}
else if($btnopration=="DEACTIVE")
       {
         $sql="Update mastertb set isdeleted=1 where id='".$id."' ";
         $result=updaterecord($conn,$sql);

                  if($result==true)
                      $msg=  "Subarea deactive successfully";
                  else
                      $msg="There is problem to deactive the record";

       }
else if($btnopration=="ACTIVE")
       {
         $sql="Update mastertb set isdeleted=0 where id='".$id."' ";
         $result=updaterecord($conn,$sql);

                  if($result==true)
                      $msg=  "Subarea active successfully";
                  else
                      $msg="There is problem to active the record";


       }


  echo json_encode ($msg);

?>