jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/html/adminpnl/ [ drwxr-xr-x ]
name : customer_save_update.php
 <?php

require_once "../config.php";
 require_once "../conclass.php";



$name = $_POST['name'];
$personalno= $_POST['personalno'];
$rank= $_POST['cusrank'];
$mobileno= $_POST['mobileno'];
$psw= $_POST['cuspassword'];



$userdetailid= $_POST['userdetailid'];
$id = $_POST['regisid'];
$canteen = $_POST['canteenname'];
$btntext = $_POST['btntext'];


$creationdatetime = date("y-m-d");

$message= "";



$query = "select count(0) as count from customerregistrationtb where personalno='".$personalno."' and active='".$gActive."'  and isdeleted='".$NotDeleted."'";

  $result = mysqli_query($conn,$query);
 while($row = mysqli_fetch_array($result))
 {

    $message=$row["count"];
 }



    if($btntext=="Save")
    {
      if($message=="0")
            {
              $query="insert into customerregistrationtb(name,personalno,cusrank,mobileno,cuspassword,isdeleted,active,creationdatetime,userdetailid)
               Values('".$name."','".$personalno."','".$rank."','".$mobileno."','".$psw."','".$NotDeleted."','".$gActive."','".$creationdatetime ."','".$userdetailid ."')";
              $result = mysqli_query($conn, $query);

              if($result==true)
               $message="1";
            }
            else
            {


              $message="2";
            }

            }
            else if($btntext=="Update")
            {

            $query = "select count(0) as count from customerregistrationtb where regisid!='".$id."' and personalno='".$personalno."' and active='".$gActive."'  and isdeleted='".$NotDeleted."'";

         $result = mysqli_query($conn,$query);
           while($row = mysqli_fetch_array($result))
          {
                  $message= $row["count"];
         }

            if($message=="0")
            {
                  $query="Update customerregistrationtb set name='".$name."',cusrank='".$rank."',mobileno='".$mobileno."',cuspassword='".$psw."' where personalno='".$personalno."'";
                   $result = mysqli_query($conn, $query);

                   if($result==true)
                      $message="3";
            }
            else
            {
               $message="2";
            }

            }
            else if($btntext=="Delete")
            {
              $message="4";

            }


    echo json_encode($message);

?>