UnknownSec Bypass 403

: /var/www/html/adminpnl/ [ drwxr-xr-x ]
name : delete_downloads.php <?php require_once "../config.php"; require_once "../conclass.php"; /*if($_SESSION["user_role"]=='0'){ header("Location: {$hostname}/admin/post.php"); }*/ $downloadsid=$_GET['id']; $filename=$_GET['fname']; $sql="DELETE FROM downloadstb WHERE id={$downloadsid}"; $filepath = "downloads/".$filename; unlink( $filepath ); if(mysqli_query($conn,$sql)){ header("Location: {$hostname}/adminpnl/downloads.php"); }else{ echo "<p style='color:red, margin: 10px 0px'>Can not delete user record.</p>"; } mysqli_close($db); ?>