jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/html/clientpnl/ [ drwxr-xr-x ]
name : edit_password.php

 <?php

require_once "../config.php";
 require_once "../conclass.php";

     session_start();
         $regisid= $_SESSION["regisid"];

       $new_psw = trim($_POST['newpassword']);

        $old_psw = $_POST['oldpassword'];
$creationdatetime = date("Y-m-d H:m:s");
              $cnt=0;
              $message="0";

               $query="select * from customerregistrationtb where regisid='".$regisid."' and cuspassword='".$old_psw."'";
                      $result = mysqli_query($conn, $query);


   $cnt = intval(mysqli_num_rows($result));

   if($cnt>0)
   {
$query=" update  customerregistrationtb set cuspassword='".$new_psw."',pswchangeyesno=1,
           ModificationDateTime='".$creationdatetime."' where regisid='".$regisid."'";
                 $result = mysqli_query($conn, $query);

                 if($result==1)
			{
			$_SESSION['pswchangeyesorno']="1";
                 	$message="1";
		}

    }
                 else

                 {
                       $message="2";

                 }


    echo json_encode($message);

?>