jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/html/clientpnl/ [ drwxr-xr-x ]
name : get_itemcategory_details.php
 <?php
require_once "../config.php";
 require_once "../conclass.php";

  $start = $_POST['curdate'];
  $canteenname = $_POST['canttenname'];
   $itemcategory = $_POST['itemcategory'];

   $regisid = $_POST['regisid'];
      $eventArray = array();
    $eventArray=explode('-',$_POST['curdate']);
    $grocery =0;
     $liquor =0;
      $groceyandliquorcnt=0;
      $totalslot=0;

      $data["itemcategory"]="";

        $query="select sum(noofseats) as slot from v_totalavailableslot where seatdate1='".$_POST["curdate"]."'and canteenname='".$canteenname."' group by seatdate1";

         $result = mysqli_query($conn, $query);
            if($row = mysqli_fetch_array($result))
             {
                    $totalslot=$row["slot"];
             }

             if($totalslot>0)
             {

     $query = " select count(0) as count from bookingtb where regisid='" . $regisid ."' and  itemcategory='Grocery and Liquor'  and month(bookingdatetime)='". $eventArray[1] ."'  and year(bookingdatetime)='" . $eventArray[0]. "'
               and isdeleted=".$NotDeleted."";
           $result = mysqli_query($conn, $query);
            if($row = mysqli_fetch_array($result))
             {
                   $groceyandliquorcnt=$row["count"];
             }

             $query = " select count(0) as count from bookingtb where regisid='" . $regisid ."' and  itemcategory='Grocery'  and month(bookingdatetime)='". $eventArray[1] ."'  and year(bookingdatetime)='" . $eventArray[0]. "'
                      and isdeleted=".$NotDeleted."";
           $result = mysqli_query($conn, $query);
             if($row = mysqli_fetch_array($result))
             {
                     $grocery=$row["count"];
             }

              $query = " select count(0) as count from bookingtb where regisid='" . $regisid ."' and  itemcategory='Liquor'  and month(bookingdatetime)='". $eventArray[1] ."'  and Year(bookingdatetime)='" . $eventArray[0]. "'
                       and isdeleted=".$NotDeleted."";
           $result = mysqli_query($conn, $query);
             if($row = mysqli_fetch_array($result))
             {
                     $liquor=$row["count"];
             }

              if($itemcategory=="-"  || $itemcategory=="Grocery and Liquor" || $itemcategory=="Grocery" || $itemcategory=="Liquor")
              {
                 if (($grocery == 0 || $grocery == 1 || $grocery == 2) && ($liquor == 0 || $liquor == 1 || $liquor == 2))
                   {

                    if ($groceyandliquorcnt == 0 ||  $groceyandliquorcnt == 1 || $groceyandliquorcnt == 2)
                    {
                        $query = "select itemcategory from itemcategorytb where itemcategory='Grocery and Liquor' and '".$_POST["curdate"]."' between fromdate  and todate
                                and  isdeleted='".$NotDeleted."' and  year(fromDate)='" . $eventArray[0] ."' and canteenname='".$canteenname."' order by creationdatetime desc";

                        $result = mysqli_query($conn, $query);
                       if($row = mysqli_fetch_array($result))
                         {
                             $data["itemcategory"]=$row["itemcategory"];
                              $itemcategory=$row["itemcategory"];
                         }
                         else
                         {
                            $itemcategory="-";
                         }
                    }

              }

        }

 
 if($itemcategory=="-"  || $itemcategory=="Liquor" || $itemcategory=="Grocery")
              {

               $query = " Select count(0) as count from bookingtb where regisid='" . $regisid ."' and  itemcategory='Grocery'  and month(bookingdatetime)='" . $eventArray[1] ."'  and year(bookingdatetime)='" . $eventArray[0]. "'
                        and isdeleted='".$NotDeleted."'";
           $result = mysqli_query($conn, $query);
            if($row = mysqli_fetch_array($result))
             {
                     $grocery=$row["count"];
             }

                 if (($liquor == 0 || $liquor == 1 || $liquor == 2) && ($groceyandliquorcnt == 0 || $groceyandliquorcnt == 1 || $groceyandliquorcnt == 2))
                   {


                        $query = "select itemcategory from itemcategorytb where itemcategory='Liquor' and '".$_POST["curdate"]."' between fromdate  and todate
                                and  isdeleted=".$NotDeleted." and  year(fromdate)='" . $eventArray[0] ."' and canteenname='".$canteenname."' order by creationdatetime desc";

                        $result = mysqli_query($conn, $query);
                       if($row = mysqli_fetch_array($result))
                         {
                             $data["itemcategory"]=$row["itemcategory"];
                             $itemcategory=$row["itemcategory"];
                         }
                         else
                         {
                            $itemcategory="-";
                         }
              }



        }

 

if($itemcategory=="-" || $itemcategory=="Liquor" || $itemcategory=="Grocery")
              {
                 if (($grocery == 0 || $grocery == 1 || $grocery == 2)  && ($groceyandliquorcnt == 0 || $groceyandliquorcnt == 1 || $groceyandliquorcnt == 2))
                   {


                        $query = "select itemcategory from itemcategorytb where itemcategory='Grocery' and '".$_POST["curdate"]."' between fromdate  and todate
                                and  isdeleted='".$NotDeleted."' and  year(fromdate)='" . $eventArray[0] ."' and canteenname='".$canteenname."' order by creationdatetime desc";

                        $result = mysqli_query($conn, $query);
                       if($row = mysqli_fetch_array($result))
                         {
                             $data["itemcategory"]=$row["itemcategory"];
                               $itemcategory=$row["itemcategory"];
                         }
                         

              }

        }

        

      


if($itemcategory=="-" && $grocery==3 && $liquor == 0)
        {
             $data["itemcategory"]=  "Liquor is not set for this date,please select another date.";

        }

         if($itemcategory=="-" && $grocery==0 && $liquor == 3)
        {
             $data["itemcategory"]=  "Grocery is not set for this date,please select another date.";

        }

         if ($groceyandliquorcnt == 3)
            {
                 $data["itemcategory"]=  "You have already booked Grocery and Liquor for this month that the reason date is not selected";
            }

             if($grocery==3 && $liquor==3)
            {
                 $data["itemcategory"]=  "You have already booked Grocery and Liquor for this month that the reason date is not selected";
            }

           

            }
            else
            {
               $data["itemcategory"]="slot not available";
            }




 echo json_encode($data);
?>