jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/html/clientpnl/ [ drwxr-xr-x ]
name : load_token_list.php
 <?php

       session_start();

   $canteenname= $_SESSION["usercanteenname"];
    $regisid= $_SESSION["regisid"];
$connect = new PDO("mysql:host=localhost; dbname=stbookingslotdb", "root", "");

/*function get_total_row($connect)
{
  $query = "
  SELECT * FROM tbl_webslesson_post
  ";
  $statement = $connect->prepare($query);
  $statement->execute();
  return $statement->rowCount();
}

$total_record = get_total_row($connect);*/

$limit = '20';
$page = 1;
if($_POST['page'] > 1)
{
  $start = (($_POST['page'] - 1) * $limit);
  $page = $_POST['page'];
}
else
{
  $start = 0;
}




$query = "
       select bookingid,itemcategory,name,personalno,cusrank,mobileno,newtokenno,bookingdate1,time_format(time(bookingtime), '%h:%i %p') as bookingtime,date_format(creationdatetime,'%d-%m-%y') as creationdatetime,CanteenName from bookingqry
        where regisid='".$regisid."' and isdeleted=0 order by bookingdatetime desc ";



$filter_query = $query . 'LIMIT '.$start.', '.$limit.'';

$statement = $connect->prepare($query);
$statement->execute();
$total_data = $statement->rowCount();

$statement = $connect->prepare($filter_query);
$statement->execute();
$result = $statement->fetchAll();
$total_filter_data = $statement->rowCount();

if($total_filter_data ==0)

{      $msg="No Record Found";
      echo $msg;
 return;
}

$output = '
<div align="Center"> <label>Total Records - '.$total_data.' </label> </div>


<table class="table table-striped table-bordered">
  <tr>
    <th>Token No</th>
    <th>Personal No</th>

      <th>Name</th>
       <th>Rank</th>
        <th>Mobile No</th>
         <th>Booking Date</th>
         <th>Item Category</th>
          <th>Time</th>
            <th>Creation Date</th>
          <th>Canteen</th>

  </tr>
';
if($total_data > 0)
{
  foreach($result as $row)
  {
    $output .= '
    <tr>
      <td>'.$row["newtokenno"].'</td>
      <td>'.$row["personalno"].'</td>
       <td>'.$row["name"].'</td>
        <td>'.$row["cusrank"].'</td>
         <td>'.$row["mobileno"].'</td>
          <td>'.$row["bookingdate1"].'</td>
           <td>'.$row["itemcategory"].'</td>
            <td>'.$row["bookingtime"].'</td>
           <td>'.$row["creationdatetime"].'</td>
               <td>'.$row["CanteenName"].'</td>
                  <td> <a></a>Print </td>


    </tr>
    ';
  }
}
else
{
  $output .= '
  <tr>
    <td colspan="8" align="center">No Data Found</td>
  </tr>
  ';
}

$output .= '
</table>
<br />
<div align="center">
  <ul class="pagination">
';

$total_links = ceil($total_data/$limit);
$previous_link = '';
$next_link = '';
$page_link = '';

//echo $total_links;

if($total_links > 4)
{
  if($page < 5)
  {
    for($count = 1; $count <= 5; $count++)
    {
      $page_array[] = $count;
    }
    $page_array[] = '...';
    $page_array[] = $total_links;
  }
  else
  {
    $end_limit = $total_links - 5;
    if($page > $end_limit)
    {
      $page_array[] = 1;
      $page_array[] = '...';
      for($count = $end_limit; $count <= $total_links; $count++)
      {
        $page_array[] = $count;
      }
    }
    else
    {
      $page_array[] = 1;
      $page_array[] = '...';
      for($count = $page - 1; $count <= $page + 1; $count++)
      {
        $page_array[] = $count;
      }
      $page_array[] = '...';
      $page_array[] = $total_links;
    }
  }
}
else
{
  for($count = 1; $count <= $total_links; $count++)
  {
    $page_array[] = $count;
  }
}

for($count = 0; $count < count($page_array); $count++)
{
  if($page == $page_array[$count])
  {
    $page_link .= '
    <li class="page-item active">
      <a class="page-link" href="#">'.$page_array[$count].' <span class="sr-only">(current)</span></a>
    </li>
    ';

    $previous_id = $page_array[$count] - 1;
    if($previous_id > 0)
    {
      $previous_link = '<li class="page-item"><a class="page-link" href="javascript:void(0)" data-page_number="'.$previous_id.'">Previous</a></li>';
    }
    else
    {
      $previous_link = '
      <li class="page-item disabled">
        <a class="page-link" href="#">Previous</a>
      </li>
      ';
    }
    $next_id = $page_array[$count] + 1;
    if($next_id >= $total_links)
    {
      $next_link = '
      <li class="page-item disabled">
        <a class="page-link" href="#">Next</a>
      </li>
        ';
    }
    else
    {
      $next_link = '<li class="page-item"><a class="page-link" href="javascript:void(0)" data-page_number="'.$next_id.'">Next</a></li>';
    }
  }
  else
  {
    if($page_array[$count] == '...')
    {
      $page_link .= '
      <li class="page-item disabled">
          <a class="page-link" href="#">...</a>
      </li>
      ';
    }
    else
    {
      $page_link .= '
      <li class="page-item"><a class="page-link" href="javascript:void(0)" data-page_number="'.$page_array[$count].'">'.$page_array[$count].'</a></li>
      ';
    }
  }
}

$output .= $previous_link . $page_link . $next_link;
$output .= '
  </ul>

</div>
';

echo $output;

?>