jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/html/clientpnl/ [ drwxr-xr-x ]
name : seat_settings.php
 <?php include "top.php";
       session_start();

?>



<script type="text/javascript">

$(document).ready(function () {
 GenerateCaptcha();

    var calendar = $('#calendar').fullCalendar({
        editable: true,
        events: "client_load_slot_details.php",
        displayEventTime: false,
        eventRender: function (event, element, view) {
         var color="#000000";
         event.color=color;

            if (event.allDay === 'true') {
                event.allDay = true;

            } else {
                event.allDay = false;

            }
        },
        selectable: false,
        selectHelper: true,
        select: function (start, end, allDay) {

            var title = prompt('Total Slot:');

            if(isNaN(title))
            {  alert("Please enter numeric value");
                                 return;

                                 }


            if (title) {

                  var start = $.fullCalendar.formatDate(start, "Y-MM-DD");
                  var canteen= document.getElementById("hdcanteen").value;
                  var end = $.fullCalendar.formatDate(end, "Y-MM-DD");

                var color="#000000";
                $.ajax({
                    url: 'slot_save.php',
                    data: 'title=' + title + '&start=' + start + '&end=' + start+'&canteenname='+canteen,
                    type: "POST",
                    success: function (msg) {

                    if(msg==0)
                    {

                        displayMessage("Added Successfully");
                         window.location.href="seat_settings.php";
                    }
                        else

                        {
                            alert("You cant allocate seat because holiday set for this date");
                              window.location.href="seat_settings.php";
                        }
                    }
                });
                calendar.fullCalendar('renderEvent',
                        {
                            title: title,
                            start: start,
                              end: end,
                            allDay: allDay,


                        },
              true
                        );
            }
            calendar.fullCalendar('unselect');
        },

        editable: false,
        eventDrop: function (event, delta) {
                    var start = $.fullCalendar.formatDate(event.start, "Y-MM-DD HH:mm:ss");
                    var end = $.fullCalendar.formatDate(event.end, "DD-MM-Y");


                    $.ajax({
                        url: 'edit-event.php',
                        data: 'title=' + event.title + '&start=' + start + '&end=' + end + '&id=' + event.id+'&canteenname='+canteen,
                        type: "POST",
                        success: function (response) {
                            displayMessage("Updated Successfully");
                        }
                    });
                },
        eventClick: function (event) {

                               if(isNaN(event.title))
                               {  alert(event.title);
                                 return;
                               }

             var start = $.fullCalendar.formatDate(event.start, "Y-MM-DD HH:mm:ss");


             var id=1;


                $.ajax({
                    method: 'POST',
                    url: 'delete-event.php',
                    data: '&start=' + start,
                     dataType:"JSON",
                   success:function(data) {

                   if(data.itemcategory!='')
                              {
                         var date = $.fullCalendar.formatDate(event.start, "DD-MM-Y");
                        $('#txtSelectedDate').val(date);
                         $('#ddlItemCategory').val(data.itemcategory);
                           $('#ddlCanteen').val("Banbasa");

                           }
                    }
                });

        }

    });
});

function displayMessage(message) {
	    $(".response").html("<div class='success'>"+message+"</div>");
    setInterval(function() { $(".success").fadeOut(); }, 1000);
}


 function GenerateCaptcha() {
              var chr1 = Math.ceil(Math.random() * 10) + '';
              var chr2 = Math.ceil(Math.random() * 10) + '';
              var chr3 = Math.ceil(Math.random() * 10) + '';

              var str = new Array(4).join().replace(/(.|$)/g, function () { return ((Math.random() * 36) | 0).toString(36)[Math.random() < .5 ? "toString" : "toUpperCase"](); });
              var captchaCode = str + chr1 + ' ' + chr2 + ' ' + chr3;
              document.getElementById("txtCaptcha").value = captchaCode
          }

          /* Validating Captcha Function */
          function ValidCaptcha() {
              var str1 = removeSpaces(document.getElementById('txtCaptcha').value);
              var str2 = removeSpaces(document.getElementById('txtCompare').value);

              if (str1 == str2) {

                  return true;

              }
              else {

                  GenerateCaptcha();
                  return false;

              }
          }

          /* Remove spaces from Captcha Code */
          function removeSpaces(string) {
              return string.split(' ').join('');
          }


           function SaveCustomerToken() {
              var flag = true;


                 var inputField1 =document.getElementById("txtSelectedDate");
                 if (inputField1.value == "")
                  {
                  flag = false;
                  alert("Please Select Date.");
                  document.getElementById("txtSelectedDate").focus();
                  return false;
                 }
                  var inputField2 = document.getElementById("ddlItemCategory");
                 if (inputField2.value == "-") {
                  flag = false;
                  alert("Please Select Item Category.");
                  document.getElementById("ddlItemCategory").focus();
                  return false;
               }

                 var inputField3 = document.getElementById("ddlCanteen");
                if (inputField3.value == "Select Canteen") {
                  flag = false;
                  alert("Please Select Canteen.");
                  document.getElementById("ddlCanteen").focus();
                  return false;
                }

                    if (removeSpaces(document.getElementById('txtCompare').value) == "") {
                  flag = false;
                  alert("Please Enter Captcha Code .");

                  return false;
              }
              var str1 = removeSpaces(document.getElementById('txtCaptcha').value);
              var str2 = removeSpaces(document.getElementById('txtCompare').value);

              if (str1 != str2) {

                  alert("Captcha is not correct. please enter again");
                  flag = false;
                  GenerateCaptcha();
                  return false;
              }

               var itemcategory = document.getElementById("ddlItemCategory").value;
              var selecteddate = document.getElementById("txtSelectedDate").value;
              var canteenname = document.getElementById("ddlCanteen").value;
                 var RegisID="100";


               try {

                  if (flag == true) {

                      var urlgetcode = 'SaveToken.php';

                      $.ajax({
                          method: 'POST',
                          url: urlgetcode,
                          data: '&regisid=' + RegisID + '&bookingdatetime=' + selecteddate + '&itemcategory=' + itemcategory + '&canteenname=' + canteenname,
                          dataType: 'json',
                          async: true,
                          cache: false,

                          success: function (msg) {
                                   alert(msg);
                          },
                          error: function (request) {

                              alert(request.responseText);
                          }
                      });
                  }
              }
              catch (Error) {
                  alert(Error);
              }



              return;
          }


</script>

<style>
body {
    margin-top: 50px;
    text-align: center;
    font-size: 12px;
    font-family: "Lucida Grande", Helvetica, Arial, Verdana, sans-serif;
}

#calendar {
    width: width: 100%;
    margin: 0 auto;
}

.response {
    height: 60px;
}

.success {
    background: #cdf3cd;
    padding: 10px 60px;
    border: #c3e6c3 1px solid;
    display: inline-block;
}
</style>

<!-- /contact-form -->
<section class="w3l-contact-main">
  <div class="contact-infhny py-5">
    <div class="container py-lg-3">

      <div class="row align-form-map">
        <div class="col-lg-12 title-content text-left mb-lg-4 mb-4">
          <h4 class="hny-title mb-3">PHP Calendar Event Management FullCalendar JavaScript Library</h4>
        </div>
        <div class="col-lg-12 form-inner-cont">
          <div class="response"></div>
          <div id='calendar'></div>

                  <input  type="hidden" name="hdID" id="hdcanteen" value="<?php echo $_SESSION['usercanteenname']; ?>" />


            <div class="col-lg-12 contact_grid_right" align="center">
                              <div class="col-lg-2" style="padding-top: 5px; padding-bottom: 5px">
                                  <b>
                                       <input type="text" disabled="disabled" runat="server" id="txtSelectedDate" maxlength="50" placeholder="Selected Date" style="color: #000000" />
                                  </b>
                              </div>
                              <div class="col-lg-2" style="padding-top: 5px; padding-bottom: 5px; vertical-align: middle;">
                                  <select id="ddlItemCategory" runat="server"   class="form-control" style="color: #000000">
                                     <option>-</option>
                                      <option>Grocery and Liquor</option>
                                       <option>Liquor</option>
                                        <option>Grocery</option>
                                  </select>
                              </div>

                              <div class="col-lg-2" style="padding-top: 5px; padding-bottom: 5px; vertical-align: middle;">
                                  <select id="ddlCanteen" runat="server"  disabled="disabled"  class="form-control" style="color: #000000">
                                     <option>Select Canteen</option>
                                      <option>Banbasa</option>
                                       <option>Khatima</option>

                                  </select>
                              </div>

                              <div class="col-lg-1" style="padding-top: 5px; padding-bottom: 5px">
                              <p style="color: #000000">
                                  Enter Captcha
                              </p>
                              </div>
                              <div class="col-lg-1" style="padding-top: 5px; padding-bottom: 5px">
                                  <input type="text" id="txtCompare" style="color: #000000" />
                              </div>
                              <div class="col-lg-1" style="padding-top: 5px; padding-bottom: 5px">
                                  <input type="text" runat="server" id="txtCaptcha" style="text-align: center; border: none; font-weight: bold; font-family: Modern; color: #000000;" readonly="readonly" />
                              </div>
                               <div class="col-lg-1" style="padding-top: 5px; padding-bottom: 5px; vertical-align: middle;">
                                  <input type="button" id="btnrefresh" class="btn btn-block btn-info" value="Refresh" onclick="GenerateCaptcha();" />
                               </div>
                              <div class="col-lg-2" style="padding-top: 5px; padding-bottom: 5px">
                                   <input type="button" id="btnbookslot" class="btn btn-block btn-info" value="Book Slot" onclick="SaveCustomerToken();" />
                              </div>

                          </div>
        </div>
      </div>
    </div>
</section>
<!-- //contact-form -->
    <h2>PHP Calendar Event Management FullCalendar JavaScript Library</h2>




     <div class="table-responsive" id="employee_details" style="display:none">
   <table class="table table-bordered">
    <tr>
     <td width="10%" align="right"><b>Name</b></td>
     <td width="90%"><span id="employee_name"></span></td>
    </tr>
    <tr>
     <td width="10%" align="right"><b>Address</b></td>
     <td width="90%"><span id="employee_address"></span></td>
    </tr>

    <tr>
     <td width="10%" align="right"><b>Gender</b></td>
     <td width="90%"><span id="employee_gender"></span></td>
    </tr>
    <tr>
     <td width="10%" align="right"><b>Designation</b></td>
     <td width="90%"><span id="employee_designation"></span></td>
    </tr>
    <tr>
     <td width="10%" align="right"><b>Age</b></td>
     <td width="90%"><span id="employee_age"></span></td>
    </tr>
   </table>
   </div>
    <?php include "footer-seat.php";?>