jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/html/clientpnl/ [ drwxr-xr-x ]
name : view_token_list.php
 <?php include "top.php";
if($_SESSION['pswchangeyesorno']=="0")
  {
    header("Location: change_password.php");
  }
?>

  <script type="text/javascript">
   $(document).ready(function(){


   });
function deletetoken(token) {

  let text = "Do you want delete token no";
  if (confirm(text) == true) {

                $.ajax({
                    method: 'POST',
                    url: 'delete_token.php',
                    data: '&token=' + token,
                     dataType:"JSON",
                   success:function(data) {

                            if(data==1)
                            {
                              window.location.href='view_token_list.php';

                            }
                            else
                            {
                             alert("There is problem to delete token");
                            }

                    }
                });
  }

   else {
    text = "You canceled!";
  }
  }

  function PrintPanel(divid) {

             var panel = document.getElementById(divid);

             var printWindow = window.open('', '', 'height=400,width=800');
             printWindow.document.write('<html><head><title>BOOK TOKEN DETAILS</title>');
             printWindow.document.write('</head><body >');
             printWindow.document.write(panel.innerHTML);
             printWindow.document.write('</body></html>');
             printWindow.document.close();
             setTimeout(function () {
                 printWindow.print();
             }, 500);
             return false;
         }



</script>


<!-- /contact-form -->
<section class="w3l-contact-main">
  <div class="contact-infhny py-5">
    <div class="container py-lg-3">

      <div class="row align-form-map">
        <div class="col-lg-10 title-content text-left mb-lg-4 mb-4">
          <h4 class="hny-title mb-3">All <span>Booked Token</span></h4>
        </div>


        <div class="col-lg-12 form-inner-cont">

          <?php
                  include "../config.php";
                  $limit=50;
                  if(isset($_GET['page'])){
                    $page=$_GET['page'];
                  }else{
                    $page=1;
                  }

                  $offset= ($page-1)*$limit;
                  $sql="select bookingid,itemcategory,name,personalno,cusrank,mobileno,tokenno,newtokenno,bookingdate1,case when isdeleted=0 then 'Booked' else 'Cancel' end bookingtype,time_format(time(bookingtime), '%h:%i %p') as bookingtime,date_format(creationdatetime,'%d-%m-%y') as creationdatetime,canteenname from bookingqry
                    where regisid='".$_SESSION["regisid"]."'  order by bookingdatetime desc LIMIT {$offset},{$limit}";
                  $result=mysqli_query($conn,$sql) or die("Query Failed.");

                  if(mysqli_num_rows($result)>0){
                ?>

                      <div align="Center">

                        <section class="w3l-services-2 w3l-services-1">
  <div class="services-2-content py-5">
    <div class="container py-lg-5 py-md-4">
      <!-- /give-set1-->
      <div class="give-set1 mb-5 pt-3">
        <h4 class="hny-title mb-3"> <span>Token Details</span></h4>
        <div class="row">
         <div class="col-md-12 col-12 mt-4">
<?php while ($row = mysqli_fetch_assoc($result)) { ?>
              <div class="serhny-item mt-2" id=<?php echo $row["bookingid"];?>>

                <lable> Name.:- <?php echo $row['name'];  ?></lable>  </br>	<lable> Personal No:- <?php echo $row['personalno'];  ?></lable>
              </br>   <lable> Booking Type.:- <?php echo $row['bookingtype'];  ?></lable>  </br>	
                <lable> Rank.:- <?php echo $row['cusrank'];  ?></lable>  </br>	
            	   <lable> Token No.:- <?php echo $row['tokenno'];  ?></lable>  </br>	<lable> Booked Date:- <?php echo $row['bookingdate1'];  ?></lable>
            	</br>
            	   <lable> Time.:- <?php echo $row['bookingtime'];  ?></lable> </br>  	<lable> Item Category:- <?php echo $row['itemcategory'];  ?></lable>
                    	</br>
            	   <lable> Creation Date:- <?php echo $row['creationdatetime'];  ?></br></lable>  	<lable> Canteen:- <?php echo $row['canteenname'];  ?></lable>
                        </br>
                <h5><a onclick="return PrintPanel(<?php echo $row["bookingid"]; ?>);">Print</a> </br>  <a  style="pointer-events:none; visibility: hidden" onclick="deletetoken(<?php echo $row["bookingid"]; ?>)" >Delete</a></h5>

              </div>
<?php }  ?>
          </div>
        </div>
      </div>
      <!-- /give-set1-->

    </div>
</section>

                        </div>

                <?php
                  }

                   $sql1="select bookingid,itemcategory,name,personalno,cusrank,mobileno,newtokenno,bookingdate1,case when isdeleted=0 then 'Booked' else 'Cancel' end bookingtype,time_format(time(bookingtime), '%h:%i %p') as bookingtime,date_format(creationdatetime,'%d-%m-%y') as creationdatetime,CanteenName from bookingqry
                    where regisid='".$_SESSION["regisid"]."' ";


                  $result1=mysqli_query($conn,$sql1) or die("Query Failed.");
                  if(mysqli_num_rows($result1)>0){
                    $total_record=mysqli_num_rows($result1);
                    $total_page= ceil($total_record/$limit);

                    echo "<ul class='pagination admin-pagination'>";
                    if($page > 1){
                      echo '<li><a href="view_token_list.php?page='.($page - 1).'">Prev</a></li>';
                    }
                    for($i=1; $i<=$total_page; $i++){
                      if($i==$page)
                      {
                        $active="active";
                      }else {
                        $active="";
                      }
                      echo '<li class="'. $active .'"><a href="view_token_list.php?page=' .$i. '">' .$i. '</a></li>';
                    }
                    if($total_page>$page){
                      echo '<li><a href="view_token_list.php?page='.($page + 1).'">Next</a></li>';
                    }
                    echo "</ul>";
                  }
                ?>
        </div>
      </div>
    </div>
</section>
<!-- //contact-form -->

<!--services-2-->

<!-- //services-1-->


<?php include "footer.php";?>