jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/cpanel/product_images/sym/root/var/www/stbilling/cpanel/ [ drwxrwxr-x ]
name : add_state.php
 <?php include "top.php";?>
<script type="text/javascript">
$(document).ready(function() {
    var id = getUrlVars()['id'];
    var op = getUrlVars()['op'];
    if (id != "") {
        $.ajax({
            method: 'POST',
            url: 'get_state.php',
            data: '&id=' + id,
            dataType: "JSON",
            success: function(data) {
                $('#hdid').val(data.hdid);
                $('#statename').val(data.statename);
                if (op == "Update") {
                    $('#pageheading').text("UPDATE STATE");
                    $('#btnopration').text("Update");
                    document.getElementById("statename").focus();
                } else if (op == "Delete") {
                    $('#pageheading').text("DELETE STATE");
                    $('#btnopration').text("Delete");
                    document.getElementById("statename").setAttribute('disabled', true);
                }
            }
        });
    }
});

function getUrlVars() {
    var vars = [],
        hash;
    var hashes = window.location.href.slice(window.location.href.indexOf('?') + 1).split('&');
    for (var i = 0; i < hashes.length; i++) {
        hash = hashes[i].split('=');
        vars.push(hash[0]);
        vars[hash[0]] = hash[1];
    }
    return vars;
}

function savestate() {
    var flag = true;
    var inputField1 = document.getElementById("statename");
    if (inputField1.value == "") {
        flag = false;
        alert("Please enter state name");
        document.getElementById("statename").focus();
        return false;
    }


    var statename = document.getElementById("statename").value;
    var hdid = document.getElementById("hdid").value;
    var btnopration = document.getElementById("btnopration").innerHTML;

    var text = "Do you want " + btnopration + " state";
    if (confirm(text) == false) {
        flag = false;
        return false;
    }
    try {
        if (flag == true) {
            var urlgetcode = 'manage_state.php';
            $.ajax({
                method: 'POST',
                url: urlgetcode,
                data: '&statename=' + statename + '&hdid=' + hdid + '&btnopration=' + btnopration,
                dataType: 'json',
                async: true,
                cache: false,
                success: function(msg) {

                    if (msg == "1") {
                        alert("Save Successfully");
                        $('#hdid').val("");
                        $('#statename').val("");
                        $('#btnopration').text("Save");
                        window.location.href = "list_state.php";
                    } else if (msg == "2") {
                        alert("Already Exist");
                        $('#hdid').val("");
                        $('#statename').val("");
                        $('#btnopration').text("Save");
                        window.location.href = "list_state.php";
                    } else if (msg == "3") {
                        alert("Update Successfully");
                        $('#hdid').val("");
                        $('#statename').val("");
                        $('#btnopration').text("Save");
                        window.location.href = "list_state.php";
                    } else if (msg == "4") {
                        alert("Delete Successfully");
                        $('#hdid').val("");
                        $('#statename').val("");
                        $('#btnopration').text("Save");
                        window.location.href = "list_state.php";
                    }
                },
                error: function(request) {
                    alert(request.responseText);
                }
            });
        }
    } catch (Error) {
        alert(Error);
    }
    return;
}
</script>
<!-- main content start-->
<div id="page-wrapper">
    <div class="main-page">
        <div class="forms">
            <div class="row">
                <div class="col-md-3 grid_box1">
                    <h4 id="pageheading">ADD STATE</h4>
                </div>
                <div class="col-md-6 grid_box1">
                </div>
                <div class="col-md-3 grid_box1">
                    <a href="list_state.php" class="btn btn-primary" style="width: 100%">Back To State List</a>
                </div>
            </div>
            <div class="row">
                <div class="form-three widget-shadow">
                    <div class="form-horizontal">
                        <div class="form-group">
                            <input type="hidden" class="form-control1" name="hdid" id="hdid">
                            <label for="statename" class="col-sm-2 control-label">State Name</label>
                            <div class="col-sm-10">
                                <input type="text" class="form-control1" id="statename" name="statename"
                                    placeholder="State Name">
                            </div>
                        </div>
                        <div align="center">
                            <button type="submit" id="btnopration" class="btn btn-default"
                                onclick="savestate();">Save</button>
                        </div>

                    </div>
                </div>
            </div>

        </div>
    </div>
</div>
<!-- main content end-->
<?php include "footer.php";?>