jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/cpanel/product_images/sym/root/var/www/stbilling/cpanel/ [ drwxrwxr-x ]
name : edit_password.php

 <?php

require_once "../config.php";

session_start();
$empid= $_SESSION["adminid"];

$new_psw = $_POST['newpassword'];

$old_psw = $_POST['oldpassword'];
$cnt=0;
$message="0";

$query="select * from employeetb where usertype='admin' and employeeid='".$empid."' and userpassword='".$old_psw."' and isdeleted=0";
$result = mysqli_query($conn, $query);


$cnt = intval(mysqli_num_rows($result));

if ($cnt>0) {
    $query=" update  employeetb set userpassword='".$new_psw."' where employeeid='".$empid."' and usertype='admin'";
    $result = mysqli_query($conn, $query);

    if ($result==1) {
        $message="1";
    }
} else {
    $message="2";
}


echo json_encode($message);