jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/cpanel/product_images/sym/root/var/www/stbilling/cpanel/ [ drwxrwxr-x ]
name : manage_party.php
 <?php

require_once "../config.php";

session_start();
$userid=$_SESSION['userid'];
$financialyearid=$_SESSION['financialyearid'];
$partyname = $_POST['partyname'];
$mobileno = $_POST['mobileno'];
$emailid = $_POST['emailid'];
$address = $_POST['currentaddress'];
$state = $_POST['state'];
$district = $_POST['district'];
$gstinno = $_POST['gstinno'];

$hdid = $_POST['hdid'];
$btnopration = $_POST['btnopration'];
$creationdatetime = date("Y-m-d H:m:s");

$message= "";
$cnt="";

$query = "select count(0) as count from accountmastertb where accountname='".$partyname."' and identifier=2 and status=0";
$result = mysqli_query($conn, $query);
while ($row = mysqli_fetch_array($result)) {
    $message= $row["count"];
}


if ($btnopration=="Save") {
    if ($message=="0")
    {
    $query="insert into accountmastertb(accountname,parentgroupid,identifier,status,creationdatetime,createdbyuserid,
           active,financialyearid) values('{$partyname}',4,2,'{$notdeleted}','{$creationdatetime}','{$userid}','{$gactive}','{$financialyearid}')";

        $result = mysqli_query($conn, $query);
        
        
      $query = "select accountmasterid from accountmastertb where accountname='".$partyname."' and identifier=2 and status=0";
 $result1 = mysqli_query($conn, $query);
while ($row = mysqli_fetch_array($result1)) {
    $accountmasterid= $row["accountmasterid"];
}
      $query=" insert into addressmastertb(accountmasterid,address1,stateid,districtid,
              email,mobile,identifier,status,creationdatetime,createdbyuserid,
              active,financialyearid,tinno) values('{$accountmasterid}','{$address}','{$state}','{$district}','{$emailid}','{$mobileno}',2,'{$notdeleted}',
              '{$creationdatetime}','{$userid}','{$gactive}','{$financialyearid}','{$gstinno}')";

             $result = mysqli_query($conn, $query);
                    
$query=" Insert into openingbalancemastertb(masterid,openingbalanceamount,identifier,
        financialyearid,createdbyid,creationdatetime,isdeleted,isactive) Values('{$accountmasterid}',0,2,'{$financialyearid}','{$userid}','{$creationdatetime}','{$notdeleted}','{$gactive}')";
        $result = mysqli_query($conn, $query);

        if ($result==true) {
            $message="1";
        }
    } else {
        $message="2";
    }
} elseif ($btnopration=="Update") {
    $query = "select count(0) as count from accountmastertb where accountmasterid!='".$hdid."' and accountname='".$partyname."' and status='".$notdeleted."'";
    $result = mysqli_query($conn, $query);
    while ($row = mysqli_fetch_array($result)) {
        $data["count"]= $row["count"];
    }

    if ($data["count"]=="0") {
    
        $query= " Update accountmastertb set accountname='".$partyname."'
                where accountmasterid='".$hdid."'";
               
    mysqli_query($conn, $query);
         
         $query="update addressmastertb set address1='{$address}',stateid='{$state}',
          districtid='{$district}',email='{$emailid}',mobile='{$mobileno}',tinno='{$gstinno}' where accountmasterid='".$hdid."'";
          
         $result=  mysqli_query($conn, $query);
        
        if ($result==true) {
            $message="3";
        }
    }

     else {
        $message="2";
    }
} elseif ($btnopration=="Delete") {

}
echo json_encode($message);
?>