jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/cpanel/product_images/sym/root/var/www/stbilling/cpanel/ [ drwxrwxr-x ]
name : save_temp_data.php
 <?php

require_once "../config.php";

session_start();
$userid=$_SESSION['adminid'];


$planno  = $_POST['planno'];

$query="delete from tempcreateplantb where planno='".$planno ."'";
$result = mysqli_query($conn, $query);

$query=" insert into tempcreateplantb(planno,employeeid,plandate,sno,areaid,doctorid,brandid,meetingtype,
           timingofvisit,description,planstatus,
           isdeleted,userid,creationdatetime,finyear,tempplanid) Select planno,employeeid,plandate,sno,areaid,doctorid,brandid,meetingtype,
           timingofvisit,description,planstatus,
           isdeleted,userid,creationdatetime,finyear,planid from createplantb where planno='". $planno."' ";

$result = mysqli_query($conn, $query);
if ($result==true) {
    $message="1";
}

$connect = new PDO("mysql:localhost=3307; dbname=blblifecaredb", "root", "");

$query = "SELECT planid,planno,DATE_FORMAT(plandate, '%D %M %Y') as plandate ,doctorname,brandname,meetingtype, TIME_FORMAT(timingofvisit, '%h %i %p') as timingofvisit FROM v_tempplandetails where planno='".$planno."' and  isdeleted=0";



$filter_query = $query;

$statement = $connect->prepare($query);
$statement->execute();
$total_data = $statement->rowCount();

$statement = $connect->prepare($filter_query);
$statement->execute();
$result = $statement->fetchAll();
$total_filter_data = $statement->rowCount();
$sno=1;

if ($total_filter_data ==0) {
    $msg="No Record Found";
    echo $msg;
    return;
}

$output = '

<table class="table table-striped table-bordered">
  <tr>
    <th>S.No.</th>
    <th>Plan Date</th>
    <th>Doctor Name</th>
    <th>Brand</th>
    <th>Meeting Type</th>
    <th>Time of Visit</th>
    <th></th>
    <th></th>
  </tr>
';
if ($total_data > 0) {
    foreach ($result as $row) {
        $output .= '
    <tr>
      <td>'.$sno.'</td>
      <td>'.$row["plandate"].'</td>
      <td>'.$row["doctorname"].'</td>
      <td>'.$row["brandname"].'</td>
      <td>'.$row["meetingtype"].'</td>
      <td>'.$row["timingofvisit"].'</td>
      <td><button onclick="edit('.$row["planid"].');" ><i class=" glyphicon glyphicon-pencil"></i></button></td>
      <td><button onclick="remove('.$row["planid"].');"><i class="glyphicon glyphicon-trash"></i></button></td>
    </tr>
    ';
        $sno=$sno+1;
    }
} else {
    $output .= '
  <tr>
    <td colspan="8" align="center">No Data Found</td>
  </tr>
  ';
}

$output .= '
</table>
<br />
';

echo $output;
?>