jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/cpanel/product_images/sym/root/var/www/stbilling/ [ drwxrwxr-x ]
name : index.php
 <?php include "top.php";?>
<script>


    function LoginAuthentification()
       {
               var flag = true;
               var inputField1 =document.getElementById("txtusertype");
               if (inputField1.value == "")
                {
                flag = false;
                alert("Please enter user type.");
                document.getElementById("txtusertype").focus();
                return false;
               }
                var inputField2 = document.getElementById("txtusername");
               if (inputField2.value == "") {
                flag = false;
                alert("Please enter user name.");
                document.getElementById("txtusername").focus();
                return false;
             }
               var inputField3 = document.getElementById("txtpsw");
               if (inputField3.value == "")
                {
                flag = false;
                alert("Please enter password");
                document.getElementById("txtpsw").focus();
                return false;
                }
                var inputField4 = document.getElementById("cmbfinyear");
                if (inputField4.value == "Select Fin Year")
                 {
                 flag = false;
                 alert("Please select fin year");
                 document.getElementById("cmbfinyear").focus();
                 return false;
                 }



                var usertype = document.getElementById("txtusertype").value;
                var username = document.getElementById("txtusername").value;
                var company = document.getElementById("cmbcompany").value;
                var psw = document.getElementById("txtpsw").value;
               var finyear = document.getElementById("cmbfinyear").value;

                try {
                   if (flag == true) {
                   var urlgetcode = 'user_authentification.php';
                    $.ajax({
                        method: 'POST',
                        url: urlgetcode,
                        data: '&usertype='+ usertype +'&username='+ username +'&psw='+ psw +'&company='+ company+'&finyear='+ finyear,
                        dataType: 'json',
                        async: true,
                        cache: false,
                        success: function (data) {

                       if(data=="0")
                       {
                         alert("User name or password is wrong");
                         document.getElementById("txtusername").value="";
                         document.getElementById("txtpsw").value="";
                         return;
                       }
                       if(data!="0")
                         {
                           if(usertype=="user")
                             {
                               window.location.href="epanel/index.php";
                             }
                            if(usertype=="Admin")
                             {
                               window.location.href="cpanel/index.php";
                             }
                         }
                        },
                        error: function (request) {
                        alert(request.responseText);
                        }
                    });
                }
            }
            catch (Error) {
                alert(Error);
            }
              return;
         }
         function getfinyear(val) {

             $.ajax({
                 type: "Get",
                 url: "get_finyear.php",
                 success: function(res) {
                     var data = JSON.parse(res);
                     var sel = $("#cmbfinyear");
                     sel.empty();
                     $("#cmbfinyear").append('<option>Select Fin Year</option>');
                     for (var i = 0; i < data.length; i++) {
                         if (data[i].finyearid == val) {

                             sel.append('<option value="' + data[i].finyearid + '" selected=true>' + data[i]
                                 .finyear +
                                 '</option>');

                         } else {
                             sel.append('<option value="' + data[i].finyearid + '">' + data[i].finyear +
                                 '</option>');
                         }
                     }

                     ///	$("#state").html(data);
                 }
             });
         }

       $(document).ready(function() {
       getfinyear("");
       });


</script>
<!-- main content start-->
<div id="page-wrapper">
  <div class="main-page login-page ">
    <h3 class="title1">SignIn Page</h3>
    <div class="widget-shadow">
      <div class="login-top">
        <h4>Welcome to Sadanand Technologies ! </h4>
      </div>
      <div class="login-body">

          <input type="text" class="user" name="txtusername" id="txtusername"  placeholder="Enter your user name" required="">
          <input type="password" name="txtpsw" id="txtpsw" class="lock" placeholder="password">

          <select class="form-control1"  id="cmbcompany" name="cmbcompany">
            <option value="3">Sadanand Technologies Bareilly</option>
            <option value="5">Sadanand Technologies Lucknow</option>
          </select>
          <select class="form-control1"  id="txtusertype" name="txtusertype"  style="visibility: hidden">
            <option value="Admin">Admin</option>
            <option value="user">user</option>
          </select>
          <select class="form-control1"  id="cmbfinyear" name="cmbfinyear">


          </select>


          <input type="submit" name="btnlogin" id="btnlogin" onclick="LoginAuthentification();" value="Submit">


          <div class="forgot-grid">
            <!--<label class="checkbox"><input type="checkbox" name="checkbox" checked=""><i></i>Remember me</label>-->
            <div class="forgot">
              <a href="forgot_password.php">forgot password?</a>
            </div>
            <div class="clearfix"> </div>
          </div>

      </div>
    </div>

  </div>
</div>
<?php include "footer.php";?>