jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/cpanel/product_images/xryukz_sym/root/var/www/html/adminpnl/ [ drwxr-xr-x ]
name : user.php
 <?php include "top.php";?>
<!-- /contact-form -->
<section class="w3l-contact-main">
  <div class="contact-infhny py-5">
    <div class="container py-lg-3">

      <div class="row align-form-map">
        <div class="col-lg-10 title-content text-left mb-lg-4 mb-4">
          <h4 class="hny-title mb-3">List of <span>Users</span></h4>
        </div>
        <div class="col-lg-2">
          <a class="btn btn-contact" href="add_user.php">ADD USER</a>
        </div>

        <div class="col-lg-12 form-inner-cont">
          <br>
          <?php
                  include "../config.php";
                  $limit=3;
                  if(isset($_GET['page'])){
                    $page=$_GET['page'];
                  }else{
                    $page=1;
                  }

                  $offset= ($page-1)*$limit;
                  $sql="SELECT * FROM userdetailstb where CanteenName='".$_SESSION['admincanteenname']."' ORDER BY userid LIMIT {$offset},{$limit}";
                  $result=mysqli_query($conn,$sql) or die("Query Failed.");

                  if(mysqli_num_rows($result)>0){
                ?>
                <table  class="content-table">
                  <thead>
                    <th>ID</th>
                    <th>UesrType</th>
                    <th>UserName</th>
                    <th>Password</th>
                    <th>MobileNo</th>
                    <th>Edit</th>
                    <th>Delete</th>
                  </thead>
                  <tbody>
                      <?php while ($row = mysqli_fetch_assoc($result)) { ?>
                        <tr>
                            <td class='id'><?php echo $row['UserID'];  ?></td>
                            <td><?php echo $row['UserType'];  ?></td>
                            <td><?php echo $row['UserName'];  ?></td>
                            <td><?php echo $row['Psw'];  ?></td>
                            <td><?php echo $row['MobileNo'];  ?></td>
                            <td class='edit'><a href='update_user.php?id=<?php echo $row["UserID"]; ?>'><i class='fa fa-edit'></i></a></td>
                            <td class='delete'><a href=''><i class='fa fa-trash-o'></i></a></td>
                        </tr>
                        <?php }  ?>
                    </tbody>
                </table>
                <?php
                  }

                  $sql1="SELECT * FROM userdetailstb where CanteenName='".$_SESSION['admincanteenname']."'";
                  $result1=mysqli_query($conn,$sql1) or die("Query Failed.");
                  if(mysqli_num_rows($result1)>0){
                    $total_record=mysqli_num_rows($result1);
                    $total_page= ceil($total_record/$limit);

                    echo "<ul class='pagination admin-pagination'>";
                    if($page > 1){
                      echo '<li><a href="user.php?page='.($page - 1).'">Prev</a></li>';
                    }
                    for($i=1; $i<=$total_page; $i++){
                      if($i==$page)
                      {
                        $active="active";
                      }else {
                        $active="";
                      }
                      echo '<li class="'. $active .'"><a href="user.php?page=' .$i. '">' .$i. '</a></li>';
                    }
                    if($total_page>$page){
                      echo '<li><a href="user.php?page='.($page + 1).'">Next</a></li>';
                    }
                    echo "</ul>";
                  }
                ?>
        </div>
      </div>
    </div>
</section>
<!-- //contact-form -->


<?php include "footer.php";?>