jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/epanel/ [ drwxr-xr-x ]
name : manage_farmer_details.php
 <?php
session_start();
require_once "../panelassets/config.php";
$state = $_POST['state'];
$district = $_POST['district'];
$block = $_POST['block'];
$villae=$_POST['villagename'];
$farmername = $_POST['farmername'];
$fathername = $_POST['fathername'];
$mobileno1 = $_POST['mobileno1'];
$mobileno2=$_POST['mobileno2'];
$age = $_POST['age'];
$gender=$_POST['gender'];
$creationuserid=$_SESSION["userid"];
$hdid = $_POST['hdid'];
$btnopration = $_POST['btnopration'];
$creationdatetime = date("Y-m-d H:m:s");

$message= "";
$cnt="";

$query = "select count(0) as count from farmerdetailstb where  mobileno1='".$mobileno1."' and isdeleted='".$notdeleted."'";
$result = mysqli_query($conn,$query);
while($row = mysqli_fetch_array($result))
{
  $message= $row["count"];
}

if($btnopration=="Save")
{
  if($message=="0")
  {

  $query= " insert into farmerdetailstb(farmername,fathername,mobileno1,mobileno2,
          age,gender,stcode,distcode,blockid,villageid,isdeleted,creationuserid,creationdatetime)
          VALUES('{$farmername}','{$fathername}','{$mobileno1}','{$mobileno2}','{$age}','{$gender}',
          '{$state}','{$district}','{$block}','{$villae}','{$notdeleted}','{$creationuserid}','{$creationdatetime}')";
  $message=  $query;
    $result = mysqli_query($conn, $query);

    if($result==true)
      $message="1";
  }
  else
  {
     $message="2";
  }
}
else if($btnopration=="Update"){



$query = "select count(0) as count from farmerdetailstb where farmerid!='".$hdid ."'
          and  mobileno1='".$mobileno1."' and isdeleted='".$notdeleted."'";
  $result = mysqli_query($conn,$query);
  while($row = mysqli_fetch_array($result))
  {
    $data["count"]= $row["count"];
  }

  if($data["count"]=="0")
  {
    $query="Update farmerdetailstb set farmername='{$farmername}',fathername='{$fathername}',mobileno1='{$mobileno1}',mobileno2='{$mobileno2}',
              age= '{$age}',gender='{$gender}', stcode='".$state."', distcode='".$district."',blockid='".$block."',villageid='".$villae."', modificationuserid='".$creationuserid."',	modificationdatetime ='{$creationdatetime}'
               where farmerid='".$hdid."'";
    $result = mysqli_query($conn, $query);
    if($result==true)
      $message="3";
    }
    else
    {
      $message="2";
    }
  }
  else if($btnopration=="Delete")
  {
    //$query="delete from farmerdetailstb where farmerid='".$hdid."'";
    $query="Update farmerdetailstb set isdeleted ='".$deleted."' where farmerid='".$hdid."'";
    $result = mysqli_query($conn, $query);
    if($result==true)
      $message="4";
  }
  echo json_encode($message);
?>