jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/jpsagrisolution/epanel/ [ drwxr-xr-x ]
name : manage_former_equipment.php
 <?php

require_once "../panelassets/config.php";


$product = $_POST['product'];
$qty = $_POST['qty'];
$fid = $_POST['fid'];
$hdid = $_POST['hdid'];
$btnopration = $_POST['btnopration'];
$creationdatetime = date("Y-m-d H:m:s");

$message= "";
$cnt="";

$query = "select count(0) as count from farmerequipmenttb where farmerid='".$fid."'  and
  equipmentid ='".$product."' and isdeleted='".$notdeleted."'";

$result = mysqli_query($conn,$query);
while($row = mysqli_fetch_array($result))
{
  $message= $row["count"];
}

if($btnopration=="Save")
{
  if($message=="0")
  {

  $query= " insert into farmerequipmenttb(farmerid,equipmentid ,qty,isdeleted,creationuserid,creationdatetime)
          VALUES('{$fid}','{$product}','{$qty}','{$notdeleted}','1','{$creationdatetime}')";
  $message=  $query;
    $result = mysqli_query($conn, $query);

    if($result==true)
      $message="1";
  }
  else
  {
     $message="2";
  }
}
else if($btnopration=="Update"){



  $query = "select count(0) as count from formerequipmenttb where  	feid!='".$hdid."' farmerid='".$fid."'  and
            equipmentid ='".$product."' and isdeleted='".$notdeleted."'";
  $result = mysqli_query($conn,$query);
  while($row = mysqli_fetch_array($result))
  {
    $data["count"]= $row["count"];
  }

  if($data["count"]=="0")
  {

    $query= " insert into formerequipmenttb(farmerid,equipmentid ,qty,isdeleted,creationuserid,creationdatetime)
            VALUES('{$fid}','{$product}','{$qty}','{$notdeleted}','1','{$creationdatetime}')";

    $query=" Update formerequipmenttb set equipmentid='{$product}',qty='{$qty}',modificationdatetime ='{$creationdatetime}'
             where  feid='".$hdid."'";

    $result = mysqli_query($conn, $query);
    if($result==true)
      $message="3";
    }
    else
    {
      $message="2";
    }
  }
  else if($btnopration=="Delete")
  {


    $query="delete from farmerequipmenttb where feid='".$hdid."'";
    $result = mysqli_query($conn, $query);
    if($result==true)
      $message="4";


  }
  echo json_encode($message);
?>