jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/santgyaneshwarji/cpanel/ [ drwxr-xr-x ]
name : edit_message.php
 <?php
  include "top.php";
  include "header.php";
  include "menu.php";

  //include_once('config.php');

  $id = $_GET['id'];
  $sql = "select * from messagetb where id='".$id."'";
  $result = mysqli_query($conn,$sql);

  $data=mysqli_fetch_array($result);

?>
<script src="https://code.jquery.com/jquery-2.2.0.min.js"></script>
<script type="text/javascript">
$(document).ready(function (e){
$("#uploadForm").on('submit',(function(e){ e.preventDefault();

  var flag = true;
  var inputField1 =document.getElementById("messagefrom");
  if (inputField1.value == "-")
  {
     flag = false;
     alert("Please select message from");
     document.getElementById("messagefrom").focus();
     return false;
  }
  var inputField2 =document.getElementById("messagename");
  if (inputField2.value == "-")
  {
     flag = false;
     alert("Please enter name");
     document.getElementById("messagename").focus();
     return false;
  }

  var inputField3 =document.getElementById("long_desc");
  if (inputField3.value == "")
  {
     flag = false;
     alert("Please enter discription");
     document.getElementById("long_desc").focus();
     return false;
  }


  var messagefrom = document.getElementById("messagefrom").value;
  var messagename = document.getElementById("messagename").value;
  var long_desc = document.getElementById("long_desc").value;
  try {
    if (flag == true) {
      $.ajax({
      url: "update_message.php",
      type: "POST",
      data: new FormData(this),
      contentType: false, cache: false, processData:false,
      success: function(data){
        //alert(data);
       window.location.href="message_list.php";
      },
      error: function(){}
      });
    }
  }
  catch (Error) {
    alert(Error);
  }
  return;

}));
});
</script>
<div class="form-w3layouts">
      <!-- page start-->
      <!-- page start-->
      <div class="row">
        <div class="row w3-res-tb">
          <div class="col-sm-5 m-b-xs">
            <a href="message_list.php"><button class="btn btn-sm btn-default"><b>Back to Message List</b></button></a>
          </div>
          <div class="col-sm-4">
          </div>
          <div class="col-sm-3">

          </div>
        </div>
          <div class="col-lg-12">
                  <section class="panel">
                      <header class="panel-heading">
                          Update Message
                      </header>
                      <div class="panel-body">
                          <div class="position-center">
                            <form enctype="multipart/form-data" id="uploadForm" action="update_message.php" method="post">
                              <div class="form-group">
                                  <input type="hidden" id="messageid" name="messageid" value="<?php echo $_GET['id'];?>">
                                  <label for="exampleInputEmail1">Message From</label>
                                  <select class="form-control input-sm m-bot15" id="messagefrom" name="messagefrom">
                                      <option value="-">-</option>
                                      <?php if($data["messagefrom"]=="Chairman Message"){
                                          echo '<option value="Chairman Message" selected>Chairman Message</option>
                                          <option value="Director Message">Director Message</option>
                                          <option value="Principal Message">Principal Message</option>';
                                        }else if($data["messagefrom"]=="Director Message"){
                                          echo '<option value="Chairman Message">Chairman Message</option>
                                          <option value="Director Message" selected>Director Message</option>
                                          <option value="Principal Message">Principal Message</option>';
                                        }
                                        else {
                                          echo '<option value="Chairman Message">Chairman Message</option>
                                          <option value="Director Message">Director Message</option>
                                          <option value="Principal Message" selected>Principal Message</option>';
                                        }
                                      ?>
                                  </select>
                              </div>
                              <div class="form-group">
                                  <label for="exampleInputEmail1">Name</label>
                                  <input type="text" class="form-control" id="messagename" name="messagename" placeholder="Name" value="<?php echo $data['messagename'];?>">
                              </div>
                              <div class="form-group" style="display:none" >
                                <textarea id='short_desc' name='short_desc' hidden="hidden"></textarea>
                              </div>
                              <div class="form-group">
                                  <label for="exampleInputPassword1">Discription</label>
                                  <textarea id='long_desc' name='long_desc'><?php echo $data['long_desc'];?></textarea>
                              </div>
                              <div class="form-group">
                                  <label for="exampleInputFile">News Image</label>
                                  <input type="file" id="new-image" name="new-image">
                                  <br>
                                  <img  src="message_images/<?php echo $data['image_name']; ?>" height="100px">
                                  <input type="hidden" name="old_image" value="<?php echo $data['image_name']; ?>">
                                  <p class="help-block">Max. Size 200kb (only .jpg, .jpeg, .png files allow)</p>
                              </div>
                              <input type="submit" class="btn btn-info" onclick="data()" value="Submit">
                          </form>
                          </div>

                      </div>
                  </section>
          </div>
      </div>
  </div>
  <!-- Script -->
 	<script type="text/javascript">

 		// Initialize CKEditor
 		CKEDITOR.inline( 'short_desc');

 		CKEDITOR.replace('long_desc',{

 			width: "100%",
         	height: "200px"

 		});


 	</script>
<?php
  include "footer.php";
?>