jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/santgyaneshwarji/cpanel/ [ drwxr-xr-x ]
name : save_music.php
 <?php
require_once('../config.php');

extract($_POST);
$data = "";
foreach($_POST as $k => $v){
    if(!in_array($k,['id'])){
        $v = $conn->real_escape_string($v);
        if(!empty($data)) $data .=", ";
        $data .= "`{$k}` = '{$v}'";
    }
}
if(!empty($_FILES['audio']['tmp_name'])){
    $filename = $_FILES['audio']['name'];
    $filename = str_replace(" ","_",$filename);
    $i = -1;
    while(true){
        if($i > -1)
        $filename = $i."_".$filename;
        if(is_file('../music_player_assets/audio//'.$filename))
        $i++;
        else
        break;
    }
    $file = $_FILES['audio']['tmp_name'];
    $type = mime_content_type($file);
    $type2 =  $_FILES['audio']['type'];
    if(strpos($type,"music_player_assets/audio/") > -1 || strpos($type2,"audio/") > -1){
        $move = move_uploaded_file($file,'../music_player_assets/audio/'.$filename);
        if(!$move){
            $resp['status'] = 'failed';
            $resp['msg'] = 'Audio file updload failed';
            $resp['error'] = $conn->error;
        }else{
            $data .= ", `audio_path` = CONCAT('../music_player_assets/audio/{$filename}?v=',unix_timestamp(CURRENT_TIMESTAMP))";
        }

    }else{
        $resp['status'] = 'failed';
        $resp['msg'] = 'Invalid Audio file';
        $resp['error'] = $type;
        $resp['file'] = $_FILES;
    }
}

if(!isset($resp['status'])){
    if(empty($id)){
        $sql = "INSERT INTO `music_list` set {$data}";
    }else{
        $sql = "UPDATE `music_list` set {$data} where id = '{$id}'";
    }
    $save = $conn->query($sql);
    if($save){
        $mid = !empty($id) ? $id : $conn->insert_id;
        $resp['status'] = 'success';
        $resp['msg'] = ' Audio Data successfully saved';

        if(!empty($_FILES['img']['tmp_name'])){
            $filename = $_FILES['img']['name'];
            $filename = str_replace(" ","_",$filename);
            $file = $_FILES['img']['tmp_name'];
            $type = mime_content_type($file);
            $i = -1;
            while(true){
                if($i > -1)
                $filename = $i."_".$filename;
                if(is_file('../music_player_assets/audio_images/'.$filename))
                $i++;
                else
                break;
            }
          //  if(strpos($type,"audio_images/") > -1){
            //  $resp['msg']="test";
                $move = move_uploaded_file($file,"../music_player_assets/audio_images/".$filename);
                if($move){
                    $conn->query("UPDATE `music_list` set image_path = CONCAT('../music_player_assets/audio_images/{$filename}?v=',unix_timestamp(CURRENT_TIMESTAMP)) where id = '{$mid}'");
                }else{
                    $data['msg'].= " But Image has failed to upload.";
                }
          //  }
        }

    }else{
        $resp['status'] = 'failed';
        $resp['msg'] = 'An error occurred while saving the data.';
        $resp['error'] = $conn->error;

    }
}


echo json_encode($resp);