jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/santgyaneshwarji/sadgranththeme/ [ drwxrwxr-x ]
name : sadgranthdetails.php
 <?php
include "top.php";
include "header.php";
include "menu1.php";
include "../config.php";

$title="";
$discription="";
$subtitle="";

if(isset($_GET['id']))
{
  $id=mysqli_real_escape_string($conn,$_GET['id']);

}
if(isset($_GET['id']) && isset($_GET['subid']))
{
  $id=mysqli_real_escape_string($conn,$_GET['id']);
	$subid=mysqli_real_escape_string($conn,$_GET['subid']);
}

if(isset($_GET['id']) && isset($_GET['subid']) && isset($_GET['subtitle']))
{
  $id=mysqli_real_escape_string($conn,$_GET['id']);
	$subid=mysqli_real_escape_string($conn,$_GET['subid']);
  $subtitle=mysqli_real_escape_string($conn,$_GET['subtitle']);
}
  if($subtitle!="" && $subid!="" && $id!="")
  {
    $sql="SELECT * FROM sadgranthunicodedetailstb WHERE id='{$subid}' AND category='{$id}' AND subtitle='{$subtitle}'";
  } else if($subid!="" && $id!=""){
    $sql="SELECT * FROM sadgranthunicodedetailstb WHERE id='{$subid}' AND category='{$id}'";
  }
  else {
    $sql="SELECT * FROM sadgranthunicodedetailstb WHERE  category='{$id}' LIMIT 1 ";
  }
	$result=mysqli_query($conn,$sql);
	if(mysqli_num_rows($result) > 0){
		$row=mysqli_fetch_assoc($result);
		$title=$row['title'];
    $subtitle=$row['subtitle'];
		$discription=$row['discription'];
	}
else {
	$title="";
	$discription="";
  $subtitle="";
}


?>
<script>
function load(btntext)
{

var id=document.getElementById("id").value;
var subid=document.getElementById("subid").value;
var subtitle=document.getElementById("subtitle").value;



try {

            var urlgetcode = 'loadsadgranthdetails.php';
            $.ajax({
                method: 'POST',
                url: urlgetcode,
                data: '&id=' + id + '&subid=' + subid + '&subtitle=' +
                    subtitle+'&btntext='+btntext,
                dataType: 'json',
                async: true,
                cache: false,
                success: function(data) {

           if(data.id!="0")
             {
               document.getElementById('title').innerHTML=data.title;
               document.getElementById('subtitle').innerHTML=data.subtitle;
                document.getElementById('discription').innerHTML=data.discription;
                document.getElementById("id").value=data.id;
                document.getElementById("subid").value=data.subid;
                 document.getElementById("subtitle").value=data.subtitle;
              }

                },
                error: function(request) {
                    alert(request.responseText);
                }
            });

    }
     catch (Error) {
        alert(Error);
    }
}
</script>



<!--main content start-->
<div class="typo-agile">
		<!--<h2 class="w3ls_head">जय प्रभु सदानंद जी</h2>-->
			<div class="grid_3 grid_5 agile">
        <div align="center">
          <a class="btn btn-primary" href="sadgranthdetails_full.php?id=<?php echo $id;?>&subid=<?php echo $id;?>">Read Complete Granth</a>
        </div>
        <hr/>
        <!--<h3>   <label id="title" value=<?php echo $title;?>></label> </h3>
        <h4>  <input type="text" id="subtitle" value=<?php echo $subtitle;?>> </h4>
				<div class="well">
			   <input type="text" id="discription" value=<?php echo $discription;?>>
       </div>-->
       <h3 id="title" align="center">  <?php echo $title;?>  </h3>
       <h4 id="subtitle">  <?php echo $subtitle;?> </h4>
       <div class="well" id="discription">
        <?php echo $discription;?>
       </div>
        <input type="hidden" id="id" value=	<?php echo $id;?>>
        <input type="hidden" id="subid" value=	<?php echo $subid;?>>
        <input type="hidden" id="subtitle" value=	<?php echo $subtitle;?>>

        <table width="100%">
          <tr>
            <td width="48%" align="right">
              <input class="btn btn-danger" type="button" value="Previous" id="previous" onclick="load(this.value);">
            </td>
            <td width="4%"></td>
            <td width="48%" align="left">
              <input class="btn btn-primary" type="button" id="next" value="Next" onclick="load(this.value);">
            </td>
          </tr>
        </table>
			</div>
</div>
<!--main content end-->

<?php include "footer.php";?>