jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/stbilling/cpanel/ [ drwxrwxr-x ]
name : change_password.php
 <?php include "top.php";?>
<script type="text/javascript">


function editpassword() {

          var flag = true;
                var inputField1 =document.getElementById("currentpassword");
                if (inputField1.value == "")
                 {
                 flag = false;
                 alert("Please enter current password.");
                 document.getElementById("currentpassword").focus();
                 return false;
                }

                var inputField2 =document.getElementById("newpassword");
                if (inputField2.value == "")
                 {
                 flag = false;
                 alert("Please enter new password.");
                 document.getElementById("newpassword").focus();
                 return false;
                }




  let text = "Do you want update password";
  if (confirm(text) == true) {

                 var newpassword=  document.getElementById("newpassword").value;
                 var oldpassword=  document.getElementById("currentpassword").value;

                $.ajax({
                    method: 'POST',
                    url: 'edit_password.php',
                    data: '&newpassword=' + newpassword+'&oldpassword='+oldpassword,
                     dataType:"JSON",
                   success:function(data) {

                            if(data==1)
                            {
                              alert("Password update successfully.");
                                 document.getElementById("newpassword").value="";
                                 document.getElementById("currentpassword").value="";
                                  document.getElementById("confirmnewpassword").value="";


                            }
                            else if(data==2)
                            {
                              alert("Old password is not correct.");
                                 document.getElementById("newpassword").value="";
                                 document.getElementById("currentpassword").value="";
                                 document.getElementById("confirmnewpassword").value="";
                            }
                            else
                            {
                             alert("There is problem to update password");
                            }

                    }
                });
  }

   else {
    text = "You canceled!";
  }

}
</script>
<!-- main content start-->
<div id="page-wrapper">
  <div class="main-page">
    <div class="forms">
      <div class="row">
        <div class="form-title">
          <h4>CHANGE PASSWORD :</h4>
        </div>
        <div class="form-three widget-shadow">
          <div class="form-horizontal">

            <div class="form-group">
              <label for="focusedinput" class="col-sm-2 control-label">Current Password</label>
              <div class="col-sm-10">
                <input type="password" class="form-control1" name="currentpassword" id="currentpassword" placeholder="Current Password">
              </div>
            </div>
            <div class="form-group">
              <label for="focusedinput" class="col-sm-2 control-label">New Password</label>
              <div class="col-sm-10">
                <input type="password" class="form-control1" name="newpassword" id="newpassword" placeholder="New Password">
              </div>
            </div>
            <div class="form-group">
              <label for="focusedinput" class="col-sm-2 control-label">Confirm New Password</label>
              <div class="col-sm-10">
                <input type="password" class="form-control1" name="confirmnewpassword" id="confirmnewpassword" placeholder="Confirm New Password">
              </div>
            </div>
            <div align="center">
              <button type="submit" class="btn btn-default" onclick="editpassword();">Change Password</button>
            </div>

          </div>
        </div>
      </div>

    </div>
  </div>
</div>
<!-- main content end-->
<?php include "footer.php";?>