UnknownSec Bypass 403

: /var/www/stbilling/cpanel/ [ drwxrwxr-x ]
name : get_bill_party_details.php <?php require_once "../config.php"; session_start(); $finyearid= $_SESSION['financialyearid']; $billno = $_POST['billno']; $query = "select * from v_transactiondetails where mainvoucherno= '".$billno."' and isdeleted=0 and financialyearid=$finyearid"; $result = mysqli_query($conn, $query); if ($row = mysqli_fetch_array($result)) { $data["mainvoucherno"] = $row["mainvoucherno"]; $data["voucherno"] = $row["voucherno"]; $data["partyid"] = $row["partymasterid"]; $plandate1=explode('-', $row["transactiondate"]); $data["billdate"]= $row["transactiondate"]; //intval($plandate1[2])." ".$plandate1[1]." ".intval($plandate1[0]); $data["statecode"] = $row["placeofsupply"]; $data["districtofsupply"] = $row["districtofsupply"]; } echo json_encode($data); ?>