jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/stbilling/cpanel/ [ drwxrwxr-x ]
name : load_gst_report.php
 <?php
      include "../config.php";
      session_start();

      $finid  = $_SESSION['financialyearid'];
      $companyid= $_POST['company'];
         $companyname= $_POST['companyname'];
      /*function get_total_row($connect)
      {
        $query = "
        SELECT * FROM tbl_webslesson_post
        ";
        $statement = $connect->prepare($query);
        $statement->execute();
        return $statement->rowCount();
      }

      $total_record = get_total_row($connect);*/
        $taxablevalue=0;
        $igstamt= 0;
        $cgstamt= 0;
        $sgstamt= 0;

      $limit = '40';
      $page = 1;
      if ($_POST['page'] > 1) {
          $start = (($_POST['page'] - 1) * $limit);
          $page = $_POST['page'];
      } else {
          $start = 0;
      }
      $totalamount=0;
      $from=$_POST['fromdate'];
      $to= $_POST['todate'];


      $fromdate1=explode('-', $_POST['fromdate']);
      $fromdate2=intval($fromdate1[2])."-".$fromdate1[1]."-".intval($fromdate1[0]);


      $todate1=explode('-', $_POST['todate']);
      $todate2=intval($todate1[2])."-".$todate1[1]."-".intval($todate1[0]);


      $query="Truncate Table tempgstpurchasetb";
        $statement = $connect->prepare($query);
        $statement->execute();


        if($companyid==1)
        {
           $query="  insert into tempgstpurchasetb (GstinNo,SupInvoiceNo,VoucherNo, TransactionDate,StateName,ReverseCharge,InvoiceValue,Rate,TaxableValue,IGstAmt,CGstAmt,SGstAmt,FinancialYearID,InvoiceType,PartyName)  Select GstinNo,SupInvoiceNo,VoucherNo,TransactionDate,StateName,Case when Advancesetting='None' then 'N' else 'Y' end as ReverseCharge,Floor(Sum(Abs(PartyAmount))) as InvoiceValue,
                  Sum(IGstAmt+CGstAmt+SGstAmt)*100/Sum(TaxableValue) as Rate,Sum(TaxableValue) as TaxableValue ,Sum(IGstAmt) as IGstAmt,Sum(CGstAmt) as CGstAmt,Sum(SGstAmt) as SGstAmt,FinancialYearID,Case when GstinNo!='' then 'B2B' else 'B2BUR' end as InvoiceType,PartyName from v_transactiondetails
                  where  TransactionDate between '".$from."' and '". $to."'
                  and  isDeleted=0 and FinancialYearID='" . $finid  . "' and SupInvoiceNo is  null Group by PartyName,GstinNo,SupInvoiceNo,VoucherNo,TransactionDate,StateName,Advancesetting,FinancialYearID Order by TransactionDate,VoucherNo";

        }
        else
        {

        $query="  insert into tempgstpurchasetb (GstinNo,SupInvoiceNo,VoucherNo, TransactionDate,StateName,ReverseCharge,InvoiceValue,Rate,TaxableValue,IGstAmt,CGstAmt,SGstAmt,FinancialYearID,InvoiceType,PartyName)  Select GstinNo,SupInvoiceNo,VoucherNo,TransactionDate,StateName,Case when Advancesetting='None' then 'N' else 'Y' end as ReverseCharge,Floor(Sum(Abs(PartyAmount))) as InvoiceValue,
                  Sum(IGstAmt+CGstAmt+SGstAmt)*100/Sum(TaxableValue) as Rate,Sum(TaxableValue) as TaxableValue ,Sum(IGstAmt) as IGstAmt,Sum(CGstAmt) as CGstAmt,Sum(SGstAmt) as SGstAmt,FinancialYearID,Case when GstinNo!='' then 'B2B' else 'B2BUR' end as InvoiceType,PartyName from v_transactiondetails
                  where  TransactionDate between '".$from."' and '". $to."'  and companyofficeid= '".$companyid."'
                  and  isDeleted=0 and FinancialYearID='" . $finid  . "' and SupInvoiceNo is  null Group by PartyName,GstinNo,SupInvoiceNo,VoucherNo,TransactionDate,StateName,Advancesetting,FinancialYearID Order by TransactionDate,VoucherNo";
               
               
         }

             $statement = $connect->prepare($query);
            $statement->execute();


      $query = "Select gstinno,voucherno, DATE_FORMAT(transactiondate, '%d-%m-%y') as transactiondate,statename,invoicevalue,rate,taxablevalue,igstamt,cgstamt,sgstamt,partyname  from tempgstpurchasetb";


      $filter_query = $query;
      //$filter_query = $query . 'LIMIT '.$start.', '.$limit.'';

      $statement = $connect->prepare($query);

      $statement->execute();
      $total_data = $statement->rowCount();

      $statement = $connect->prepare($filter_query);
      $statement->execute();
      $result = $statement->fetchAll();
      $total_filter_data = $statement->rowCount();


      if ($total_filter_data ==0) {
          $msg="No Record Found";
          echo $msg;
          return;
      }
      $sno=1;
      $output = '
      <br>
  <div align="Center"> <label><h4> SADANAND TECHNOLOGIES </h4></label></div>
  <div align="Center"><b>Company Name:'.  $companyname.' | From Date - '.$fromdate2.' To Date-'.$todate2.'</b></div>

  <div align="Center"> Total Records - '.$total_data.' </div>
  <div align="Center"> <label> </label></div>
  <br>
 <table class="table table-striped table-bordered" style="width:100%" border="1px">
 <tr>
   <th width=10%>S.No.</th>
   <th width=10%>Date</th>
   <th width=10%>Voucher No</th>
   <th width=10%>Party Name</th>
   <th width=10%>GstIn No</th>
   <th width=10%>State</th>
   <th width=10%>Invoice Value</th>
   <th width=10%>Rate</th>
   <th width=10%>Taxable Value</th>
   <th width=10%>IGstAmt Value</th>
  <th width=10%>CGstAmt Value</th>
   <th width=10%>SGstAmt Value</th>
   
 </tr>
';
      if ($total_data > 0) {
          foreach ($result as $row) {
              $output .= '
    <tr>
     <td>'.$sno.'</td>
     <td>'.$row["transactiondate"].'</td>
     <td>'.$row["voucherno"].'</td>
     <td>'.$row["partyname"].'</td>
	 <td>'.$row["gstinno"].'</td>
     <td>'.$row["statename"].'</td>
     <td>'.$row["invoicevalue"].'</td>
     <td>'.$row["rate"].'</td>
     <td>'.$row["taxablevalue"].'</td>
     <td>'.$row["igstamt"].'</td>
     <td>'.$row["cgstamt"].'</td>
     <td>'.$row["sgstamt"].'</td>


       
    </tr>
    ';
              $taxablevalue= $taxablevalue+ floatval($row["taxablevalue"]);
              $igstamt= $igstamt+ floatval($row["igstamt"]);
              $cgstamt= $cgstamt+ floatval($row["cgstamt"]);
              $sgstamt= $sgstamt+ floatval($row["sgstamt"]);
              
              $sno=$sno+1;
          }
      } else {
          $output .= '
  <tr>
    <td colspan="8" align="center">No Data Found</td>
  </tr>
  ';
      }

      $output .= '
<tr>
  <td></td>
  <td></td>
  <td></td>
  <td></td>
  <td></td>
  <td></td>
  <td></td>
  <td></td>
<td>  '.$taxablevalue.' </td>
<td>  '.$igstamt.' </td>
 <td>  '.$cgstamt.' </td>
  <td>  '.$sgstamt.' </td>
</tr>
</table>
<br />
<div align="center">
  <ul class="pagination">
';



      echo $output;
      ?>