jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/cpanel/ [ drwxrwxr-x ]
name : get_doctorwise_appointment.php
 <?php
  require_once "../config.php";
  session_start();
   $from=$_POST['fromdate'];
   $to= $_POST['todate'];
   $consultant=$_POST['consultant'];

     if($consultant=="Select Consultant Doctor")
       $consultant='';


  //   $sql="SELECT DATE_FORMAT(transactiondate,'%d-%m-%Y') as transactiondate ,filetype,showfileno,fileno,suhid,name,chargename,total,discount,recamt,paymentmode,bankname from v_dailycollection
       //where (transactiondate between '".$from."' and  '".$to."') and ( '".$paymentmode."'='' or  paymentmode='".$paymentmode."') and  ( '". $consultant."'='' or examinedby='". $consultant."') and ('".$category."'='' or chargename='".$category."')   order by transactiondate DESC ";
       $sql= "Select app.appid,app.appno,DATE_FORMAT(app.appdate, '%d-%m-%Y') as appdate,app.name,app.age,app.gender,app.mobileno,
          app.neworold ,case when paymentstatus=0 then 'Unpaid' else 'Paid' end paymentstatus from appointmenttb as app,mastertb as cons
          where  app.consultantid=cons.accountmasterid and (app.appdate between '".$from."' and  '".$to."') and  ( '". $consultant."'='' or cons.accountname='". $consultant."') order by appdate desc ";

   $resultset = mysqli_query($conn, $sql) or die("database error:". mysqli_error($conn));
   $data = array();
   while( $rows = mysqli_fetch_assoc($resultset) ) {
   $data[] = $rows;
   }
   $results = array(
   "sEcho" => 1,
   "iTotalRecords" => count($data),
   "iTotalDisplayRecords" => count($data),
   "aaData" => $data
   );
   echo json_encode($results);




?>