jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/cpanel/ [ drwxrwxr-x ]
name : getalldepartment.php
 <?php
require_once "../config.php";
   $identifier=$_POST['identifier'];

if($identifier=="1")
{
  $query =mysqli_query($conn,"SELECT * FROM mastertb where identifier=9 and status='".$gnotdeleted."'");

while($row=mysqli_fetch_array($query))
{

  $result[] = array(
     'parcode' => $row['accountmasterid'],
     'parname' => $row['accountname'],
   );
}

}
else if($identifier=="2")
{

      $query =mysqli_query($conn,"SELECT * FROM statemastertb where  status='".$gnotdeleted."'");

while($row=mysqli_fetch_array($query))
{

  $result[] = array(
     'parcode' => $row['stateid'],
     'parname' => $row['statename'],
   );
}

}
 else if($identifier=="3")
{
   $sid=$_POST['sid'];

$query =mysqli_query($conn,"SELECT * FROM districtmastertb where stateid='".$sid."' and  status='".$gnotdeleted."'");

while($row=mysqli_fetch_array($query))
{

  $result[] = array(
     'parcode' => $row['districtmasterid'],
     'parname' => $row['districtname'],
   );
}

}

else if($identifier=="4")
{

 $result[] = array(
     'parcode' => 'Select Consultant Doctor',
     'parname' => 'Select Consultant Doctor',
   );



   $sid=$_POST['sid'];

$query =mysqli_query($conn,"SELECT * FROM mastertb where departmentid='".$sid."' and identifier='". $gdoctoridentifier."' and  status='".$gnotdeleted."'");

while($row=mysqli_fetch_array($query))
{

  $result[] = array(
     'parcode' => $row['accountmasterid'],
     'parname' => $row['accountname'],
   );

}

}
  else if($identifier=="5")
{

 $result[] = array(
     'parcode' => 'Select Bank',
     'parname' => 'Select Bank',
   );

$query =mysqli_query($conn,"SELECT * FROM mastertb where  identifier='".$gbankidentifier."' and  status='".$gnotdeleted."'");

while($row=mysqli_fetch_array($query))
{

  $result[] = array(
     'parcode' => $row['accountmasterid'],
     'parname' => $row['accountname'],
   );

}

}
else if($identifier=="6")
{

 $result[] = array(
     'parcode' => 'Select Consultant Doctor',
     'parname' => 'Select Consultant Doctor',
   );





$query =mysqli_query($conn,"SELECT * FROM mastertb where  identifier='". $gdoctoridentifier."' and  status='".$gnotdeleted."'");

while($row=mysqli_fetch_array($query))
{

  $result[] = array(
     'parcode' => $row['accountname'],
     'parname' => $row['accountname'],
   );

}

}
else if($identifier=="7")
{

 $result[] = array(
     'parcode' => 'Select Category',
     'parname' => 'Select Category',
   );





$query =mysqli_query($conn,"Select distinct chargename from v_dailycollection");

while($row=mysqli_fetch_array($query))
{

  $result[] = array(
     'parcode' => $row['chargename'],
     'parname' => $row['chargename'],
   );

}

}



  echo json_encode($result);

 ?>