jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/stmedicosoftware/ [ drwxrwxr-x ]
name : doctor_sloat_save.php
 <?php
require_once "config.php";
session_start();
$adminid=0;// $_SESSION["adminuserid"];

$depart = isset($_POST['depart']) ? $_POST['depart'] : "";
$doctor = isset($_POST['doctor']) ? $_POST['doctor'] : "";
$seatdatestring = isset($_POST['sdate']) ? $_POST['sdate'] : "";
$totalslot= isset($_POST['totalslot']) ? $_POST['totalslot'] : "";

$_SESSION['depart']=$depart;
$_SESSION['consultant']=$doctor;

$seatdateArray = array();
$seatdateArray=explode('-',$_POST['sdate']);

$seatdateformat = intval($seatdateArray[0])."-".intval($seatdateArray[1])."-".intval($seatdateArray[2]);
$seatdateformatymd = intval($seatdateArray[2])."-".intval($seatdateArray[1])."-".intval($seatdateArray[0]);
$creationdatetime = date("y-m-d");

$query = "select count(0) as count from masterappointmenttb
         where holidaydate= '".$seatdateformat."' and identifier=1";

$msg=0;

  $result = mysqli_query($conn, $query);
 while($row = mysqli_fetch_array($result))
 {
   $data["count"] = $row["count"];
 }

   if($data["count"]==0)
   {
 $sqldelete="Delete from masterappointmenttb where  seatdate='".$seatdateformat."' and identifier='2'";
 $resultdel = mysqli_query($conn, $sqldelete);

$sqlInsert = "insert into masterappointmenttb(noofseats,seatdate,seatdate1,depid,consultantid,identifier,isdeleted,creationdatetime,userdetailid)
              values ('".$totalslot."','".$seatdateformat."','".$seatdateformatymd ."','".$depart ."','".$doctor."','2','0','".$creationdatetime ."','".$adminid."')";

$result = mysqli_query($conn, $sqlInsert);
if($result==true)
{
  $msg=1;

}

if (! $result) {
    $result = mysqli_error($conn);
}

}
else
{
    $msg=2;
}
 echo json_encode($msg);
?>