jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/stmedicosoftware/ [ drwxrwxr-x ]
name : load_dailycollection.php
 <?php
  require_once "config.php";
  session_start();

  
  $limit = '1000';
  $page = 1;
  if($_POST['page'] > 1)
  {
    $start = (($_POST['page'] - 1) * $limit);
    $page = $_POST['page'];
  }
  else
  {
    $start = 0;
  }

  $from=$_POST['fromdate'];
  $to= $_POST['todate'];
  $consultant=$_POST['consultant'];
  $category=$_POST['category'];
  $paymentmode=$_POST['paymentmode'];

  $fromdateArray = array();
  $fromdateArray=explode('-',$from);
  $todateArray = array();
  $todateArray=explode('-',$to);
  $fromdateformat = intval($fromdateArray[2])."-".intval($fromdateArray[1])."-".intval($fromdateArray[0]);
  $todateformat = intval($todateArray[2])."-".intval($todateArray[1])."-".intval($todateArray[0]);

if($consultant=="Select Consultant Doctor")
$consultant='';

if($category=="Select Category")
 $category='';


 $query="SELECT DATE_FORMAT(transactiondate,'%d-%m-%Y') as transactiondate ,filetype,fileno,showfileno,suhid,name,chargename,total,discount,recamt,paymentmode,bankname,chequeno from v_dailycollection where (transactiondate between '".$from."' and  '".$to."') and  ( '". $consultant."'='' or examinedby='". $consultant."') and ( '".$paymentmode."'='' or  paymentmode='".$paymentmode."') and ('".$category."'='' or chargename='".$category."') order by showfileno desc";
  $filter_query = $query;

  $statement = $connect->prepare($query);
  $statement->execute();
  $result = $statement->fetchAll();
  $total_data = $statement->rowCount();

  
  $statement1 = $connect->prepare($filter_query);
  $statement1->execute();

  $total_filter_data = $statement1->rowCount();

 
 
 if($total_filter_data ==0)
  {
    $msg= "No record found";
    echo $msg;
    return;
  }



  $output = '
  <div align="Center"><label>DAILY COLLECTION REPORT </label>  </div>
  <div align="Center"><label>From Date - '.$fromdateformat.' To Date-'. $todateformat.' </label></div>
  <div align="Center"> <label>Total Records - '.$total_data.' </label> </div>
  <table id="studtable" class="table table-striped table-bordered">
    <tr>
      <th>Date</th>
      <th>File No\Vou. No</th>
      <th>Uhid</th>
      <th>Name</th>
      <th>Charge Name </th>
      <th>Receive Amt</th>
      <th>Mode</th>
      <th>Bank</th>
      <th>Tran No</th>
      <th></th>
    </tr>
  ';
    if($total_data > 0)
  {

    foreach($result as $row)
    {
      $output .= '
      <tr>
        <td>'.$row["transactiondate"].'</td>
        <td>'.$row["showfileno"].'</td>
        <td>'.$row["suhid"].'</td>
        <td>'.$row["name"].'</td>
        <td>'.$row["chargename"].'</td>
        <td>'.$row["recamt"].'</td>
        <td>'.$row["paymentmode"].'</td>
        <td>'.$row["bankname"].'</td>
        <td>'.$row["chequeno"].'</td>
        <td> <button type="submit" id="update" class="btn btn-default" onclick=abc("'.$row["fileno"].'","'.$row["chargename"].'")>select</button></td>
      </tr>
      ';
    }
  }
 
  else
  {
    $output .= '
    <tr>
      <td colspan="8" align="center">No Data Found</td>
    </tr>
    ';
  }
 


  $output .= '
  </table>';

  echo $output;

?>