jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/stmedicosoftware/ [ drwxrwxr-x ]
name : manage_followup.php

 <?php

require_once "config.php";

session_start();
$userid=$_SESSION['userid'];
$consultant = $_POST['consultant'];
$uhid = $_POST['uhid'];
$fileno = $_POST['fileno'];
$followupdate = $_POST['followupdate'];
$mobileno = $_POST['mobileno'];
$name = $_POST['name'];
$age = $_POST['age'];
$ageinyear = $_POST['ageinyear'];
$sex = $_POST['sex'];

$creationdatetime = date("Y-m-d H:m:s");

$message= "";
$cnt=0;

$query = "select count(0) as count from followuptb where uhid='".$uhid."' and followupdate='".$followupdate."'
       and  consultantid='".$consultant."'  and isdeleted='0'";

$result = mysqli_query($conn, $query);
while ($row = mysqli_fetch_array($result)) {
  $cnt= $row["count"];
}


if($cnt==0)
{
  $query="INSERT INTO followuptb(uhid,visitid,followupdate,consultantid,mobileno,name,age,ageinyear,gender,isdeleted,creationdatetime,userid)
    VALUES('{$uhid}','{$fileno}','{$followupdate}','{$consultant}','{$mobileno}','{$name}','{$age}','{$ageinyear}','{$sex}','0','{$creationdatetime}','{$userid}')";
  $result = mysqli_query($conn, $query);
  if ($result==true) {
      $message="1";
  }
}
else {
    $message="2";
}

echo json_encode($message);
?>