jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/stmedicosoftware/ [ drwxrwxr-x ]
name : mst_curd_financialyear.php
 <?php

require_once "config.php";
$msg="";
$creationdatetime = date("Y-m-d H:m:s");
$beginingdate=   $_POST['beginingdate'];
$closingdate=   $_POST['closingdate'];

$id=   $_POST['id'];
$btnopration=   $_POST['btnopration'];
$arbeg= explode('-',$beginingdate);
$beginingdate= $arbeg[0].'-'.$arbeg[1].'-'.$arbeg[2];
$arclo= explode('-',$closingdate);
$closingdate= $arclo[0].'-'.$arclo[1].'-'.$arclo[2];
$fy=  $arbeg[0].'-'. substr($arclo[0], 2);

if($btnopration=="SAVE")
{             
    $query="select * from financialyear Where finyear='" . $fy . "'
            and isdeleted='" . $gnotdeleted . "'";
    $cnt= get_noof_rows($conn,$query);
    if($cnt==0)
    {
        $query="insert into financialyear(beginningdate,closingdate,isdeleted,creationdatetime,createdbyuserid,active,finyear)
                values('".$beginingdate."','".$closingdate."','".$gnotdeleted."','".$creationdatetime."',1,1,'".$fy."')";

        $result=insertrecord($conn,$query);

        if($result==true)
            $msg="Record save successfully";
        else
            $msg="There is problem to save Record";
    }
    else
    {
        $msg="Record is already exist";

    }
}

else if($btnopration=="UPDATE")
{
    $query="select * from financialyear where financialyearid!='".$id."' and finyear='" . $fy . "'
            and isdeleted='" . $gnotdeleted . "'";
    $cnt= get_noof_rows($conn,$query);
    if($cnt==0)
    {
    $query="Update financialyear set beginningdate='" . $beginingdate . "',closingdate='" . $closingdate . "',finyear='".$fy."' where financialyearid='".$id."'";
        $result=updaterecord($conn,$query);
            if($result==true)
                $msg="Record update successfully";
            else
                $msg="There is problem to update Record";
    }
    else
    {
        $msg="Record is already exist";
    }
}
  echo json_encode ($msg);
?>