jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/stmedicosoftware/ [ drwxrwxr-x ]
name : mst_curd_roominfo.php
 <?php

require_once "config.php";
$msg="";
$creationdatetime = date("Y-m-d H:m:s");
$roomcategory=$_POST['roomcategory'];
$roomsubcategory=$_POST['roomsubcategory'];
$buildingfloor=$_POST['buildingfloor'];
$roomno=$_POST['roomno'];
$bedno=$_POST['bedno'];
 
$id=   $_POST['id'];
 $btnopration=   $_POST['btnopration'];


 if($btnopration=="SAVE")
       {
$query="select * from roominfotb Where roomcategory='".$roomcategory."' and roomsubcategory= '" . $roomsubcategory . "' and buildingfloor='" . $buildingfloor . "'
        and roomno='" . $roomno. "' and bedno='".$bedno."' and isdeleted='" . $gnotdeleted . "'";
$cnt= get_noof_rows($conn,$query);

if($cnt==0)
{
$query="insert into roominfotb(roomcategory,roomsubcategory,buildingfloor,roomno,bedno,isdeleted,creationdatetime)
        values('".$roomcategory."','".$roomsubcategory."','" . $buildingfloor . "','" . $roomno. "','".$bedno."','".$gnotdeleted."','".$creationdatetime."')";

$result=insertrecord($conn,$query);

          if($result==true)
              $msg="Record save successfully";
          else
              $msg="There is problem to save Record";
}
else
{
    $msg="Record is already exist";

}

}
else if($btnopration=="UPDATE")
       {
$query="select * from roominfotb Where roomid!='".$id."' and roomcategory='".$roomcategory."' and roomsubcategory= '" . $roomsubcategory . "' and buildingfloor='" . $buildingfloor . "'
        and roomno='" . $roomno. "' and bedno='".$bedno."' and isdeleted='" . $gnotdeleted . "'";
$cnt= get_noof_rows($conn,$query);

if($cnt==0)
{

 $sql="Update roominfotb set roomcategory='".$roomcategory."',roomsubcategory='".$roomsubcategory."',
        buildingfloor='" . $buildingfloor . "',roomno='" . $roomno. "',bedno='".$bedno."' where roomid='".$id."' ";

$result=updaterecord($conn,$sql);

          if($result==true)
              $msg=  "Record update successfully";
          else
              $msg="There is problem to save Record";
}
else
{
    $msg="Record is already exist";

}

}

  echo json_encode ($msg);

?>