jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/stmedicosoftware/ [ drwxrwxr-x ]
name : mst_test.php
 <?php include "top1.php";?>
<!-- /inner_content-->
<div class="inner_content">
    <!-- /inner_content_w3_agile_info-->

    <!-- breadcrumbs -->
    <div class="w3l_agileits_breadcrumbs">
        <div class="w3l_agileits_breadcrumbs_inner">
            <ul>
                <li><a href="dashboard.php">Dashboard</a><span>«</span></li>
                <li>Manage Test </li>
            </ul>
        </div>
    </div>
    <!-- //breadcrumbs -->

    <div class="inner_content_w3_agile_info two_in">
        <h2 class="w3_inner_tittle">Manage Test</h2>

        <!--/forms-->
        <div class="forms-main_agileits">
            <!--/forms-inner-->
            <div class="forms-inner">
                <!--/set-1-->
                <div class="set-1_w3ls">

                    <div class="col-md-4 button_set_one agile_info_shadow graph-form">
                        <h3 class="w3_inner_tittle two">Test Name </h3>
                        <div class="form-body">

                            <div class="form-group">
                                <input type="hidden" class="form-control1" id="hdid" name="hdid">
                                <label for="testName">Test Name</label>
                                <input type="text" class="form-control" id="testname" name="testname" maxlength="99"
                                    style="text-transform:capitalize;" placeholder="Please enter test name here...">
                            </div>

                            <div class="form-group">
                                <label for="testName">Test Amount</label>
                                <input type="number" class="form-control" id="tamount" maxlength="10" name="tamount"
                                    style="text-transform:capitalize;" onkeypress="return isNumberKey(event,this);"
                                    placeholder="Test Amount">
                            </div>
                            <div class="form-group">
                                <label for="testCategoryName">Test Category Name</label>
                                <select name="category" id="category" class="form-control1"
                                    style="font-size: 14px; width: 100%;">

                                </select>
                            </div>
                            <div class="form-group">
                                <label for="showIn">Show In</label>
                                <select name="type" id="type" class="form-control1"
                                    style="font-size: 14px; width: 100%;">

                                </select>
                            </div>
                            <button type="submit" class="btn btn-default" id="btnsave" name="btnsave"
                                onclick="curdtest1();">SAVE</button>
                            <button type="submit" class="btn btn-default" id="btnclear1" name="btnclear1"
                                onclick="clear1();">CLEAR</button>

                        </div>
                    </div>
                    <div class="col-md-8 graph-form general agile_info_shadow">
                        <h3 class="w3_inner_tittle two">Test List </h3>
                        <div class="form-body" style="overflow-x:auto;">
                            <?php 
                              $sql= "SELECT * from testdetailsmaster where identifier='" .$gtestidentifier. "' and isdeleted='".$gnotdeleted."' order by testdetailsid DESC";
                              $result=mysqli_query($conn, $sql) or die("Query Failed.");
                              if (mysqli_num_rows($result)>0) {
                            ?>
                            <table id="studtable" class="table table-striped table-bordered">
                                <thead>
                                    <tr>
                                        <th>No.</th>
                                        <!-- <th>ID</th> -->
                                        <th>Test Name</th>
                                        <th>Amount</th>
                                        <th>Category</th>
                                        <th>Show In</th>
                                        <th></th>
                                        <th></th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php
                                           	   $serial= 1;
                                while ($row = mysqli_fetch_assoc($result)) { ?>

                                    <tr>
                                        <td><?php echo $serial  ?>
                                        </td>
                                        <!-- <td><?php echo $row['testdetailsid'];  ?>
                                        </td> -->
                                        <td>
                                            <?php echo $row['subtestname'];  ?>
                                        </td>
                                        <td>
                                            <?php echo $row['amount'];  ?>
                                        </td>
                                        <td>
                                            <?php echo $row['testname'];  ?>
                                        </td>
                                        <td>
                                            <?php echo $row['typeofcharge'];  ?>
                                        </td>
                                        <td><button onclick="edit(<?php echo $row['testdetailsid'];  ?>);"><i
                                                    class=" glyphicon glyphicon-pencil"></i></button></td>
                                        <td><button onclick="remove(<?php echo $row['testdetailsid'];  ?>);"><i
                                                    class="glyphicon glyphicon-trash"></i></button></td>
                                    </tr>
                                    <?php $serial++;
                                      }
                                    }
                                  ?>
                                </tbody>
                            </table>
                        </div>
                    </div>
                    <div class="clearfix"> </div>
                </div>
                <!--//set-1-->
            </div>
            <!--//forms-inner-->
        </div>
        <!--//forms-->
    </div>
    <!-- //inner_content_w3_agile_info-->
</div>
<!-- //inner_content-->
<script type="text/javascript">
function isNumberKey(evt, element) {
    var charCode = (evt.which) ? evt.which : event.keyCode
    if (charCode > 31 && (charCode < 48 || charCode > 57) && !(charCode == 46 || charCode == 8))
        return false;
    else {
        var len = $(element).val().length;
        var index = $(element).val().indexOf('.');
        if (index > 0 && charCode == 46) {
            return false;
        }
        if (index > 0) {
            var CharAfterdot = (len + 1) - index;
            if (CharAfterdot > 3) {
                return false;
            }
        }

    }
    return true;
}


function getcategory(val) {

    $.ajax({
        type: "Get",
        url: "get_total_category.php",

        success: function(res) {
            var data = JSON.parse(res);
            var sel = $("#category");
            sel.empty();
            $("#category").append('<option>Select Category</option>');
            for (var i = 0; i < data.length; i++) {
                if (data[i].tname == val) {

                    sel.append('<option value="' + data[i].tname + '" selected=true>' + data[i]
                        .tname +
                        '</option>');

                } else {
                    sel.append('<option value="' + data[i].tname + '">' + data[i].tname +
                        '</option>');
                }
            }

            ///	$("#state").html(data);
        }
    });
}

function remove(id) {

    var categoryid = id;

    try {

        var urlgetcode = 'get_category_test_details.php';
        $.ajax({
            method: 'POST',
            url: urlgetcode,
            data: '&categoryid=' + categoryid,
            dataType: 'json',
            async: true,
            cache: false,
            success: function(data) {

                $('#hdid').val(data.parcode);
                $('#category').val(data.parname);
                $('#testname').val(data.subtestname);
                $('#tamount').val(data.amount);
                $('#type').val(data.showin);
                document.getElementById("btnsave").innerHTML = "REMOVE";

            },
            error: function(request) {
                alert(request.responseText);
            }
        });

    } catch (Error) {
        alert(Error);
    }
    return;




}


function edit(id) {

    var categoryid = id;

    try {

        var urlgetcode = 'get_category_test_details.php';
        $.ajax({
            method: 'POST',
            url: urlgetcode,
            data: '&categoryid=' + categoryid,
            dataType: 'json',
            async: true,
            cache: false,
            success: function(data) {


                $('#hdid').val(data.parcode);
                $('#category').val(data.parname);
                $('#testname').val(data.subtestname);
                $('#tamount').val(data.amount);
                $('#type').val(data.showin);
                document.getElementById("btnsave").innerHTML = "UPDATE";
                document.getElementById("testname").focus();
            },
            error: function(request) {
                alert(request.responseText);
            }
        });

    } catch (Error) {
        alert(Error);
    }
    return;




}

function clear1() {

    $('#hdid').val("");
    $('#category').val("Select Category");
    $('#testname').val("");
    $('#tamount').val("");
    document.getElementById("btnsave").innerHTML = "SAVE";
}

function curdtest1() {
    var flag = true;


    var inputField2 = document.getElementById("testname");
    if (inputField2.value == "") {
        flag = false;
        alert("Please enter test name.");
        document.getElementById("testname").focus();
        return false;
    }

    var inputField3 = document.getElementById("tamount");
    if (inputField3.value == "") {
        flag = false;
        alert("Please enter test amount.");
        document.getElementById("tamount").focus();
        return false;
    }


    var inputField1 = document.getElementById("category");
    if (inputField1.value == "") {
        flag = false;
        alert("Please select category.");
        document.getElementById("category").focus();
        return false;
    }
    var inputField11 = document.getElementById("category");
    if (inputField11.value == "Select Category") {
        flag = false;
        alert("Please select category.");
        document.getElementById("category").focus();
        return false;
    }



    var testname = document.getElementById("testname").value;
    var tamount = document.getElementById("tamount").value;
    var category = document.getElementById("category").value;


    var id = document.getElementById("hdid").value;
    var btnopration = document.getElementById("btnsave").innerHTML;
    var identifier = 5;





    try {
        if (flag == true) {
            var urlgetcode = 'mst_curd_test.php';
            $.ajax({
                method: 'POST',
                url: urlgetcode,
                data: '&testname=' + testname + '&tamount=' + tamount + '&category=' + category + '&id=' + id +
                    '&btnopration=' + btnopration + '&identifier=' + identifier,
                dataType: 'json',
                async: true,
                cache: false,
                success: function(data) {
                    alert(data);

                    window.location.href = "mst_test.php";
                    $('#hdid').val("");
                    $('#category').val("Select Category");

                },
                error: function(request) {
                    alert(request.responseText);
                }
            });
        }
    } catch (Error) {
        alert(Error);
    }
    return;


}


$(document).ready(function() {
    getcategory("");
    $("#studtable").DataTable({
        bLengthChange: true,
        "iDisplayLength": 10,
        bInfo: false,
        responsive: true,
        "bAutoWidth": false
    });
});
</script>
<?php include "footer.php";?>