UnknownSec Bypass 403

: /var/www/zenithentcare/stmedicosoftware/prescription/ [ drwxrwxr-x ]
name : get_allvisitdetails.php <?php require_once "../config.php"; session_start(); $docid= $_SESSION['doctorid']; $uhid=$_POST['patuhid']; $sql = "Select opdno,visitno, DATE_FORMAT(visitdate, '%d-%m-%Y') as visitdate from visitdetailstb where uhid='".$uhid."' order by visitno desc Limit 3 "; // $sql="Select pat.suhid,pat.sfileno,visit.uhid,visit.opdno,visit.visitno,visit.visitdate,pat.name,pat.agey ,pat.pntageyrs,pat.sex from visitdetailstb as visit,patientdetailstb as pat // where visit.consultantid='".$docid."' and visit.visitdate>='".$backdate."' and visit.visitdate<='".$currentdate."' and visit.opdno=pat.fileno and visit.isdeleted=0 order by sfileno DESC"; $resultset = mysqli_query($conn, $sql) or die("database error:". mysqli_error($conn)); $data = array(); while( $rows = mysqli_fetch_assoc($resultset) ) { $data[] = $rows; } $results = array( "sEcho" => 1, "iTotalRecords" => count($data), "iTotalDisplayRecords" => count($data), "aaData" => $data ); echo json_encode($results); ?>