jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/testappnew/cpanel/ [ drwxrwxr-x ]
name : add_user.php
 <?php include "top.php";?>

<div id="layoutSidenav_content">
    <div class="container-fluid px-4">
        <h1 class="mt-4">Add New User</h1>
        <ol class="breadcrumb mb-4 justify-content-between">
            <li class="breadcrumb-item active">Please fill details.</li>
            <a class="btn btn-primary" href="list_userlist.php">User List</a>
        </ol>
        <div class="row">
            <div class="col-lg-12">
                <div class="card shadow-lg border-0 rounded-lg mb-5">
                    <div class="card-body">
                        <input type="hidden" name="hdID" id="hdID" />
                        <div class="row">
                            <div class="col-md-6">
                                <div class="form-floating mb-3">
                                    <input class="form-control" name="txtName" id="txtName" type="text"
                                        placeholder="Ex. Sanjeev Kumar Singh" required />
                                    <label for="txtName">Name</label>
                                </div>
                            </div>
                            <div class="col-md-6">
                                <div class="form-floating mb-3">
                                    <input class="form-control" name="txtMobileNo" id="txtMobileNo" type="number"
                                        placeholder="Ex. 9999999999" required />
                                    <label for="txtMobileNo">Mobile No.</label>
                                </div>
                            </div>
                        </div>

                        <div class="row">
                            <div class="col-md-6">
                                <div class="form-floating mb-3">
                                    <input class="form-control" name="txtUserName" id="txtUserName" type="text"
                                        placeholder="Ex. Sanjeev.mca23" required />
                                    <label for="txtUserName">User Name</label>
                                </div>
                            </div>
                            <div class="col-md-6">
                                <div class="form-floating mb-3">
                                    <input class="form-control" name="txtPassword" id="txtPassword" type="password"
                                        placeholder="Ex. password@123" required />
                                    <label for="txtPassword">Password</label>
                                </div>
                            </div>
                        </div>
                        <div class="form-floating mb-3">
                            <select class="form-control" name="ddlUserRole" id="ddlUserRole">
                                <option value="-">-</option>
                                <option value="User">User</option>
                                <option value="Admin">Admin</option>
                            </select>
                            <label for="ddlUserRole">User Role</label>
                        </div>

                        <div class="align-items-center text-center mt-4 mb-0">
                            <button class="btn btn-primary" id="btnuser" onclick="SaveUser();">Save</button>
                        </div>
                    </div>
                    <div class="card-footer text-center py-3">
                        <!-- <div class="small">
                                <a href="register.html">Need an account? Sign up!</a>
                            </div> -->
                    </div>
                </div>
            </div>
        </div>
    </div>

    <script type="text/javascript">
    $(document).ready(function() {


        getuserdetails();

    });

    function getuserdetails() {
        var id = getUrlVars()['id'];
        var op = getUrlVars()['op'];

        if (jQuery.type(id) == "undefined") {
            return;
        }


        if (id != "") {
            $.ajax({
                method: 'POST',
                url: 'get_user_details.php',
                data: '&id=' + id,
                dataType: "JSON",

                success: function(data) {


                    $('#hdID').val(data.id);
                    $('#txtName').val(data.uname);
                    $('#txtMobileNo').val(data.mobileno);
                    $('#txtUserName').val(data.username);
                    $("#txtUserName").prop('disabled', true);

                    $('#txtPassword').val(data.password);
                    $('#ddlUserRole').val(data.userrole);
                    if (op == "Edit") {
                        $('#btnuser').text("Update");
                    } else if (op == "Active") {
                        $('#btnuser').text("DeActive");
                    } else if (op == "DeActive") {
                        $('#btnuser').text("Active");
                    }

                }
            });
        }

    }





    function getUrlVars() {
        var vars = [],
            hash;
        var hashes = window.location.href.slice(window.location.href.indexOf('?') + 1).split('&');
        for (var i = 0; i < hashes.length; i++) {
            hash = hashes[i].split('=');
            vars.push(hash[0]);
            vars[hash[0]] = hash[1];
        }
        return vars;
    }

    function SaveUser() {
        var flag = true;
        var inputField1 = document.getElementById("txtName");
        if (inputField1.value == "") {
            flag = false;
            alert("Please enter name.");
            document.getElementById("txtName").focus();
            return false;
        }
        var inputField2 = document.getElementById("txtMobileNo");
        if (inputField2.value == "") {
            flag = false;
            alert("Please enter mobile no.");
            document.getElementById("txtMobileNo").focus();
            return false;
        }

        var inputField3 = document.getElementById("txtUserName");
        if (inputField3.value == "") {
            flag = false;
            alert("Please enter user name.");
            document.getElementById("txtUserName").focus();
            return false;
        }

        var inputField4 = document.getElementById("txtPassword");
        if (inputField4.value == "") {
            flag = false;
            alert("Please enter password.");
            document.getElementById("txtPassword").focus();
            return false;
        }

        var inputField5 = document.getElementById("ddlUserRole");
        if (inputField5.value == "-") {
            flag = false;
            alert("Please select user role.");
            document.getElementById("ddlUserRole").focus();
            return false;
        }
        var uname = document.getElementById("txtName").value;
        var mobileno = document.getElementById("txtMobileNo").value;
        var username = document.getElementById("txtUserName").value;
        var password = document.getElementById("txtPassword").value;
        var userrole = document.getElementById("ddlUserRole").value;

        var id = document.getElementById("hdID").value;
        var btntext = document.getElementById("btnuser").innerHTML;
        // var canteen = document.getElementById("hdcanteen").value;
        // var userid = document.getElementById("hduserid").value;

        var text = "Do you want " + btntext + " user details";

        if (confirm(text) == false) {

            flag = false;
            return false;
        }
        try {

            if (flag == true) {

                var urlgetcode = 'user_save_update.php';

                $.ajax({
                    method: 'POST',
                    url: urlgetcode,
                    data: '&uname=' + uname + '&mobileno=' + mobileno + '&username=' + username +
                        '&password=' +
                        password + '&userrole=' + userrole + '&btntext=' + btntext + '&userid=' + id,
                    dataType: 'json',
                    async: true,
                    cache: false,

                    success: function(msg) {

                        if (msg == "1") {
                            alert("Save Successfully");

                            $('#hdID').val("");
                            $('#txtName').val("");
                            $('#txtMobileNo').val("");
                            $('#txtUserName').val("");
                            $('#txtPassword').val("");
                            $('#ddlUserRole').val("-");


                            $('#btnuser').text("Save");
                            window.location.href = "list_userlist.php";
                        } else if (msg == "2") {
                            alert("Already Exist");

                            $('#hdID').val("");
                            $('#txtName').val("");
                            $('#txtMobileNo').val("");
                            $('#txtUserName').val("");
                            $('#txtPassword').val("");
                            $('#ddlUserRole').val("-");

                            $('#btnuser').text("Save");
                            window.location.href = "add_user.php";
                        } else if (msg == "3") {
                            alert("Update Successfully");

                            $('#hdID').val("");
                            $('#txtName').val("");
                            $('#txtMobileNo').val("");
                            $('#txtUserName').val("");
                            $('#txtPassword').val("");
                            $('#ddlUserRole').val("-");

                            $('#btnuser').text("Save");
                            window.location.href = "list_userlist.php";
                        } else if (msg == "4") {
                            alert("User Name Active Successfully");

                            $('#hdID').val("");
                            $('#txtName').val("");
                            $('#txtMobileNo').val("");
                            $('#txtUserName').val("");
                            $('#txtPassword').val("");
                            $('#ddlUserRole').val("-");

                            $('#btnuser').text("Save");
                            window.location.href = "list_userlist.php";
                        } else if (msg == "5") {
                            alert("User Name DeActive Successfully");

                            $('#hdID').val("");
                            $('#txtName').val("");
                            $('#txtMobileNo').val("");
                            $('#txtUserName').val("");
                            $('#txtPassword').val("");
                            $('#ddlUserRole').val("-");

                            $('#btnuser').text("Save");
                            window.location.href = "list_userlist.php";
                        }
                    },
                    error: function(request) {

                        alert(request.responseText);
                    }
                });
            }
        } catch (Error) {
            alert(Error);
        }

        return;
    }
    </script>
    <?php include "footer.php";?>