jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/upanel/ [ drwxrwxr-x ]
name : change_password.php
 <?php include "top.php";?>
<div id="layoutSidenav_content">
    <main>
        <div class="container-fluid px-4">
            <h1 class="mt-4">Change Password</h1>
            <ol class="breadcrumb mb-4 justify-content-between">
                <li class="breadcrumb-item active">Please update your password.</li>
                <a class="btn btn-primary" href="view_userprofile.php">View Profile</a>
            </ol>
            <div class="row">
                <div class="col-lg-12">
                    <div class="card shadow-lg border-0 rounded-lg mb-5">
                        <div class="card-body">

                            <div class="form-floating mb-3">
                                <input class="form-control" name="txtMobileNo" id="txtMobileNo" type="text"
                                    value="<?php echo $_SESSION['mobileno'];?>" readonly />
                                <label for="txtUserName">Mobile No.</label>
                            </div>
                            <div class="form-floating mb-3">
                                <input class="form-control" name="txtOldPassword" id="txtOldPassword" type="text"
                                    placeholder="Ex. Sanjeev Kumar Singh" required />
                                <label for="txtName">Old Password</label>
                            </div>
                            <div class="form-floating mb-3">
                                <input class="form-control" name="txtNewPassword" id="txtNewPassword" type="text"
                                    placeholder="Ex. Sanjeev Kumar Singh" required />
                                <label for="txtName">New Password</label>
                            </div>
                            <div class="form-floating mb-3">
                                <input class="form-control" name="txtConfirmPassword" id="txtConfirmPassword"
                                    type="password" placeholder="Ex. Sanjeev Kumar Singh" required />
                                <label for="txtName">Confirm Password</label>
                            </div>

                            <div class="align-items-center text-center mt-4 mb-0">
                                <!-- <a class="small" href="password.html">Forgot Password?</a> -->
                                <button class="btn btn-primary" onclick="changepassword();">Change Password</button>
                            </div>

                        </div>
                        <div class="card-footer text-center py-3">
                            <!-- <div class="small">
                                <a href="register.html">Need an account? Sign up!</a>
                            </div> -->
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </main>

    <?php include "footer.php";?>

    <script>
    function changepassword() {
        var flag = true;
        var inputField1 = document.getElementById("txtMobileNo");
        if (inputField1.value == "") {
            flag = false;
            alert("Please enter mobile no.");
            document.getElementById("txtMobileNo").focus();
            return false;
        }
        var inputField2 = document.getElementById("txtOldPassword");
        if (inputField2.value == "") {
            flag = false;
            alert("Please enter old password.");
            document.getElementById("txtOldPassword").focus();
            return false;
        }

        var inputField3 = document.getElementById("txtNewPassword");
        if (inputField3.value == "") {
            flag = false;
            alert("Please enter new password.");
            document.getElementById("txtNewPassword").focus();
            return false;
        }

        var inputField4 = document.getElementById("txtConfirmPassword");
        if (inputField4.value == "") {
            flag = false;
            alert("Please enter confirm password.");
            document.getElementById("txtConfirmPassword").focus();
            return false;
        }

        if (inputField3.value != inputField4.value) {
            flag = false;
            alert("New Password and Confirm Password not match.");
            document.getElementById("txtNewPassword").focus();
            return false;
        }
        var mobileno = document.getElementById("txtMobileNo").value;
        var oldpassword = document.getElementById("txtOldPassword").value;
        var newpassword = document.getElementById("txtNewPassword").value;


        //var btntext = document.getElementById("btnuser").innerHTML;
        // var canteen = document.getElementById("hdcanteen").value;
        // var userid = document.getElementById("hduserid").value;

        var text = "Do you want change password?";

        if (confirm(text) == false) {

            flag = false;
            return false;
        }
        try {

            if (flag == true) {
                var urlgetcode = 'update_password.php';

                $.ajax({
                    method: 'POST',
                    url: urlgetcode,
                    data: '&mobileno=' + mobileno + '&oldpassword=' + oldpassword + '&newpassword=' +
                        newpassword,
                    dataType: 'json',
                    async: true,
                    cache: false,

                    success: function(msg) {
                        alert(msg);
                        if (msg == "1") {
                            alert("Password Changed Successfully.");

                            $('#txtOldPassword').val("");
                            $('#txtNewPassword').val("");
                            $('#txtConfirmPassword').val("");
                            window.location.href = "logout.php";
                        }
                    },
                    error: function(request) {

                        alert(request.responseText);
                    }
                });
            }
        } catch (Error) {
            alert(Error);
        }

        return;
    }
    </script>