jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/ [ drwxrwxr-x ]
name : user_authentification1.php

 <?php
require_once "config.php";
session_start();

$username = $_POST['username'];
$password= $_POST['psw'];
$userrole = $_POST['userrole'];


$sanitized_username =  
    mysqli_real_escape_string($conn, $username);

$sanitized_password =  
    mysqli_real_escape_string($conn, $password); 
      
$sanitized_role =  
    mysqli_real_escape_string($conn, $userrole); 

// $enc_psw=md5($password);

$data="0";
$msg="0";
// $hash_psw="";


// Verify the hash against the password entered 
 //$verify = password_verify($sanitized_password, $hash_psw); 

    $query = "select * from logintb where username= '".$sanitized_username."' and password='".$sanitized_password."' and status='1' and userrole='".$sanitized_role."'";


 //$query = "select * from logintb where username= '".$username."' and password='".$password."' and status='1' and userrole='".$role."'";

 $result = mysqli_query($conn, $query);
 while($row = mysqli_fetch_array($result))
 {
   $data="1";
   $_SESSION['uname']= $row["uname"];
   $_SESSION['username']=  $row["username"];
   $_SESSION['userrole']=  $row["userrole"];
 }

 
 echo json_encode($data);
?>