jpsagrisolution.com - UnknownSec 403

UnknownSec Bypass 403

: /var/www/zenithentcare/wapfolder/ [ drwxrwxr-x ]
name : regisdoc.php
 <?php
header('Content-Type: application/json');
header('Access-Control-Allow-Origin:*');

/*$data=json_decode(file_get_contents("php://input"),true);
$productcode=$data["pcode"];
$softwarename=$data["sname"];
$softwareversion=$data["sversion"];*/
 $accountmasid=isset($_GET['accountmasid']) ? $_GET['accountmasid']:die();
 $accountname=isset($_GET['accountname']) ? $_GET['accountname']:die();
 $parentgroupid=isset($_GET['parentgroupid']) ? $_GET['parentgroupid']:die();
 $identifier=isset($_GET['identifier']) ? $_GET['identifier']:die();

  $age=isset($_GET['age']) ? $_GET['age']:die();
$birthdate=isset($_GET['birthdate']) ? $_GET['birthdate']:die();
$mardate=isset($_GET['mardate']) ? $_GET['mardate']:die();
 $gender=isset($_GET['gender']) ? $_GET['gender']:die();
 $address1=isset($_GET['address1']) ? $_GET['address1']:die();
 $address2=isset($_GET['address2']) ? $_GET['address2']:die();
 $email=isset($_GET['email']) ? $_GET['email']:die();
 $state=isset($_GET['state']) ? $_GET['state']:die();
 $district=isset($_GET['district']) ? $_GET['district']:die();
 $degree=isset($_GET['degree']) ? $_GET['degree']:die();
 $special=isset($_GET['special']) ? $_GET['special']:die();
 $doctype=isset($_GET['doctype']) ? $_GET['doctype']:die();
 $mobileno=isset($_GET['mobileno']) ? $_GET['mobileno']:die();
 $morfrom=isset($_GET['morfrom']) ? $_GET['morfrom']:die();
 $morto=isset($_GET['morto']) ? $_GET['morto']:die();
 $evefrom=isset($_GET['evefrom']) ? $_GET['evefrom']:die();
 $eveto=isset($_GET['eveto']) ? $_GET['eveto']:die();
 $financialid=isset($_GET['financialid']) ? $_GET['financialid']:die();
 $userid=isset($_GET['userid']) ? $_GET['userid']:die();

 $validitydays =isset($_GET['validitydays']) ? $_GET['validitydays']:die();
 $normalf =isset($_GET['normalf']) ? $_GET['normalf']:die();
 $emergencyf =isset($_GET['emergencyf']) ? $_GET['emergencyf']:die();
 $depid  =isset($_GET['depid']) ? $_GET['depid']:die();

 $hospid  =isset($_GET['hospid']) ? $_GET['hospid']:die();
 $firstopdfee  =isset($_GET['firstopdfee']) ? $_GET['firstopdfee']:die();
$creationdatetime=date("Y-m-d H:m:s");

include "../config.php";
$status=0;
$sql="select * from accountmastertb where accountmasterid='{$accountmasid}'  and Identifier='{$identifier}' ";
     $result= mysqli_query($conn, $sql);

     if(mysqli_num_rows($result)==0)
     {


$sql="insert into accountmastertb (accountmasterid,AccountName, ParentGroupID,Identifier,Age,BirthDate,MarriageDate,Gender,Address1,Address2,Email,StateID,DistrictID,Degree,specialization,DoctorType,
      Mobile1,MorFromTime,MorToTime,EveFromTime,EveToTime,Status,CreationDateTime,CreatedByUserID,
      Active,FinancialYearID,Validitydays,NormalFee,Emergencyfee,DepartmentID,HospitalID,FirstOpdFee)
      values('{$accountmasid}','{$accountname}','{$parentgroupid}','{$identifier}','{$age}','{$birthdate}','{$mardate}',
            '{$gender}','{$address1}','{$address2}','{$email}','{$state}','{$district}',
            '{$degree}','{$special}','{$doctype}','{$mobileno}','{$morfrom}','{$morto}','{$evefrom}',
            '{$eveto}',0,'{$creationdatetime}','{$userid}',1,'{$financialid}','{$validitydays}','{$normalf}','{$emergencyf}','{$depid}','{$hospid}',
            '{$firstopdfee}')";


if(mysqli_query($conn, $sql))
{
  $status=1;
}
else
{
   $status=0;

}

}
else {



$sql="update accountmastertb set AccountName='{$accountname}',Degree='{$degree}',specialization='{$special}',
     Age='{$age}',Gender='{$gender}',Address1='{$address1}',Address2='{$address2}',StateID='{$state}',DistrictID='{$district}',
  FirstOpdFee='{$firstopdfee}',Validitydays='{$validitydays}',NormalFee='{$normalf}',Emergencyfee='{$emergencyf}',
  ModificationDatetime='{$creationdatetime}',ModifiedByUserID='{$userid}' where accountmasterid='{$accountmasid}'";

  if(mysqli_query($conn, $sql))
  {
    $status=1;
  }
  else
  {
     $status=0;

  }


}




echo json_encode($status);

?>