UnknownSec Bypass 403

: /var/www/zenithentcare/wapfolder/ [ drwxrwxr-x ]
name : update_patientdetails.php <?php header('Content-Type: application/json'); header('Access-Control-Allow-Origin:*'); /*$data=json_decode(file_get_contents("php://input"),true); $productcode=$data["pcode"]; $softwarename=$data["sname"]; $softwareversion=$data["sversion"];*/ $uhid=isset($_GET['uhid']) ? $_GET['uhid']:die(); $name=isset($_GET['name']) ? $_GET['name']:die(); $gender=isset($_GET['gender']) ? $_GET['gender']:die(); $age=isset($_GET['age']) ? $_GET['age']:die(); $ageinyears=isset($_GET['ageinyears']) ? $_GET['ageinyears']:die(); $mobileno=isset($_GET['mobileno']) ? $_GET['mobileno']:die(); $address=isset($_GET['address']) ? $_GET['address']:die(); include "../config.php"; $sql="update registrationtb set name='".$name."',gender='".$gender."', age='".$age."',ageinyears='".$ageinyears."',mobileno='".$mobileno."' where uhid='".$uhid."' "; $result=mysqli_query($conn, $sql) or die("SQL Query Failed."); $sql="update appointmenttb set name='".$name."',gender='".$gender."', age='".$age."',ageinyear='".$ageinyears."',mobileno='".$mobileno."' where uhid='".$uhid."' "; $result=mysqli_query($conn, $sql) or die("SQL Query Failed."); echo json_encode($result); ?>