bypass

<?php

session_start();

require("config.php");

if(!isset($_SESSION['auser']))

{

header("location:index.php");

}

///code

$error="";

$msg=$_REQUEST['msg'];

if(isset($_REQUEST['action']) && $_REQUEST['action']=='edit' && $_REQUEST['id']!=0)

{

$sql="select * from blog_categories where id=".$_REQUEST['id'];

$result=mysqli_query($con,$sql);

$edit=mysqli_fetch_assoc($result);

}

if(isset($_REQUEST['action']) && $_REQUEST['action']=='delete' && $_REQUEST['id']!=0)

{

$sql="delete  from blog_categories where id=".$_REQUEST['id'];

$result=mysqli_query($con,$sql);

$msg="<p class='alert alert-warning'>Blog Category Deleted Successfully</p>";

header("Location:blog_categorylist.php?msg=".$msg);

}

if(isset($_POST['insert']))

{

$cat_id=$_POST['cat_id'];

$cat_name=$_POST['cat_name'];

if(!empty($cat_name)){

if($cat_id!=0)

{

$sql="update blog_categories set name='$cat_name' where id=".$cat_id;

$result=mysqli_query($con,$sql);

if($result)

{

$msg="<p class='alert alert-success'>Blog Category Updated Successfully</p>";

header("Location:blog_categorylist.php?msg=".$msg);

}

else

{

$msg="<p class='alert alert-warning'>* Blog Category Not Updated</p>";

header("Location:blog_categorylist.php?msg=".$msg);

}

else{

$sql="insert into blog_categories (name) values('$cat_name')";

$result=mysqli_query($con,$sql);

if($result)

{

$msg="<p class='alert alert-success'>Blog Category Inserted Successfully</p>";

header("Location:blog_categorylist.php?msg=".$msg);

}

else

{

$msg="<p class='alert alert-warning'>* Blog Category Not Inserted</p>";

header("Location:blog_categorylist.php?msg=".$msg);

}

else{

$msg = "<p class='alert alert-warning'>* Fill all the Fields</p>";

header("Location:blog_categorylist.php?msg=".$msg);

}

<!DOCTYPE html>

<head>

<title>Ventura - Blog Categories</title>

<!--[if lt IE 9]>

<![endif]-->

</head>

<body>

<?php include("header.php");?>

<h3 class="page-title">Blog Categories</h3>

<li class="breadcrumb-item"><a href="dashboard.php">Dashboard</a></li>

<li class="breadcrumb-item active">Blog Categories</li>

</ul>

</div>

<h1 class="card-title"><?php echo (isset($edit)) ? 'Update' : 'Add';?> Category</h1>

<?php

if(isset($_REQUEST['msg']))

echo $_REQUEST['msg'];

</div>

<h5 class="card-title">Category Details</h5>

<label class="col-lg-3 col-form-label">Category Name</label>

</div>

</div>

</form>

</div>

<h4 class="card-title">Blog Category List</h4>

</div>

<thead>

<tr>

<th>Delete</th>

</tr>

</thead>

<tbody>

<?php

$query=mysqli_query($con,"select * from blog_categories");

while($row=mysqli_fetch_assoc($query))

{

<tr>

<td><a href="blog_categorylist.php?action=delete&id=<?php echo $row['id']; ?>" onclick="return confirm('Are you sure you want to delete?')">Delete</a></td>

</tr>

<?php } ?>

</tbody>

</table>

</div>

</div>

<!---

<label class="col-lg-3 col-form-label">State Name</label>

<option>Select</option>

<option>Option 1</option>

<option>Option 2</option>

<option>Option 3</option>

<option>Option 4</option>

<option>Option 5</option>

</select>

</div>

---->

</body>

</html>