Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 18.220.111.87
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in//medicationmangemnt.php
<?php
session_start();
include("dbconnection.php");

require_once('../DBManager.php');
require_once("../LoginManager.php");
require_once('../patientmanager.php');
if(isset($_POST[Action_med]))
{
		PatientManager::Medicineaction("$_GET[prescriptionid]","$_GET[patientid]","$_POST[shift]","$_POST[drugsid]","$_POST[Action_med]","$_POST[entered_by]");
	 }
	
?>
<!DOCTYPE html>
<html>  <head>
    <title>Title of the document</title>
    <style>
      .modal {
        display: none;
        position: fixed;
        z-index: 8;
        left: 0;
        top: 0;
        width: 100%;
        height: 100%;
        overflow: auto;
        background-color: rgb(0, 0, 0);
        background-color: rgba(0, 0, 0, 0.4);
      }
      .modal-content {
        margin: 50px auto;
        border: 1px solid #999;
        width: 60%;
      }
      h2,p {
        margin: 0 0 20px;
        font-weight: 400;
  
      }     
     .form1 {
        padding: 25px;
        margin: 25px;
        box-shadow: 0 2px 5px #f5f5f5;
        background: #eee;
      }
      input,
      textarea, select {
        width: 100%;
        padding: 6px;
        margin-bottom: 20px;
        border: 1px solid #1c87c9;
        outline: none;
      }
        .button1 {
        width: 100%;
        padding: 6px;
        margin-bottom: 20px;
        border: 1px solid #1c87c9;
        outline: none;
      }
      .contact-form button {
        width: 100%;
        padding: 10px;
        border: none;
        background: #1c87c9;
        font-size: 16px;
        font-weight: 400;
        color: #fff;
      }
      button:hover {
        background: #2371a0;
      }
      .close {
        color: #aaa;
        float: right;
        font-size: 58px;
        font-weight: bold;
      }
      .close:hover,
      .close:focus {
        color: black;
        text-decoration: none;
        cursor: pointer;
      }
      button.button {
        display: inline-block;
       
        border-bottom: #02274a 1px solid;
     
        font-size: 19px;
        cursor: pointer;
      }
      
      button.button:hover {
    
        border-bottom: #a99567 1px solid;
        color: #a99567;
      }
      
    </style>
  </head>
  <body>
      
   
          
        
    <h2 Align="center"> Medication </h2>
    <p align="right">
     
    </p>
           <table id="example2" class="table table-bordered table-hover">
                  <thead>
         
						<tr>
						    <th>Shift</th>
							<th>Drug</th>
							<th>Dose(mg)</th>
							<th>Route</th>
							<th>Action</th>
							</tr>
				
      
                  </thead>
<?php
include("dbconnection.php");
$sql ="SELECT * FROM medicinede WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]' AND status='Active'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
      switch ($rs[Frequency]) {
  case '1':
    echo "    <tr>     <td>Morning</td>
     ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create Order</a><br><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      
                      </tr>  
         ";
    break;
    case '2':
    echo " <tr>     <td>Morning</td>
                       ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> <br><form method='post' name='Action_med'> <br> <br>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                  
                    <tr>
                     <td>Evening</td>
                        ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> <br><form method='post' name='Action_med'><br>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      
                      </tr>";
    break;
  case 'TID/t.id. (three times a day)':
    echo "<tr>     <td>Morning</td>
                       ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> <br><form method='post' name='Action_med'><br>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      <tr>    
                      <td>Afternoon</td>
                        ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> <br><form method='post' name='Action_med'><br>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      <tr>    
                      <td>Evening</td>
                        ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> <br><form method='post' name='Action_med'><br>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                    ";
    break;
  case 'QID/q.i.d. (four times a day)':
    echo "<tr>     <td>Morning</td>
                      ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                      <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Morning'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr><tr>
                      <td>Afternoon</td>
                          ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                      <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Afternoon'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                     <tr>
                     <td>Evening</td>
                          ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                      <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Evening'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                     <tr>
                      <td>Night</td>
                    ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                       <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Night'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>";
    break;
      case 'QHS (every bedtime)':
    echo " <td>Night</td>
                        ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                     <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Night'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>";
    break;
       case 'Q4h (every 4 hours)':
    echo "<td>One</td>
                       ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                     <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='One'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      <td>Two</td>
                          ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                       <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Two'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      <td>Three</td>
                     ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                       <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Three'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      
                      <td>Four</td>
                          ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                       <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Four'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      <td>Five</td>
                         ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                       <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      <td>Six</td>
                         ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<td>&nbsp;$rs1[DRUGS_name]</td>";
}
else
{
    echo"<td>$rs[DRUGS]</td>";
    }
                     echo"
                          <td>&nbsp;$rs[Dose]</td>
                            <td>&nbsp;$rs[Route]</td>
                           <td> <a href='ordercreate.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]'>Create</a> 	</td>
                          
                           
                       <td><form method='post' name='Action_med'>
                      <input type='hidden' name='shift' value='Five'>
                        <input type='hidden' name='drugsid' value='$rs[id]'>
                      <input type='submit' name='Action_med' Value='Done'></form></td>
                      </tr>
                      ";
    break;
  
}
	

	  	}
		?>
    </tbody>
  <tfoot>
          </tfoot>
        </table>
    <div id="modalOne" class="modal">
      <div class="modal-content">
        <div class="contact-form">
          <a class="close">&times;</a>
                   <form  method="post">

         
   </div>   
    </div>   
    </div>   
   
            <script>
      let modalBtns = [...document.querySelectorAll(".button")];
      modalBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.getAttribute('data-modal');
          document.getElementById(modal)
            .style.display = "block";
        }
      });
      let closeBtns = [...document.querySelectorAll(".close")];
      closeBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.closest('.modal');
          modal.style.display = "none";
        }
      });
      window.onclick = function(event) {
        if(event.target.className === "modal") {
          event.target.style.display = "none";
        }
      }
    </script>
  </body>
</html>

Anon7 - 2022
AnonSec Team