Hospital-Management-System/function.php at main · DevMaxwell/Hospital-Management-System · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
<?php
$con=mysqli_connect("localhost","root","","hmsdb");

if ($con) {
	# code...
}
else{
	echo "error";
}


if (isset($_POST['submit'])) {
	# code...
	$username = $_POST['username'];
	$password = $_POST['password'];

	$query = "SELECT * FROM login_db WHERE Username='$username' and Password='$password' ";
	$result=mysqli_query($con,$query);

	if (mysqli_num_rows($result)==1) {
		# code...
		header("Location:admin.php");
	}
	else {
		 echo"<scrip>alert('Error login')</script>";
		 echo "<script>window.open('index.php','_self')</script>";
	}

}

if (isset($_POST['submit_ap'])) {
	# code...
	$firstname = $_POST['firstname'];
	$lastname = $_POST['lastname'];
	$email = $_POST['email'];
	$contact = $_POST['contact'];
	$doc = $_POST['doc'];

	$query = "INSERT INTO `appointment`(`fname`, `lname`, `email`, `contact`, `doc`) VALUES ('$firstname','$lastname','$email','$contact','$doc')";
	$result =mysqli_query($con, $query);
	if ($result) {
		# code...
		 echo"<scrip>alert('Appointment created')</script>";
		 echo "<script>window.open('admin.php','_self')</script>";
	}
}

function get_patients_details(){
	global $con;
	$querrry = "SELECT * FROM appointment ";
	$results = mysqli_query($con,$querrry);
	#or die(mysqli_error($con));

	while ($row = mysqli_fetch_array($results)){
		# code...
		$fname = $row['fname'];
		$lname = $row['lname'];
		$email = $row['email'];
		$contact = $row['contact'];
		$doc = $row['doc'];
		echo "<tr>
			<td>$fname</td>
			<td>$lname</td>
			<td>$email</td>
			<td>$contact</td>
			<td>$doc</td>
		</tr>";
	}
}

if (isset($_POST['submit_st'])) {
	# code...
	$firstname = $_POST['firstname'];
	$lastname = $_POST['lastname'];
	$email = $_POST['email'];
	$contact = $_POST['contact'];
	$duty= $_POST['duty'];
	$qual = $_POST['qual'];
	$date = $_POST['time_stamp'];
	$doc = $_POST['file'];

	$sql = "INSERT INTO stfaf (fname, lname, email, contact, duty, qual, date, file) VALUES ('$firstname','$lastname','$email','$contact','$duty','$qual','$date','$doc')";
	$result =mysqli_query($con, $sql) or die(mysqli_error($con));
	if ($result) {
		# code...
		header("Location:admin.php");
		#	 echo"<scrip>alert('Appointment created')</script>";
		# 	echo "<script>window.open('admin.php','_self')</script>";
	}
}

function get_staff_details(){
	global $con;
	$querrry = "SELECT * FROM stfaf ";
	$results = mysqli_query($con,$querrry);
	#or die(mysqli_error($con));

	while ($row = mysqli_fetch_array($results)){
		# code...
		$fname = $row['fname'];
		$lname = $row['lname'];
		$email = $row['email'];
		$contact = $row['contact'];
		$duty = $row['duty'];
		$qual = $row['qual'];
		$date = $row['date'];
		$file = $row['file'];
		echo "<tr>
			<td>$fname</td>
			<td>$lname</td>
			<td>$email</td>
			<td>$contact</td>
			<td>$duty</td>
			<td>$qual</td>
			<td>$date</td>
			<td>$file</td>
			<td> <button style='background-color: #cc66ff; border-radius: 5px; border: none; padding: 5px; color:white;'>Print </button>
				<button style='background-color: #cc33ff; border-radius: 5px; border: none; padding: 5px; color:white;'> Edit </button>
				<button style='background-color: #ff3333; border-radius: 5px; border: none; padding: 5px; color: white;'> Delete</button>
			</td>
			</tr>";
	}
}


?>