Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/medical

Free Space:

10.27 TB

🔧 Quick Actions

✏️ Editing: narcotic-details.php

<?php
session_start();
include('includes/db_connection.php');
include('includes/head.php');

// Helper: execute prepared and return result or false
function execute_prepared($conn, $sql, $types = '', $params = [], &$error = null) {
    if ($types === '') {
        $res = $conn->query($sql);
        if ($res === false) $error = $conn->error;
        return $res;
    }
    $stmt = $conn->prepare($sql);
    if ($stmt === false) { $error = $conn->error; return false; }
    // bind params dynamically
    $bind_args = [];
    $bind_args[] = & $types;
    for ($i = 0; $i < count($params); $i++) {
        $bind_args[] = & $params[$i];
    }
    call_user_func_array([$stmt, 'bind_param'], $bind_args);
    if (!$stmt->execute()) { $error = $stmt->error; $stmt->close(); return false; }
    $res = $stmt->get_result();
    $stmt->close();
    return $res;
}

// Get sale id
$sale_id = isset($_GET['id']) ? (int)$_GET['id'] : 0;
if ($sale_id <= 0) {
    // redirect back if no id
    header('Location: narcotic-register.php');
    exit();
}

// Handle signature update POST
$success_message = $error_message = null;
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['update_signature'])) {
    $p_sale_id = (int)($_POST['sale_id'] ?? 0);
    $p_medicine_id = (int)($_POST['medicine_id'] ?? 0);
    $p_doctor_signature = trim($_POST['doctor_signature'] ?? '');
    $p_pharmacist_signature = trim($_POST['pharmacist_signature'] ?? '');
    $p_narcotic_verified = isset($_POST['narcotic_verified']) ? 1 : 0;
    $p_patient_id_type = trim($_POST['patient_id_type'] ?? '');
    $p_patient_id_number = trim($_POST['patient_id_number'] ?? '');
    $p_witness_name = trim($_POST['witness_name'] ?? '');

if ($p_sale_id && $p_medicine_id) {
        // check exists
        $check_sql = "SELECT id FROM prescription_details WHERE sale_id = ? AND medicine_id = ?";
        $check_res = execute_prepared($conn, $check_sql, 'ii', [$p_sale_id, $p_medicine_id], $err);
        if ($check_res === false) {
            $error_message = "DB error: " . ($err ?? 'Unknown');
        } else {
            if ($check_res->num_rows > 0) {
                // update
                $update_sql = "
                    UPDATE prescription_details
                    SET doctor_signature = ?, pharmacist_signature = ?, signature_date = NOW(),
                        narcotic_verified = ?, patient_id_type = ?, patient_id_number = ?, witness_name = ?
                    WHERE sale_id = ? AND medicine_id = ?
                ";
                // types: s s i s s s i i => "ssisssii"
                $updated = execute_prepared(
                    $conn, $update_sql, 'ssisssii',
                    [$p_doctor_signature, $p_pharmacist_signature, $p_narcotic_verified, $p_patient_id_type, $p_patient_id_number, $p_witness_name, $p_sale_id, $p_medicine_id],
                    $err2
                );
                if ($updated === false) $error_message = "Update failed: " . ($err2 ?? 'Unknown');
                else $success_message = "Prescription details updated successfully.";
            } else {
                // insert
                $insert_sql = "
                    INSERT INTO prescription_details
                    (sale_id, medicine_id, doctor_signature, pharmacist_signature, signature_date, narcotic_verified, patient_id_type, patient_id_number, witness_name)
                    VALUES (?, ?, ?, ?, NOW(), ?, ?, ?, ?)
                ";
                // types: i i s s i s s s => "iississs"
                $inserted = execute_prepared(
                    $conn, $insert_sql, 'iississs',
                    [$p_sale_id, $p_medicine_id, $p_doctor_signature, $p_pharmacist_signature, $p_narcotic_verified, $p_patient_id_type, $p_patient_id_number, $p_witness_name],
                    $err3
                );
                if ($inserted === false) $error_message = "Insert failed: " . ($err3 ?? 'Unknown');
                else $success_message = "Prescription details saved successfully.";
            }

// audit trail
            if (empty($error_message)) {
                $audit_sql = "
                    INSERT INTO audit_trail (user_id, user_name, action_type, table_name, record_id, description, ip_address, timestamp)
                    VALUES (?, ?, 'NARCOTIC_SIGNED', 'prescription_details', ?, ?, ?, NOW())
                ";
                $user_id = isset($_SESSION['user_id']) ? (int)$_SESSION['user_id'] : 0;
                $user_name = isset($_SESSION['username']) ? $_SESSION['username'] : 'System';
                $description = "Signature updated for sale #{$p_sale_id}, medicine #{$p_medicine_id}";
                $ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown';
                // types: i s i s s -> "isiss"
                $audit_res = execute_prepared($conn, $audit_sql, 'isiss', [$user_id, $user_name, $p_sale_id, $description, $ip], $err4);
                if ($audit_res === false) {
                    // non-fatal: log
                    error_log("Audit insert failed: " . ($err4 ?? 'Unknown'));
                }
            }
        }
    } else {
        $error_message = "Invalid sale or medicine selected.";
    }
}

// Fetch sale + customer
$sale_sql = "SELECT s.*, c.customer_address, c.customer_email FROM sales s LEFT JOIN customers c ON s.customer_phone = c.customer_phone WHERE s.id = ?";
$sale_res = execute_prepared($conn, $sale_sql, 'i', [$sale_id], $errSale);
if ($sale_res === false || $sale_res->num_rows === 0) {
    // sale not found
    $_SESSION['flash_error'] = "Sale not found.";
    header('Location: narcotic-register.php');
    exit();
}
$sale = $sale_res->fetch_assoc();

// Fetch sale_items with medicine and prescription details
$items_sql = "
    SELECT si.*, m.medicine_name, m.generic_name, m.batch_number, m.expiry_date, m.schedule_type, m.is_narcotic,
           pd.doctor_name, pd.doctor_license, pd.patient_name, pd.prescription_date, pd.doctor_signature, pd.pharmacist_signature,
           pd.signature_date, pd.narcotic_verified, pd.patient_id_type, pd.patient_id_number, pd.witness_name, pd.max_quantity_allowed, pd.balance_stock_after
    FROM sale_items si
    JOIN medicines m ON si.medicine_id = m.id
    LEFT JOIN prescription_details pd ON si.sale_id = pd.sale_id AND si.medicine_id = pd.medicine_id
    WHERE si.sale_id = ?
";
$items_res = execute_prepared($conn, $items_sql, 'i', [$sale_id], $errItems);
if ($items_res === false) {
    $error_message = "Error fetching items: " . ($errItems ?? $conn->error);
    $items = [];
} else {
    $items = $items_res->fetch_all(MYSQLI_ASSOC);
}

// Fetch audit trail for this sale
$audit_sql = "SELECT * FROM audit_trail WHERE record_id = ? ORDER BY timestamp DESC LIMIT 100";
$audit_res = execute_prepared($conn, $audit_sql, 'i', [$sale_id], $errAudit);
$audits = $audit_res !== false ? $audit_res->fetch_all(MYSQLI_ASSOC) : [];

?>
<!doctype html>
<html lang="en">
<body data-sidebar="dark">

<?php include('includes/topbar.php'); ?>
<div class="vertical-menu">
    <div data-simplebar class="h-100">
        <?php include('includes/sidebar.php'); ?>
    </div>
</div>

<?php if ($success_message): ?>
                <div class="alert alert-success"><?php echo htmlspecialchars($success_message); ?></div>
            <?php endif; ?>
            <?php if ($error_message): ?>
                <div class="alert alert-danger"><?php echo htmlspecialchars($error_message); ?></div>
            <?php endif; ?>

<div class="d-flex justify-content-between align-items-start mb-3">
                <h4 class="mb-0">Narcotic Sale Details — Bill #<?php echo htmlspecialchars($sale['id']); ?></h4>
                <div>
                    <button class="btn btn-secondary" onclick="history.back()"><i class="mdi mdi-arrow-left"></i> Back</button>
                    <button class="btn btn-info" onclick="window.print()"><i class="mdi mdi-printer"></i> Print</button>
                </div>
            </div>

<div class="row mb-3">
                <div class="col-md-6">
                    <div class="card p-3">
                        <h6>Sale Information</h6>
                        <p class="mb-1"><strong>Date:</strong> <?php echo date('d/m/Y h:i A', strtotime($sale['sale_date'])); ?></p>
                        <p class="mb-1"><strong>Total Amount:</strong> ₹<?php echo number_format($sale['total_amount'], 2); ?></p>
                        <p class="mb-1"><strong>Payment Mode:</strong> <?php echo htmlspecialchars($sale['payment_mode'] ?? 'N/A'); ?></p>
                        <p class="mb-0"><strong>Customer Phone:</strong> <?php echo htmlspecialchars($sale['customer_phone'] ?? 'N/A'); ?></p>
                    </div>
                </div>

<div class="col-md-6">
                    <div class="card p-3">
                        <h6>Patient / Customer</h6>
                        <p class="mb-1"><strong>Name:</strong> <?php echo htmlspecialchars($sale['customer_name'] ?? $sale['patient_name'] ?? 'N/A'); ?></p>
                        <p class="mb-1"><strong>Phone:</strong> <?php echo htmlspecialchars($sale['customer_phone'] ?? 'N/A'); ?></p>
                        <?php if (!empty($sale['customer_address'])): ?>
                            <p class="mb-0"><strong>Address:</strong> <?php echo htmlspecialchars($sale['customer_address']); ?></p>
                        <?php endif; ?>
                    </div>
                </div>
            </div>

<div class="card mb-3">
                <div class="card-body">
                    <h5 class="card-title">Medicines in this Sale</h5>
                    <div class="table-responsive">
                        <table class="table table-bordered table-sm">
                            <thead>
                                <tr>
                                    <th>#</th>
                                    <th>Medicine</th>
                                    <th>Schedule</th>
                                    <th>Batch / Exp</th>
                                    <th>Qty</th>
                                    <th>Unit Price</th>
                                    <th>Subtotal</th>
                                    <th>Prescription / Signatures</th>
                                    <th>Actions</th>
                                </tr>
                            </thead>
                            <tbody>
                                <?php $i = 1; foreach ($items as $it): ?>
                                <tr class="<?php echo (!empty($it['narcotic_verified']) && $it['narcotic_verified']==1) ? 'table-success' : ((!empty($it['doctor_signature']) && !empty($it['pharmacist_signature'])) ? 'table-warning' : ''); ?>">
                                    <td><?php echo $i++; ?></td>
                                    <td>
                                        <strong><?php echo htmlspecialchars($it['medicine_name']); ?></strong><br>
                                        <small><?php echo htmlspecialchars($it['generic_name'] ?? ''); ?></small>
                                    </td>
                                    <td>
                                        <?php
                                            if ($it['is_narcotic']) echo '<span class="badge bg-danger">NARC</span>';
                                            elseif ($it['schedule_type'] === 'X') echo '<span class="badge bg-warning">X</span>';
                                            elseif ($it['schedule_type'] === 'H1') echo '<span class="badge bg-primary">H1</span>';
                                            else echo '<span class="badge bg-secondary">H</span>';
                                        ?>
                                    </td>
                                    <td><?php echo htmlspecialchars($it['batch_number'] ?? '-') . ' / ' . (!empty($it['expiry_date']) ? date('M Y', strtotime($it['expiry_date'])) : '-'); ?></td>
                                    <td><?php echo htmlspecialchars($it['quantity']); ?></td>
                                    <td>₹<?php echo number_format($it['unit_price'], 2); ?></td>
                                    <td>₹<?php echo number_format($it['subtotal'], 2); ?></td>
                                    <td>
                                        <strong>Doctor:</strong> <?php echo htmlspecialchars($it['doctor_name'] ?? '-'); ?><br>
                                        <strong>Presc Date:</strong> <?php echo !empty($it['prescription_date']) ? date('d/m/Y', strtotime($it['prescription_date'])) : '-'; ?><br>
                                        <strong>Doctor Sign:</strong> <?php echo !empty($it['doctor_signature']) ? htmlspecialchars(substr($it['doctor_signature'],0,40)) : '<span class="text-danger">Pending</span>'; ?><br>
                                        <strong>Pharma Sign:</strong> <?php echo !empty($it['pharmacist_signature']) ? htmlspecialchars(substr($it['pharmacist_signature'],0,40)) : '<span class="text-danger">Pending</span>'; ?><br>
                                        <strong>Verified:</strong>
                                        <?php if (!empty($it['narcotic_verified']) && $it['narcotic_verified']==1): ?>
                                            <span class="badge bg-success">Yes</span>
                                        <?php else: ?>
                                            <span class="badge bg-danger">No</span>
                                        <?php endif; ?>
                                        <?php if (!empty($it['patient_id_type'])): ?>
                                            <div class="small-text mt-1"><strong>ID:</strong> <?php echo htmlspecialchars($it['patient_id_type'] . ' - ' . $it['patient_id_number']); ?></div>
                                        <?php endif; ?>
                                        <?php if (!empty($it['witness_name'])): ?>
                                            <div class="small-text"><strong>Witness:</strong> <?php echo htmlspecialchars($it['witness_name']); ?></div>
                                        <?php endif; ?>
                                    </td>
                                    <td>
                                        <button class="btn btn-sm btn-outline-primary" data-bs-toggle="modal" data-bs-target="#signatureModal"
                                            onclick="openSignatureModal(<?php echo (int)$sale['id']; ?>, <?php echo (int)$it['medicine_id']; ?>, '<?php echo addslashes($it['medicine_name']); ?>', '<?php echo addslashes($it['doctor_name'] ?? ''); ?>', '<?php echo addslashes($it['doctor_signature'] ?? ''); ?>', '<?php echo addslashes($it['pharmacist_signature'] ?? ''); ?>', <?php echo (!empty($it['narcotic_verified']) && $it['narcotic_verified']==1) ? 'true' : 'false'; ?>, '<?php echo addslashes($it['patient_id_type'] ?? ''); ?>', '<?php echo addslashes($it['patient_id_number'] ?? ''); ?>', '<?php echo addslashes($it['witness_name'] ?? ''); ?>')">
                                            <i class="mdi mdi-pencil"></i> Update
                                        </button>
                                        <a class="btn btn-sm btn-outline-info" href="print-prescription.php?sale_id=<?php echo (int)$sale['id']; ?>&medicine_id=<?php echo (int)$it['medicine_id']; ?>" target="_blank"><i class="mdi mdi-printer"></i> Print Rx</a>
                                    </td>
                                </tr>
                                <?php endforeach; ?>
                                <?php if (empty($items)): ?>
                                    <tr><td colspan="9" class="text-center">No items found for this sale.</td></tr>
                                <?php endif; ?>
                            </tbody>
                        </table>
                    </div>
                </div>
            </div>

<div class="card">
                <div class="card-body">
                    <h5 class="card-title">Audit Trail (Recent)</h5>
                    <?php if (!empty($audits)): ?>
                        <ul class="list-group">
                            <?php foreach ($audits as $a): ?>
                                <li class="list-group-item">
                                    <small class="text-muted"><?php echo date('d/m/Y h:i A', strtotime($a['timestamp'])); ?> — </small>
                                    <strong><?php echo htmlspecialchars($a['user_name']); ?></strong>
                                    &nbsp; <span class="text-muted">(<?php echo htmlspecialchars($a['action_type']); ?>)</span>
                                    <div><?php echo htmlspecialchars($a['description']); ?></div>
                                    <small class="text-muted">IP: <?php echo htmlspecialchars($a['ip_address']); ?></small>
                                </li>
                            <?php endforeach; ?>
                        </ul>
                    <?php else: ?>
                        <p class="mb-0">No audit data available for this sale.</p>
                    <?php endif; ?>
                </div>
            </div>

</div>
    </div>

<?php include('includes/footer.php'); ?>
</div>

<div class="modal fade" id="signatureModal" tabindex="-1" aria-labelledby="signatureModalLabel" aria-hidden="true">
  <div class="modal-dialog">
    <form method="POST" id="signatureForm">
      <div class="modal-content">
        <div class="modal-header">
          <h5 class="modal-title" id="signatureModalLabel">Update Prescription / Verification</h5>
          <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
        </div>
        <div class="modal-body">
            <input type="hidden" name="sale_id" id="modal_sale_id" value="">
            <input type="hidden" name="medicine_id" id="modal_medicine_id" value="">

<div class="mb-2">
                <label class="form-label">Medicine</label>
                <input type="text" id="modal_medicine_name" class="form-control" readonly>
            </div>

<div class="mb-2">
                <label class="form-label">Doctor Name</label>
                <input type="text" id="modal_doctor_name" class="form-control" readonly>
            </div>

<div class="mb-2">
                <label class="form-label">Patient ID Type</label>
                <select name="patient_id_type" id="modal_patient_id_type" class="form-select" required>
                    <option value="">Select ID Type</option>
                    <option>Aadhar</option>
                    <option>PAN</option>
                    <option>Passport</option>
                    <option>Driving License</option>
                    <option>Voter ID</option>
                    <option>Other</option>
                </select>
            </div>

<div class="mb-2">
                <label class="form-label">Patient ID Number</label>
                <input type="text" name="patient_id_number" id="modal_patient_id_number" class="form-control" required>
            </div>

<div class="mb-2">
                <label class="form-label">Doctor's Prescription Details</label>
                <textarea name="doctor_signature" id="modal_doctor_signature" class="form-control" rows="3" placeholder="Doctor's prescription details..."></textarea>
            </div>

<div class="mb-2">
                <label class="form-label">Dispensing Pharmacist</label>
                <input type="text" name="pharmacist_signature" id="modal_pharmacist_signature" class="form-control" required>
            </div>

<div class="mb-2">
                <label class="form-label">Witness Name (optional)</label>
                <input type="text" name="witness_name" id="modal_witness_name" class="form-control">
            </div>

<div class="form-check mb-2">
                <input type="checkbox" name="narcotic_verified" id="modal_narcotic_verified" class="form-check-input" value="1">
                <label for="modal_narcotic_verified" class="form-check-label"><strong>Mark as Verified</strong></label>
                <div class="small text-muted">Check after verifying all documents and signatures.</div>
            </div>

<div class="alert alert-warning small mb-0">
                Narcotic handling is strictly regulated. Ensure ID & prescription verification before marking verified.
            </div>
        </div>
        <div class="modal-footer">
          <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Cancel</button>
          <button type="submit" name="update_signature" class="btn btn-primary">Save</button>
        </div>
      </div>
    </form>
  </div>
</div>

<?php include('includes/scripts.php'); ?>

// show modal (bootstrap 5)
    var myModal = new bootstrap.Modal(document.getElementById('signatureModal'));
    myModal.show();
}

// optional: client-side form validation
document.getElementById('signatureForm')?.addEventListener('submit', function(e){
    // ensure required fields are present
    var idType = document.getElementById('modal_patient_id_type').value.trim();
    var idNum = document.getElementById('modal_patient_id_number').value.trim();
    var pharma = document.getElementById('modal_pharmacist_signature').value.trim();

if (!idType || !idNum || !pharma) {
        e.preventDefault();
        alert('Please provide patient ID type, ID number and pharmacist name.');
        return false;
    }
    return true;
});
</script>

</body>
</html>

<?php
// close
if (isset($conn)) $conn->close();

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: narcotic-details.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation