oapp/book.php at master · samirank/oapp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
<?php
session_start();
include('master/db.php');

if (isset($_GET['test_id']) || isset($_SESSION['test_id'])) {
	if(isset($_GET['test_id'])){
		$test_id = $_GET['test_id'];
		$_SESSION['test_id'] = $test_id;
	}
	elseif (isset($_SESSION['test_id'])) {
		$test_id = $_SESSION['test_id'];
	}
	else{
		header("location: index.php");
	}

	if (!isset($_SESSION['log_id'])) {
		header("location: login.php");
	}else{
		if ($_SESSION['log_role']!='patient') {
			$_SESSION['msg']="Only patient can book lab appointment";
			unset($_SESSION['test_id']);
			header("location: dashboard.php");
		}else{

			$date = 'next '.date('l',strtotime($GET['day']));
			$date_of_test = date('Y-m-d', strtotime($date));

			$patient_id = mysqli_query($con,"SELECT * from patients where user_id = {$_SESSION['log_id']}");
			$patient_id = mysqli_fetch_assoc($patient_id);
			$patient_id = $patient_id['patient_id'];
			$sql = "INSERT INTO `lab_bookings` (`patient_id`, `test_id`, `date_of_booking`, `date_of_test`) VALUES ('$patient_id', '$test_id', now(), '$date_of_test')";
			if (mysqli_query($con,$sql)) {
				unset($_SESSION['test_id']);
				$_SESSION['msg'] = "Booking confirmed. Your booking id is".mysqli_insert_id($con);
				header("location: dashboard.php");
			}else{
				echo mysqli_error($con);
			}
		}
	}
}
elseif(isset($_GET['schedule_id']) || isset($_SESSION['schedule_id'])){
	if(isset($_GET['schedule_id'])){
		$schedule_id = $_GET['schedule_id'];
		$_SESSION['schedule_id'] = $schedule_id;
	}
	elseif (isset($_SESSION['schedule_id'])) {
		$schedule_id = $_SESSION['schedule_id'];
	}
	else{
		header("location: index.php");
	}

	if (!isset($_SESSION['log_id'])) {
		header("location: login.php");
	}
	else{
		if ($_SESSION['log_role']!='patient') {
			$_SESSION['msg']="Only patient can book appointment";
			unset($_SESSION['schedule_id']);
			header("location: dashboard.php");
		}else{
			$sql = "SELECT * FROM schedule WHERE schedule_id = $schedule_id";
			$result = mysqli_query($con,$sql);
			if (mysqli_num_rows($result)>0) {
				$row = mysqli_fetch_assoc($result);
			}else{
				die("Schedule does not exist");
			}

		// if(date('l')==$row['day']){
		// 	$date_of_appointment = date('d-m-y');
		// }else{
			$date = 'next '.$row['day'];
			$date_of_appointment = date('Y-m-d', strtotime($date));
		// }
			$patient_id = mysqli_query($con,"SELECT * from patients where user_id = {$_SESSION['log_id']}");
			$patient_id = mysqli_fetch_assoc($patient_id);
			$patient_id = $patient_id['patient_id'];
			$sql = "INSERT INTO `bookings` (`schedule_id`, `patient_id`, `date_of_booking`, `date_of_appointment`) VALUES ('$schedule_id', '$patient_id', now(), '$date_of_appointment')";
			if (mysqli_query($con,$sql)) {
				unset($_SESSION['schedule_id']);
				$_SESSION['msg'] = "Booking confirmed. Your booking id is".mysqli_insert_id($con);
				header("location: dashboard.php");
			}else{
				echo mysqli_error($con);
			}
		}
	}
}
?>