59 lines
1.7 KiB
PHP
59 lines
1.7 KiB
PHP
<?php
|
|
require_once("config/db.php");
|
|
|
|
$fname = $_GET['fname'] ?? '';
|
|
$lname = $_GET['lname'] ?? '';
|
|
$rows = [];
|
|
|
|
if ($fname !== "" || $lname !== "") {
|
|
$sql = "SELECT hn, pname, fname, lname, cid FROM patient WHERE ";
|
|
$params = [];
|
|
$types = "";
|
|
|
|
if ($fname !== "") {
|
|
$sql .= "fname LIKE ? ";
|
|
$params[] = "%" . $fname . "%";
|
|
$types .= "s";
|
|
}
|
|
if ($lname !== "") {
|
|
if ($fname !== "") {
|
|
$sql .= "AND ";
|
|
}
|
|
$sql .= "lname LIKE ? ";
|
|
$params[] = "%" . $lname . "%";
|
|
$types .= "s";
|
|
}
|
|
$sql .= " LIMIT 5";
|
|
|
|
$stmt = $conn1->prepare($sql);
|
|
if ($stmt) {
|
|
if (!empty($params)) {
|
|
$stmt->bind_param($types, ...$params);
|
|
}
|
|
$stmt->execute();
|
|
$result = $stmt->get_result();
|
|
while ($row = $result->fetch_assoc()) {
|
|
$rows[] = $row;
|
|
}
|
|
$stmt->close();
|
|
}
|
|
}
|
|
|
|
if (empty($rows)) {
|
|
echo "<tr><td colspan='5'>ไม่มีข้อมูลที่ต้องการค้นหา</td></tr>";
|
|
} else {
|
|
$num = 1;
|
|
foreach ($rows as $row) {
|
|
$encoded_hn = base64_encode($row['hn']);
|
|
echo "<tr>";
|
|
echo "<td>" . $num . "</td>";
|
|
echo "<td>" . htmlspecialchars($row['hn']) . "</td>";
|
|
echo "<td>" . htmlspecialchars($row['pname'] . $row['fname'] . " " . $row['lname']) . "</td>";
|
|
echo "<td>" . htmlspecialchars($row['cid']) . "</td>";
|
|
echo "<td><a href='patient.php?hn=" . $encoded_hn . "' class='btn' style='background:rgba(37,99,235,0.1); color:var(--primary); padding:0.25rem 0.5rem;'>ดูข้อมูล</a></td>";
|
|
echo "</tr>";
|
|
$num++;
|
|
}
|
|
}
|
|
?>
|