ohctech_p8/select_patient_list.php

<?php
include ('includes/config/config.php');
include ('log_entry.php');
$param = $_REQUEST['searchParam'];
$strict_search = $_REQUEST['strict_search'];
$search_only_col = $_REQUEST['search_only_col'];
$search_equal_like = "";
$search_equal_like_literal = "";
error_log("Patient_list param:" . $param);
if (isset($param) && $param != "") {
	if (!isset($search_only_col) && !isset($strict_search) && !empty($param)) {
		$query = "select a.id, a.patient_name, a.emp_code,a.father_name, a.primary_phone,a.offiial_email_id from patient_master a where upper(emp_code)  like upper('" . $param . "%') or upper(patient_name) like upper('%" . $param . "%') ";
	} else {
		if (isset($strict_search) && $strict_search == "Y") {
			$search_equal_like = "=";
		} else {
			$search_equal_like = " like ";
			$search_equal_like_literal = "%";
		}

		if (isset($search_only_col) && $search_only_col != "") {
			$query = "select a.id, a.patient_name, a.emp_code,a.father_name, a.primary_phone,a.offiial_email_id
			from patient_master a where upper($search_only_col) 
			$search_equal_like upper('" . $param . "$search_equal_like_literal')";
		} else {
			$query = "select a.id, a.patient_name, a.emp_code,a.father_name, a.primary_phone,a.offiial_email_id from patient_master a where emp_code = upper('" . $param . "') or upper(patient_name) = upper('" . $param . "') ";
		}
	}
	error_log("Patient_list Query:" . $query);
	if (!$result = @mysqli_query($conn, $query)) {
		die(mysqli_error($conn));
	}
	$data = array();
	if (mysqli_num_rows($result) > 0) {
		while ($row = @mysqli_fetch_assoc($result)) {
			$data[] = $row;
		}
	} else {
		$data['status'] = 200;
		$data['message'] = "Data not found!";
		error_log($data['message']);
	}
}
error_log($data);
echo json_encode($data);