profile.py

from os import abort, error
from sqlite3.dbapi2 import Cursor
from flask import render_template,Blueprint,request, session,url_for
from phonenumbers.phonenumber import PhoneNumber
from werkzeug.utils import redirect,secure_filename
from defs import Patient
from functions import *
from phonenumbers import geocoder
from phonenumbers import carrier
import phonenumbers
from models.models import *
import os
import json
from config import *
import math
import bcrypt
ProfilePage=Blueprint("profile",__name__)
'''
I already have the data in the session and i will detect if the user is patient or doctor by using group id
id=1 ----> will edit the data
id=0 -----> will go to the profile normally
The methods of the page if the method is Post and id=1 then the user will come from the profile page to profile edit Page to edit the data
if the method is post and the id=0 then the user will come from the update page to the normal profile page 
if the method is Get and id=0 then the user will come form the home page 
call the query Update and if the query is succeed it will return the bool value is_updated=true to tall me and i will save the new data in the session  
Some NOTES: 1-if the user not login the link of the profile page will lead to login first if he attemps to get profile will the URI
2- in the profile the job will decide according to the GroupID 
3- 
'''
#start the connection 
connection = open_connection("hospital.db")
cursor = get_cursor(connection)
Database_Setup(cursor)
activate_Fks(cursor)
AllowedExtaions=set(["jpg","png","gif","jfif","jpeg"])
UPLOAD_FOLDER="static\images\\"
jsonFile = "tests.json"


@ProfilePage.route("/profile/<string:id>",methods=["POST","GET"])
def profile(id):
    if "ID" in session: #Edit page
        Data={}
        patients=[]
        if("Group_id" not in session):
            # the query to get the status
            result3= selectFromTable(cursor,"PatientStatus",PatientStatus_attributes,[PatientStatus.All.value],[(PatientStatus.Patient_ID.value,session['ID'])])
            result2=SelecT_ALL_Prescription_Patient_sorted_by_date(cursor,session["ID"])
            # print(result2)
            if len(result3)!=0:
                Data["disease1"]=result3[0][1]
                Data["disease2"]=result3[0][2]
                Data["disease3"]=result3[0][3]
                Data["disease4"]=result3[0][4]
                Data["disease5"]=result3[0][5]
                
            if len(result2)!=0:
                Data["DoctorName"]=result2[0][0]
                Data["DATE"]=result2[0][1]
                Data["Treatment"]=result2[0][2]
        if("Group_id" not in session):
            DataOfUser=selectFromTable(cursor,"Patient",Patient_attributes,[Patient.All.value],[(Patient.Patient_ID.value,session['ID'])])
        else:
            DataOfUser=selectFromTable(cursor,"Employee",Employee_attributes,[Employee.All.value],[(Employee.Employee_ID.value,session['ID'])])
            patients = [patient[1] for patient in zip(range(4),select_patients_reservation_doctor(cursor, session['ID']))]
        session["Fname"]                =DataOfUser[0][1]
        session["Lname"]                =DataOfUser[0][2]
        session["Age"]                  =DataOfUser[0][3]
        session["Email"]                =DataOfUser[0][10]
        session["password"]             =DataOfUser[0][11]
        session["Gender"]               =DataOfUser[0][9]
        session["PhoneNumber"]          =DataOfUser[0][5]
        session["Addresscountry"]       =DataOfUser[0][6]
        session["Addressstreet"]        =DataOfUser[0][8]
        session["Addresscity"]          =DataOfUser[0][7]
        session["image"]                =DataOfUser[0][12]
        # print(session)
        if id=="Edit" and request.method=="GET":
            return render_template("Profile.html",edit=id,data=Data,data1=session,patients=patients,Session_id=session["ID"])
        elif id=="mainprofile": #main profile page
            if request.method=="POST":
                Fname=request.form.get("Fname")
                Lname=request.form.get("Lname")
                email=request.form.get("email")
                password=request.form.get("password")
                if password=="":
                    password=session["password"]
                else:
                    hashed_password = bcrypt.hashpw(password.encode('utf-8'), bcrypt.gensalt())
                    password = hashed_password.decode('utf-8')
                phoneNumber =request.form.get("Phone")
                Addresscountry=request.form.get("Addresscountry")
                Addressstreet=request.form.get("Addressstreet")
                Addresscity=request.form.get("Addresscity")
                PhoneCountry="+"+str(codes[recode(Addresscountry)]) 
                phone = phonenumbers.parse(PhoneCountry+phoneNumber)
                if not(has_numbers(Fname)) and not(has_numbers(Lname)and(phonenumbers.is_valid_number(phone))):
                    new_info=['"'+Fname+'"','"'+Lname+'"','"'+email+'"','"'+password+'"',phoneNumber,'"'+Addresscountry+'"','"'+Addresscity+'"','"'+Addressstreet+'"']
                    if("Group_id" not in session):
                        is_upadated = Update(cursor,'Patient',[Patient.Patient_ID.value],[session['ID']],[Patient.FNAME.value,Patient.lNAME.value,Patient.Email.value,Patient.Password.value,Patient.PhoneNumber.value,Patient.Addresscountry.value,Patient.Addresscity.value,Patient.Addressstreet.value],new_info)
                    else:
                        is_upadated = Update(cursor,'Employee',[Employee.Employee_ID.value],[session['ID']],[Employee.FNAME.value,Employee.lNAME.value,Employee.Email.value,Employee.Password.value,Employee.PhoneNumber.value,Employee.Addresscountry.value,Employee.Addresscity.value,Employee.Addressstreet.value],new_info)
                    if is_upadated:
                        connection.commit()
                        session["Fname"]=Fname
                        session["Lname"]=Lname
                        session["Email"]=email
                        session["password"]=password
                        session["PhoneNumber"]=phoneNumber
                        session["Addresscountry"]=Addresscountry
                        session["Addressstreet"]=Addressstreet
                        session["Addresscity"]=Addresscity
                        return redirect("/profile/mainprofile")
                    else:
                        return redirect("/profile/mainprofile")
                else :
                    return redirect("/profile/mainprofile")
            else :
                return render_template("Profile.html",edit=id,data1=session,data=Data,patients=patients,Session_id=session["ID"])
        else:
            return redirect("/home")
    else:
        return redirect("/error")  # "login first"

#the profile page of the admin 
#when the home page is ended i will add a button to the profile page and i will select which route should be called
#if Group_id==A  


@ProfilePage.route("/AdminProfile/Department",methods=["POST","GET"])
def AdminDepartment():
    if session["Group_id"]=="A":
        #query to get the data of the departments
        Result= selectFromTable(cursor,'Department',Department_attributes,[Deparment.All.value] ,[] )
        return render_template("ShowDataToAdmin.html",Type='Department',Data=Result)
    else :
        return redirect("/error")
###########################################################################################

@ProfilePage.route("/AdminProfile/Employee",methods=["POST","GET"])
def AdminEmployee():
    if session["Group_id"]=="A":
        #query to get the data of the employees
        Result= selectEmployeesExceptAdmin(cursor)
        return render_template("ShowDataToAdmin.html",Type="Employee",Data=Result)
        
    else:
        return redirect("/error")
###########################################################################

@ProfilePage.route("/AdminProfile/Patient",methods=["POST","GET"])
def AdminPatient():
    if session["Group_id"]=="A":
        Result= selectFromTable(cursor,'Patient',Patient_attributes,[Patient.All.value] ,[] )
        return render_template("ShowDataToAdmin.html",Type='Patient',Data=Result)
    else: 
        return redirect("/error")

#############################################################################################

@ProfilePage.route("/AdminProfile/Rooms",methods=["POST","GET"])
def AdminRoom():
    if session["Group_id"]=="A":
        Result= selectFromTable(cursor,'Room',Patient_attributes,[Room.All.value] ,[] )
        return render_template("ShowDataToAdmin.html",Type='Rooms',Data=Result)
    else: 
        return redirect("/error")

@ProfilePage.route("/AdminProfile/Donation",methods=["POST","GET"])
def AdminDonation():
    if session["Group_id"]=="A":
        Result=selectFromTable(cursor,'Donation',Donation_attributes,[Donation.All.value] ,[] )
        return render_template("ShowDataToAdmin.html",Type='Donation',Data=Result)
    else:
        return redirect("/error")

@ProfilePage.route("/AdminProfile/Dashboard",methods=["POST","GET"])
def AdminDashboard():
    if session["Group_id"]=="A":
        numberOfDoctorsInEachDep=count_doctors_Departments(cursor)
        numberOfPatientsOfEachDoctor=count_patient_Doctor(cursor)
        numberOfPatientsOfEachDepartment=count_patients_Doctors_department(cursor)

        Doctors=[]
        numbersOfPatients=[0.0]
        DepartmentsofDoctors=[]
        numbers=[0.0]
        DepartmentsOfPatients=[]
        Patients=[0.0]
        
        for i in numberOfDoctorsInEachDep:
            DepartmentsofDoctors.append(i[0])
            numbers.append(i[1])
        
        for i in numberOfPatientsOfEachDoctor:
            Doctors.append(i[1])
            numbersOfPatients.append(i[2])
        
        for i in numberOfPatientsOfEachDepartment:
            DepartmentsOfPatients.append(i[0])
            Patients.append(i[1])
        
        numberOfAllPatients=sum(numbersOfPatients)
        
        numberOfAllDoctors=sum(numbers)
        
        numberOfAllPatientsOfDepartment=sum(Patients)
        if numberOfAllDoctors !=0:
            for i in range(len(numbers)):
                    numbers[i]=numbers[i]*360/numberOfAllDoctors
        if numberOfAllPatients !=0:
            for i in range(len(numbersOfPatients)):
                    numbersOfPatients[i]=numbersOfPatients[i]*360/numberOfAllPatients
        if numberOfAllPatientsOfDepartment !=0:
            for i in range(len(Patients)):
                    Patients[i]=Patients[i]*360/numberOfAllPatientsOfDepartment

        numbersOfPatients.append(0)            
        numbers.append(0)
        Patients.append(0)
        for i in range(len(numbers)):
            numbers[i]+=numbers[i-1]
        for i in range(len(numbersOfPatients)):
            numbersOfPatients[i]+=numbersOfPatients[i-1]
        for i in range(len(Patients)):
            Patients[i]+=Patients[i-1]
            
        for i in range(len(numbers)):
            numbers[i]=int(numbers[i])
        for i in range(len(numbersOfPatients)):
            numbersOfPatients[i]=int(numbersOfPatients[i])
        for i in range(len(Patients)):
            Patients[i]=int(Patients[i])
        # return str(numbers[0]) +' '+ str(numbers[1])+' '+str(numbers[2]) + ' '+str(numbers[3])+' '+str(numbers[4]) + ' '+str(numbers[5])
        numbers.pop(-1)
        numbersOfPatients.pop(-1)
        Patients.pop(-1)            
        return render_template("statistics.html",Type="Dashboard",Data1=numbers,number1=len(numbers)-1,Depart1=DepartmentsofDoctors,Data2=numbersOfPatients,number2=len(numbersOfPatients)-1,Doct=Doctors,Data3=Patients,number3=len(Patients)-1,Depart2=DepartmentsOfPatients)
        
    else:
        return redirect("/error")  #"you are not allowed"

#route to insert the Departments by the Admin
@ProfilePage.route("/AdminProfile/Departments/Insert",methods=["POST","GET"])
def AdminSettingsDepartments():
    if session["Group_id"]=="A":
        info = cursor.execute('''select ID from Employee ;''').fetchall()
        return render_template("AdminSettings.html",SSNList=info[0],Type="Departments",selector="Insert")
    else:
        return redirect("/error")  #"you are not allowed"
#route to insert the employees by the Admin
@ProfilePage.route("/AdminProfile/Employees/Insert",methods=["POST","GET"])
def AdminSettingsEmployees():
    if session["Group_id"]=="A":
        Departments=cursor.execute('''select ID from Department ;''').fetchall()
        return render_template("AdminSettings.html",SSNList=session,DEList=Departments[0],Type="Employees",selector="Insert")
    else:
        return redirect("/error")  #"you are not allowed"
#########################DONE#########################################################

@ProfilePage.route("/AdminProfile/Rooms/Insert",methods=["POST","GET"])
def AdminSettingsRooms():
    if session["Group_id"]=="A":
        Departments=cursor.execute('''select ID from Department ;''').fetchall()
        return render_template("AdminSettings.html",SSNList=session,DEList=Departments[0],Type="Rooms",selector="Insert")
    else:
        return redirect("/error")  #"you are not allowed"
#########################DONE#########################################################
#rout to check the data form the Admin
@ProfilePage.route("/AdminProfile/checkdata/Department/Insert",methods=["POST"])
def AdmincheckoutDataforInsertDepartment():
    if request.method=="POST":
        #the data of the department
        Departmentname=request.form.get("Departmentname")
        Startdate=request.form.get("StartDate")
        Departmentmanager=request.form.get("Manager")
        #Bolbol check the data and insert it in the database
        
        Employee_joinDate = getJoinDateOfEmployee(cursor,Departmentmanager)
        Startdate1=datetime.strptime(str(Startdate),'%Y-%m-%d')
        if(not(datetime.strptime(Employee_joinDate[0][0],'%d-%m-%Y')<Startdate1)):
            return redirect("/error")  #"this Employee joined the hospital after this date " 
        DepartmentNames=getDepartmentnames(cursor)
        for i in range(len(DepartmentNames)):
            if Departmentname in DepartmentNames[i]: 
                return redirect("/error")  #"there is department has the same name"
        Columns2 = [Deparment.All.value]
        info= [ Departmentname,Departmentmanager,str(Startdate1)]
        insert_general(cursor,'Department',Department_attributes,Columns2,info)
        connection.commit()
        return redirect("/AdminProfile/Department")
    else:
        return redirect("/error")
    
############################################################################################################################
@ProfilePage.route("/AdminProfile/checkdata/Employee/Insert",methods=["POST"])
def AdmincheckoutDataforInsertEmployee():
    if request.method=="POST" :
        # the data of the employee
        Fname=request.form.get("Fname")
        Lname=request.form.get("Lname")
        Email=request.form.get("Email")
        Password=request.form.get("Password")
        hashed_password = bcrypt.hashpw(Password.encode('utf-8'), bcrypt.gensalt())
        Password = hashed_password.decode('utf-8')
        Age=request.form.get("Age")
        PhonNumber=request.form.get("PhonNumber")
        Addresscountry=request.form.get("Addresscountry")
        Addressstreet=request.form.get("Addressstreet")
        Addresscity=request.form.get("Addresscity")
        Department_ID=request.form.get("Department")
        joinDate=request.form.get("joinDate") #there is problem in it 
        GroupID=request.form.get("GroupID")
        Gender=request.form.get("Gender")
        PhoneCountry="+"+str(codes[recode(Addresscountry)]) 
        phone = phonenumbers.parse(PhoneCountry+PhonNumber)
        if not(has_numbers(Fname)) and not(has_numbers(Lname))and phonenumbers.is_valid_number(phone)and(Age.isdecimal())and(int(Age)>0):
            new_info=[Fname,Lname,Age,PhoneCountry,PhonNumber,Addresscountry,Addresscity,Addressstreet,Gender,Email,Password,"None",str(joinDate),Department_ID,GroupID]
        else :
            return redirect("/error")  #'wrong data'           
        insert_general(cursor,'Employee',Employee_attributes,[Employee.All.value],new_info)
        connection.commit()
        return redirect("/AdminProfile/Employee")
    else:
        return redirect("/error")
########################################################################################################
@ProfilePage.route("/AdminProfile/checkdata/Room/Insert",methods=["POST"])
def AdmincheckoutDataforInsertRoom():
    if request.method=="POST" :
        # the data of the employee
        state=request.form.get("state")
        lastdate=request.form.get("laststay")
        Department=request.form.get("Departmentid")
        if state != "" and lastdate !="" and Department!="" :
            new_info=[lastdate,state,Department]
            print("mahoud")
            print(new_info)
        else :
            return redirect("/error")  #'wrong data'           
        insert_general(cursor,'Room',Room_attributes,[Room.All.value],new_info)
        connection.commit()
        return redirect("/AdminProfile/Rooms")
    else:
        return redirect("/error")
########################################################################################################
@ProfilePage.route("/AdminProfile/checkdata/Edit/Department/<int:ID>",methods=["POST"])
def AdmincheckoutDataforEditDepartment(ID):
    if request.method== "POST" :
        #the data of the department
        Departmentname=request.form.get("Departmentname")
        Startdate=request.form.get("StartDate")
        Departmentmanager=request.form.get("Manager")
        department_Data = selectFromTable(cursor,'Department',Department_attributes,[Deparment.All.value] ,[(Deparment.Department_ID.value,ID)] )
        if Startdate=="":
            Startdate=department_Data[0][3]
        elif Departmentname=="":
            Departmentname=department_Data[0][1]
        Employee_joinDate =getJoinDateOfEmployee(cursor,Departmentmanager)
        DepartmentNames=getDepartmentnames(cursor,department_Data[0][1])
        for i in range(len(DepartmentNames)):
            if Departmentname in DepartmentNames[i]: 
                return redirect("/error")
        Columns2 = [Deparment.All.value]
        info= [ '"'+Departmentname+'"',Departmentmanager,'"'+str(Startdate)+'"']
        Update(cursor,'Department',[Deparment.Department_ID.value],[ID],[Deparment.Department_Name.value,Deparment.Manager_id.value,+Deparment.Start_Date.value],info)
        connection.commit()
        return redirect("/AdminProfile/Department")
    else:
        return redirect("/error")
#################################################################################################################################################################

@ProfilePage.route("/AdminProfile/checkdata/Edit/Employee/<int:ID>",methods=["POST"])
def AdmincheckoutDataforEditEmployee(ID):
    if request.method== "POST" :
        # the data of the employee
        Employee_Data = selectFromTable(cursor,'Employee',Employee_attributes,[Employee.All.value] ,[(Employee.Employee_ID.value,ID)] )
        Fname=request.form.get("Fname")
        Lname=request.form.get("Lname")
        Email=request.form.get("Email")
        Password=request.form.get("Password")
        #Manager=request.form.get("Manager")----> what is this
        Age=request.form.get("Age")
        PhonNumber=request.form.get("PhonNumber")
        Addresscountry=request.form.get("Addresscountry")
        Addressstreet=request.form.get("Addressstreet")
        Addresscity=request.form.get("Addresscity")
        Department_ID=request.form.get("Department")
        joinDate=request.form.get("joinDate") #there is problem in it 
        if joinDate=="":
            joinDate=Employee_Data[0][12]
        #Startdate2=datetime.strptime(str(joinDate),'%Y-%m-%d')
        GroupID=request.form.get("GroupID")
        Gender=request.form.get("Gender")
        PhoneCountry="+"+str(codes[recode(Addresscountry)]) 
        phone = phonenumbers.parse(PhoneCountry+PhonNumber)
        if not(has_numbers(Fname)) and not(has_numbers(Lname))and phonenumbers.is_valid_number(phone)and(Age.isdecimal())and(int(Age)>0):
            new_info=[Fname,Lname,Age,PhoneCountry,PhonNumber,Addresscountry,Addresscity,Addressstreet,Gender,Email,Password,str(joinDate),Department_ID,GroupID]
        else :
            return redirect("/error")  #'wrong data'           
        #Bolbol check the data and insert it in the database
        new_info2 = ['"'+Fname+'"','"'+Lname+'"',Age,PhoneCountry,PhonNumber,'"'+Addresscountry+'"','"'+Addresscity+'"','"'+Addressstreet+'"','"'+Gender+'"','"'+Email+'"','"'+Password+'"','"'+str(joinDate)+'"',Department_ID,'"'+GroupID+'"']
        Update(cursor,'Employee',[Employee.Employee_ID.value],[ID],[Employee.FNAME.value,Employee.lNAME.value,Employee.Age.value,Employee.Phonecountry.value,Employee.PhoneNumber.value,Employee.Addresscountry.value,Employee.Addresscity.value,Employee.Addressstreet.value,Employee.GENDER.value,Employee.Email.value,Employee.Password.value,Employee.JoinDate.value,Employee.D_id.value,Employee.Group_id.value],new_info2)
        connection.commit()
        return redirect("/AdminProfile/Employee")
    else:
        return redirect("/error") 
##################DONE#############################
# route to delete the Departments by using the id
@ProfilePage.route('/DeleteDepartment/<int:id>')
def deleteDepartment(id):
    # query to delete
    Delete(cursor,'Department',[Deparment.Department_ID.value],[id])
    connection.commit()
    return redirect("/AdminProfile/Department")
##########################################################
##################DONE#############################
# route to delete the rooms by using the id
@ProfilePage.route('/DeleteRoom/<int:id>')
def deleteRoom(id):
    # query to delete
    Delete(cursor,'Room',[Room.Room_ID.value],[id])
    connection.commit()
    return redirect("/AdminProfile/Rooms")
##########################################################

##################DONE#############################
# route to delete the Employees by using the id
@ProfilePage.route('/DeleteEmployee/<int:id>')
def deleteEmployee(id):
    # query to delete
    Delete(cursor,'Employee',[Employee.Employee_ID.value],[id])
    connection.commit()
    return redirect("/AdminProfile/Employee")
###########################################################
# route to delete the patients by using the id
##################DONE#####################################
@ProfilePage.route('/DeletePatient/<int:id>')
def deletePatient(id):
    # query to delete
    Delete(cursor,'Patient',[Patient.Patient_ID.value],[id])
    connection.commit()
    return redirect("/AdminProfile/Patient")
######################################################################
#route to edit the data of the Employees
@ProfilePage.route('/EditEmployee/<int:id>')
def EditEmployee(id):
    # query to get the data of the id
    employee_Data = selectFromTable(cursor,'Employee',Employee_attributes,[Employee.All.value] ,[(Employee.Employee_ID.value,id)] )
    DepartmentIDS=selectFromTable(cursor,'Department',Department_attributes,[Deparment.Department_ID.value],[])
    return render_template("EditData.html",Type="Employees",SSNList =session,DEList=DepartmentIDS[0],DataEmp=employee_Data)
    #bolbol get the data and check it
#route to edit the data of the Departments
@ProfilePage.route('/EditDepartment/<int:id>')
def EditDepartment(id):
    # query to retrive the data of the id
    department_Data = selectFromTable(cursor,'Department',Department_attributes,[Deparment.All.value] ,[(Deparment.Department_ID.value,id)] )
    manager_Data = selectFromTable(cursor,'Employee',Employee_attributes,[Employee.Employee_ID.value],[])
    return render_template("EditData.html",Type="Departments",SSNList=manager_Data[0],DataDP=department_Data)
########################################################################################################################
@ProfilePage.route('/EditRoom/<int:id>')
def EditRoom(id):
    # query to retrive the data of the id
    department_Data = selectFromTable(cursor,'Department',Department_attributes,[Deparment.All.value] ,[(Deparment.Department_ID.value,id)] )
    manager_Data = selectFromTable(cursor,'Employee',Employee_attributes,[Employee.Employee_ID.value],[])
    return render_template("EditData.html",Type="Departments",SSNList=manager_Data[0],DataDP=department_Data)
    #bolbol get the data and check it
#######################################################################################################################
@ProfilePage.route('/employee/<int:employee_id>/patients',methods=["GET"])
def showAllPatient(employee_id):
    patients = [patient[1] for patient in select_patients_reservation_doctor(cursor, session['ID'])]
    return render_template("Patients.html", patients=patients)
#######################################################################################################################
@ProfilePage.route('/patients/<int:patient_id>', methods=["GET"])
def Show_my_patients(patient_id):
    patient = selectFromTable(cursor, "Patient", Patient_attributes, [Patient.All.value],[(Patient.Patient_ID.value,patient_id)])[0]
    # print("#####################################################################")
    # print("Ahmed Alaa is debugging here! Watch Out!!!")
    # print(session)
    # print("#####################################################################")
    Data={}
    result3= selectFromTable(cursor,"PatientStatus",PatientStatus_attributes,[PatientStatus.All.value],[(PatientStatus.Patient_ID.value,patient_id)])
    result2=SelecT_ALL_Prescription_Patient_sorted_by_date(cursor,patient_id)
    print(result2)
    if len(result3)!=0:
        Data["disease1"]=result3[0][1]
        Data["disease2"]=result3[0][2]
        Data["disease3"]=result3[0][3]
        Data["disease4"]=result3[0][4]
        Data["disease5"]=result3[0][5]
        
    if len(result2)!=0:
        Data["DoctorName"]=result2[0][0]
        Data["DATE"]=result2[0][1]
        Data["Treatment"]=result2[0][2]
    data = {
        "ID": patient[0],
        "Fname": patient[1],
        "Lname": patient[2],
        "Age": patient[3],
        "PhoneNumber": patient[5],
        "Addresscountry": patient[6],
        "Addresscity": patient[7],
        "Addressstreet": patient[8],
        "Gender": patient[9],
        "Email": patient[10]
    }
    print(result3,result2)
    return render_template("Profile.html", data1=data,data=Data,Doctor=1)
    

@ProfilePage.route("/insertprescripation/<int:id>",methods=["POST"])
def insertprescripation(id):
    illness = request.form.get("illness")
    treatment = request.form.get("treatment")

    reservation = select_reservation(cursor,session["ID"], id)
    is_inserted = insert_general(cursor, "Prescription", Prescription_attributes, [Prescription.All.value], [get_time_now_as_text(), illness, treatment, reservation[0]])
    connection.commit()
    if (is_inserted):
        redirect("/patients/"+str(id))
    else:
        return render_template("error.html")#"Error 404"

#route to accept the donation
@ProfilePage.route('/acceptDonation/<int:id>')
def AcceptDonation(id):
    # query to update the donation
    Update(cursor,'Donation',[Donation.Donation_ID.value],[id],[Donation.state.value],['"D"'])
    connection.commit()
    return redirect("/AdminProfile/Donation")

#route to reject the donation
@ProfilePage.route('/rejectDonation/<int:id>')
def RejectDonation(id):
    # query to update the donation
    Update(cursor,'Donation',[Donation.Donation_ID.value],[id],[Donation.state.value],['"C"'])
    connection.commit()
    return redirect("/AdminProfile/Donation")

@ProfilePage.route("/doctors/<int:doctor_id>", methods=["GET"])
def Show_doctor(doctor_id):
    if request.method=="GET":
        doctor = selectFromTable(cursor, "Employee", Employee_attributes, [Employee.All.value], [(Employee.Employee_ID.value,doctor_id)])[0]
        Data = {
            "Fname": doctor[1],
            "Lname": doctor[2],
            "Age": doctor[3],
            "PhoneNumber": doctor[5],
            "Addresscountry": doctor[6],
            "Addresscity": doctor[7],
            "Addressstreet": doctor[8],
            "Gender": doctor[9],
            "Email": doctor[10],
            "Group_id":doctor[14]
        }
        return render_template("Profile.html",edit=0, data1=Data,Session_id=session["ID"])
    else:
        return redirect("/error")
###################################################################################################

@ProfilePage.route("/error",methods=["GET","POST"])
def error():
    return render_template("error.html")
###################################################################################################

@ProfilePage.route("/takephoto",methods=["POST"])
def setPhoto():
    photo=request.files["image"]
    if photo.mimetype[6:] in AllowedExtaions :
        # print(photo)
        secure_filename(photo.filename)
        # print(photo.mimetype)
        if "Group_id" not in session:
            photo.filename="patient"+str(session["ID"])+photo.filename
            # add filename to patient of ID
            Update(cursor,"Patient", [Patient.Patient_ID.value] ,[session["ID"]],[Patient.image.value] ,['"'+photo.filename+'"']   )
            connection.commit()
        else:
            photo.filename="Employee"+str(session["ID"])+photo.filename
            Update(cursor,"Employee",[Employee.Employee_ID.value] ,[session["ID"]],[Employee.image.value] ,['"'+photo.filename+'"'] )
            connection.commit()
            #Update(cursor,TableName,SelectingAttributes,SelectingAttributesValues,UpdatedAttributes,UpdatedAttributesValues)
        # print (os.path.join(UPLOAD_FOLDER,photo.filename))
        photo.save(os.path.join(UPLOAD_FOLDER,photo.filename))
        return redirect("/profile/mainprofile")
    else:
        return redirect("/error")#"error in Extaion"