fixed patient add medicine in patient.jsp, also removed sql injection from patient.java