interface/cmsportal/upload_form.php

   1 <?php
   2 /**
   3  * Handles file uploads from the WordPress Patient Portal.
   4  *
   5  * Copyright (C) 2014 Rod Roark <rod@sunsetsystems.com>
   6  *
   7  * LICENSE: This program is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU General Public License
   9  * as published by the Free Software Foundation; either version 2
  10  * of the License, or (at your option) any later version.
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  14  * GNU General Public License for more details.
  15  * You should have received a copy of the GNU General Public License
  16  * along with this program. If not, see <http://opensource.org/licenses/gpl-license.php>;.
  17  *
  18  * @package OpenEMR
  19  * @author  Rod Roark <rod@sunsetsystems.com>
  20  */
  21
  22
  23
  24
  25 require_once("../globals.php");
  26 require_once("portal.inc.php");
  27
  28 // This function builds an array of document categories recursively.
  29 // Borrowed from interface/fax/fax_dispatch.php.
  30 //
  31 function getKittens($catid, $catstring, &$categories)
  32 {
  33     $cres = sqlStatement("SELECT id, name FROM categories " .
  34     "WHERE parent = ? ORDER BY name", array($catid));
  35     $childcount = 0;
  36     while ($crow = sqlFetchArray($cres)) {
  37         ++$childcount;
  38         getKittens($crow['id'], ($catstring ? "$catstring / " : "") .
  39         ($catid ? $crow['name'] : ''), $categories);
  40     }
  41
  42   // If no kitties, then this is a leaf node and should be listed.
  43     if (!$childcount) {
  44         $categories[$catid] = $catstring;
  45     }
  46 }
  47
  48 $postid    = empty($_REQUEST['postid'   ]) ? 0 : intval($_REQUEST['postid'   ]);
  49 $messageid = empty($_REQUEST['messageid']) ? 0 : intval($_REQUEST['messageid']);
  50
  51 if ($_POST['bn_save']) {
  52     $ptid = intval($_POST['ptid']);
  53     echo "<html><body>\n";
  54     if (is_array($_POST['form_filename'])) {
  55         foreach ($_POST['form_filename'] as $uploadid => $filename) {
  56             $catid = $_POST['form_category'][$uploadid];
  57             if (!$catid) {
  58                 continue;
  59             }
  60
  61             echo xlt('Fetching following file from portal') . ": " . $filename . " ...<br />\n";
  62             flush();
  63             if ($messageid) {
  64                 $result = cms_portal_call(array('action' => 'getmsgup', 'uploadid' => $uploadid));
  65             } else {
  66                 $result = cms_portal_call(array('action' => 'getupload', 'uploadid' => $uploadid));
  67             }
  68
  69             if ($result['errmsg']) {
  70                 die(text($result['errmsg']));
  71             }
  72
  73             $d = new Document();
  74             // With JSON-over-HTTP we would need to base64_decode the contents.
  75             $rc = $d->createDocument(
  76                 $ptid,
  77                 $catid,
  78                 $filename,
  79                 $result['mimetype'],
  80                 $result['contents']
  81             );
  82             if ($rc) {
  83                 die(text(xl('Error saving document') . ": $rc"));
  84             }
  85         }
  86     }
  87
  88   // Finally, delete the request or message from the portal.
  89     if ($messageid) {
  90         $result = cms_portal_call(array('action' => 'delmessage', 'messageid' => $messageid));
  91     } else {
  92         $result = cms_portal_call(array('action' => 'delpost', 'postid' => $postid));
  93     }
  94
  95     if ($result['errmsg']) {
  96         die(text($result['errmsg']));
  97     }
  98
  99     echo "<script language='JavaScript'>\n";
 100     echo "if (top.restoreSession) top.restoreSession(); else opener.top.restoreSession();\n";
 101     echo "document.location.href = 'list_requests.php';\n";
 102     echo "</script></body></html>\n";
 103     exit();
 104 }
 105
 106 // Get the document categories list.
 107 $categories = array();
 108 getKittens(0, '', $categories);
 109
 110 // Get the portal request data.
 111 if (!$postid && !$messageid) {
 112     die(xlt('Request ID is missing!'));
 113 }
 114
 115 if ($messageid) {
 116     $result = cms_portal_call(array('action' => 'getmessage', 'messageid' => $messageid));
 117 } else {
 118     $result = cms_portal_call(array('action' => 'getpost', 'postid' => $postid));
 119 }
 120
 121 if ($result['errmsg']) {
 122     die(text($result['errmsg']));
 123 }
 124
 125 // Look up the patient in OpenEMR.
 126 $userlogin = $messageid ? $result['message']['user'] : $result['post']['user'];
 127 $ptid = lookup_openemr_patient($userlogin);
 128 ?>
 129 <html>
 130 <head>
 131 <?php html_header_show(); ?>
 132 <link rel=stylesheet href="<?php echo $css_header; ?>" type="text/css">
 133
 134 <style type="text/css">@import url(../../library/dynarch_calendar.css);</style>
 135 <style>
 136
 137 tr.head   { font-size:10pt; background-color:#cccccc; text-align:center; }
 138 tr.detail { font-size:10pt; background-color:#ddddff; }
 139 td input  { background-color:transparent; }
 140
 141 </style>
 142
 143 <script type="text/javascript" src="../../library/textformat.js"></script>
 144 <script type="text/javascript" src="<?php echo $GLOBALS['assets_static_relative']; ?>/jquery-min-1-2-2/index.js"></script>
 145
 146 <script language="JavaScript">
 147
 148 var mypcc = '<?php echo $GLOBALS['phone_country_code'] ?>';
 149
 150 function myRestoreSession() {
 151  if (top.restoreSession) top.restoreSession(); else opener.top.restoreSession();
 152  return true;
 153 }
 154
 155 </script>
 156 </head>
 157
 158 <body class="body_top">
 159 <center>
 160
 161 <form method='post' action='upload_form.php'>
 162
 163 <?php
 164 if ($messageid) {
 165     echo "<p class='text'><b>" . xlt('Message Title') . ":</b> ";
 166     echo htmlspecialchars($result['message']['title']);
 167     echo "</p>\n";
 168     echo "<textarea style='width:90%;height:144pt;' readonly>";
 169     echo htmlspecialchars($result['message']['contents']);
 170     echo "</textarea>\n";
 171     echo "<p class='text'><i>";
 172     echo xlt('This message text is not saved automatically. Copy and save it as appropriate for the content.');
 173     echo "</i></p>\n";
 174 }
 175 ?>
 176
 177 <input type='hidden' name='ptid'      value='<?php echo attr($ptid);      ?>' />
 178 <input type='hidden' name='postid'    value='<?php echo attr($postid);    ?>' />
 179 <input type='hidden' name='messageid' value='<?php echo attr($messageid); ?>' />
 180
 181 <table width='100%' cellpadding='1' cellspacing='2'>
 182  <tr class='head'>
 183   <th align='left'><?php echo xlt('MIME Type'); ?></th>
 184   <th align='left'><?php echo xlt('Desired Filename'); ?></th>
 185   <th align='left'><?php echo xlt('Document Category or Discard'); ?></th>
 186  </tr>
 187 <?php
 188 if (is_array($result['uploads'])) {
 189     foreach ($result['uploads'] as $upload) {
 190         $id = intval($upload['id']);
 191         echo " <tr class='detail'>\n";
 192         // MIME type and view link
 193         echo "  <td><a href='upload_form_show.php?id=$id&messageid=$messageid'>" .
 194         text($upload['mimetype']) . "</a></td>\n";
 195         // Desired file name
 196         echo "  <td><input type='text' name='form_filename[$id]' value='" .
 197         attr($upload['filename']) . "' size='20' /></td>";
 198         // Desired document category with option to discard the file
 199         echo "  <td><select name='form_category[$id]'>\n";
 200         echo "<option value='0'>-- " . xlt('Discard') . " --</option>\n";
 201         $i = 0;
 202         foreach ($categories as $catkey => $catname) {
 203             echo "<option value='" . attr($catkey) . "'";
 204             if (++$i == 1) {
 205                 echo " selected";
 206             }
 207
 208             echo ">" . text($catname) . "</option>\n";
 209         }
 210
 211         echo "</select></td>\n";
 212         //
 213         echo " </tr>\n";
 214     }
 215 }
 216 ?>
 217 </table>
 218
 219 <p>
 220 <input type='submit' name='bn_save' value='<?php echo xla('Submit and Delete Request'); ?>' />
 221 &nbsp;
 222 <input type='button' value='<?php echo xla('Back'); ?>'
 223  onclick="myRestoreSession();location='list_requests.php'" />
 224 </p>
 225
 226 </form>
 227 </center>
 228 </body>
 229 </html>
 230