interface/patient_file/transaction/transaction_title.php

   1 <?php
   2
   3 //SANITIZE ALL ESCAPES
   4 $sanitize_all_escapes=true;
   5 //
   6
   7 //STOP FAKE REGISTER GLOBALS
   8 $fake_register_globals=false;
   9 //
  10
  11 include_once("../../globals.php");
  12 include_once("$srcdir/patient.inc");
  13 require_once("$srcdir/classes/Pharmacy.class.php");
  14 ?>
  15
  16 <html>
  17 <head>
  18 <?php html_header_show();?>
  19
  20 <link rel="stylesheet" href="<?php echo $css_header;?>" type="text/css">
  21
  22 </head>
  23 <body class="body_title">
  24
  25 <?php
  26  $result = getPatientData($pid, "fname,lname,pid,pubpid,phone_home,pharmacy_id,DOB,DATE_FORMAT(DOB,'%Y%m%d') as DOB_YMD");
  27  $provider_results = sqlQuery("select * from users where username=?", array($_SESSION{"authUser"}) );
  28  $age = getPatientAge($result["DOB_YMD"]);
  29
  30  $info = 'ID: ' . $result['pubpid'];
  31  if ($result['DOB']) $info .= ', ' . xl('DOB') . ': ' . $result['DOB'] . ', ' . xl('Age') . ': ' . $age;
  32  if ($result['phone_home']) $info .= ', ' . xl('Home') . ': ' . $result['phone_home'];
  33
  34  if ($result['pharmacy_id']) {
  35   $pharmacy = new Pharmacy($result['pharmacy_id']);
  36   if ($pharmacy->get_phone()) $info .= ', ' . xl('Pharm') . ': ' . $pharmacy->get_phone();
  37  }
  38
  39  //escape variables for output (to prevent xss attacks)
  40  $patient_esc = htmlspecialchars( $result{"fname"} . " " . $result{"lname"}, ENT_NOQUOTES);
  41  $info_esc = htmlspecialchars( $info, ENT_NOQUOTES);
  42  $provider_esc = htmlspecialchars( $provider_results{"fname"}.' '.$provider_results{"lname"}, ENT_NOQUOTES);
  43 ?>
  44
  45 <table border="0" cellpadding="0" cellspacing="0" width="100%" height="100%">
  46  <tr>
  47   <td style="width:45%; vertical-align:middle; white-space: nowrap">
  48    <span class="title_bar_top"><?php echo $patient_esc; ?></span>
  49    <span style="font-size:0.7em;">(<?php echo $info_esc; ?>)</span>
  50   </td>
  51   <td style="width:35%; vertical-align:middle; white-space: nowrap; text-align:center">
  52    <span class="title_bar_top"><?php htmlspecialchars( xl('Logged in as','e'), ENT_NOQUOTES); ?>: <?php echo $provider_esc; ?></span>
  53   </td>
  54   <td style="width:20%; vertical-align:middle; white-space: nowrap; text-align:right">
  55    &nbsp;
  56   </td>
  57  </tr>
  58 </table>
  59
  60 </body>
  61 </html>