interface/forms/CAMOS/save.php

   1 <?php
   2 //------------This file inserts your field data into the MySQL database
   3 include_once("../../globals.php");
   4 include_once("../../../library/api.inc");
   5 include_once("../../../library/forms.inc");
   6 include_once("../../../library/sql.inc");
   7 include_once("content_parser.php");
   8
   9 $field_names = array('category' => $_POST['category'], 'subcategory' => $_POST['subcategory'], 'item' => $_POST['item'], 'content' => $_POST['content']);
  10
  11 //to add codes to billing from CAMOS content field
  12 //addBilling($encounter, $type, $code, $text, $pid, $userauthorized,$_SESSION['authUserID'],$modifier,$units,$fee);
  13
  14
  15 foreach ($field_names as $k => $var) {
  16 $field_names[$k] = mysql_real_escape_string($var);
  17 echo "$var\n";
  18 }
  19
  20 process_commands($field_names['content'], $embedded_camos);
  21
  22 $CAMOS_form_name = "CAMOS-".$field_names['category'].'-'.$field_names['subcategory'].'-'.$field_names['item'];
  23
  24 if ($encounter == "")
  25 $encounter = date("Ymd");
  26 if ($_GET["mode"] == "new"){
  27   if (preg_match("/^[\s\\r\\n\\\\r\\\\n]*$/",$field_names['content']) == 0) { //make sure blanks do not get submitted
  28     $newid = formSubmit("form_CAMOS", $field_names, $_GET["id"], $userauthorized);
  29     addForm($encounter, $CAMOS_form_name, $newid, "CAMOS", $pid, $userauthorized);
  30   }
  31   //deal with embedded camos submissions here
  32   foreach($embedded_camos as $val) {
  33     if (preg_match("/^[\s\\r\\n\\\\r\\\\n]*$/",$val['content']) == 0) { //make sure blanks not submitted
  34       foreach($val as $k => $v) {
  35         $val[$k] = trim($v);
  36       }
  37       $CAMOS_form_name = "CAMOS-".$val['category'].'-'.$val['subcategory'].'-'.$val['item'];
  38       $newid = formSubmit("form_CAMOS", $val, $_GET["id"], $userauthorized);
  39       addForm($encounter, $CAMOS_form_name, $newid, "CAMOS", $pid, $userauthorized);
  40     }
  41   }
  42 }
  43 elseif ($_GET["mode"] == "update") {
  44   sqlInsert("update form_CAMOS set pid = {$_SESSION["pid"]},groupname='".$_SESSION["authProvider"]."',user='".$_SESSION["authUser"]."',authorized=$userauthorized,activity=1, date = NOW(), category='".$field_names["category"]."',subcategory='".$field_names["subcategory"]."',item='".$field_names["item"]."',content='".$field_names['content']."' where id=$id");
  45 }
  46 elseif ($_GET["mode"] == "delete") {
  47   sqlInsert("delete from form_CAMOS where id=$id and DATE_FORMAT(date,'%Y-%m-%d') like current_date()");
  48   sqlInsert("delete from forms where form_name like 'CAMOS%' and form_id=$id and pid='".$_SESSION["pid"]."' and DATE_FORMAT(date,'%Y-%m-%d') like current_date()");
  49 }
  50 $_SESSION["encounter"] = $encounter;
  51 formHeader("Redirecting....");
  52 formJump();
  53 formFooter();
  54 ?>