Access Control enhancements:
[openemr.git] / interface / forms / physical_exam / edit_diagnoses.php
blobe0d5c9bd85ec6f0e5ea653d2a4d7ecd68e153ff8
1 <?php
2 // Copyright (C) 2006 Rod Roark <rod@sunsetsystems.com>
3 //
4 // This program is free software; you can redistribute it and/or
5 // modify it under the terms of the GNU General Public License
6 // as published by the Free Software Foundation; either version 2
7 // of the License, or (at your option) any later version.
9 include_once("../../globals.php");
10 include_once("$srcdir/acl.inc");
12 $line_id = $_REQUEST['lineid'];
13 $info_msg = "";
15 if ($issue && !acl_check('patients', 'med','','write')) die("Edit is not authorized!");
17 <html>
18 <head>
19 <?php html_header_show();?>
20 <title><?php xl('Edit Diagnoses for','e');?><?php echo $line_id ?></title>
21 <link rel="stylesheet" href='<?php echo $css_header ?>' type='text/css'>
23 <script language="JavaScript">
24 </script>
26 </head>
28 <body class="body_top">
29 <?php
30 // If we are saving, then save and close the window.
32 if ($_POST['form_save']) {
33 $query = "DELETE FROM form_physical_exam_diagnoses WHERE line_id = '$line_id'";
34 sqlStatement($query);
36 $form_diagnoses = $_POST['form_diagnosis'];
37 $form_orderings = $_POST['form_ordering'];
38 foreach ($form_diagnoses as $i => $diagnosis) {
39 if ($diagnosis) {
40 $ordering = $form_orderings[$i];
41 $query = "INSERT INTO form_physical_exam_diagnoses ( " .
42 "line_id, ordering, diagnosis " .
43 ") VALUES ( " .
44 "'$line_id', '$ordering', '$diagnosis' " .
45 ")";
46 sqlInsert($query);
50 // Close this window and redisplay the updated encounter form.
52 echo "<script language='JavaScript'>\n";
53 if ($info_msg) echo " alert('$info_msg');\n";
54 echo " window.close();\n";
55 // echo " opener.location.reload();\n";
56 echo " if (opener.refreshme) opener.refreshme();\n";
57 echo "</script></body></html>\n";
58 exit();
61 $dres = sqlStatement(
62 "SELECT * FROM form_physical_exam_diagnoses WHERE " .
63 "line_id = '$line_id' ORDER BY ordering, diagnosis"
66 <form method='post' name='theform' action='edit_diagnoses.php?lineid=<?php echo $line_id ?>'
67 onsubmit='return top.restoreSession()'>
68 <center>
70 <table border='0' width='100%'>
72 <tr>
73 <td width='5%'><?php xl('Order','e'); ?></td>
74 <td width='95%'><?php xl('Diagnosis','e'); ?></td>
75 </tr>
77 <?php for ($i = 1; $drow = sqlFetchArray($dres); ++$i) { ?>
78 <tr>
79 <td><input type='text' size='3' maxlength='5' name='form_ordering[<?php echo $i?>]' value='<?php echo $i?>' /></td>
80 <td><input type='text' size='20' maxlength='250' name='form_diagnosis[<?php echo $i?>]' value='<?php echo $drow['diagnosis'] ?>' style='width:100%' /></td>
81 </tr>
82 <?php } ?>
84 <?php for ($j = 0; $j < 5; ++$j, ++$i) { ?>
85 <tr>
86 <td><input type='text' size='3' name='form_ordering[<?php echo $i?>]' value='<?php echo $i?>' /></td>
87 <td><input type='text' size='20' name='form_diagnosis[<?php echo $i?>]' style='width:100%' /></td>
88 </tr>
89 <?php } ?>
91 </table>
93 <p>
94 <input type='submit' name='form_save' value='<?php xl('Save','e'); ?>' />
96 &nbsp;
97 <input type='button' value='<?php xl('Cancel','e'); ?>' onclick='window.close()' />
98 </p>
100 </center>
101 </form>
102 </body>
103 </html>