library/options.inc.php

   1 <?php
   2 // Copyright (C) 2007-2010 Rod Roark <rod@sunsetsystems.com>
   3 // Copyright © 2010 by Andrew Moore <amoore@cpan.org>
   4 // Copyright © 2010 by "Boyd Stephen Smith Jr." <bss@iguanasuicide.net>
   5 //
   6 // This program is free software; you can redistribute it and/or
   7 // modify it under the terms of the GNU General Public License
   8 // as published by the Free Software Foundation; either version 2
   9 // of the License, or (at your option) any later version.
  10
  11 // Functions for managing the lists and layouts
  12 //
  13 // Note: there are translation wrappers for the lists and layout labels
  14 //   at library/translation.inc.php. The functions are titled
  15 //   xl_list_label() and xl_layout_label() and are controlled by the
  16 //   $GLOBALS['translate_lists'] and $GLOBALS['translate_layout']
  17 //   flags in globals.php
  18
  19 // Documentation for layout_options.edit_options:
  20 //
  21 // C = Capitalize first letter of each word (text fields)
  22 // D = Check for duplicates in New Patient form
  23 // G = Graphable (for numeric fields in forms supporting historical data)
  24 // H = Read-only field copied from static history
  25 // L = Lab Order ("ord_lab") types only (address book)
  26 // N = Show in New Patient form
  27 // O = Procedure Order ("ord_*") types only (address book)
  28 // R = Distributor types only (address book)
  29 // U = Capitalize all letters (text fields)
  30 // V = Vendor types only (address book)
  31 // 1 = Write Once (not editable when not empty) (text fields)
  32
  33 require_once("formdata.inc.php");
  34 require_once("formatting.inc.php");
  35 require_once("user.inc");
  36
  37 $date_init = "";
  38
  39 function get_pharmacies() {
  40   return sqlStatement("SELECT d.id, d.name, a.line1, a.city, " .
  41     "p.area_code, p.prefix, p.number FROM pharmacies AS d " .
  42     "LEFT OUTER JOIN addresses AS a ON a.foreign_id = d.id " .
  43     "LEFT OUTER JOIN phone_numbers AS p ON p.foreign_id = d.id " .
  44     "AND p.type = 2 " .
  45     "ORDER BY name, area_code, prefix, number");
  46 }
  47
  48 // Function to generate a drop-list.
  49 //
  50 function generate_select_list($tag_name, $list_id, $currvalue, $title,
  51   $empty_name=' ', $class='', $onchange='', $tag_id = '', $custom_attributes = null )
  52 {
  53   $s = '';
  54   $tag_name_esc = htmlspecialchars( $tag_name, ENT_QUOTES);
  55   $s .= "<select name='$tag_name_esc'";
  56   $tag_id_esc = $tag_name_esc;
  57   if ( $tag_id != '' ) {
  58       $tag_id_esc = htmlspecialchars( $tag_id, ENT_QUOTES);
  59   }
  60   $s .=  " id='$tag_id_esc'";
  61   if ($class) $s .= " class='$class'";
  62   if ($onchange) $s .= " onchange='$onchange'";
  63   if ( $custom_attributes != null && is_array($custom_attributes) ) {
  64       foreach ( $custom_attributes as $attr => $val ) {
  65           if ( isset($custom_attributes[$attr] ) ) {
  66               $s .= " ".htmlspecialchars( $attr, ENT_QUOTES)."='".htmlspecialchars( $val, ENT_QUOTES)."'";
  67           }
  68       }
  69   }
  70   $selectTitle = htmlspecialchars( $title, ENT_QUOTES);
  71   $s .= " title='$selectTitle'>";
  72   $selectEmptyName = htmlspecialchars( xl($empty_name), ENT_NOQUOTES);
  73   if ($empty_name) $s .= "<option value=''>" . $selectEmptyName . "</option>";
  74   $lres = sqlStatement("SELECT * FROM list_options " .
  75     "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
  76   $got_selected = FALSE;
  77   while ($lrow = sqlFetchArray($lres)) {
  78     $optionValue = htmlspecialchars( $lrow['option_id'], ENT_QUOTES);
  79     $s .= "<option value='$optionValue'";
  80     if ((strlen($currvalue) == 0 && $lrow['is_default']) ||
  81         (strlen($currvalue)  > 0 && $lrow['option_id'] == $currvalue))
  82     {
  83       $s .= " selected";
  84       $got_selected = TRUE;
  85     }
  86     $optionLabel = htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES);
  87     $s .= ">$optionLabel</option>\n";
  88   }
  89   if (!$got_selected && strlen($currvalue) > 0) {
  90     $currescaped = htmlspecialchars($currvalue, ENT_QUOTES);
  91     $s .= "<option value='$currescaped' selected>* $currescaped *</option>";
  92     $s .= "</select>";
  93     $fontTitle = htmlspecialchars( xl('Please choose a valid selection from the list.'), ENT_QUOTES);
  94     $fontText = htmlspecialchars( xl('Fix this'), ENT_NOQUOTES);
  95     $s .= " <font color='red' title='$fontTitle'>$fontText!</font>";
  96   }
  97   else {
  98     $s .= "</select>";
  99   }
 100   return $s;
 101 }
 102
 103 // $frow is a row from the layout_options table.
 104 // $currvalue is the current value, if any, of the associated item.
 105 //
 106 function generate_form_field($frow, $currvalue) {
 107   global $rootdir, $date_init;
 108
 109   $currescaped = htmlspecialchars($currvalue, ENT_QUOTES);
 110
 111   $data_type   = $frow['data_type'];
 112   $field_id    = $frow['field_id'];
 113   $list_id     = $frow['list_id'];
 114   // escaped variables to use in html
 115   $field_id_esc= htmlspecialchars( $field_id, ENT_QUOTES);
 116   $list_id_esc = htmlspecialchars( $list_id, ENT_QUOTES);
 117
 118   // Added 5-09 by BM - Translate description if applicable
 119   $description = (isset($frow['description']) ? htmlspecialchars(xl_layout_label($frow['description']), ENT_QUOTES) : '');
 120
 121   // added 5-2009 by BM to allow modification of the 'empty' text title field.
 122   //  Can pass $frow['empty_title'] with this variable, otherwise
 123   //  will default to 'Unassigned'.
 124   // modified 6-2009 by BM to allow complete skipping of the 'empty' text title
 125   //  if make $frow['empty_title'] equal to 'SKIP'
 126   $showEmpty = true;
 127   if (isset($frow['empty_title'])) {
 128    if ($frow['empty_title'] == "SKIP") {
 129     //do not display an 'empty' choice
 130     $showEmpty = false;
 131     $empty_title = "Unassigned";
 132    }
 133    else {
 134     $empty_title = $frow['empty_title'];
 135    }
 136   }
 137   else {
 138    $empty_title = "Unassigned";
 139   }
 140
 141   // generic single-selection list
 142   if ($data_type == 1) {
 143     echo generate_select_list("form_$field_id", $list_id, $currvalue,
 144       $description, $showEmpty ? $empty_title : '');
 145   }
 146
 147   // simple text field
 148   else if ($data_type == 2) {
 149     $fldlength = htmlspecialchars( $frow['fld_length'], ENT_QUOTES);
 150     $maxlength = $frow['max_length'];
 151     $string_maxlength = "";
 152     // if max_length is set to zero, then do not set a maxlength
 153     if ($maxlength) $string_maxlength = "maxlength='".attr($maxlength)."'";
 154     echo "<input type='text'" .
 155       " name='form_$field_id_esc'" .
 156       " id='form_$field_id_esc'" .
 157       " size='$fldlength'" .
 158       " $string_maxlength" .
 159       " title='$description'" .
 160       " value='$currescaped'";
 161     if (strpos($frow['edit_options'], 'C') !== FALSE)
 162       echo " onchange='capitalizeMe(this)'";
 163     else if (strpos($frow['edit_options'], 'U') !== FALSE)
 164       echo " onchange='this.value = this.value.toUpperCase()'";
 165     $tmp = htmlspecialchars( $GLOBALS['gbl_mask_patient_id'], ENT_QUOTES);
 166     if ($field_id == 'pubpid' && strlen($tmp) > 0) {
 167       echo " onkeyup='maskkeyup(this,\"$tmp\")'";
 168       echo " onblur='maskblur(this,\"$tmp\")'";
 169     }
 170     if (strpos($frow['edit_options'], '1') !== FALSE && strlen($currescaped) > 0)
 171       echo " readonly";
 172     echo " />";
 173   }
 174
 175   // long or multi-line text field
 176   else if ($data_type == 3) {
 177     $textCols = htmlspecialchars( $frow['fld_length'], ENT_QUOTES);
 178     $textRows = htmlspecialchars( $frow['fld_rows'], ENT_QUOTES);
 179     echo "<textarea" .
 180       " name='form_$field_id_esc'" .
 181       " id='form_$field_id_esc'" .
 182       " title='$description'" .
 183       " cols='$textCols'" .
 184       " rows='$textRows'>" .
 185       $currescaped . "</textarea>";
 186   }
 187
 188   // date
 189   else if ($data_type == 4) {
 190     echo "<input type='text' size='10' name='form_$field_id_esc' id='form_$field_id_esc'" .
 191       " value='$currescaped'" .
 192       " title='$description'" .
 193       " onkeyup='datekeyup(this,mypcc)' onblur='dateblur(this,mypcc)' />" .
 194       "<img src='$rootdir/pic/show_calendar.gif' align='absbottom' width='24' height='22'" .
 195       " id='img_$field_id_esc' border='0' alt='[?]' style='cursor:pointer'" .
 196       " title='" . htmlspecialchars( xl('Click here to choose a date'), ENT_QUOTES) . "' />";
 197     $date_init .= " Calendar.setup({inputField:'form_$field_id', ifFormat:'%Y-%m-%d', button:'img_$field_id'});\n";
 198   }
 199
 200   // provider list, local providers only
 201   else if ($data_type == 10) {
 202     $ures = sqlStatement("SELECT id, fname, lname, specialty FROM users " .
 203       "WHERE active = 1 AND ( info IS NULL OR info NOT LIKE '%Inactive%' ) " .
 204       "AND authorized = 1 " .
 205       "ORDER BY lname, fname");
 206     echo "<select name='form_$field_id_esc' id='form_$field_id_esc' title='$description'>";
 207     echo "<option value=''>" . htmlspecialchars(xl($empty_title), ENT_NOQUOTES) . "</option>";
 208     while ($urow = sqlFetchArray($ures)) {
 209       $uname = htmlspecialchars( $urow['fname'] . ' ' . $urow['lname'], ENT_NOQUOTES);
 210       $optionId = htmlspecialchars( $urow['id'], ENT_QUOTES);
 211       echo "<option value='$optionId'";
 212       if ($urow['id'] == $currvalue) echo " selected";
 213       echo ">$uname</option>";
 214     }
 215     echo "</select>";
 216   }
 217
 218   // provider list, including address book entries with an NPI number
 219   else if ($data_type == 11) {
 220     $ures = sqlStatement("SELECT id, fname, lname, specialty FROM users " .
 221       "WHERE active = 1 AND ( info IS NULL OR info NOT LIKE '%Inactive%' ) " .
 222       "AND ( authorized = 1 OR ( username = '' AND npi != '' ) ) " .
 223       "ORDER BY lname, fname");
 224     echo "<select name='form_$field_id_esc' id='form_$field_id_esc' title='$description'>";
 225     echo "<option value=''>" . htmlspecialchars( xl('Unassigned'), ENT_NOQUOTES) . "</option>";
 226     while ($urow = sqlFetchArray($ures)) {
 227       $uname = htmlspecialchars( $urow['fname'] . ' ' . $urow['lname'], ENT_NOQUOTES);
 228       $optionId = htmlspecialchars( $urow['id'], ENT_QUOTES);
 229       echo "<option value='$optionId'";
 230       if ($urow['id'] == $currvalue) echo " selected";
 231       echo ">$uname</option>";
 232     }
 233     echo "</select>";
 234   }
 235
 236   // pharmacy list
 237   else if ($data_type == 12) {
 238     echo "<select name='form_$field_id_esc' id='form_$field_id_esc' title='$description'>";
 239     echo "<option value='0'></option>";
 240     $pres = get_pharmacies();
 241     while ($prow = sqlFetchArray($pres)) {
 242       $key = $prow['id'];
 243       $optionValue = htmlspecialchars( $key, ENT_QUOTES);
 244       $optionLabel = htmlspecialchars( $prow['name'] . ' ' . $prow['area_code'] . '-' .
 245         $prow['prefix'] . '-' . $prow['number'] . ' / ' .
 246         $prow['line1'] . ' / ' . $prow['city'], ENT_NOQUOTES);
 247       echo "<option value='$optionValue'";
 248       if ($currvalue == $key) echo " selected";
 249       echo ">$optionLabel</option>";
 250     }
 251     echo "</select>";
 252   }
 253
 254   // squads
 255   else if ($data_type == 13) {
 256     echo "<select name='form_$field_id_esc' id='form_$field_id_esc' title='$description'>";
 257     echo "<option value=''>&nbsp;</option>";
 258     $squads = acl_get_squads();
 259     if ($squads) {
 260       foreach ($squads as $key => $value) {
 261         $optionValue = htmlspecialchars( $key, ENT_QUOTES);
 262         $optionLabel = htmlspecialchars( $value[3], ENT_NOQUOTES);
 263         echo "<option value='$optionValue'";
 264         if ($currvalue == $key) echo " selected";
 265         echo ">$optionLabel</option>\n";
 266       }
 267     }
 268     echo "</select>";
 269   }
 270
 271   // Address book, preferring organization name if it exists and is not in
 272   // parentheses, and excluding local users who are not providers.
 273   // Supports "referred to" practitioners and facilities.
 274   // Alternatively the letter L in edit_options means that abook_type
 275   // must be "ord_lab", indicating types used with the procedure
 276   // lab ordering system.
 277   // Alternatively the letter O in edit_options means that abook_type
 278   // must begin with "ord_", indicating types used with the procedure
 279   // ordering system.
 280   // Alternatively the letter V in edit_options means that abook_type
 281   // must be "vendor", indicating the Vendor type.
 282   // Alternatively the letter R in edit_options means that abook_type
 283   // must be "dist", indicating the Distributor type.
 284   else if ($data_type == 14) {
 285     if (strpos($frow['edit_options'], 'L') !== FALSE)
 286       $tmp = "abook_type = 'ord_lab'";
 287     else if (strpos($frow['edit_options'], 'O') !== FALSE)
 288       $tmp = "abook_type LIKE 'ord\\_%'";
 289     else if (strpos($frow['edit_options'], 'V') !== FALSE)
 290       $tmp = "abook_type LIKE 'vendor%'";
 291     else if (strpos($frow['edit_options'], 'R') !== FALSE)
 292       $tmp = "abook_type LIKE 'dist'";
 293     else
 294       $tmp = "( username = '' OR authorized = 1 )";
 295     $ures = sqlStatement("SELECT id, fname, lname, organization, username FROM users " .
 296       "WHERE active = 1 AND ( info IS NULL OR info NOT LIKE '%Inactive%' ) " .
 297       "AND $tmp " .
 298       "ORDER BY organization, lname, fname");
 299     echo "<select name='form_$field_id_esc' id='form_$field_id_esc' title='$description'>";
 300     echo "<option value=''>" . htmlspecialchars( xl('Unassigned'), ENT_NOQUOTES) . "</option>";
 301     while ($urow = sqlFetchArray($ures)) {
 302       $uname = $urow['organization'];
 303       if (empty($uname) || substr($uname, 0, 1) == '(') {
 304         $uname = $urow['lname'];
 305         if ($urow['fname']) $uname .= ", " . $urow['fname'];
 306       }
 307       $optionValue = htmlspecialchars( $urow['id'], ENT_QUOTES);
 308       $optionLabel = htmlspecialchars( $uname, ENT_NOQUOTES);
 309       echo "<option value='$optionValue'";
 310       $title = $urow['username'] ? xl('Local') : xl('External');
 311       $optionTitle = htmlspecialchars( $title, ENT_QUOTES);
 312       echo " title='$optionTitle'";
 313       if ($urow['id'] == $currvalue) echo " selected";
 314       echo ">$optionLabel</option>";
 315     }
 316     echo "</select>";
 317   }
 318
 319   // a billing code
 320   else if ($data_type == 15) {
 321     $fldlength = htmlspecialchars( $frow['fld_length'], ENT_QUOTES);
 322     $maxlength = $frow['max_length'];
 323     $string_maxlength = "";
 324     // if max_length is set to zero, then do not set a maxlength
 325     if ($maxlength) $string_maxlength = "maxlength='".attr($maxlength)."'";
 326     echo "<input type='text'" .
 327       " name='form_$field_id_esc'" .
 328       " id='form_related_code'" .
 329       " size='$fldlength'" .
 330       " $string_maxlength" .
 331       " title='$description'" .
 332       " value='$currescaped'" .
 333       " onclick='sel_related(this)' readonly" .
 334       " />";
 335   }
 336
 337   // a set of labeled checkboxes
 338   else if ($data_type == 21) {
 339     // In this special case, fld_length is the number of columns generated.
 340     $cols = max(1, $frow['fld_length']);
 341     $avalue = explode('|', $currvalue);
 342     $lres = sqlStatement("SELECT * FROM list_options " .
 343       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 344     echo "<table cellpadding='0' cellspacing='0' width='100%'>";
 345     $tdpct = (int) (100 / $cols);
 346     for ($count = 0; $lrow = sqlFetchArray($lres); ++$count) {
 347       $option_id = $lrow['option_id'];
 348       $option_id_esc = htmlspecialchars( $option_id, ENT_QUOTES);
 349       // if ($count) echo "<br />";
 350       if ($count % $cols == 0) {
 351         if ($count) echo "</tr>";
 352         echo "<tr>";
 353       }
 354       echo "<td width='$tdpct%'>";
 355       echo "<input type='checkbox' name='form_{$field_id_esc}[$option_id_esc]' id='form_{$field_id_esc}[$option_id_esc]' value='1'";
 356       if (in_array($option_id, $avalue)) echo " checked";
 357
 358       // Added 5-09 by BM - Translate label if applicable
 359       echo ">" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES);
 360
 361       echo "</td>";
 362     }
 363     if ($count) {
 364       echo "</tr>";
 365       if ($count > $cols) {
 366         // Add some space after multiple rows of checkboxes.
 367         $cols = htmlspecialchars( $cols, ENT_QUOTES);
 368         echo "<tr><td colspan='$cols' style='height:0.7em'></td></tr>";
 369       }
 370     }
 371     echo "</table>";
 372   }
 373
 374   // a set of labeled text input fields
 375   else if ($data_type == 22) {
 376     $tmp = explode('|', $currvalue);
 377     $avalue = array();
 378     foreach ($tmp as $value) {
 379       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
 380         $avalue[$matches[1]] = $matches[2];
 381       }
 382     }
 383     $lres = sqlStatement("SELECT * FROM list_options " .
 384       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 385     echo "<table cellpadding='0' cellspacing='0'>";
 386     while ($lrow = sqlFetchArray($lres)) {
 387       $option_id = $lrow['option_id'];
 388       $option_id_esc = htmlspecialchars( $option_id, ENT_QUOTES);
 389       $maxlength = $frow['max_length'];
 390       $string_maxlength = "";
 391       // if max_length is set to zero, then do not set a maxlength
 392       if ($maxlength) $string_maxlength = "maxlength='".attr($maxlength)."'";
 393       $fldlength = empty($frow['fld_length']) ?  20 : $frow['fld_length'];
 394
 395       // Added 5-09 by BM - Translate label if applicable
 396       echo "<tr><td>" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "&nbsp;</td>";
 397       $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
 398       $optionValue = htmlspecialchars( $avalue[$option_id], ENT_QUOTES);
 399       echo "<td><input type='text'" .
 400         " name='form_{$field_id_esc}[$option_id_esc]'" .
 401         " id='form_{$field_id_esc}[$option_id_esc]'" .
 402         " size='$fldlength'" .
 403         " $string_maxlength" .
 404         " value='$optionValue'";
 405       echo " /></td></tr>";
 406     }
 407     echo "</table>";
 408   }
 409
 410   // a set of exam results; 3 radio buttons and a text field:
 411   else if ($data_type == 23) {
 412     $tmp = explode('|', $currvalue);
 413     $avalue = array();
 414     foreach ($tmp as $value) {
 415       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
 416         $avalue[$matches[1]] = $matches[2];
 417       }
 418     }
 419     $maxlength = $frow['max_length'];
 420     $string_maxlength = "";
 421     // if max_length is set to zero, then do not set a maxlength
 422     if ($maxlength) $string_maxlength = "maxlength='".attr($maxlength)."'";
 423     $fldlength = empty($frow['fld_length']) ?  20 : $frow['fld_length'];
 424     $lres = sqlStatement("SELECT * FROM list_options " .
 425       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 426     echo "<table cellpadding='0' cellspacing='0'>";
 427     echo "<tr><td>&nbsp;</td><td class='bold'>" .
 428       htmlspecialchars( xl('N/A'), ENT_NOQUOTES) .
 429       "&nbsp;</td><td class='bold'>" .
 430       htmlspecialchars( xl('Nor'), ENT_NOQUOTES) . "&nbsp;</td>" .
 431       "<td class='bold'>" .
 432       htmlspecialchars( xl('Abn'), ENT_NOQUOTES) . "&nbsp;</td><td class='bold'>" .
 433       htmlspecialchars( xl('Date/Notes'), ENT_NOQUOTES) . "</td></tr>";
 434     while ($lrow = sqlFetchArray($lres)) {
 435       $option_id = $lrow['option_id'];
 436       $option_id_esc = htmlspecialchars( $option_id, ENT_QUOTES);
 437       $restype = substr($avalue[$option_id], 0, 1);
 438       $resnote = substr($avalue[$option_id], 2);
 439
 440       // Added 5-09 by BM - Translate label if applicable
 441       echo "<tr><td>" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "&nbsp;</td>";
 442
 443       for ($i = 0; $i < 3; ++$i) {
 444         $inputValue = htmlspecialchars( $i, ENT_QUOTES);
 445         echo "<td><input type='radio'" .
 446           " name='radio_{$field_id_esc}[$option_id_esc]'" .
 447           " id='radio_{$field_id_esc}[$option_id_esc]'" .
 448           " value='$inputValue'";
 449         if ($restype === "$i") echo " checked";
 450         echo " /></td>";
 451       }
 452       $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
 453       $resnote = htmlspecialchars( $resnote, ENT_QUOTES);
 454       echo "<td><input type='text'" .
 455         " name='form_{$field_id_esc}[$option_id_esc]'" .
 456         " id='form_{$field_id_esc}[$option_id_esc]'" .
 457         " size='$fldlength'" .
 458         " $string_maxlength" .
 459         " value='$resnote' /></td>";
 460       echo "</tr>";
 461     }
 462     echo "</table>";
 463   }
 464
 465   // the list of active allergies for the current patient
 466   // this is read-only!
 467   else if ($data_type == 24) {
 468     $query = "SELECT title, comments FROM lists WHERE " .
 469       "pid = ? AND type = 'allergy' AND enddate IS NULL " .
 470       "ORDER BY begdate";
 471     // echo "<!-- $query -->\n"; // debugging
 472     $lres = sqlStatement($query, array($GLOBALS['pid']));
 473     $count = 0;
 474     while ($lrow = sqlFetchArray($lres)) {
 475       if ($count++) echo "<br />";
 476       echo htmlspecialchars( $lrow['title'], ENT_NOQUOTES);
 477       if ($lrow['comments']) echo ' (' . htmlspecialchars( $lrow['comments'], ENT_NOQUOTES) . ')';
 478     }
 479   }
 480
 481   // a set of labeled checkboxes, each with a text field:
 482   else if ($data_type == 25) {
 483     $tmp = explode('|', $currvalue);
 484     $avalue = array();
 485     foreach ($tmp as $value) {
 486       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
 487         $avalue[$matches[1]] = $matches[2];
 488       }
 489     }
 490     $maxlength = $frow['max_length'];
 491     $string_maxlength = "";
 492     // if max_length is set to zero, then do not set a maxlength
 493     if ($maxlength) $string_maxlength = "maxlength='".attr($maxlength)."'";
 494     $fldlength = empty($frow['fld_length']) ?  20 : $frow['fld_length'];
 495     $lres = sqlStatement("SELECT * FROM list_options " .
 496       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 497     echo "<table cellpadding='0' cellspacing='0'>";
 498     while ($lrow = sqlFetchArray($lres)) {
 499       $option_id = $lrow['option_id'];
 500       $option_id_esc = htmlspecialchars( $option_id, ENT_QUOTES);
 501       $restype = substr($avalue[$option_id], 0, 1);
 502       $resnote = substr($avalue[$option_id], 2);
 503
 504       // Added 5-09 by BM - Translate label if applicable
 505       echo "<tr><td>" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "&nbsp;</td>";
 506
 507       $option_id = htmlspecialchars( $option_id, ENT_QUOTES);
 508       echo "<td><input type='checkbox' name='check_{$field_id_esc}[$option_id_esc]' id='check_{$field_id_esc}[$option_id_esc]' value='1'";
 509       if ($restype) echo " checked";
 510       echo " />&nbsp;</td>";
 511       $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
 512       $resnote = htmlspecialchars( $resnote, ENT_QUOTES);
 513       echo "<td><input type='text'" .
 514         " name='form_{$field_id_esc}[$option_id_esc]'" .
 515         " id='form_{$field_id_esc}[$option_id_esc]'" .
 516         " size='$fldlength'" .
 517         " $string_maxlength" .
 518         " value='$resnote' /></td>";
 519       echo "</tr>";
 520     }
 521     echo "</table>";
 522   }
 523
 524   // single-selection list with ability to add to it
 525   else if ($data_type == 26) {
 526     echo "<select class='addtolistclass_$list_id_esc' name='form_$field_id_esc' id='form_$field_id_esc' title='$description'>";
 527     if ($showEmpty) echo "<option value=''>" . htmlspecialchars( xl($empty_title), ENT_QUOTES) . "</option>";
 528     $lres = sqlStatement("SELECT * FROM list_options " .
 529       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 530     $got_selected = FALSE;
 531     while ($lrow = sqlFetchArray($lres)) {
 532       $optionValue = htmlspecialchars( $lrow['option_id'], ENT_QUOTES);
 533       echo "<option value='$optionValue'";
 534       if ((strlen($currvalue) == 0 && $lrow['is_default']) ||
 535           (strlen($currvalue)  > 0 && $lrow['option_id'] == $currvalue))
 536       {
 537         echo " selected";
 538         $got_selected = TRUE;
 539       }
 540       // Added 5-09 by BM - Translate label if applicable
 541       echo ">" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "</option>\n";
 542     }
 543     if (!$got_selected && strlen($currvalue) > 0) {
 544       echo "<option value='$currescaped' selected>* $currescaped *</option>";
 545       echo "</select>";
 546       $fontTitle = htmlspecialchars( xl('Please choose a valid selection from the list.'), ENT_NOQUOTES);
 547       $fontText = htmlspecialchars( xl('Fix this'), ENT_NOQUOTES);
 548       echo " <font color='red' title='$fontTitle'>$fontText!</font>";
 549     }
 550     else {
 551       echo "</select>";
 552     }
 553     // show the add button if user has access to correct list
 554     $inputValue = htmlspecialchars( xl('Add'), ENT_QUOTES);
 555     $outputAddButton = "<input type='button' id='addtolistid_".$list_id_esc."' fieldid='form_".$field_id_esc."' class='addtolist' value='$inputValue'>";
 556     if (aco_exist('lists', $list_id)) {
 557      // a specific aco exist for this list, so ensure access
 558      if (acl_check('lists', $list_id)) echo $outputAddButton;
 559     }
 560     else {
 561      // no specific aco exist for this list, so check for access to 'default' list
 562      if (acl_check('lists', 'default')) echo $outputAddButton;
 563     }
 564   }
 565
 566   // a set of labeled radio buttons
 567   else if ($data_type == 27) {
 568     // In this special case, fld_length is the number of columns generated.
 569     $cols = max(1, $frow['fld_length']);
 570     $lres = sqlStatement("SELECT * FROM list_options " .
 571       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 572     echo "<table cellpadding='0' cellspacing='0' width='100%'>";
 573     $tdpct = (int) (100 / $cols);
 574     $got_selected = FALSE;
 575     for ($count = 0; $lrow = sqlFetchArray($lres); ++$count) {
 576       $option_id = $lrow['option_id'];
 577       $option_id_esc = htmlspecialchars( $option_id, ENT_QUOTES);
 578       if ($count % $cols == 0) {
 579         if ($count) echo "</tr>";
 580         echo "<tr>";
 581       }
 582       echo "<td width='$tdpct%'>";
 583       echo "<input type='radio' name='form_{$field_id_esc}' id='form_{$field_id_esc}[$option_id_esc]' value='$option_id_esc'";
 584       if ((strlen($currvalue) == 0 && $lrow['is_default']) ||
 585           (strlen($currvalue)  > 0 && $option_id == $currvalue))
 586       {
 587         echo " checked";
 588         $got_selected = TRUE;
 589       }
 590       echo ">" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES);
 591       echo "</td>";
 592     }
 593     if ($count) {
 594       echo "</tr>";
 595       if ($count > $cols) {
 596         // Add some space after multiple rows of radio buttons.
 597         $cols = htmlspecialchars( $cols, ENT_QUOTES);
 598         echo "<tr><td colspan='$cols' style='height:0.7em'></td></tr>";
 599       }
 600     }
 601     echo "</table>";
 602     if (!$got_selected && strlen($currvalue) > 0) {
 603       $fontTitle = htmlspecialchars( xl('Please choose a valid selection.'), ENT_QUOTES);
 604       $fontText = htmlspecialchars( xl('Fix this'), ENT_NOQUOTES);
 605       echo "$currescaped <font color='red' title='$fontTitle'>$fontText!</font>";
 606     }
 607   }
 608
 609   // special case for history of lifestyle status; 3 radio buttons and a date text field:
 610   // VicarePlus :: A selection list box for smoking status:
 611   else if ($data_type == 28 || $data_type == 32) {
 612     $tmp = explode('|', $currvalue);
 613     switch(count($tmp)) {
 614       case "4": {
 615         $resnote = $tmp[0];
 616         $restype = $tmp[1];
 617         $resdate = $tmp[2];
 618         $reslist = $tmp[3];
 619       } break;
 620       case "3": {
 621         $resnote = $tmp[0];
 622         $restype = $tmp[1];
 623         $resdate = $tmp[2];
 624       } break;
 625       case "2": {
 626         $resnote = $tmp[0];
 627         $restype = $tmp[1];
 628         $resdate = "";
 629       } break;
 630       case "1": {
 631         $resnote = $tmp[0];
 632         $resdate = $restype = "";
 633       } break;
 634       default: {
 635         $restype = $resdate = $resnote = "";
 636       } break;
 637     }
 638     $maxlength = $frow['max_length'];
 639     $string_maxlength = "";
 640     // if max_length is set to zero, then do not set a maxlength
 641     if ($maxlength) $string_maxlength = "maxlength='".attr($maxlength)."'";
 642     $fldlength = empty($frow['fld_length']) ?  20 : $frow['fld_length'];
 643
 644     $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
 645     $resnote = htmlspecialchars( $resnote, ENT_QUOTES);
 646     $resdate = htmlspecialchars( $resdate, ENT_QUOTES);
 647     echo "<table cellpadding='0' cellspacing='0'>";
 648     echo "<tr>";
 649     if ($data_type == 28)
 650     {
 651         // input text
 652     echo "<td><input type='text'" .
 653       " name='form_$field_id_esc'" .
 654       " id='form_$field_id_esc'" .
 655       " size='$fldlength'" .
 656       " $string_maxlength" .
 657       " value='$resnote' />&nbsp;</td>";
 658    echo "<td class='bold'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".
 659       "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".
 660       htmlspecialchars( xl('Status'), ENT_NOQUOTES).":&nbsp;&nbsp;</td>";
 661     }
 662     else if($data_type == 32)
 663     {
 664     // input text
 665     echo "<tr><td><input type='text'" .
 666       " name='form_text_$field_id_esc'" .
 667       " id='form_text_$field_id_esc'" .
 668       " size='$fldlength'" .
 669       " $string_maxlength" .
 670       " value='$resnote' />&nbsp;</td></tr>";
 671     echo "<td>";
 672     //Selection list for smoking status
 673     $onchange = 'radioChange(this.options[this.selectedIndex].value)';//VicarePlus :: The javascript function for selection list.
 674     echo generate_select_list("form_$field_id", $list_id, $reslist,
 675       $description, $showEmpty ? $empty_title : '', '', $onchange)."</td>";
 676     echo "<td class='bold'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".htmlspecialchars( xl('Status'), ENT_NOQUOTES).":&nbsp;&nbsp;</td>";
 677     }
 678     // current
 679     echo "<td><input type='radio'" .
 680       " name='radio_{$field_id_esc}'" .
 681       " id='radio_{$field_id_esc}[current]'" .
 682       " value='current".$field_id_esc."'";
 683     if ($restype == "current".$field_id) echo " checked";
 684       echo " if($data_type == 32) { onClick='smoking_statusClicked(this)' } />".htmlspecialchars( xl('Current'), ENT_NOQUOTES)."&nbsp;</td>";
 685     // quit
 686     echo "<td><input type='radio'" .
 687       " name='radio_{$field_id_esc}'" .
 688       " id='radio_{$field_id_esc}[quit]'" .
 689       " value='quit".$field_id_esc."'";
 690     if ($restype == "quit".$field_id) echo " checked";
 691     echo " if($data_type == 32) { onClick='smoking_statusClicked(this)' } />".htmlspecialchars( xl('Quit'), ENT_NOQUOTES)."&nbsp;</td>";
 692     // quit date
 693     echo "<td><input type='text' size='6' name='date_$field_id_esc' id='date_$field_id_esc'" .
 694       " value='$resdate'" .
 695       " title='$description'" .
 696       " onkeyup='datekeyup(this,mypcc)' onblur='dateblur(this,mypcc)' />" .
 697       "<img src='$rootdir/pic/show_calendar.gif' align='absbottom' width='24' height='22'" .
 698       " id='img_$field_id_esc' border='0' alt='[?]' style='cursor:pointer'" .
 699       " title='" . htmlspecialchars( xl('Click here to choose a date'), ENT_QUOTES) . "' />&nbsp;</td>";
 700     $date_init .= " Calendar.setup({inputField:'date_$field_id', ifFormat:'%Y-%m-%d', button:'img_$field_id'});\n";
 701     // never
 702     echo "<td><input type='radio'" .
 703       " name='radio_{$field_id_esc}'" .
 704       " id='radio_{$field_id_esc}[never]'" .
 705       " value='never".$field_id_esc."'";
 706     if ($restype == "never".$field_id) echo " checked";
 707     echo " if($data_type == 32) { onClick='smoking_statusClicked(this)' } />".htmlspecialchars( xl('Never'), ENT_NOQUOTES)."&nbsp;</td>";
 708         // Not Applicable
 709     echo "<td><input type='radio'" .
 710       " name='radio_{$field_id}'" .
 711       " id='radio_{$field_id}[not_applicable]'" .
 712       " value='not_applicable".$field_id."'";
 713     if ($restype == "not_applicable".$field_id) echo " checked";
 714     echo " if($data_type == 32) { onClick='smoking_statusClicked(this)' } />".htmlspecialchars( xl('N/A'), ENT_QUOTES)."&nbsp;</td>";
 715     echo "</tr>";
 716     echo "</table>";
 717   }
 718
 719   // static text.  read-only, of course.
 720   else if ($data_type == 31) {
 721     echo nl2br($frow['description']);
 722   }
 723
 724   //VicarePlus :: A single selection list for Race and Ethnicity, which is specialized to check the 'ethrace' list if the entry does not exist in the list_id of the given list. At some point in the future (when able to input two lists via the layouts engine), this function could be expanded to allow using any list as a backup entry.
 725   else if ($data_type == 33) {
 726         echo "<select name='form_$field_id_esc' id='form_$field_id_esc' title='$description'>";
 727         if ($showEmpty) echo "<option value=''>" . htmlspecialchars( xl($empty_title), ENT_QUOTES) . "</option>";
 728         $lres = sqlStatement("SELECT * FROM list_options " .
 729         "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 730         $got_selected = FALSE;
 731         while ($lrow = sqlFetchArray($lres)) {
 732          $optionValue = htmlspecialchars( $lrow['option_id'], ENT_QUOTES);
 733          echo "<option value='$optionValue'";
 734          if ((strlen($currvalue) == 0 && $lrow['is_default']) ||
 735           (strlen($currvalue)  > 0 && $lrow['option_id'] == $currvalue))
 736           {
 737           echo " selected";
 738           $got_selected = TRUE;
 739           }
 740
 741          echo ">" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "</option>\n";
 742          }
 743         if (!$got_selected && strlen($currvalue) > 0)
 744         {
 745         //Check 'ethrace' list if the entry does not exist in the list_id of the given list(Race or Ethnicity).
 746          $list_id='ethrace';
 747          $lrow = sqlQuery("SELECT title FROM list_options " .
 748          "WHERE list_id = ? AND option_id = ?", array($list_id,$currvalue) );
 749          if ($lrow > 0)
 750                 {
 751                 $s = htmlspecialchars(xl_list_label($lrow['title']),ENT_NOQUOTES);
 752                 echo "<option value='$currvalue' selected> $s </option>";
 753                 echo "</select>";
 754                 }
 755          else
 756                 {
 757                 echo "<option value='$currescaped' selected>* $currescaped *</option>";
 758                 echo "</select>";
 759                 $fontTitle = htmlspecialchars( xl('Please choose a valid selection from the list.'), ENT_NOQUOTES);
 760                 $fontText = htmlspecialchars( xl('Fix this'), ENT_NOQUOTES);
 761                 echo " <font color='red' title='$fontTitle'>$fontText!</font>";
 762                 }
 763         }
 764         else {
 765         echo "</select>";
 766         }
 767   }
 768   else if($data_type == 34){
 769     $arr = explode("|*|*|*|",$currvalue);
 770     echo "<a href='../../../library/custom_template/custom_template.php?type=form_{$field_id}&contextName=".htmlspecialchars($list_id_esc,ENT_QUOTES)."' class='iframe_medium' style='text-decoration:none;color:black;'>";
 771     echo "<div id='form_{$field_id}_div' class='text-area'>".htmlspecialchars($arr[0],ENT_QUOTES)."</div>";
 772     echo "<div style='display:none'><textarea name='form_{$field_id}' id='form_{$field_id}' stye='display:none'>".$currvalue."</textarea></div>";
 773     echo "</a>";
 774   }
 775
 776   //facilities drop-down list
 777   else if ($data_type == 35) {
 778     if (empty($currvalue)){
 779           $currvalue = 0;
 780     }
 781     dropdown_facility($selected = $currvalue, $name = "form_$field_id_esc", $allow_unspecified = true, $allow_allfacilities = false);
 782   }
 783
 784 }
 785
 786 function generate_print_field($frow, $currvalue) {
 787   global $rootdir, $date_init;
 788
 789   $currescaped = htmlspecialchars($currvalue, ENT_QUOTES);
 790
 791   $data_type   = $frow['data_type'];
 792   $field_id    = $frow['field_id'];
 793   $list_id     = $frow['list_id'];
 794   $fld_length  = $frow['fld_length'];
 795
 796   $description = htmlspecialchars(xl_layout_label($frow['description']), ENT_QUOTES);
 797
 798   // Can pass $frow['empty_title'] with this variable, otherwise
 799   //  will default to 'Unassigned'.
 800   // If it is 'SKIP' then an empty text title is completely skipped.
 801   $showEmpty = true;
 802   if (isset($frow['empty_title'])) {
 803     if ($frow['empty_title'] == "SKIP") {
 804       //do not display an 'empty' choice
 805       $showEmpty = false;
 806       $empty_title = "Unassigned";
 807     }
 808     else {
 809       $empty_title = $frow['empty_title'];
 810     }
 811   }
 812   else {
 813     $empty_title = "Unassigned";
 814   }
 815
 816   // generic single-selection list
 817   if ($data_type == 1 || $data_type == 26 || $data_type == 33) {
 818     if (empty($fld_length)) {
 819       if ($list_id == 'titles') {
 820         $fld_length = 3;
 821       } else {
 822         $fld_length = 10;
 823       }
 824     }
 825     $tmp = '';
 826     if ($currvalue) {
 827       $lrow = sqlQuery("SELECT title FROM list_options " .
 828         "WHERE list_id = ? AND option_id = ?", array($list_id,$currvalue));
 829       $tmp = xl_list_label($lrow['title']);
 830       if (empty($tmp)) $tmp = "($currvalue)";
 831     }
 832     /*****************************************************************
 833     echo "<input type='text'" .
 834       " size='$fld_length'" .
 835       " value='$tmp'" .
 836       " class='under'" .
 837       " />";
 838     *****************************************************************/
 839     if ($tmp === '') { $tmp = '&nbsp;'; }
 840     else { $tmp = htmlspecialchars( $tmp, ENT_QUOTES); }
 841     echo $tmp;
 842   }
 843
 844   // simple text field
 845   else if ($data_type == 2 || $data_type == 15) {
 846     /*****************************************************************
 847     echo "<input type='text'" .
 848       " size='$fld_length'" .
 849       " value='$currescaped'" .
 850       " class='under'" .
 851       " />";
 852     *****************************************************************/
 853     if ($currescaped === '') $currescaped = '&nbsp;';
 854     echo $currescaped;
 855   }
 856
 857   // long or multi-line text field
 858   else if ($data_type == 3) {
 859     $fldlength = htmlspecialchars( $fld_length, ENT_QUOTES);
 860     $maxlength = htmlspecialchars( $frow['fld_rows'], ENT_QUOTES);
 861     echo "<textarea" .
 862       " cols='$fldlength'" .
 863       " rows='$maxlength'>" .
 864       $currescaped . "</textarea>";
 865   }
 866
 867   // date
 868   else if ($data_type == 4) {
 869     /*****************************************************************
 870     echo "<input type='text' size='10'" .
 871       " value='$currescaped'" .
 872       " title='$description'" .
 873       " class='under'" .
 874       " />";
 875     *****************************************************************/
 876     if ($currvalue === '') { $tmp = oeFormatShortDate('&nbsp;'); }
 877     else { $tmp = htmlspecialchars( oeFormatShortDate($currvalue), ENT_QUOTES); }
 878     echo $tmp;
 879   }
 880
 881   // provider list
 882   else if ($data_type == 10 || $data_type == 11) {
 883     $tmp = '';
 884     if ($currvalue) {
 885       $urow = sqlQuery("SELECT fname, lname, specialty FROM users " .
 886         "WHERE id = ?", array($currvalue) );
 887       $tmp = ucwords($urow['fname'] . " " . $urow['lname']);
 888       if (empty($tmp)) $tmp = "($currvalue)";
 889     }
 890     /*****************************************************************
 891     echo "<input type='text'" .
 892       " size='$fld_length'" .
 893       " value='$tmp'" .
 894       " class='under'" .
 895       " />";
 896     *****************************************************************/
 897     if ($tmp === '') { $tmp = '&nbsp;'; }
 898     else { $tmp = htmlspecialchars( $tmp, ENT_QUOTES); }
 899     echo $tmp;
 900   }
 901
 902   // pharmacy list
 903   else if ($data_type == 12) {
 904     $tmp = '';
 905     if ($currvalue) {
 906       $pres = get_pharmacies();
 907       while ($prow = sqlFetchArray($pres)) {
 908         $key = $prow['id'];
 909         if ($currvalue == $key) {
 910           $tmp = $prow['name'] . ' ' . $prow['area_code'] . '-' .
 911             $prow['prefix'] . '-' . $prow['number'] . ' / ' .
 912             $prow['line1'] . ' / ' . $prow['city'];
 913         }
 914       }
 915       if (empty($tmp)) $tmp = "($currvalue)";
 916     }
 917     /*****************************************************************
 918     echo "<input type='text'" .
 919       " size='$fld_length'" .
 920       " value='$tmp'" .
 921       " class='under'" .
 922       " />";
 923     *****************************************************************/
 924     if ($tmp === '') { $tmp = '&nbsp;'; }
 925     else { $tmp = htmlspecialchars( $tmp, ENT_QUOTES); }
 926     echo $tmp;
 927   }
 928
 929   // squads
 930   else if ($data_type == 13) {
 931     $tmp = '';
 932     if ($currvalue) {
 933       $squads = acl_get_squads();
 934       if ($squads) {
 935         foreach ($squads as $key => $value) {
 936           if ($currvalue == $key) {
 937             $tmp = $value[3];
 938           }
 939         }
 940       }
 941       if (empty($tmp)) $tmp = "($currvalue)";
 942     }
 943     /*****************************************************************
 944     echo "<input type='text'" .
 945       " size='$fld_length'" .
 946       " value='$tmp'" .
 947       " class='under'" .
 948       " />";
 949     *****************************************************************/
 950     if ($tmp === '') { $tmp = '&nbsp;'; }
 951     else { $tmp = htmlspecialchars( $tmp, ENT_QUOTES); }
 952     echo $tmp;
 953   }
 954
 955   // Address book.
 956   else if ($data_type == 14) {
 957     $tmp = '';
 958     if ($currvalue) {
 959       $urow = sqlQuery("SELECT fname, lname, specialty FROM users " .
 960         "WHERE id = ?", array($currvalue) );
 961       $uname = $urow['lname'];
 962       if ($urow['fname']) $uname .= ", " . $urow['fname'];
 963       $tmp = $uname;
 964       if (empty($tmp)) $tmp = "($currvalue)";
 965     }
 966     /*****************************************************************
 967     echo "<input type='text'" .
 968       " size='$fld_length'" .
 969       " value='$tmp'" .
 970       " class='under'" .
 971       " />";
 972     *****************************************************************/
 973     if ($tmp === '') { $tmp = '&nbsp;'; }
 974     else { $tmp = htmlspecialchars( $tmp, ENT_QUOTES); }
 975     echo $tmp;
 976   }
 977
 978   // a set of labeled checkboxes
 979   else if ($data_type == 21) {
 980     // In this special case, fld_length is the number of columns generated.
 981     $cols = max(1, $fld_length);
 982     $avalue = explode('|', $currvalue);
 983     $lres = sqlStatement("SELECT * FROM list_options " .
 984       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
 985     echo "<table cellpadding='0' cellspacing='0' width='100%'>";
 986     $tdpct = (int) (100 / $cols);
 987     for ($count = 0; $lrow = sqlFetchArray($lres); ++$count) {
 988       $option_id = $lrow['option_id'];
 989       if ($count % $cols == 0) {
 990         if ($count) echo "</tr>";
 991         echo "<tr>";
 992       }
 993       echo "<td width='$tdpct%'>";
 994       echo "<input type='checkbox'";
 995       if (in_array($option_id, $avalue)) echo " checked";
 996       echo ">" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES);
 997       echo "</td>";
 998     }
 999     if ($count) {
1000       echo "</tr>";
1001       if ($count > $cols) {
1002         // Add some space after multiple rows of checkboxes.
1003         $cols = htmlspecialchars( $cols, ENT_QUOTES);
1004         echo "<tr><td colspan='$cols' style='height:0.7em'></td></tr>";
1005       }
1006     }
1007     echo "</table>";
1008   }
1009
1010   // a set of labeled text input fields
1011   else if ($data_type == 22) {
1012     $tmp = explode('|', $currvalue);
1013     $avalue = array();
1014     foreach ($tmp as $value) {
1015       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
1016         $avalue[$matches[1]] = $matches[2];
1017       }
1018     }
1019     $lres = sqlStatement("SELECT * FROM list_options " .
1020       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1021     echo "<table cellpadding='0' cellspacing='0'>";
1022     while ($lrow = sqlFetchArray($lres)) {
1023       $option_id = $lrow['option_id'];
1024       $fldlength = empty($fld_length) ?  20 : $fld_length;
1025       echo "<tr><td>" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "&nbsp;</td>";
1026       $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
1027       $inputValue = htmlspecialchars( $avalue[$option_id], ENT_QUOTES);
1028       echo "<td><input type='text'" .
1029         " size='$fldlength'" .
1030         " value='$inputValue'" .
1031         " class='under'" .
1032         " /></td></tr>";
1033     }
1034     echo "</table>";
1035   }
1036
1037   // a set of exam results; 3 radio buttons and a text field:
1038   else if ($data_type == 23) {
1039     $tmp = explode('|', $currvalue);
1040     $avalue = array();
1041     foreach ($tmp as $value) {
1042       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
1043         $avalue[$matches[1]] = $matches[2];
1044       }
1045     }
1046     $fldlength = empty($fld_length) ?  20 : $fld_length;
1047     $lres = sqlStatement("SELECT * FROM list_options " .
1048       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1049     echo "<table cellpadding='0' cellspacing='0'>";
1050     echo "<tr><td>&nbsp;</td><td class='bold'>" .
1051       htmlspecialchars( xl('N/A'), ENT_NOQUOTES) .
1052       "&nbsp;</td><td class='bold'>" .
1053       htmlspecialchars( xl('Nor'), ENT_NOQUOTES) . "&nbsp;</td>" .
1054       "<td class='bold'>" .
1055       htmlspecialchars( xl('Abn'), ENT_NOQUOTES) . "&nbsp;</td><td class='bold'>" .
1056       htmlspecialchars( xl('Date/Notes'), ENT_NOQUOTES) . "</td></tr>";
1057     while ($lrow = sqlFetchArray($lres)) {
1058       $option_id = $lrow['option_id'];
1059       $restype = substr($avalue[$option_id], 0, 1);
1060       $resnote = substr($avalue[$option_id], 2);
1061       echo "<tr><td>" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "&nbsp;</td>";
1062       for ($i = 0; $i < 3; ++$i) {
1063         echo "<td><input type='radio'";
1064         if ($restype === "$i") echo " checked";
1065         echo " /></td>";
1066       }
1067       $resnote = htmlspecialchars( $resnote, ENT_QUOTES);
1068       $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
1069       echo "<td><input type='text'" .
1070         " size='$fldlength'" .
1071         " value='$resnote'" .
1072         " class='under' /></td>" .
1073         "</tr>";
1074     }
1075     echo "</table>";
1076   }
1077
1078   // the list of active allergies for the current patient
1079   // this is read-only!
1080   else if ($data_type == 24) {
1081     $query = "SELECT title, comments FROM lists WHERE " .
1082       "pid = ? AND type = 'allergy' AND enddate IS NULL " .
1083       "ORDER BY begdate";
1084     $lres = sqlStatement($query, array($GLOBALS['pid']) );
1085     $count = 0;
1086     while ($lrow = sqlFetchArray($lres)) {
1087       if ($count++) echo "<br />";
1088       echo htmlspecialchars( $lrow['title'], ENT_QUOTES);
1089       if ($lrow['comments']) echo htmlspecialchars( ' (' . $lrow['comments'] . ')', ENT_QUOTES);
1090     }
1091   }
1092
1093   // a set of labeled checkboxes, each with a text field:
1094   else if ($data_type == 25) {
1095     $tmp = explode('|', $currvalue);
1096     $avalue = array();
1097     foreach ($tmp as $value) {
1098       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
1099         $avalue[$matches[1]] = $matches[2];
1100       }
1101     }
1102     $fldlength = empty($fld_length) ?  20 : $fld_length;
1103     $lres = sqlStatement("SELECT * FROM list_options " .
1104       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1105     echo "<table cellpadding='0' cellspacing='0'>";
1106     while ($lrow = sqlFetchArray($lres)) {
1107       $option_id = $lrow['option_id'];
1108       $restype = substr($avalue[$option_id], 0, 1);
1109       $resnote = substr($avalue[$option_id], 2);
1110       echo "<tr><td>" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES) . "&nbsp;</td>";
1111       echo "<td><input type='checkbox'";
1112       if ($restype) echo " checked";
1113       echo " />&nbsp;</td>";
1114       $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
1115       $resnote = htmlspecialchars( $resnote, ENT_QUOTES);
1116       echo "<td><input type='text'" .
1117         " size='$fldlength'" .
1118         " value='$resnote'" .
1119         " class='under'" .
1120         " /></td>" .
1121         "</tr>";
1122     }
1123     echo "</table>";
1124   }
1125
1126   // a set of labeled radio buttons
1127   else if ($data_type == 27) {
1128     // In this special case, fld_length is the number of columns generated.
1129     $cols = max(1, $frow['fld_length']);
1130     $lres = sqlStatement("SELECT * FROM list_options " .
1131       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1132     echo "<table cellpadding='0' cellspacing='0' width='100%'>";
1133     $tdpct = (int) (100 / $cols);
1134     for ($count = 0; $lrow = sqlFetchArray($lres); ++$count) {
1135       $option_id = $lrow['option_id'];
1136       if ($count % $cols == 0) {
1137         if ($count) echo "</tr>";
1138         echo "<tr>";
1139       }
1140       echo "<td width='$tdpct%'>";
1141       echo "<input type='radio'";
1142       if ((strlen($currvalue) == 0 && $lrow['is_default']) ||
1143           (strlen($currvalue)  > 0 && $option_id == $currvalue))
1144       {
1145         echo " checked";
1146       }
1147       echo ">" . htmlspecialchars( xl_list_label($lrow['title']), ENT_NOQUOTES);
1148       echo "</td>";
1149     }
1150     if ($count) {
1151       echo "</tr>";
1152       if ($count > $cols) {
1153         // Add some space after multiple rows of radio buttons.
1154         $cols = htmlspecialchars( $cols, ENT_QUOTES);
1155         echo "<tr><td colspan='$cols' style='height:0.7em'></td></tr>";
1156       }
1157     }
1158     echo "</table>";
1159   }
1160
1161   // special case for history of lifestyle status; 3 radio buttons and a date text field:
1162   else if ($data_type == 28 || $data_type == 32) {
1163     $tmp = explode('|', $currvalue);
1164         switch(count($tmp)) {
1165       case "4": {
1166         $resnote = $tmp[0];
1167         $restype = $tmp[1];
1168         $resdate = $tmp[2];
1169         $reslist = $tmp[3];
1170       } break;
1171       case "3": {
1172         $resnote = $tmp[0];
1173         $restype = $tmp[1];
1174         $resdate = $tmp[2];
1175       } break;
1176       case "2": {
1177         $resnote = $tmp[0];
1178         $restype = $tmp[1];
1179         $resdate = "";
1180       } break;
1181       case "1": {
1182         $resnote = $tmp[0];
1183         $resdate = $restype = "";
1184       } break;
1185       default: {
1186         $restype = $resdate = $resnote = "";
1187       } break;
1188     }
1189     $fldlength = empty($frow['fld_length']) ?  20 : $frow['fld_length'];
1190     echo "<table cellpadding='0' cellspacing='0'>";
1191     echo "<tr>";
1192     $fldlength = htmlspecialchars( $fldlength, ENT_QUOTES);
1193     $resnote = htmlspecialchars( $resnote, ENT_QUOTES);
1194     $resdate = htmlspecialchars( $resdate, ENT_QUOTES);
1195     if($data_type == 28)
1196     {
1197     echo "<td><input type='text'" .
1198       " size='$fldlength'" .
1199       " class='under'" .
1200       " value='$resnote' /></td>";
1201     echo "<td class='bold'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".
1202       "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".
1203       htmlspecialchars( xl('Status'), ENT_NOQUOTES).":&nbsp;</td>";
1204     }
1205     else if($data_type == 32)
1206     {
1207     echo "<tr><td><input type='text'" .
1208       " size='$fldlength'" .
1209       " class='under'" .
1210       " value='$resnote' /></td></tr>";
1211     $fldlength = 30;
1212     $smoking_status_title = generate_display_field(array('data_type'=>'1','list_id'=>$list_id),$reslist);
1213     echo "<td><input type='text'" .
1214       " size='$fldlength'" .
1215       " class='under'" .
1216       " value='$smoking_status_title' /></td>";
1217     echo "<td class='bold'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;".htmlspecialchars( xl('Status'), ENT_NOQUOTES).":&nbsp;&nbsp;</td>";
1218     }
1219     echo "<td><input type='radio'";
1220     if ($restype == "current".$field_id) echo " checked";
1221     echo "/>".htmlspecialchars( xl('Current'), ENT_NOQUOTES)."&nbsp;</td>";
1222
1223     echo "<td><input type='radio'";
1224     if ($restype == "current".$field_id) echo " checked";
1225     echo "/>".htmlspecialchars( xl('Quit'), ENT_NOQUOTES)."&nbsp;</td>";
1226
1227     echo "<td><input type='text' size='6'" .
1228       " value='$resdate'" .
1229       " class='under'" .
1230       " /></td>";
1231
1232     echo "<td><input type='radio'";
1233     if ($restype == "current".$field_id) echo " checked";
1234     echo " />".htmlspecialchars( xl('Never'), ENT_NOQUOTES)."</td>";
1235
1236     echo "<td><input type='radio'";
1237     if ($restype == "not_applicable".$field_id) echo " checked";
1238     echo " />".htmlspecialchars( xl('N/A'), ENT_NOQUOTES)."&nbsp;</td>";
1239     echo "</tr>";
1240     echo "</table>";
1241   }
1242
1243   // static text.  read-only, of course.
1244   else if ($data_type == 31) {
1245     echo nl2br($frow['description']);
1246   }
1247
1248   else if($data_type == 34){
1249     echo "<a href='../../../library/custom_template/custom_template.php?type=form_{$field_id}&contextName=".htmlspecialchars($list_id_esc,ENT_QUOTES)."' class='iframe_medium' style='text-decoration:none;color:black;'>";
1250     echo "<div id='form_{$field_id}_div' class='text-area'></div>";
1251     echo "<div style='display:none'><textarea name='form_{$field_id}' id='form_{$field_id}' stye='display:none'></textarea></div>";
1252     echo "</a>";
1253   }
1254
1255   //facilities drop-down list
1256   else if ($data_type == 35) {
1257     if (empty($currvalue)){
1258       $currvalue = 0;
1259     }
1260     dropdown_facility($selected = $currvalue, $name = "form_$field_id_esc", $allow_unspecified = true, $allow_allfacilities = false);
1261   }
1262
1263 }
1264
1265 function generate_display_field($frow, $currvalue) {
1266   $data_type  = $frow['data_type'];
1267   $field_id   = isset($frow['field_id'])  ? $frow['field_id'] : null;
1268   $list_id    = $frow['list_id'];
1269   $s = '';
1270
1271   // generic selection list or the generic selection list with add on the fly
1272   // feature, or radio buttons
1273   if ($data_type == 1 || $data_type == 26 || $data_type == 27 || $data_type == 33) {
1274     $lrow = sqlQuery("SELECT title FROM list_options " .
1275       "WHERE list_id = ? AND option_id = ?", array($list_id,$currvalue) );
1276       $s = htmlspecialchars(xl_list_label($lrow['title']),ENT_NOQUOTES);
1277     //For lists Race and Ethnicity if there is no matching value in the corresponding lists check ethrace list
1278     if ($lrow == 0 && $data_type == 33)
1279     {
1280     $list_id='ethrace';
1281     $lrow_ethrace = sqlQuery("SELECT title FROM list_options " .
1282       "WHERE list_id = ? AND option_id = ?", array($list_id,$currvalue) );
1283     $s = htmlspecialchars(xl_list_label($lrow_ethrace['title']),ENT_NOQUOTES);
1284     }
1285   }
1286
1287   // simple text field
1288   else if ($data_type == 2) {
1289     $s = htmlspecialchars($currvalue,ENT_NOQUOTES);
1290   }
1291
1292   // long or multi-line text field
1293   else if ($data_type == 3) {
1294     $s = nl2br(htmlspecialchars($currvalue,ENT_NOQUOTES));
1295   }
1296
1297   // date
1298   else if ($data_type == 4) {
1299     $s = htmlspecialchars(oeFormatShortDate($currvalue),ENT_NOQUOTES);
1300   }
1301
1302   // provider
1303   else if ($data_type == 10 || $data_type == 11) {
1304     $urow = sqlQuery("SELECT fname, lname, specialty FROM users " .
1305       "WHERE id = ?", array($currvalue) );
1306     $s = htmlspecialchars(ucwords($urow['fname'] . " " . $urow['lname']),ENT_NOQUOTES);
1307   }
1308
1309   // pharmacy list
1310   else if ($data_type == 12) {
1311     $pres = get_pharmacies();
1312     while ($prow = sqlFetchArray($pres)) {
1313       $key = $prow['id'];
1314       if ($currvalue == $key) {
1315         $s .= htmlspecialchars($prow['name'] . ' ' . $prow['area_code'] . '-' .
1316           $prow['prefix'] . '-' . $prow['number'] . ' / ' .
1317           $prow['line1'] . ' / ' . $prow['city'],ENT_NOQUOTES);
1318       }
1319     }
1320   }
1321
1322   // squads
1323   else if ($data_type == 13) {
1324     $squads = acl_get_squads();
1325     if ($squads) {
1326       foreach ($squads as $key => $value) {
1327         if ($currvalue == $key) {
1328           $s .= htmlspecialchars($value[3],ENT_NOQUOTES);
1329         }
1330       }
1331     }
1332   }
1333
1334   // address book
1335   else if ($data_type == 14) {
1336     $urow = sqlQuery("SELECT fname, lname, specialty FROM users " .
1337       "WHERE id = ?", array($currvalue));
1338     $uname = $urow['lname'];
1339     if ($urow['fname']) $uname .= ", " . $urow['fname'];
1340     $s = htmlspecialchars($uname,ENT_NOQUOTES);
1341   }
1342
1343   // billing code
1344   else if ($data_type == 15) {
1345     $s = htmlspecialchars($currvalue,ENT_NOQUOTES);
1346   }
1347
1348   // a set of labeled checkboxes
1349   else if ($data_type == 21) {
1350     $avalue = explode('|', $currvalue);
1351     $lres = sqlStatement("SELECT * FROM list_options " .
1352       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1353     $count = 0;
1354     while ($lrow = sqlFetchArray($lres)) {
1355       $option_id = $lrow['option_id'];
1356       if (in_array($option_id, $avalue)) {
1357         if ($count++) $s .= "<br />";
1358
1359         // Added 5-09 by BM - Translate label if applicable
1360         $s .= htmlspecialchars(xl_list_label($lrow['title']),ENT_NOQUOTES);
1361
1362       }
1363     }
1364   }
1365
1366   // a set of labeled text input fields
1367   else if ($data_type == 22) {
1368     $tmp = explode('|', $currvalue);
1369     $avalue = array();
1370     foreach ($tmp as $value) {
1371       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
1372         $avalue[$matches[1]] = $matches[2];
1373       }
1374     }
1375     $lres = sqlStatement("SELECT * FROM list_options " .
1376       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1377     $s .= "<table cellpadding='0' cellspacing='0'>";
1378     while ($lrow = sqlFetchArray($lres)) {
1379       $option_id = $lrow['option_id'];
1380       if (empty($avalue[$option_id])) continue;
1381
1382       // Added 5-09 by BM - Translate label if applicable
1383       $s .= "<tr><td class='bold' valign='top'>" . htmlspecialchars(xl_list_label($lrow['title']),ENT_NOQUOTES) . ":&nbsp;</td>";
1384
1385       $s .= "<td class='text' valign='top'>" . htmlspecialchars($avalue[$option_id],ENT_NOQUOTES) . "</td></tr>";
1386     }
1387     $s .= "</table>";
1388   }
1389
1390   // a set of exam results; 3 radio buttons and a text field:
1391   else if ($data_type == 23) {
1392     $tmp = explode('|', $currvalue);
1393     $avalue = array();
1394     foreach ($tmp as $value) {
1395       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
1396         $avalue[$matches[1]] = $matches[2];
1397       }
1398     }
1399     $lres = sqlStatement("SELECT * FROM list_options " .
1400       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1401     $s .= "<table cellpadding='0' cellspacing='0'>";
1402     while ($lrow = sqlFetchArray($lres)) {
1403       $option_id = $lrow['option_id'];
1404       $restype = substr($avalue[$option_id], 0, 1);
1405       $resnote = substr($avalue[$option_id], 2);
1406       if (empty($restype) && empty($resnote)) continue;
1407
1408       // Added 5-09 by BM - Translate label if applicable
1409       $s .= "<tr><td class='bold' valign='top'>" . htmlspecialchars(xl_list_label($lrow['title']),ENT_NOQUOTES) . "&nbsp;</td>";
1410
1411       $restype = ($restype == '1') ? xl('Normal') : (($restype == '2') ? xl('Abnormal') : xl('N/A'));
1412       // $s .= "<td class='text' valign='top'>$restype</td></tr>";
1413       // $s .= "<td class='text' valign='top'>$resnote</td></tr>";
1414       $s .= "<td class='text' valign='top'>" . htmlspecialchars($restype,ENT_NOQUOTES) . "&nbsp;</td>";
1415       $s .= "<td class='text' valign='top'>" . htmlspecialchars($resnote,ENT_NOQUOTES) . "</td>";
1416       $s .= "</tr>";
1417     }
1418     $s .= "</table>";
1419   }
1420
1421   // the list of active allergies for the current patient
1422   else if ($data_type == 24) {
1423     $query = "SELECT title, comments FROM lists WHERE " .
1424       "pid = ? AND type = 'allergy' AND enddate IS NULL " .
1425       "ORDER BY begdate";
1426     // echo "<!-- $query -->\n"; // debugging
1427     $lres = sqlStatement($query, array($GLOBALS['pid']) );
1428     $count = 0;
1429     while ($lrow = sqlFetchArray($lres)) {
1430       if ($count++) $s .= "<br />";
1431       $s .= htmlspecialchars($lrow['title'],ENT_NOQUOTES);
1432       if ($lrow['comments']) $s .= ' (' . htmlspecialchars($lrow['comments'],ENT_NOQUOTES) . ')';
1433     }
1434   }
1435
1436   // a set of labeled checkboxes, each with a text field:
1437   else if ($data_type == 25) {
1438     $tmp = explode('|', $currvalue);
1439     $avalue = array();
1440     foreach ($tmp as $value) {
1441       if (preg_match('/^([^:]+):(.*)$/', $value, $matches)) {
1442         $avalue[$matches[1]] = $matches[2];
1443       }
1444     }
1445     $lres = sqlStatement("SELECT * FROM list_options " .
1446       "WHERE list_id = ? ORDER BY seq, title", array($list_id) );
1447     $s .= "<table cellpadding='0' cellspacing='0'>";
1448     while ($lrow = sqlFetchArray($lres)) {
1449       $option_id = $lrow['option_id'];
1450       $restype = substr($avalue[$option_id], 0, 1);
1451       $resnote = substr($avalue[$option_id], 2);
1452       if (empty($restype) && empty($resnote)) continue;
1453
1454       // Added 5-09 by BM - Translate label if applicable
1455       $s .= "<tr><td class='bold' valign='top'>" . htmlspecialchars(xl_list_label($lrow['title']),ENT_NOQUOTES) . "&nbsp;</td>";
1456
1457       $restype = $restype ? xl('Yes') : xl('No');
1458       $s .= "<td class='text' valign='top'>" . htmlspecialchars($restype,ENT_NOQUOTES) . "</td></tr>";
1459       $s .= "<td class='text' valign='top'>" . htmlspecialchars($resnote,ENT_NOQUOTES) . "</td></tr>";
1460       $s .= "</tr>";
1461     }
1462     $s .= "</table>";
1463   }
1464
1465   // special case for history of lifestyle status; 3 radio buttons and a date text field:
1466   // VicarePlus :: A selection list for smoking status.
1467   else if ($data_type == 28 || $data_type == 32) {
1468     $tmp = explode('|', $currvalue);
1469     switch(count($tmp)) {
1470       case "4": {
1471         $resnote = $tmp[0];
1472         $restype = $tmp[1];
1473         $resdate = $tmp[2];
1474         $reslist = $tmp[3];
1475       } break;
1476       case "3": {
1477         $resnote = $tmp[0];
1478         $restype = $tmp[1];
1479         $resdate = $tmp[2];
1480       } break;
1481       case "2": {
1482         $resnote = $tmp[0];
1483         $restype = $tmp[1];
1484         $resdate = "";
1485       } break;
1486       case "1": {
1487         $resnote = $tmp[0];
1488         $resdate = $restype = "";
1489       } break;
1490       default: {
1491         $restype = $resdate = $resnote = "";
1492       } break;
1493     }
1494     $s .= "<table cellpadding='0' cellspacing='0'>";
1495
1496     $s .= "<tr>";
1497         $res = "";
1498     if ($restype == "current".$field_id) $res = xl('Current');
1499         if ($restype == "quit".$field_id) $res = xl('Quit');
1500         if ($restype == "never".$field_id) $res = xl('Never');
1501         if ($restype == "not_applicable".$field_id) $res = xl('N/A');
1502     // $s .= "<td class='text' valign='top'>$restype</td></tr>";
1503     // $s .= "<td class='text' valign='top'>$resnote</td></tr>";
1504      if ($data_type == 28)
1505     {
1506     if (!empty($resnote)) $s .= "<td class='text' valign='top'>" . htmlspecialchars($resnote,ENT_NOQUOTES) . "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>";
1507     }
1508      //VicarePlus :: Tobacco field has a listbox, text box, date field and 3 radio buttons.
1509      else if ($data_type == 32)
1510     {
1511        if (!empty($reslist)) $s .= "<td class='text' valign='top'>" . generate_display_field(array('data_type'=>'1','list_id'=>$list_id),$reslist) . "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>";
1512        if (!empty($resnote)) $s .= "<td class='text' valign='top'>" . htmlspecialchars($resnote,ENT_NOQUOTES) . "&nbsp;&nbsp;</td>";
1513     }
1514
1515         if (!empty($res)) $s .= "<td class='text' valign='top'><b>" . htmlspecialchars(xl('Status'),ENT_NOQUOTES) . "</b>:&nbsp;" . htmlspecialchars($res,ENT_NOQUOTES) . "&nbsp;</td>";
1516     if ($restype == "quit".$field_id) $s .= "<td class='text' valign='top'>" . htmlspecialchars($resdate,ENT_NOQUOTES) . "&nbsp;</td>";
1517     $s .= "</tr>";
1518     $s .= "</table>";
1519   }
1520
1521   // static text.  read-only, of course.
1522   else if ($data_type == 31) {
1523     $s .= nl2br($frow['description']);
1524   }
1525
1526   else if($data_type == 34){
1527     $arr = explode("|*|*|*|",$currvalue);
1528     for($i=0;$i<sizeof($arr);$i++){
1529       $s.=$arr[$i];
1530     }
1531   }
1532
1533   // facility
1534   else if ($data_type == 35) {
1535     $urow = sqlQuery("SELECT id, name FROM facility ".
1536       "WHERE id = ?", array($currvalue) );
1537     $s = htmlspecialchars($urow['name'],ENT_NOQUOTES);
1538   }
1539
1540   return $s;
1541 }
1542
1543 $CPR = 4; // cells per row of generic data
1544 $last_group = '';
1545 $cell_count = 0;
1546 $item_count = 0;
1547
1548 function disp_end_cell() {
1549   global $item_count, $cell_count;
1550   if ($item_count > 0) {
1551     echo "</td>";
1552     $item_count = 0;
1553   }
1554 }
1555
1556 function disp_end_row() {
1557   global $cell_count, $CPR;
1558   disp_end_cell();
1559   if ($cell_count > 0) {
1560     for (; $cell_count < $CPR; ++$cell_count) echo "<td></td>";
1561     echo "</tr>\n";
1562     $cell_count = 0;
1563   }
1564 }
1565
1566 function disp_end_group() {
1567   global $last_group;
1568   if (strlen($last_group) > 0) {
1569     disp_end_row();
1570   }
1571 }
1572
1573 function display_layout_rows($formtype, $result1, $result2='') {
1574   global $item_count, $cell_count, $last_group, $CPR;
1575
1576   $fres = sqlStatement("SELECT * FROM layout_options " .
1577     "WHERE form_id = ? AND uor > 0 " .
1578     "ORDER BY group_name, seq", array($formtype) );
1579
1580   while ($frow = sqlFetchArray($fres)) {
1581     $this_group = $frow['group_name'];
1582     $titlecols  = $frow['titlecols'];
1583     $datacols   = $frow['datacols'];
1584     $data_type  = $frow['data_type'];
1585     $field_id   = $frow['field_id'];
1586     $list_id    = $frow['list_id'];
1587     $currvalue  = '';
1588
1589     if ($formtype == 'DEM') {
1590       if ($GLOBALS['athletic_team']) {
1591         // Skip fitness level and return-to-play date because those appear
1592         // in a special display/update form on this page.
1593         if ($field_id === 'fitness' || $field_id === 'userdate1') continue;
1594       }
1595       if (strpos($field_id, 'em_') === 0) {
1596         // Skip employer related fields, if it's disabled.
1597         if ($GLOBALS['omit_employers']) continue;
1598         $tmp = substr($field_id, 3);
1599         if (isset($result2[$tmp])) $currvalue = $result2[$tmp];
1600       }
1601       else {
1602         if (isset($result1[$field_id])) $currvalue = $result1[$field_id];
1603       }
1604     }
1605     else {
1606       if (isset($result1[$field_id])) $currvalue = $result1[$field_id];
1607     }
1608
1609     // Handle a data category (group) change.
1610     if (strcmp($this_group, $last_group) != 0) {
1611       $group_name = substr($this_group, 1);
1612       // totally skip generating the employer category, if it's disabled.
1613       if ($group_name === 'Employer' && $GLOBALS['omit_employers']) continue;
1614       disp_end_group();
1615       $last_group = $this_group;
1616     }
1617
1618     // filter out all the empty field data from the patient report.
1619     if (!empty($currvalue) && !($currvalue == '0000-00-00 00:00:00')) {
1620         // Handle starting of a new row.
1621         if (($titlecols > 0 && $cell_count >= $CPR) || $cell_count == 0) {
1622           disp_end_row();
1623           echo "<tr>";
1624           if ($group_name) {
1625                 echo "<td class='groupname'>";
1626                 //echo "<td class='groupname' style='padding-right:5pt' valign='top'>";
1627                 //echo "<font color='#008800'>$group_name</font>";
1628
1629                 // Added 5-09 by BM - Translate label if applicable
1630                 echo htmlspecialchars(xl_layout_label($group_name),ENT_NOQUOTES);
1631
1632                 $group_name = '';
1633           } else {
1634                 //echo "<td class='' style='padding-right:5pt' valign='top'>";
1635                 echo "<td valign='top'>&nbsp;";
1636           }
1637           echo "</td>";
1638         }
1639
1640         if ($item_count == 0 && $titlecols == 0) $titlecols = 1;
1641
1642         // Handle starting of a new label cell.
1643         if ($titlecols > 0) {
1644           disp_end_cell();
1645           //echo "<td class='label' colspan='$titlecols' valign='top'";
1646           $titlecols_esc = htmlspecialchars( $titlecols, ENT_QUOTES);
1647           echo "<td class='label' colspan='$titlecols_esc' ";
1648           //if ($cell_count == 2) echo " style='padding-left:10pt'";
1649           echo ">";
1650           $cell_count += $titlecols;
1651         }
1652         ++$item_count;
1653
1654         // Added 5-09 by BM - Translate label if applicable
1655         if ($frow['title']) echo htmlspecialchars(xl_layout_label($frow['title']).":",ENT_NOQUOTES); else echo "&nbsp;";
1656
1657         // Handle starting of a new data cell.
1658         if ($datacols > 0) {
1659           disp_end_cell();
1660           //echo "<td class='text data' colspan='$datacols' valign='top'";
1661           $datacols_esc = htmlspecialchars( $datacols, ENT_QUOTES);
1662           echo "<td class='text data' colspan='$datacols_esc'";
1663           //if ($cell_count > 0) echo " style='padding-left:5pt'";
1664           echo ">";
1665           $cell_count += $datacols;
1666         }
1667
1668         ++$item_count;
1669         echo generate_display_field($frow, $currvalue);
1670     }
1671   }
1672
1673   disp_end_group();
1674 }
1675
1676 function display_layout_tabs($formtype, $result1, $result2='') {
1677   global $item_count, $cell_count, $last_group, $CPR;
1678
1679   $fres = sqlStatement("SELECT distinct group_name FROM layout_options " .
1680     "WHERE form_id = ? AND uor > 0 " .
1681     "ORDER BY group_name, seq", array($formtype) );
1682
1683   $first = true;
1684   while ($frow = sqlFetchArray($fres)) {
1685           $this_group = $frow['group_name'];
1686       $group_name = substr($this_group, 1);
1687       ?>
1688                 <li <?php echo $first ? 'class="current"' : '' ?>>
1689                         <a href="/play/javascript-tabbed-navigation/" id="header_tab_<?php echo ".htmlspecialchars($group_name,ENT_QUOTES)."?>">
1690                         <?php echo htmlspecialchars(xl_layout_label($group_name),ENT_NOQUOTES); ?></a>
1691                 </li>
1692           <?php
1693           $first = false;
1694   }
1695 }
1696
1697 function display_layout_tabs_data($formtype, $result1, $result2='') {
1698   global $item_count, $cell_count, $last_group, $CPR;
1699
1700   $fres = sqlStatement("SELECT distinct group_name FROM layout_options " .
1701     "WHERE form_id = ? AND uor > 0 " .
1702     "ORDER BY group_name, seq", array($formtype));
1703
1704         $first = true;
1705         while ($frow = sqlFetchArray($fres)) {
1706                 $this_group = isset($frow['group_name']) ? $frow['group_name'] : "" ;
1707                 $titlecols  = isset($frow['titlecols']) ? $frow['titlecols'] : "";
1708                 $datacols   = isset($frow['datacols']) ? $frow['datacols'] : "";
1709                 $data_type  = isset($frow['data_type']) ? $frow['data_type'] : "";
1710                 $field_id   = isset($frow['field_id']) ? $frow['field_id'] : "";
1711                 $list_id    = isset($frow['list_id']) ? $frow['list_id'] : "";
1712                 $currvalue  = '';
1713
1714                 $group_fields_query = sqlStatement("SELECT * FROM layout_options " .
1715                 "WHERE form_id = ? AND uor > 0 AND group_name = ? " .
1716                 "ORDER BY seq", array($formtype, $this_group) );
1717         ?>
1718
1719                 <div class="tab <?php echo $first ? 'current' : '' ?>">
1720                         <table border='0' cellpadding='0'>
1721
1722                         <?php
1723                                 while ($group_fields = sqlFetchArray($group_fields_query)) {
1724
1725                                         $titlecols  = $group_fields['titlecols'];
1726                                         $datacols   = $group_fields['datacols'];
1727                                         $data_type  = $group_fields['data_type'];
1728                                         $field_id   = $group_fields['field_id'];
1729                                         $list_id    = $group_fields['list_id'];
1730                                         $currvalue  = '';
1731
1732                                         if ($formtype == 'DEM') {
1733                                           if ($GLOBALS['athletic_team']) {
1734                                                 // Skip fitness level and return-to-play date because those appear
1735                                                 // in a special display/update form on this page.
1736                                                 if ($field_id === 'fitness' || $field_id === 'userdate1') continue;
1737                                           }
1738                                           if (strpos($field_id, 'em_') === 0) {
1739                                         // Skip employer related fields, if it's disabled.
1740                                                 if ($GLOBALS['omit_employers']) continue;
1741                                                 $tmp = substr($field_id, 3);
1742                                                 if (isset($result2[$tmp])) $currvalue = $result2[$tmp];
1743                                           }
1744                                           else {
1745                                                 if (isset($result1[$field_id])) $currvalue = $result1[$field_id];
1746                                           }
1747                                         }
1748                                         else {
1749                                           if (isset($result1[$field_id])) $currvalue = $result1[$field_id];
1750                                         }
1751
1752                                         // Handle a data category (group) change.
1753                                         if (strcmp($this_group, $last_group) != 0) {
1754                                           $group_name = substr($this_group, 1);
1755                                           // totally skip generating the employer category, if it's disabled.
1756                                           if ($group_name === 'Employer' && $GLOBALS['omit_employers']) continue;
1757                                           $last_group = $this_group;
1758                                         }
1759
1760                                         // Handle starting of a new row.
1761                                         if (($titlecols > 0 && $cell_count >= $CPR) || $cell_count == 0) {
1762                                           disp_end_row();
1763                                           echo "<tr>";
1764                                         }
1765
1766                                         if ($item_count == 0 && $titlecols == 0) {
1767                                                 $titlecols = 1;
1768                                         }
1769
1770                                         // Handle starting of a new label cell.
1771                                         if ($titlecols > 0) {
1772                                           disp_end_cell();
1773                                           $titlecols_esc = htmlspecialchars( $titlecols, ENT_QUOTES);
1774                                           echo "<td class='label' colspan='$titlecols_esc' ";
1775                                           echo ">";
1776                                           $cell_count += $titlecols;
1777                                         }
1778                                         ++$item_count;
1779
1780                                         // Added 5-09 by BM - Translate label if applicable
1781                                         if ($group_fields['title']) echo htmlspecialchars(xl_layout_label($group_fields['title']).":",ENT_NOQUOTES); else echo "&nbsp;";
1782
1783                                         // Handle starting of a new data cell.
1784                                         if ($datacols > 0) {
1785                                           disp_end_cell();
1786                                           $datacols_esc = htmlspecialchars( $datacols, ENT_QUOTES);
1787                                           echo "<td class='text data' colspan='$datacols_esc'";
1788                                           echo ">";
1789                                           $cell_count += $datacols;
1790                                         }
1791
1792                                         ++$item_count;
1793                                         echo generate_display_field($group_fields, $currvalue);
1794                                   }
1795
1796         disp_end_row();
1797                         ?>
1798
1799                         </table>
1800                 </div>
1801
1802          <?php
1803
1804         $first = false;
1805
1806         }
1807
1808 }
1809
1810 function display_layout_tabs_data_editable($formtype, $result1, $result2='') {
1811   global $item_count, $cell_count, $last_group, $CPR;
1812
1813   $fres = sqlStatement("SELECT distinct group_name FROM layout_options " .
1814     "WHERE form_id = ? AND uor > 0 " .
1815     "ORDER BY group_name, seq", array($formtype) );
1816
1817         $first = true;
1818         while ($frow = sqlFetchArray($fres)) {
1819                 $this_group = $frow['group_name'];
1820                 $group_name = substr($this_group, 1);
1821                 $group_name_esc = htmlspecialchars( $group_name, ENT_QUOTES);
1822                 $titlecols  = $frow['titlecols'];
1823                 $datacols   = $frow['datacols'];
1824                 $data_type  = $frow['data_type'];
1825                 $field_id   = $frow['field_id'];
1826                 $list_id    = $frow['list_id'];
1827                 $currvalue  = '';
1828
1829                 $group_fields_query = sqlStatement("SELECT * FROM layout_options " .
1830                 "WHERE form_id = ? AND uor > 0 AND group_name = ? " .
1831                 "ORDER BY seq", array($formtype,$this_group) );
1832         ?>
1833
1834                 <div class="tab <?php echo $first ? 'current' : '' ?>" id="tab_<?php echo $group_name_esc?>" >
1835                         <table border='0' cellpadding='0'>
1836
1837                         <?php
1838                                 while ($group_fields = sqlFetchArray($group_fields_query)) {
1839
1840                                         $titlecols  = $group_fields['titlecols'];
1841                                         $datacols   = $group_fields['datacols'];
1842                                         $data_type  = $group_fields['data_type'];
1843                                         $field_id   = $group_fields['field_id'];
1844                                         $list_id    = $group_fields['list_id'];
1845                                         $currvalue  = '';
1846
1847                                         if ($formtype == 'DEM') {
1848                                           if ($GLOBALS['athletic_team']) {
1849                                                 // Skip fitness level and return-to-play date because those appear
1850                                                 // in a special display/update form on this page.
1851                                                 if ($field_id === 'fitness' || $field_id === 'userdate1') continue;
1852                                           }
1853                                           if (strpos($field_id, 'em_') === 0) {
1854                                         // Skip employer related fields, if it's disabled.
1855                                                 if ($GLOBALS['omit_employers']) continue;
1856                                                 $tmp = substr($field_id, 3);
1857                                                 if (isset($result2[$tmp])) $currvalue = $result2[$tmp];
1858                                           }
1859                                           else {
1860                                                 if (isset($result1[$field_id])) $currvalue = $result1[$field_id];
1861                                           }
1862                                         }
1863                                         else {
1864                                           if (isset($result1[$field_id])) $currvalue = $result1[$field_id];
1865                                         }
1866
1867                                         // Handle a data category (group) change.
1868                                         if (strcmp($this_group, $last_group) != 0) {
1869                                           $group_name = substr($this_group, 1);
1870                                           // totally skip generating the employer category, if it's disabled.
1871                                           if ($group_name === 'Employer' && $GLOBALS['omit_employers']) continue;
1872                                           $last_group = $this_group;
1873                                         }
1874
1875                                         // Handle starting of a new row.
1876                                         if (($titlecols > 0 && $cell_count >= $CPR) || $cell_count == 0) {
1877                                           disp_end_row();
1878                                           echo "<tr>";
1879                                         }
1880
1881                                         if ($item_count == 0 && $titlecols == 0) {
1882                                                 $titlecols = 1;
1883                                         }
1884
1885                                         // Handle starting of a new label cell.
1886                                         if ($titlecols > 0) {
1887                                           disp_end_cell();
1888                                           $titlecols_esc = htmlspecialchars( $titlecols, ENT_QUOTES);
1889                                           echo "<td class='label' colspan='$titlecols_esc' ";
1890                                           echo ">";
1891                                           $cell_count += $titlecols;
1892                                         }
1893                                         ++$item_count;
1894
1895                                         // Added 5-09 by BM - Translate label if applicable
1896                                         if ($group_fields['title']) echo (htmlspecialchars( xl_layout_label($group_fields['title']), ENT_NOQUOTES).":"); else echo "&nbsp;";
1897
1898                                         // Handle starting of a new data cell.
1899                                         if ($datacols > 0) {
1900                                           disp_end_cell();
1901                                           $datacols_esc = htmlspecialchars( $datacols, ENT_QUOTES);
1902                                           echo "<td class='text data' colspan='$datacols_esc'";
1903                                           echo ">";
1904                                           $cell_count += $datacols;
1905                                         }
1906
1907                                         ++$item_count;
1908                                         echo generate_form_field($group_fields, $currvalue);
1909                                   }
1910                         ?>
1911
1912                         </table>
1913                 </div>
1914
1915          <?php
1916
1917         $first = false;
1918
1919         }
1920 }
1921
1922 // From the currently posted HTML form, this gets the value of the
1923 // field corresponding to the provided layout_options table row.
1924 //
1925 function get_layout_form_value($frow) {
1926   // Bring in $sanitize_all_escapes variable, which will decide
1927   //  the variable escaping method.
1928   global $sanitize_all_escapes;
1929
1930   $maxlength = $frow['max_length'];
1931   $data_type = $frow['data_type'];
1932   $field_id  = $frow['field_id'];
1933   $value  = '';
1934   if (isset($_POST["form_$field_id"])) {
1935     if ($data_type == 21) {
1936       // $_POST["form_$field_id"] is an array of checkboxes and its keys
1937       // must be concatenated into a |-separated string.
1938       foreach ($_POST["form_$field_id"] as $key => $val) {
1939         if (strlen($value)) $value .= '|';
1940         $value .= $key;
1941       }
1942     }
1943     else if ($data_type == 22) {
1944       // $_POST["form_$field_id"] is an array of text fields to be imploded
1945       // into "key:value|key:value|...".
1946       foreach ($_POST["form_$field_id"] as $key => $val) {
1947         $val = str_replace('|', ' ', $val);
1948         if (strlen($value)) $value .= '|';
1949         $value .= "$key:$val";
1950       }
1951     }
1952     else if ($data_type == 23) {
1953       // $_POST["form_$field_id"] is an array of text fields with companion
1954       // radio buttons to be imploded into "key:n:notes|key:n:notes|...".
1955       foreach ($_POST["form_$field_id"] as $key => $val) {
1956         $restype = $_POST["radio_{$field_id}"][$key];
1957         if (empty($restype)) $restype = '0';
1958         $val = str_replace('|', ' ', $val);
1959         if (strlen($value)) $value .= '|';
1960         $value .= "$key:$restype:$val";
1961       }
1962     }
1963     else if ($data_type == 25) {
1964       // $_POST["form_$field_id"] is an array of text fields with companion
1965       // checkboxes to be imploded into "key:n:notes|key:n:notes|...".
1966       foreach ($_POST["form_$field_id"] as $key => $val) {
1967         $restype = empty($_POST["check_{$field_id}"][$key]) ? '0' : '1';
1968         $val = str_replace('|', ' ', $val);
1969         if (strlen($value)) $value .= '|';
1970         $value .= "$key:$restype:$val";
1971       }
1972     }
1973     else if ($data_type == 28 || $data_type == 32) {
1974       // $_POST["form_$field_id"] is an date text fields with companion
1975       // radio buttons to be imploded into "notes|type|date".
1976       $restype = $_POST["radio_{$field_id}"];
1977       if (empty($restype)) $restype = '0';
1978       $resdate = str_replace('|', ' ', $_POST["date_$field_id"]);
1979       $resnote = str_replace('|', ' ', $_POST["form_$field_id"]);
1980       if ($data_type == 32)
1981       {
1982       //VicarePlus :: Smoking status data is imploded into "note|type|date|list".
1983       $reslist = str_replace('|', ' ', $_POST["form_$field_id"]);
1984       $res_text_note = str_replace('|', ' ', $_POST["form_text_$field_id"]);
1985       $value = "$res_text_note|$restype|$resdate|$reslist";
1986       }
1987       else
1988       $value = "$resnote|$restype|$resdate";
1989     }
1990     else {
1991       $value = $_POST["form_$field_id"];
1992     }
1993   }
1994
1995   // Better to die than to silently truncate data!
1996   if ($maxlength && $maxlength != 0 && strlen($value) > $maxlength)
1997     die(htmlspecialchars( xl('ERROR: Field') . " '$field_id' " . xl('is too long'), ENT_NOQUOTES) .
1998     ":<br />&nbsp;<br />".htmlspecialchars( $value, ENT_NOQUOTES));
1999
2000   // Make sure the return value is quote-safe.
2001   if ($sanitize_all_escapes) {
2002     //escapes already removed and using binding/placemarks in sql calls
2003     // so only need to trim value
2004     return trim($value);
2005   }
2006   else {
2007     //need to explicitly prepare value
2008     return formTrim($value);
2009   }
2010 }
2011
2012 // Generate JavaScript validation logic for the required fields.
2013 //
2014 function generate_layout_validation($form_id) {
2015   $fres = sqlStatement("SELECT * FROM layout_options " .
2016     "WHERE form_id = ? AND uor > 0 AND field_id != '' " .
2017     "ORDER BY group_name, seq", array($form_id) );
2018
2019   while ($frow = sqlFetchArray($fres)) {
2020     if ($frow['uor'] < 2) continue;
2021     $data_type = $frow['data_type'];
2022     $field_id  = $frow['field_id'];
2023     $fldtitle  = $frow['title'];
2024     if (!$fldtitle) $fldtitle  = $frow['description'];
2025     $fldname   = htmlspecialchars( "form_$field_id", ENT_QUOTES);
2026     switch($data_type) {
2027       case  1:
2028       case 11:
2029       case 12:
2030       case 13:
2031       case 14:
2032       case 26:
2033       case 33:
2034         echo
2035         " if (f.$fldname.selectedIndex <= 0) {\n" .
2036         "  if (f.$fldname.focus) f.$fldname.focus();\n" .
2037         "               errMsgs[errMsgs.length] = '" . htmlspecialchars( (xl_layout_label($fldtitle)), ENT_QUOTES) . "'; \n" .
2038         " }\n";
2039         break;
2040       case 27: // radio buttons
2041         echo
2042         " var i = 0;\n" .
2043         " for (; i < f.$fldname.length; ++i) if (f.$fldname[i].checked) break;\n" .
2044         " if (i >= f.$fldname.length) {\n" .
2045         "               errMsgs[errMsgs.length] = '" . htmlspecialchars( (xl_layout_label($fldtitle)), ENT_QUOTES) . "'; \n" .
2046         " }\n";
2047         break;
2048       case  2:
2049       case  3:
2050       case  4:
2051       case 15:
2052         echo
2053         " if (trimlen(f.$fldname.value) == 0) {\n" .
2054         "               if (f.$fldname.focus) f.$fldname.focus();\n" .
2055                 "               $('#" . $fldname . "').parents('div.tab').each( function(){ var tabHeader = $('#header_' + $(this).attr('id') ); tabHeader.css('color','red'); } ); " .
2056                 "               $('#" . $fldname . "').attr('style','background:red'); \n" .
2057         "               errMsgs[errMsgs.length] = '" . htmlspecialchars( (xl_layout_label($fldtitle)), ENT_QUOTES) . "'; \n" .
2058         " } else { " .
2059                 "               $('#" . $fldname . "').attr('style',''); " .
2060                 "               $('#" . $fldname . "').parents('div.tab').each( function(){ var tabHeader = $('#header_' + $(this).attr('id') ); tabHeader.css('color','');  } ); " .
2061                 " } \n";
2062         break;
2063     }
2064   }
2065 }
2066
2067 /**
2068  * DROPDOWN FOR FACILITIES
2069  *
2070  * build a dropdown with all facilities
2071  *
2072  * @param string $selected - name of the currently selected facility
2073  *                           use '0' for "unspecified facility"
2074  *                           use '' for "All facilities" (the default)
2075  * @param string $name - the name/id for select form (defaults to "form_facility")
2076  * @param boolean $allow_unspecified - include an option for "unspecified" facility
2077  *                                     defaults to true
2078  * @return void - just echo the html encoded string
2079  *
2080  * Note: This should become a data-type at some point, according to Brady
2081  */
2082 function dropdown_facility($selected = '', $name = 'form_facility', $allow_unspecified = true, $allow_allfacilities = true) {
2083   $have_selected = false;
2084   $query = "SELECT id, name FROM facility ORDER BY name";
2085   $fres = sqlStatement($query);
2086
2087   $name = htmlspecialchars($name, ENT_QUOTES);
2088   echo "   <select name=\"$name\" id=\"$name\">\n";
2089
2090   if ($allow_allfacilities) {
2091     $option_value = '';
2092     $option_selected_attr = '';
2093     if ($selected == '') {
2094       $option_selected_attr = ' selected="selected"';
2095       $have_selected = true;
2096     }
2097     $option_content = htmlspecialchars('-- ' . xl('All Facilities') . ' --', ENT_NOQUOTES);
2098     echo "    <option value=\"$option_value\" $option_selected_attr>$option_content</option>\n";
2099   } elseif ($allow_unspecified) {
2100         $option_value = '0';
2101     $option_selected_attr = '';
2102     if ( $selected == '0' ) {
2103       $option_selected_attr = ' selected="selected"';
2104       $have_selected = true;
2105     }
2106     $option_content = htmlspecialchars('-- ' . xl('Unspecified') . ' --', ENT_NOQUOTES);
2107     echo "    <option value=\"$option_value\" $option_selected_attr>$option_content</option>\n";
2108     }
2109
2110   while ($frow = sqlFetchArray($fres)) {
2111     $facility_id = $frow['id'];
2112     $option_value = htmlspecialchars($facility_id, ENT_QUOTES);
2113     $option_selected_attr = '';
2114     if ($selected == $facility_id) {
2115       $option_selected_attr = ' selected="selected"';
2116       $have_selected = true;
2117     }
2118     $option_content = htmlspecialchars($frow['name'], ENT_NOQUOTES);
2119     echo "    <option value=\"$option_value\" $option_selected_attr>$option_content</option>\n";
2120   }
2121
2122   if ($allow_unspecified && $allow_allfacilities) {
2123     $option_value = '0';
2124     $option_selected_attr = '';
2125     if ( $selected == '0' ) {
2126       $option_selected_attr = ' selected="selected"';
2127       $have_selected = true;
2128     }
2129     $option_content = htmlspecialchars('-- ' . xl('Unspecified') . ' --', ENT_NOQUOTES);
2130     echo "    <option value=\"$option_value\" $option_selected_attr>$option_content</option>\n";
2131   }
2132
2133   if (!$have_selected) {
2134     $option_value = htmlspecialchars($selected, ENT_QUOTES);
2135     $option_label = htmlspecialchars('(' . xl('Do not change') . ')', ENT_QUOTES);
2136     $option_content = htmlspecialchars(xl('Missing or Invalid'), ENT_NOQUOTES);
2137     echo "    <option value='$option_value' label='$option_label' selected='selected'>$option_content</option>\n";
2138   }
2139   echo "   </select>\n";
2140 }
2141
2142 // Expand Collapse Widget
2143 //  This forms the header and functionality component of the widget. The information that is displayed
2144 //  then follows this function followed by a closing div tag
2145 //
2146 // $title is the title of the section (already translated)
2147 // $label is identifier used in the tag id's and sql columns
2148 // $buttonLabel is the button label text (already translated)
2149 // $buttonLink is the button link information
2150 // $buttonClass is any additional needed class elements for the button tag
2151 // $linkMethod is the button link method ('javascript' vs 'html')
2152 // $bodyClass is to set class(es) of the body
2153 // $auth is a flag to decide whether to show the button
2154 // $fixedWidth is to flag whether width is fixed
2155 // $forceExpandAlways is a flag to force the widget to always be expanded
2156 //
2157 function expand_collapse_widget($title, $label, $buttonLabel, $buttonLink, $buttonClass, $linkMethod, $bodyClass, $auth, $fixedWidth, $forceExpandAlways=false) {
2158   if ($fixedWidth) {
2159     echo "<div class='section-header'>";
2160   }
2161   else {
2162     echo "<div class='section-header-dynamic'>";
2163   }
2164   echo "<table><tr>";
2165   if ($auth) {
2166     // show button, since authorized
2167     // first prepare class string
2168     if ($buttonClass) {
2169       $class_string = "css_button_small ".htmlspecialchars( $buttonClass, ENT_NOQUOTES);
2170     }
2171     else {
2172       $class_string = "css_button_small";
2173     }
2174     // next, create the link
2175     if ($linkMethod == "javascript") {
2176       echo "<td><a class='" . $class_string . "' href='javascript:;' onclick='" . $buttonLink . "'";
2177     }
2178     else {
2179       echo "<td><a class='" . $class_string . "' href='" . $buttonLink . "'";
2180       if (!isset($_SESSION['patient_portal_onsite'])) {
2181         // prevent an error from occuring when calling the function from the patient portal
2182         echo " onclick='top.restoreSession()'";
2183       }
2184     }
2185     if (!$GLOBALS['concurrent_layout']) {
2186       echo " target='Main'";
2187     }
2188     echo "><span>" .
2189       htmlspecialchars( $buttonLabel, ENT_NOQUOTES) . "</span></a></td>";
2190   }
2191   if ($forceExpandAlways){
2192     // Special case to force the widget to always be expanded
2193     echo "<td><span class='text'><b>" . htmlspecialchars( $title, ENT_NOQUOTES) . "</b></span>";
2194     $indicatorTag ="style='display:none'";
2195   }
2196   $indicatorTag = isset($indicatorTag) ?  $indicatorTag : "";
2197   echo "<td><a " . $indicatorTag . " href='javascript:;' class='small' onclick='toggleIndicator(this,\"" .
2198     htmlspecialchars( $label, ENT_QUOTES) . "_ps_expand\")'><span class='text'><b>";
2199   echo htmlspecialchars( $title, ENT_NOQUOTES) . "</b></span>";
2200
2201   if (isset($_SESSION['patient_portal_onsite'])) {
2202     // collapse all entries in the patient portal
2203     $text = xl('expand');
2204   }
2205   else if (getUserSetting($label."_ps_expand")) {
2206     $text = xl('collapse');
2207   }
2208   else {
2209     $text = xl('expand');
2210   }
2211   echo " (<span class='indicator'>" . htmlspecialchars($text, ENT_QUOTES) .
2212     "</span>)</a></td>";
2213   echo "</tr></table>";
2214   echo "</div>";
2215   if ($forceExpandAlways) {
2216     // Special case to force the widget to always be expanded
2217     $styling = "";
2218   }
2219   else if (isset($_SESSION['patient_portal_onsite'])) {
2220     // collapse all entries in the patient portal
2221     $styling = "style='display:none'";
2222   }
2223   else if (getUserSetting($label."_ps_expand")) {
2224     $styling = "";
2225   }
2226   else {
2227     $styling = "style='display:none'";
2228   }
2229   if ($bodyClass) {
2230     $styling .= " class='" . $bodyClass . "'";
2231   }
2232   //next, create the first div tag to hold the information
2233   // note the code that calls this function will then place the ending div tag after the data
2234   echo "<div id='" . htmlspecialchars( $label, ENT_QUOTES) . "_ps_expand' " . $styling . ">";
2235 }
2236
2237 //billing_facility fuction will give the dropdown list which contain billing faciliies.
2238 function billing_facility($name,$select){
2239         $qsql = sqlStatement("SELECT id, name FROM facility WHERE billing_location = 1");
2240                 echo "   <select id='".htmlspecialchars($name, ENT_QUOTES)."' name='".htmlspecialchars($name, ENT_QUOTES)."'>";
2241                         while ($facrow = sqlFetchArray($qsql)) {
2242                                 $selected = ( $facrow['id'] == $select ) ? 'selected="selected"' : '' ;
2243                                  echo "<option value=".htmlspecialchars($facrow['id'],ENT_QUOTES)." $selected>".htmlspecialchars($facrow['name'], ENT_QUOTES)."</option>";
2244                                 }
2245                           echo "</select>";
2246 }
2247
2248 ?>