interface/globals.php

   1 <?php
   2 /* $Id$ */
   3 //  ------------------------------------------------------------------------ //
   4 //                OpenEMR Electronic Medical Records System                  //
   5 //                   Copyright (c) 2005-2010 oemr.org                        //
   6 //                       <http://www.oemr.org/>                              //
   7 //  ------------------------------------------------------------------------ //
   8 //  This program is free software; you can redistribute it and/or modify     //
   9 //  it under the terms of the GNU General Public License as published by     //
  10 //  the Free Software Foundation; either version 2 of the License, or        //
  11 //  (at your option) any later version.                                      //
  12 //                                                                           //
  13 //  You may not change or alter any portion of this comment or credits       //
  14 //  of supporting developers from this source code or any supporting         //
  15 //  source code which is considered copyrighted (c) material of the          //
  16 //  original comment or credit authors.                                      //
  17 //                                                                           //
  18 //  This program is distributed in the hope that it will be useful,          //
  19 //  but WITHOUT ANY WARRANTY; without even the implied warranty of           //
  20 //  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            //
  21 //  GNU General Public License for more details.                             //
  22 //                                                                           //
  23 //  You should have received a copy of the GNU General Public License        //
  24 //  along with this program; if not, write to the Free Software              //
  25 //  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA //
  26 //  ------------------------------------------------------------------------ //
  27
  28 // Is this windows or non-windows? Create a boolean definition.
  29 if (!defined('IS_WINDOWS'))
  30  define('IS_WINDOWS', (stripos(PHP_OS,'WIN') === 0));
  31
  32 // Some important php.ini overrides. Defaults for these values are often
  33 // too small.  You might choose to adjust them further.
  34 //
  35 ini_set('memory_limit', '64M');
  36 ini_set('session.gc_maxlifetime', '14400');
  37
  38 /* If the includer didn't specify, assume they want us to "fake" register_globals. */
  39 if (!isset($fake_register_globals)) {
  40         $fake_register_globals = TRUE;
  41 }
  42
  43 /* Pages with "myadmin" in the URL don't need register_globals. */
  44 $fake_register_globals =
  45         $fake_register_globals && (strpos($_SERVER['REQUEST_URI'],"myadmin") === FALSE);
  46
  47 // Emulates register_globals = On.  Moved to here from the bottom of this file
  48 // to address security issues.  Need to change everything requiring this!
  49 if ($fake_register_globals) {
  50   extract($_GET);
  51   extract($_POST);
  52 }
  53
  54 // This is for sanitization of all escapes.
  55 //  (ie. reversing magic quotes if it's set)
  56 if ($sanitize_all_escapes) {
  57   if (get_magic_quotes_gpc()) {
  58     function undoMagicQuotes($array, $topLevel=true) {
  59       $newArray = array();
  60       foreach($array as $key => $value) {
  61         if (!$topLevel) {
  62           $key = stripslashes($key);
  63         }
  64         if (is_array($value)) {
  65           $newArray[$key] = undoMagicQuotes($value, false);
  66         }
  67         else {
  68           $newArray[$key] = stripslashes($value);
  69         }
  70       }
  71       return $newArray;
  72     }
  73     $_GET = undoMagicQuotes($_GET);
  74     $_POST = undoMagicQuotes($_POST);
  75     $_COOKIE = undoMagicQuotes($_COOKIE);
  76     $_REQUEST = undoMagicQuotes($_REQUEST);
  77   }
  78 }
  79
  80 //
  81 // The webserver_root and web_root are now automatically collected.
  82 // If not working, can set manually below.
  83 // Auto collect the full absolute directory path for openemr.
  84 $webserver_root = dirname(dirname(__FILE__));
  85 if (IS_WINDOWS) {
  86  //convert windows path separators
  87  $webserver_root = str_replace("\\","/",$webserver_root);
  88 }
  89 // Auto collect the relative html path, i.e. what you would type into the web
  90 // browser after the server address to get to OpenEMR.
  91 $web_root = substr($webserver_root, strlen($_SERVER['DOCUMENT_ROOT']));
  92 // Ensure web_root starts with a path separator
  93 if (preg_match("/^[^\/]/",$web_root)) {
  94  $web_root = "/".$web_root;
  95 }
  96 // The webserver_root and web_root are now automatically collected in
  97 //  real time per above code. If above is not working, can uncomment and
  98 //  set manually here:
  99 //   $webserver_root = "/var/www/openemr"
 100 //   $web_root =  "/openemr"
 101 //
 102
 103 // This is the directory that contains site-specific data.  Change this
 104 // only if you have some reason to.
 105 $GLOBALS['OE_SITES_BASE'] = "$webserver_root/sites";
 106
 107 // The session name names a cookie stored in the browser.
 108 // If you modify session_name, then need to place the identical name in
 109 // the phpmyadmin file here: openemr/phpmyadmin/libraries/session.inc.php
 110 // at line 71. This was required after embedded new phpmyadmin version on
 111 // 05-12-2009 by Brady. Hopefully will figure out a more appropriate fix.
 112 // Now that restore_session() is implemented in javaScript, session IDs are
 113 // effectively saved in the top level browser window and there is no longer
 114 // any need to change the session name for different OpenEMR instances.
 115 session_name("OpenEMR");
 116
 117 session_start();
 118
 119 // Set the site ID if required.  This must be done before any database
 120 // access is attempted.
 121 if (empty($_SESSION['site_id']) || !empty($_GET['site'])) {
 122   if (!empty($_GET['site'])) {
 123     $tmp = $_GET['site'];
 124   }
 125   else {
 126     if (!$ignoreAuth) die("Site ID is missing from session data!");
 127     $tmp = $_SERVER['HTTP_HOST'];
 128     if (!is_dir($GLOBALS['OE_SITES_BASE'] . "/$tmp")) $tmp = "default";
 129   }
 130   if (!isset($_SESSION['site_id']) || $_SESSION['site_id'] != $tmp) {
 131     $_SESSION['site_id'] = $tmp;
 132     error_log("Session site ID has been set to '$tmp'"); // debugging
 133   }
 134 }
 135
 136 // Set the site-specific directory path.
 137 $GLOBALS['OE_SITE_DIR'] = $GLOBALS['OE_SITES_BASE'] . "/" . $_SESSION['site_id'];
 138
 139 require_once($GLOBALS['OE_SITE_DIR'] . "/config.php");
 140
 141 // Collecting the utf8 disable flag from the sqlconf.php file in order
 142 // to set the correct html encoding. utf8 vs iso-8859-1. If flag is set
 143 // then set to iso-8859-1.
 144 require_once(dirname(__FILE__) . "/../library/sqlconf.php");
 145 if (!$disable_utf8_flag) {
 146  ini_set('default_charset', 'utf-8');
 147  $HTML_CHARSET = "UTF-8";
 148 }
 149 else {
 150  ini_set('default_charset', 'iso-8859-1');
 151  $HTML_CHARSET = "ISO-8859-1";
 152 }
 153
 154 // Root directory, relative to the webserver root:
 155 $GLOBALS['rootdir'] = "$web_root/interface";
 156 $rootdir = $GLOBALS['rootdir'];
 157 // Absolute path to the source code include and headers file directory (Full path):
 158 $GLOBALS['srcdir'] = "$webserver_root/library";
 159 // Absolute path to the location of documentroot directory for use with include statements:
 160 $GLOBALS['fileroot'] = "$webserver_root";
 161 // Absolute path to the location of interface directory for use with include statements:
 162 $include_root = "$webserver_root/interface";
 163 // Absolute path to the location of documentroot directory for use with include statements:
 164 $GLOBALS['webroot'] = $web_root;
 165
 166 $GLOBALS['template_dir'] = $GLOBALS['fileroot'] . "/templates/";
 167 $GLOBALS['incdir'] = $include_root;
 168 // Location of the login screen file
 169 $GLOBALS['login_screen'] = $GLOBALS['rootdir'] . "/login_screen.php";
 170
 171 // Include the translation engine. This will also call sql.inc to
 172 //  open the openemr mysql connection.
 173 include_once (dirname(__FILE__) . "/../library/translation.inc.php");
 174
 175 // Includes functions for date internationalization
 176 include_once (dirname(__FILE__) . "/../library/date_functions.php");
 177
 178 // Defaults for specific applications.
 179 $GLOBALS['athletic_team'] = false;
 180 $GLOBALS['weight_loss_clinic'] = false;
 181 $GLOBALS['ippf_specific'] = false;
 182 $GLOBALS['cene_specific'] = false;
 183
 184 // Defaults for drugs and products.
 185 $GLOBALS['inhouse_pharmacy'] = false;
 186 $GLOBALS['sell_non_drug_products'] = 0;
 187
 188 $glrow = sqlQuery("SHOW TABLES LIKE 'globals'");
 189 if (!empty($glrow)) {
 190   // Set global parameters from the database globals table.
 191   // Some parameters require custom handling.
 192   //
 193   $GLOBALS['language_menu_show'] = array();
 194   $glres = sqlStatement("SELECT gl_name, gl_index, gl_value FROM globals " .
 195     "ORDER BY gl_name, gl_index");
 196   while ($glrow = sqlFetchArray($glres)) {
 197     $gl_name  = $glrow['gl_name'];
 198     $gl_value = $glrow['gl_value'];
 199     if ($gl_name == 'language_menu_other') {
 200       $GLOBALS['language_menu_show'][] = $gl_value;
 201     }
 202     else if ($gl_name == 'css_header') {
 203       $GLOBALS[$gl_name] = "$rootdir/themes/" . $gl_value;
 204     }
 205     else if ($gl_name == 'specific_application') {
 206       if      ($gl_value == '1') $GLOBALS['athletic_team'] = true;
 207       else if ($gl_value == '2') $GLOBALS['ippf_specific'] = true;
 208       else if ($gl_value == '3') $GLOBALS['weight_loss_clinic'] = true;
 209     }
 210     else if ($gl_name == 'inhouse_pharmacy') {
 211       if ($gl_value) $GLOBALS['inhouse_pharmacy'] = true;
 212       if ($gl_value == '2') $GLOBALS['sell_non_drug_products'] = 1;
 213       else if ($gl_value == '3') $GLOBALS['sell_non_drug_products'] = 2;
 214     }
 215     else {
 216       $GLOBALS[$gl_name] = $glrow['gl_value'];
 217     }
 218   }
 219   // Language cleanup stuff.
 220   $GLOBALS['language_menu_login'] = false;
 221   if ((count($GLOBALS['language_menu_show']) >= 1) || $GLOBALS['language_menu_showall']) {
 222     $GLOBALS['language_menu_login'] = true;
 223   }
 224   //
 225   // End of globals table processing.
 226 }
 227 else {
 228   // Temporary stuff to handle the case where the globals table does not
 229   // exist yet.  This will happen in sql_upgrade.php on upgrading to the
 230   // first release containing this table.
 231   $GLOBALS['language_menu_login'] = true;
 232   $GLOBALS['language_menu_showall'] = true;
 233   $GLOBALS['language_menu_show'] = array('English (Standard)','Swedish');
 234   $GLOBALS['language_default'] = "English (Standard)";
 235   $GLOBALS['translate_layout'] = true;
 236   $GLOBALS['translate_lists'] = true;
 237   $GLOBALS['translate_gacl_groups'] = true;
 238   $GLOBALS['translate_form_titles'] = true;
 239   $GLOBALS['translate_document_categories'] = true;
 240   $GLOBALS['translate_appt_categories'] = true;
 241   $GLOBALS['concurrent_layout'] = 2;
 242   $timeout = 7200;
 243   $openemr_name = 'OpenEMR';
 244   $css_header = "$rootdir/themes/style_sky_blue.css";
 245   $GLOBALS['css_header'] = $css_header;
 246   $GLOBALS['schedule_start'] = 8;
 247   $GLOBALS['schedule_end'] = 17;
 248   $GLOBALS['calendar_interval'] = 15;
 249   $GLOBALS['phone_country_code'] = '1';
 250   $GLOBALS['disable_non_default_groups'] = true;
 251   $GLOBALS['ippf_specific'] = false;
 252 }
 253
 254 //
 255 // Lists and Layouts Control Section
 256 //
 257 //
 258 // 'state_custom_addlist_widget'
 259 //  - If true, then will display a customized addlist widget for
 260 //    state list entries (will ask for title and abbreviation)
 261 $GLOBALS['state_custom_addlist_widget'] = true;
 262 $GLOBALS['state_list'] = "state";
 263 $GLOBALS['country_list'] = "country";
 264
 265 // Option to set the top default window. By default, it is set
 266 // to the calendar screen. The starting directory is
 267 // interface/main/ , hence:
 268 //    The calendar screen is 'main_info.php' .
 269 //    The patient search/add screen is '../new/new.php' .
 270 $GLOBALS['default_top_pane'] = 'main_info.php';
 271
 272 // Default category for find_patient screen
 273 $GLOBALS['default_category'] = 5;
 274 $GLOBALS['default_event_title'] = 'Office Visit';
 275
 276 // If >0 this will enforce a separate PHP session for each top-level
 277 // browser window.  You must log in separately for each.  This is not
 278 // thoroughly tested yet and some browsers might have trouble with it,
 279 // so make it 0 if you must.  Alternatively, you can set it to 2 to be
 280 // notified when the session ID changes.
 281 $GLOBALS['restore_sessions'] = 1; // 0=no, 1=yes, 2=yes+debug
 282
 283 // Theme definition.  All this stuff should be moved to CSS.
 284 //
 285 if ($GLOBALS['concurrent_layout']) {
 286  $top_bg_line = ' bgcolor="#dddddd" ';
 287  $GLOBALS['style']['BGCOLOR2'] = "#dddddd";
 288  $bottom_bg_line = $top_bg_line;
 289  $title_bg_line = ' bgcolor="#bbbbbb" ';
 290  $nav_bg_line = ' bgcolor="#94d6e7" ';
 291 } else {
 292  $top_bg_line = ' bgcolor="#94d6e7" ';
 293  $GLOBALS['style']['BGCOLOR2'] = "#94d6e7";
 294  $bottom_bg_line = ' background="'.$rootdir.'/pic/aquabg.gif" ';
 295  $title_bg_line = ' bgcolor="#aaffff" ';
 296  $nav_bg_line = ' bgcolor="#94d6e7" ';
 297 }
 298 $login_filler_line = ' bgcolor="#f7f0d5" ';
 299 $login_body_line = ' background="'.$rootdir.'/pic/aquabg.gif" ';
 300 $logocode="<img src='$rootdir/pic/logo_sky.gif'>";
 301 $linepic = "$rootdir/pic/repeat_vline9.gif";
 302 $table_bg = ' bgcolor="#cccccc" ';
 303 $GLOBALS['style']['BGCOLOR1'] = "#cccccc";
 304 $GLOBALS['style']['TEXTCOLOR11'] = "#222222";
 305 $GLOBALS['style']['HIGHLIGHTCOLOR'] = "#dddddd";
 306 $GLOBALS['style']['BOTTOM_BG_LINE'] = $bottom_bg_line;
 307 // The height in pixels of the Logo bar at the top of the login page:
 308 $GLOBALS['logoBarHeight'] = 110;
 309 // The height in pixels of the Navigation bar:
 310 $GLOBALS['navBarHeight'] = 22;
 311 // The height in pixels of the Title bar:
 312 $GLOBALS['titleBarHeight'] = 20;
 313
 314 // The assistant word, MORE printed next to titles that can be clicked:
 315 //   Note this label gets translated here via the xl function
 316 //    -if you don't want it translated, then strip the xl function away
 317 $tmore = xl('(More)');
 318 // The assistant word, BACK printed next to titles that return to previous screens:
 319 //   Note this label gets translated here via the xl function
 320 //    -if you don't want it translated, then strip the xl function away
 321 $tback = xl('(Back)');
 322
 323 // This is the idle logout function:
 324 // if a page has not been refreshed within this many seconds, the interface
 325 // will return to the login page
 326 if (!empty($special_timeout)) {
 327   $timeout = intval($special_timeout);
 328 }
 329
 330 //Version tags
 331 require_once(dirname(__FILE__) . "/../version.php");
 332 $openemr_version = "$v_major.$v_minor.$v_patch".$v_tag; // Version tag used by program
 333
 334 $srcdir = $GLOBALS['srcdir'];
 335 $login_screen = $GLOBALS['login_screen'];
 336 $GLOBALS['css_header'] = $css_header;
 337 $GLOBALS['backpic'] = $backpic;
 338
 339 // 1 = send email message to given id for Emergency Login user activation,
 340 // else 0.
 341 $GLOBALS['Emergency_Login_email'] = $GLOBALS['Emergency_Login_email_id'] ? 1 : 0;
 342
 343 //set include_de_identification to enable De-identification (currently de-identification works fine only with linux machines)
 344 //Run de_identification_upgrade.php script to upgrade OpenEMR database to include procedures,
 345 //functions, tables for de-identification(Mysql root user and password is required for successful
 346 //execution of the de-identification upgrade script)
 347 $GLOBALS['include_de_identification']=0;
 348 // Include the authentication module code here, but the rule is
 349 // if the file has the word "login" in the source code file name,
 350 // don't include the authentication module - we do this to avoid
 351 // include loops.
 352
 353 if (!$ignoreAuth) {
 354   include_once("$srcdir/auth.inc");
 355 }
 356
 357 // If you do not want your accounting system to have a customer added to it
 358 // for each insurance company, then set this to true.  SQL-Ledger currently
 359 // (2005-03-21) does nothing useful with insurance companies as customers.
 360 $GLOBALS['insurance_companies_are_not_customers'] = true;
 361
 362 // This is the background color to apply to form fields that are searchable.
 363 // Currently it is applicable only to the "Search or Add Patient" form.
 364 $GLOBALS['layout_search_color'] = '#ffff55';
 365
 366 //EMAIL SETTINGS
 367 $SMTP_Auth = !empty($GLOBALS['SMTP_USER']);
 368
 369 // The following credentials are provided by OpenEMR Support LLC for testing.
 370 // When you sign up with their Lab Exchange service, they will provide you with your own credentials.
 371
 372 /* use this for testing
 373 $LAB_EXCHANGE_SITEID   = "3";
 374 $LAB_EXCHANGE_TOKEN    = "12345";
 375 $LAB_EXCHANGE_ENDPOINT = "https://openemrsupport.com:29443/len/api";
 376 */
 377
 378 $LAB_EXCHANGE_SITEID   = "";
 379 $LAB_EXCHANGE_TOKEN    = "";
 380 $LAB_EXCHANGE_ENDPOINT = "";
 381
 382 // If you want Hylafax support then uncomment and customize the following
 383 // statements, and also customize custom/faxcover.txt:
 384 //
 385 // $GLOBALS['hylafax_server']   = 'localhost';
 386 // $GLOBALS['hylafax_basedir']  = '/var/spool/fax';
 387 // $GLOBALS['hylafax_enscript'] = 'enscript -M Letter -B -e^ --margins=36:36:36:36';
 388
 389 // For scanner support, uncomment and customize the following.  This is
 390 // the directory in which scanned-in documents may be found, and may for
 391 // example be a smbfs-mounted share from the PC supporting the scanner:
 392 //
 393 // $GLOBALS['scanner_output_directory'] = '/mnt/scan_docs';
 394
 395 // Customize these if you are using SQL-Ledger with OpenEMR, or if you are
 396 // going to run sl_convert.php to convert from SQL-Ledger.
 397 //
 398 $sl_cash_acc    = '1060';       // sql-ledger account number for checking account
 399 $sl_ar_acc      = '1200';       // sql-ledger account number for accounts receivable
 400 $sl_income_acc  = '4320';       // sql-ledger account number for medical services income
 401 $sl_services_id = 'MS';         // sql-ledger parts table id for medical services
 402 $sl_dbname      = 'sql-ledger'; // sql-ledger database name
 403 $sl_dbuser      = 'sql-ledger'; // sql-ledger database login name
 404 $sl_dbpass      = 'secret';     // sql-ledger database login password
 405
 406 ///////////////////////// AUDIT LOGGING CONFIG ////////////////
 407 //$GLOBALS["enable_auditlog"]=0 is to off the logging feature in openemr
 408 //$GLOBALS["enable_auditlog"]=1 is to on the logging feature in openemr
 409 //patient-record:- set 1 (0 to off) to log the patient related activites like creation of new patient, encounters, history//etc.
 410 //scheduling:- set 1 (0 to off) to log the patient related scheduling like Appointments.
 411 //query:- set 1 (0 to off) to log all SQL SELECT queries.
 412 //order:- set 1 (0 to off) to log an orders like medical service or medical item (like a prescription).
 413 //security-administration:- set 1 to (0 to off) to log events such as creating/updating users/facility etc.
 414 //backup:- set 1 (0 to off) to log backup related activites.
 415 $GLOBALS["enable_auditlog"]=1;
 416 $GLOBALS["audit_events"]=array("patient-record"=>1,
 417                                 "scheduling"=>1,
 418                                 "query"=>0,
 419                                 "order"=>1,
 420                                 "security-administration"=>1,
 421                                 "backup"=>1,
 422                                 );
 423
 424 // Configure the settings below to enable Audit Trail and Node Authentication (ATNA).
 425 // See RFC 3881, RFC 5424, RFC 5425 for details.
 426 // atna_audit_host = The hostname of the audit repository machine
 427 // atna_audit_port = Listening port of the RFC 5425 TLS syslog server
 428 // atna_audit_localcert - Certificate to send to RFC 5425 TLS syslog server
 429 // atna_audit_cacert - CA Certificate for verifying the RFC 5425 TLS syslog server
 430 $GLOBALS['atna_audit_host'] = '';
 431 $GLOBALS['atna_audit_port'] = 6514;
 432 $GLOBALS['atna_audit_localcert'] = '';
 433 $GLOBALS['atna_audit_cacert'] = '';
 434 //////////////////////////////////////////////////////////////////
 435
 436 // Don't change anything below this line. ////////////////////////////
 437
 438 $encounter = empty($_SESSION['encounter']) ? 0 : $_SESSION['encounter'];
 439
 440 if (!empty($_GET['pid']) && empty($_SESSION['pid'])) {
 441   $_SESSION['pid'] = $_GET['pid'];
 442 }
 443 elseif (!empty($_POST['pid']) && empty($_SESSION['pid'])) {
 444   $_SESSION['pid'] = $_POST['pid'];
 445 }
 446 $pid = empty($_SESSION['pid']) ? 0 : $_SESSION['pid'];
 447 $userauthorized = empty($_SESSION['userauthorized']) ? 0 : $_SESSION['userauthorized'];
 448 $groupname = empty($_SESSION['authProvider']) ? 0 : $_SESSION['authProvider'];
 449
 450 // global interface function to format text length using ellipses
 451 function strterm($string,$length) {
 452   if (strlen($string) >= ($length-3)) {
 453     return substr($string,0,$length-3) . "...";
 454   } else {
 455     return $string;
 456   }
 457 }
 458
 459 // Override temporary_files_dir if PHP >= 5.2.1.
 460 if (version_compare(phpversion(), "5.2.1", ">=")) {
 461  $GLOBALS['temporary_files_dir'] = rtrim(sys_get_temp_dir(),'/');
 462 }
 463
 464 // turn off PHP compatibility warnings
 465 ini_set("session.bug_compat_warn","off");
 466
 467 //////////////////////////////////////////////////////////////////
 468 ?>