myportal/soap_service/server_side.php

   1 <?php
   2 // +-----------------------------------------------------------------------------+
   3 // Copyright (C) 2011 Z&H Consultancy Services Private Limited <sam@zhservices.com>
   4 //
   5 //
   6 // This program is free software; you can redistribute it and/or
   7 // modify it under the terms of the GNU General Public License
   8 // as published by the Free Software Foundation; either version 2
   9 // of the License, or (at your option) any later version.
  10 //
  11 //
  12 // This program is distributed in the hope that it will be useful,
  13 // but WITHOUT ANY WARRANTY; without even the implied warranty of
  14 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15 // GNU General Public License for more details.
  16 //
  17 //
  18 // A copy of the GNU General Public License is included along with this program:
  19 // openemr/interface/login/GnuGPL.html
  20 // For more information write to the Free Software
  21 // Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
  22 //
  23 // Author:   Eldho Chacko <eldho@zhservices.com>
  24 //           Jacob T Paul <jacob@zhservices.com>
  25 //           Vinish K     <vinish@zhservices.com>
  26 //
  27 // +------------------------------------------------------------------------------+
  28
  29 //SANITIZE ALL ESCAPES
  30 $sanitize_all_escapes=true;
  31 //
  32
  33 //STOP FAKE REGISTER GLOBALS
  34 $fake_register_globals=false;
  35 //
  36
  37 global $ISSUE_TYPES;
  38 $ignoreAuth=true;
  39 ob_start();
  40
  41 require_once("../../interface/globals.php");
  42 $err = '';
  43 if(!extension_loaded("soap")){
  44   dl("php_soap.dll");
  45 }
  46 require_once("server_med_rec.php");
  47 require_once("factory_class.php");
  48 class UserService extends Userforms
  49 {
  50
  51 //Converts a text to xml format.Format is as follows
  52   public function text_to_xml($data){
  53         if($this->valid($data[0])){
  54          $text = $data[1];
  55          $doc = new DOMDocument();
  56          $doc->formatOutput = true;
  57
  58          $root = $doc->createElement( "root" );
  59          $doc->appendChild( $root );
  60
  61          $level = $doc->createElement( "level" );
  62          $root->appendChild( $level );
  63
  64          $element = $doc->createElement( "text" );
  65          $element->appendChild(
  66            $doc->createTextNode( $text )
  67            );
  68          $level->appendChild( $element );
  69          return $doc->saveXML();
  70         }
  71         else{
  72                 throw new SoapFault("Server", "credentials failed");
  73         }
  74     }
  75
  76 //Accepts an array and returns the result in xml format.Format is as follows
  77
  78
  79   public function function_return_to_xml($var=array()){
  80
  81           $doc = new DOMDocument();
  82           $doc->formatOutput = true;
  83
  84           $root = $doc->createElement( "root" );
  85           $doc->appendChild( $root );
  86
  87
  88            $level = $doc->createElement( "level" );
  89            $root->appendChild( $level );
  90            foreach($var as $key=>$value){
  91            $element = $doc->createElement( "$key" );
  92            $element->appendChild(
  93                $doc->createTextNode( $value )
  94            );
  95            $level->appendChild( $element );
  96                }
  97
  98          return $doc->saveXML();
  99
 100     }
 101
 102    //When a filled PDf is rejected During audit , the file is deleted
 103
 104
 105   public function delete_file($data){
 106         if($this->valid($data[0])){
 107          $file_name_with_path=$data[1];
 108          @unlink($file_name_with_path);
 109         }
 110         else{
 111                 throw new SoapFault("Server", "credentials failed");
 112         }
 113     }
 114
 115
 116 //Accepts a file path.Fetches the file in xml format.
 117 //Transfer the file to portal in XML format
 118   public function file_to_xml($data){
 119         if($this->valid($data[0])){
 120            $file_name_with_path=$data[1];
 121            $path_parts = pathinfo($file_name_with_path);
 122            $handler = fopen($file_name_with_path,"rb");
 123            $returnData = fread($handler,filesize($file_name_with_path));
 124            fclose($handler);
 125            $doc = new DOMDocument();
 126            $doc->formatOutput = true;
 127
 128            $root = $doc->createElement( "root" );
 129            $doc->appendChild( $root );
 130
 131                $level = $doc->createElement( "level" );
 132                $root->appendChild( $level );
 133
 134            $filename = $doc->createElement( "name" );
 135            $filename->appendChild(
 136            $doc->createTextNode( $path_parts['basename'] )
 137            );
 138            $level->appendChild( $filename );
 139
 140            $type = $doc->createElement( "type" );
 141            $type->appendChild(
 142            $doc->createTextNode( $path_parts['extension'] )
 143            );
 144            $level->appendChild( $type );
 145            $content = $doc->createElement( "file" );
 146            $content->appendChild(
 147            $doc->createTextNode( base64_encode($returnData) )
 148            );
 149            $level->appendChild( $content );
 150            return $doc->saveXML();
 151         }
 152         else{
 153                 throw new SoapFault("Server", "credentials failed");
 154         }
 155     }
 156
 157
 158  //File teceived from the portal  side is saved to OpenEMR
 159
 160   public function store_to_file($data){
 161         if($this->valid($data[0])){
 162                $file_name_with_path=$data[1];
 163                $data=$data[2];
 164                $savedpath=$GLOBALS['OE_SITE_DIR']."/documents/myportal/";
 165                if(is_dir($savedpath));
 166                else
 167                {
 168                        mkdir($savedpath,0777);
 169                        chmod($savedpath, 0777);
 170                }
 171                $savedpath=$GLOBALS['OE_SITE_DIR']."/documents/myportal/unsigned/";
 172                if(is_dir($savedpath));
 173                else
 174                {
 175                        mkdir($savedpath,0777);
 176                        chmod($savedpath, 0777);
 177                }
 178                $savedpath=$GLOBALS['OE_SITE_DIR']."/documents/myportal/signed/";
 179                if(is_dir($savedpath));
 180                else
 181                {
 182                        mkdir($savedpath,0777);
 183                        chmod($savedpath, 0777);
 184                }
 185                $savedpath=$GLOBALS['OE_SITE_DIR']."/documents/myportal/upload/";
 186                if(is_dir($savedpath));
 187                else
 188                {
 189                        mkdir($savedpath,0777);
 190                        chmod($savedpath, 0777);
 191                }
 192            $handler = fopen($file_name_with_path,"w");
 193            fwrite($handler, base64_decode($data));
 194            fclose($handler);
 195                chmod($file_name_with_path,0777);
 196         }
 197         else{
 198                 throw new SoapFault("Server", "credentials failed");
 199         }
 200         }
 201
 202
 203 //receive a batch of function calls received from Portal, execute it and return the results to the portal
 204 //The results will be stored in the key, which is received from portal.
 205
 206
 207 static  public function batch_despatch($var,$func,$data_credentials){
 208         global $pid;
 209         if(UserService::valid($data_credentials)){
 210         require_once("../../library/invoice_summary.inc.php");
 211         require_once("../../library/options.inc.php");
 212         require_once("../../library/acl.inc");
 213         require_once("../../library/patient.inc");
 214         if($func=='ar_responsible_party')
 215          {
 216                 $patient_id=$pid;
 217                 $encounter_id=$var['encounter'];
 218                 $x['ar_responsible_party']=ar_responsible_party($patient_id,$encounter_id);
 219                 return UserService::function_return_to_xml($x);
 220          }
 221         elseif($func=='getInsuranceData')
 222          {
 223                 $type=$var['type'];
 224                 $given=$var['given'];
 225                 $x=getInsuranceData($pid,$type,$given);
 226                 return UserService::function_return_to_xml($x);
 227          }
 228         elseif($func=='generate_select_list')
 229          {
 230                 $tag_name=$var['tag_name'];
 231                 $list_id=$var['list_id'];
 232                 $currvalue=$var['currvalue'];
 233                 $title=$var['title'];
 234                 $empty_name=$var['empty_name'];
 235                 $class=$var['class'];
 236                 $onchange=$var['onchange'];
 237                 $x['generate_select_list']=generate_select_list($tag_name,$list_id,$currvalue,$title,$empty_name,$class,$onchange);
 238                 return UserService::function_return_to_xml($x);
 239          }
 240         elseif($func=='xl_layout_label')
 241          {
 242                 $constant=$var['constant'];
 243                 $x['xl_layout_label']=xl_layout_label($constant);
 244                 return UserService::function_return_to_xml($x);
 245          }
 246         elseif($func=='generate_form_field')
 247          {
 248                 $frow=$var['frow'];
 249                 $currvalue=$var['currvalue'];
 250                 ob_start();
 251                 generate_form_field($frow,$currvalue);
 252                 $x['generate_form_field']=ob_get_contents();
 253                 ob_end_clean();
 254                 return UserService::function_return_to_xml($x);
 255          }
 256         elseif($func=='getInsuranceProviders')
 257          {
 258                 $i=$var['i'];
 259                 $provider=$var['provider'];
 260                 $insurancei=getInsuranceProviders();
 261                 $x=$insurancei;
 262                 return $x;
 263          }
 264         elseif($func=='get_layout_form_value')
 265          {
 266                 $frow=$var['frow'];
 267                 $_POST=$var['post_array'];
 268                 $x['get_layout_form_value']=get_layout_form_value($frow);
 269                 return UserService::function_return_to_xml($x);
 270          }
 271         elseif($func=='updatePatientData')
 272          {
 273                 $patient_data=$var['patient_data'];
 274                 $create=$var['create'];
 275                 updatePatientData($pid,$patient_data,$create);
 276                 $x['ok']='ok';
 277                 return UserService::function_return_to_xml($x);
 278          }
 279         elseif($func=='updateEmployerData')
 280          {
 281                 $employer_data=$var['employer_data'];
 282                 $create=$var['create'];
 283                 updateEmployerData($pid,$employer_data,$create);
 284                 $x['ok']='ok';
 285                 return UserService::function_return_to_xml($x);
 286          }
 287         elseif($func=='newHistoryData')
 288          {
 289                 newHistoryData($pid);
 290                 $x['ok']='ok';
 291                 return UserService::function_return_to_xml($x);
 292          }
 293         elseif($func=='newInsuranceData')
 294          {
 295                 $_POST=$var[0];
 296                 foreach($var as $key=>$value)
 297                  {
 298                         if($key>=3)//first 3 need to be skipped.
 299                          {
 300                           $var[$key]=formData($value);
 301                          }
 302                         if($key>=1)
 303                          {
 304                           $parameters[$key]=$var[$key];
 305                          }
 306                  }
 307                 $parameters[12]=fixDate($parameters[12]);
 308                 $parameters[27]=fixDate($parameters[27]);
 309                 call_user_func_array('newInsuranceData',$parameters);
 310                 $x['ok']='ok';
 311                 return UserService::function_return_to_xml($x);
 312          }
 313
 314         }
 315         else{
 316                 throw new SoapFault("Server", "credentials failed");
 317         }
 318     }
 319
 320   //Writing patient credentials to table
 321   public function insert_login_details($var)
 322        {
 323         global $pid;
 324         $data_credentials=$var[0];
 325         if(UserService::valid($data_credentials))
 326                  {
 327                         $username=$var['username'];
 328                         $authPass=$var['authPass'];
 329                         $query="insert into patient_access_offsite(pid,portal_username,portal_pwd) values (?,?,?)";
 330                         sqlInsert($query,array($pid,$username,$authPass));
 331                  }
 332                 else
 333                  {
 334                         throw new SoapFault("Server", "credentials failed");
 335                  }
 336         }
 337
 338
 339
 340 //Updating the password on a password change
 341
 342   public function update_password($var){
 343               $data_credentials=$var[0];
 344               global $pid;
 345        if(UserService::valid($data_credentials)=='existingpatient' || UserService::valid($data_credentials)=='newpatient'){
 346                $status = $var['new_pwd_status'];
 347                $pwd=$var['new_pwd'];
 348                $oldpwd = $var['old_pwd'];
 349                $set = '';
 350                $setarray = '';
 351                $where = '';
 352                if($status)
 353                {
 354                $where = "portal_pwd_status=? and pid=?";
 355                $set= "portal_pwd=?,portal_pwd_status=?";
 356                $setarray[]=$pwd;
 357                $setarray[]=$status;
 358                $setarray[]=0;
 359                $setarray[]=$pid;
 360                }
 361
 362                else
 363                {
 364                 $set= "portal_pwd=? ";
 365                $setarray[]=$pwd;
 366                $where = " pid=?";
 367                 $setarray[]=$pid;
 368                }
 369                $qry = "select * from  patient_access_offsite  WHERE pid=?  AND portal_pwd=?";
 370                $res=sqlStatement($qry,array($pid,$oldpwd));
 371                    if(sqlNumRows($res)>0)
 372                        {
 373                            $qry = "UPDATE  patient_access_offsite SET $set WHERE $where";
 374                            sqlStatement($qry,$setarray);
 375                            return 'ok';
 376                         }
 377                         else
 378                          {
 379                            return 'notok';
 380                          }
 381        }
 382        else{
 383                throw new SoapFault("Server", "credentials failed");
 384        }
 385     }
 386
 387     //appointment update
 388
 389
 390   public function update_openemr_appointment($var)
 391        {
 392               $data_credentials=$var[0];
 393               if(UserService::valid($data_credentials)=='existingpatient' || UserService::valid($data_credentials)=='newpatient'){
 394                      foreach($var[1] as $key=>$value)
 395                      {
 396                             $eid=explode('_',$var[1][$key]);
 397                             if($eid[0]=='calendar')
 398                             {
 399                                    sqlQuery("update openemr_postcalendar_events set pc_apptstatus='x' where pc_eid=?",array($eid[1]));
 400                             }
 401                             elseif($eid[0]=='audit')
 402                             {
 403                                    sqlQuery("update audit_master set approval_status='5' where id=?",array($eid[1]));
 404                             }
 405                      }
 406               }
 407               else{
 408                      throw new SoapFault("Server", "credentials failed");
 409               }
 410        }
 411
 412
 413    //Marking the Documents as ready to be signed
 414
 415   public function update_dlm_dld($var)
 416     {
 417         $data_credentials=$var[0];
 418        if(UserService::valid($data_credentials)){
 419
 420                 $qry=" UPDATE  documents_legal_detail set dld_signed=2 where dld_id=?";
 421                     sqlStatement($qry,array($var['dld_id']));
 422        }
 423        else{
 424                throw new SoapFault("Server", "credentials failed");
 425        }
 426     }
 427
 428
 429 //Setting PDF documets approve /denial status
 430
 431   public function update_dld_approve_deny($data){
 432       if($this->valid($data[0])){
 433         $qry = "UPDATE documents_legal_detail SET dld_signed=?,dld_denial_reason=? WHERE dld_id=?";
 434         sqlStatement($qry,$data[1]);
 435       }
 436       else{
 437         throw new SoapFault("Server", "credentials failed");
 438       }
 439     }
 440
 441     //Marking PDF documets as signed
 442
 443   public function update_dld_signed($data){
 444       if($this->valid($data[0])){
 445         $qry = "UPDATE documents_legal_detail SET dld_signed=1,dld_filepath=?,dld_filename=? WHERE dld_id=?";
 446         sqlStatement($qry,$data[1]);
 447       }
 448       else{
 449         throw new SoapFault("Server", "credentials failed");
 450       }
 451     }
 452
 453     //Marking PDF documets for audit.
 454
 455   public function update_dld_pending($data){
 456       if($this->valid($data[0])){
 457         $qry = "UPDATE documents_legal_detail SET dld_signed=0,dld_filepath=?,dld_filename=?, dld_file_for_pdf_generation=? WHERE dld_id=?";
 458         sqlStatement($qry,$data[1]);
 459       }
 460       else{
 461         throw new SoapFault("Server", "credentials failed");
 462       }
 463   }
 464
 465
 466
 467   public function insert_dld($data){
 468        global $pid;
 469        if(UserService::valid($data[0])=='existingpatient' || UserService::valid($data[0])=='newpatient'){
 470                sqlInsert("INSERT INTO documents_legal_detail (dld_pid,dld_signed,dld_filepath,dld_master_docid,dld_filename,dld_encounter,dld_file_for_pdf_generation) ".
 471                " VALUES (?,?,?,?,?,?,?)",array($pid,$data[2],$data[3],$data[4],$data[5],$data[6],$data[7]));
 472        }
 473        else{
 474                throw new SoapFault("Server", "credentials failed");
 475        }
 476     }
 477
 478
 479   //Inserting the entries for Master PDF documents uploaded
 480
 481   public function insert_dlm($data){
 482        if($this->valid($data[0])=='oemruser'){
 483                sqlStatement("INSERT INTO documents_legal_master(dlm_category, dlm_subcategory,dlm_document_name,dlm_facility,dlm_provider,
 484                dlm_filename,dlm_filepath,dlm_effective_date,content) values (?,?,?,?,?,?,?,?,?)",array($data[1],$data[2],$data[3],$data[4],$data[5],$data[6],$data[7],$data[8],$data[9]));
 485        }
 486        else{
 487                throw new SoapFault("Server", "credentials failed");
 488        }
 489     }
 490
 491
 492 //REceive an array of Select cases from portal execute it and return
 493 // it in the keys received from portal. A batch of queries execute and returns it in one batch.
 494
 495   public function batch_select($data){
 496         if($this->valid($data[0])){
 497                 $batch = $data[1];
 498                 foreach($batch as $key=>$value)
 499                 {
 500                 $batchkey=$value['batchkey'];
 501                 $case=$value['case'];
 502                 $param=$value['param'];
 503                 $arrproc[] = $case;
 504                 $arrproc[] = $param;
 505                 $return_array[$batchkey]=$this->selectquery(array($data[0],$arrproc));
 506                 $arrproc=null;
 507                 }
 508                 return $return_array;
 509         }
 510         else{
 511                 throw new SoapFault("Server", "credentials failed");
 512         }
 513     }
 514
 515
 516 //Receive a batch of function calls from portal and execute it through batch despatch Function
 517 //Any  OpenEmr function can be executed this way, if necessary if clause is written in batch_despatch.
 518
 519   public function batch_function($data){
 520         if($this->valid($data[0])){
 521                 $batch = $data[1];
 522                 foreach($batch as $key=>$value)
 523                 {
 524                 $batchkey=$value['batchkey'];
 525                 $function=$value['funcname'];
 526                 $param=$value['param'];
 527                 $param[]=$data[0];
 528                 $res=call_user_func_array("UserService::$function",$param);
 529                 $return_array[$batchkey]=$res;
 530                 }
 531                 return $return_array;
 532         }
 533         else{
 534                 throw new SoapFault("Server", "credentials failed");
 535         }
 536     }
 537
 538 //Execute a batch of functions received from portal. But this function is limited to
 539 // the functions written in the myportal module.
 540
 541   public function multiplecall($data){
 542          $batch = $data[1];
 543          foreach($batch as $key=>$value)
 544          {
 545          $batchkey=$value['batchkey'];
 546          $function=$value['funcname'];
 547          $param=$value['param'];
 548          if(is_array($param))
 549          array_unshift($param,$data[0]);
 550          else
 551          $param[]=$data[0];
 552          $res= UserService::$function($param);
 553          $return_array[$batchkey]=$res;
 554          }
 555          return $return_array;
 556     }
 557
 558
 559
 560
 561   public function getversion($data){
 562          return '1.1';
 563     }
 564
 565
 566   public function loginchecking($data){
 567       if($this->valid($data[0])=='existingpatient' || $this->valid($data[0])=='newpatient'){
 568         $res = sqlStatement("SELECT portal_pwd_status FROM patient_access_offsite WHERE BINARY portal_username=? AND  BINARY portal_pwd=?",$data[1]);
 569         return $this->resourcetoxml($res);
 570       }
 571
 572       return false;
 573     }
 574
 575   //Execute a query and return its results.
 576
 577   public function selectquery($data){
 578       //global $pid;
 579       $sql_result_set='';
 580       $utype = $this->valid($data[0]);
 581       if($utype){
 582       $newobj = factoryclass::dynamic_class_factory($utype);
 583       $sql_result_setarr = $newobj->query_formation($data[1]);
 584       $sql_result_set = sqlStatement($sql_result_setarr[0],$sql_result_setarr[1]);
 585       return $this->resourcetoxml($sql_result_set);
 586       }
 587     }
 588
 589 //Return an SQL resultset as an XML
 590
 591
 592   public function resourcetoxml($sql_result_set){
 593          $doc = new DOMDocument();
 594          $doc->formatOutput = true;
 595
 596          $root = $doc->createElement( "root" );
 597          $doc->appendChild( $root );
 598       while($row = sqlFetchArray($sql_result_set))
 599          {
 600            $level = $doc->createElement( "level" );
 601            $root->appendChild( $level );
 602            foreach($row as $key=>$value){
 603            $element = $doc->createElement( "$key" );
 604            $element->appendChild(
 605                $doc->createTextNode( $value )
 606            );
 607            $level->appendChild( $element );
 608            }
 609          }
 610          return $doc->saveXML();
 611     }
 612
 613   //Writing facility payment configuration to table
 614   public function save_payment_configuration($var){
 615         $data_credentials=$var[0];
 616         if(UserService::valid($data_credentials))
 617                  {
 618                         if($var['service'] == 'paypal'){
 619                                 if($var['paypal'] != ''){
 620                                         $update_sql = "UPDATE payment_gateway_details SET login_id = ? WHERE service_name = 'paypal'";
 621                                         sqlStatement($update_sql,array($var['login_id']));
 622                                 }else{
 623                                         $save_sql = "INSERT INTO payment_gateway_details (service_name,login_id) VALUES (?,?)";
 624                                         sqlStatement($save_sql,array($var['service'],$var['login_id']));
 625                                 }
 626                         }elseif($var['service'] == 'authorize_net'){
 627                                 if($var['authorize_net'] != ''){
 628                                         $update_sql = "UPDATE payment_gateway_details SET login_id = ?, transaction_key = ?, md5= ? WHERE service_name = 'authorize_net'";
 629                                         sqlStatement($update_sql,array($var['login_id'],$var['transaction_key'],$var['md5']));
 630                                 }else{
 631                                         $save_sql = "INSERT INTO payment_gateway_details (service_name,login_id,transaction_key,md5) VALUES (?,?,?,?)";
 632                                         sqlStatement($save_sql,array($var['service'],$var['login_id'],$var['transaction_key'],$var['md5']));
 633                                 }
 634                         }
 635                  }
 636                 else
 637                  {
 638                         throw new SoapFault("Server", "credentials failed");
 639                  }
 640         }
 641
 642  //Writing patient's authorizenet profile id to table
 643   public function insert_authorizenet_details($var){
 644         global $pid;
 645         $data_credentials=$var[0];
 646         if(UserService::valid($data_credentials))
 647                  {
 648                         $authorizenetid=$var['authorizenetid'];
 649                         $query="UPDATE patient_access_offsite SET authorize_net_id = ? WHERE pid = ?";
 650                         sqlInsert($query,array($authorizenetid,$pid));
 651                  }
 652                 else
 653                  {
 654                         throw new SoapFault("Server", "credentials failed");
 655                  }
 656         }
 657
 658   public function valid($credentials){
 659         $timminus = date("Y-m-d H:m",(strtotime(date("Y-m-d H:m"))-7200)).":00";
 660         sqlStatement("DELETE FROM audit_details WHERE audit_master_id IN(SELECT id FROM audit_master WHERE type=5 AND created_time<=?)",array($timminus));
 661         sqlStatement("DELETE FROM audit_master WHERE type=5 AND created_time<=?",array($timminus));
 662         global $pid;
 663         $ok=0;
 664         $okE=0;
 665         $okN=0;
 666         $okO=0;
 667         $okP=0;
 668         $tim = strtotime(gmdate("Y-m-d H:m"));
 669         $res = sqlStatement("SELECT * FROM audit_details WHERE field_value=?",array($credentials[3]));
 670         if(sqlNumRows($res)){
 671                 if($GLOBALS['validated_offsite_portal'] !=true){
 672                 return false;
 673                 }
 674         }
 675         else{
 676               $grpID = sqlInsert("INSERT INTO audit_master SET type=5");
 677               sqlStatement("INSERT INTO audit_details SET field_value=? , audit_master_id=? ",array($credentials[3],$grpID));
 678         }
 679         if(sha1($GLOBALS['portal_offsite_password'].date("Y-m-d H",$tim).$credentials[3])==$credentials[2]){
 680               $ok =1;
 681         }
 682         elseif(sha1($GLOBALS['portal_offsite_password'].date("Y-m-d H",($tim-3600)).$credentials[3])==$credentials[2]){
 683               $ok =1;
 684         }
 685         elseif(sha1($GLOBALS['portal_offsite_password'].date("Y-m-d H",($tim+3600)).$credentials[3])==$credentials[2]){
 686               $ok =1;
 687         }
 688         if(($credentials[1]==$GLOBALS['portal_offsite_username'] && $ok==1 && $GLOBALS['portal_offsite_enable']==1)||$GLOBALS['validated_offsite_portal']==true){
 689           $prow = sqlQuery("SELECT * FROM patient_access_offsite WHERE portal_username=?",array($credentials[6]));
 690                 if($credentials[4] == 'existingpatient'){
 691                   if(UserService::validcredential($credentials)){
 692                     $okE = 1;
 693                   }
 694                   else{
 695                     return false;
 696                   }
 697                 }
 698                 elseif($credentials[4] == 'oemruser'){
 699                   if($credentials[9])
 700                   $prow = sqlQuery("SELECT pid FROM audit_master WHERE id=?",array($credentials[9]));
 701                   $okO = 1;
 702                 }
 703                 elseif($credentials[4] == 'newpatient'){
 704                   if(UserService::validcredential($credentials)){
 705                     $okN = 2;
 706                   }
 707                   else{
 708                     $okN = 1;
 709                     $prow = sqlQuery("SELECT IFNULL(MAX(pid)+1,1) AS pid FROM patient_data");
 710                   }
 711                 }
 712                 if($okE==1 || $okN == 2 || $okN == 1 || $okO == 1){
 713                   $pid = $prow['pid'];
 714                   $GLOBALS['pid'] = $prow['pid'];
 715                 }
 716                 $_GET['site'] = $credentials[0];
 717                 if($okE==1){
 718                   $portal = sqlQuery("SELECT allow_patient_portal FROM patient_data WHERE pid=?",array($pid));
 719                   if(strtolower($portal['allow_patient_portal'])!='yes')
 720                   return false;
 721                 }
 722                 $GLOBALS['validated_offsite_portal'] = true;
 723                 if($okO){
 724                   return 'oemruser';
 725                 }
 726                 elseif($okE){
 727                   return 'existingpatient';
 728                 }
 729                 elseif($okN){
 730                   return 'newpatient';
 731                 }
 732                 return false;
 733         }
 734         else{
 735                 return false;
 736         }
 737     }
 738
 739
 740
 741
 742   public function validcredential($credentials){
 743       $tim = strtotime(gmdate("Y-m-d H:m"));
 744       if($credentials[6]){
 745       $prow = sqlQuery("SELECT * FROM patient_access_offsite WHERE portal_username=?",array($credentials[6]));
 746         if(sha1($prow['portal_pwd'].date("Y-m-d H",$tim).$credentials[8])==$credentials[7]){
 747           return true;
 748         }
 749         elseif(sha1($prow['portal_pwd'].date("Y-m-d H",($tim-3600)).$credentials[8])==$credentials[7]){
 750           return true;
 751         }
 752         elseif(sha1($prow['portal_pwd'].date("Y-m-d H",($tim+3600)).$credentials[8])==$credentials[7]){
 753           return true;
 754         }
 755       }
 756         return false;
 757     }
 758
 759
 760     //for checking the connection
 761
 762
 763
 764   public function check_connection($data){
 765        if($this->valid($data[0])){
 766            return 'ok';
 767        }
 768        else{
 769            return 'notok';
 770        }
 771     }
 772 }
 773 $server = new SoapServer(null,array('uri' => "urn://portal/res"));
 774 $server->setClass('UserService');
 775 $server->setPersistence(SOAP_PERSISTENCE_SESSION);
 776 $server->handle();
 777 ?>