Additional Sql-injection functions and techniques for escaping;
[openemr.git] / interface / forms / note / report.php
blobc0fd017d17d582d4453347697cdadeb66c29363a
1 <!-- Work/School Note Form created by Nikolai Vitsyn: 2004/02/13 and update 2005/03/30
2 Copyright (C) Open Source Medical Software
4 This program is free software; you can redistribute it and/or
5 modify it under the terms of the GNU General Public License
6 as published by the Free Software Foundation; either version 2
7 of the License, or (at your option) any later version.
9 This program is distributed in the hope that it will be useful,
10 but WITHOUT ANY WARRANTY; without even the implied warranty of
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 GNU General Public License for more details.
14 You should have received a copy of the GNU General Public License
15 along with this program; if not, write to the Free Software
16 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -->
18 <?php
19 include_once("../../globals.php");
20 include_once($GLOBALS["srcdir"]."/api.inc");
21 function note_report( $pid, $encounter, $cols, $id) {
22 $count = 0;
23 $data = formFetch("form_note", $id);
24 if ($data) {
25 print "<table><tr>";
26 foreach($data as $key => $value) {
27 if ($key == "id" ||
28 $key == "pid" ||
29 $key == "user" ||
30 $key == "groupname" ||
31 $key == "authorized" ||
32 $key == "activity" ||
33 $key == "date" ||
34 $value == "" ||
35 $value == "0000-00-00 00:00:00")
37 continue;
40 if ($value == "on") { $value = "yes"; }
42 $key=ucwords(str_replace("_"," ",$key));
43 print("<tr>\n");
44 print("<tr>\n");
45 if ($key == "Note Type") {
46 print "<td><span class=bold>" . xlt($key) . ": </span><span class=text>" . xlt($value) . "</span></td>";
48 else {
49 print "<td><span class=bold>" . xlt($key) . ": </span><span class=text>" . text($value) . "</span></td>";
51 $count++;
52 if ($count == $cols) {
53 $count = 0;
54 print "</tr><tr>\n";
58 print "</tr></table>";
60 ?>