interface/logview/logview.php

   1 <?php
   2 /**
   3  * Copyright (C) 2017 Brady Miller <brady.g.miller@gmail.com>
   4  *
   5  * LICENSE: This program is free software; you can redistribute it and/or
   6  * modify it under the terms of the GNU General Public License
   7  * as published by the Free Software Foundation; either version 3
   8  * of the License, or (at your option) any later version.
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  12  * GNU General Public License for more details.
  13  * You should have received a copy of the GNU General Public License
  14  * along with this program. If not, see <http://opensource.org/licenses/gpl-license.php>;.
  15  *
  16  * @package OpenEMR
  17  * @author  Brady Miller <brady.g.miller@gmail.com>
  18  * @link    http://www.open-emr.org
  19  */
  20
  21 include_once("../globals.php");
  22 include_once("$srcdir/log.inc");
  23 require_once("$srcdir/formatting.inc.php");
  24 ?>
  25 <html>
  26 <head>
  27 <?php html_header_show();?>
  28
  29 <link rel="stylesheet" href="<?php echo $css_header;?>" type="text/css">
  30 <link rel="stylesheet" href="<?php echo $GLOBALS['assets_static_relative']; ?>/jquery-datetimepicker-2-5-4/build/jquery.datetimepicker.min.css">
  31
  32 <style>
  33 #logview {
  34     width: 100%;
  35 }
  36 #logview table {
  37     width:100%;
  38     border-collapse: collapse;
  39 }
  40 #logview th {
  41     background-color: #cccccc;
  42     cursor: pointer; cursor: hand;
  43     padding: 5px 5px;
  44     align: left;
  45     text-align: left;
  46 }
  47
  48 #logview td {
  49     background-color: #ffffff;
  50     border-bottom: 1px solid #808080;
  51     cursor: default;
  52     padding: 5px 5px;
  53     vertical-align: top;
  54 }
  55 .highlight {
  56     background-color: #336699;
  57     color: #336699;
  58 }
  59 </style>
  60
  61 <script type="text/javascript" src="<?php echo $GLOBALS['webroot'] ?>/library/dialog.js?v=<?php echo $v_js_includes; ?>"></script>
  62 <script type="text/javascript" src="<?php echo $GLOBALS['assets_static_relative']; ?>/jquery-min-3-1-1/index.js"></script>
  63 <script type="text/javascript" src="<?php echo $GLOBALS['assets_static_relative']; ?>/jquery-datetimepicker-2-5-4/build/jquery.datetimepicker.full.min.js"></script>
  64
  65 <script>
  66 //function to disable the event type field if the event name is disclosure
  67 function eventTypeChange(eventname)
  68 {
  69          if (eventname == "disclosure") {
  70             document.theform.type_event.disabled = true;
  71           }
  72          else {
  73             document.theform.type_event.disabled = false;
  74          }
  75 }
  76
  77 // VicarePlus :: This invokes the find-patient popup.
  78  function sel_patient() {
  79   dlgopen('../main/calendar/find_patient_popup.php?pflag=0', '_blank', 500, 400);
  80  }
  81
  82 // VicarePlus :: This is for callback by the find-patient popup.
  83  function setpatient(pid, lname, fname, dob) {
  84   var f = document.theform;
  85   f.form_patient.value = lname + ', ' + fname;
  86   f.form_pid.value = pid;
  87  }
  88
  89 </script>
  90 </head>
  91 <body class="body_top">
  92 <font class="title"><?php  xl('Logs Viewer','e'); ?></font>
  93 <br>
  94 <?php
  95 $err_message=0;
  96 if ($_GET["start_date"])
  97 $start_date = formData('start_date','G');
  98
  99 if ($_GET["end_date"])
 100 $end_date = formData('end_date','G');
 101
 102 if ($_GET["form_patient"])
 103 $form_patient = formData('form_patient','G');
 104
 105 /*
 106  * Start date should not be greater than end date - Date Validation
 107  */
 108 if ($start_date && $end_date)
 109 {
 110         if($start_date > $end_date){
 111                 echo "<table><tr class='alert'><td colspan=7>"; xl('Start Date should not be greater than End Date',e);
 112                 echo "</td></tr></table>";
 113                 $err_message=1;
 114         }
 115 }
 116
 117 ?>
 118 <?php
 119 $form_user = formData('form_user','R');
 120 $form_pid = formData('form_pid','R');
 121 if ($form_patient == '' ) $form_pid = '';
 122
 123 $res = sqlStatement("select distinct LEFT(date,10) as date from log order by date desc limit 30");
 124 for($iter=0;$row=sqlFetchArray($res);$iter++) {
 125   $ret[$iter] = $row;
 126 }
 127
 128 // Get the users list.
 129 $sqlQuery = "SELECT username, fname, lname FROM users " .
 130   "WHERE active = 1 AND ( info IS NULL OR info NOT LIKE '%Inactive%' ) ";
 131
 132 $ures = sqlStatement($sqlQuery);
 133 ?>
 134
 135 <?php
 136 $get_sdate=$start_date ? $start_date : date("Y-m-d H:i:s");
 137 $get_edate=$end_date ? $end_date : date("Y-m-d H:i:s");
 138
 139 ?>
 140
 141 <br>
 142 <FORM METHOD="GET" name="theform" id="theform">
 143 <?php
 144
 145 $sortby = formData('sortby','G') ;
 146 $direction = formData('direction','G') ;
 147 ?>
 148 <input type="hidden" name="direction" id="direction" value="<?php echo !empty($direction) ? $direction : 'asc'; ?>">
 149 <input type="hidden" name="sortby" id="sortby" value="<?php echo $sortby; ?>">
 150 <input type=hidden name=csum value="">
 151 <table>
 152 <tr><td>
 153 <span class="text"><?php  xl('Start Date','e'); ?>: </span>
 154 </td><td>
 155 <input class="datetimepicker" type="text" size="18" name="start_date" id="start_date" value="<?php echo $start_date ? $start_date : (date("Y-m-d") . " 00:00:00"); ?>" title="<?php  xl('yyyy-mm-dd H:m Start Date','e'); ?>" />
 156 </td>
 157 <td>
 158 <span class="text"><?php  xl('End Date','e'); ?>: </span>
 159 </td><td>
 160 <input class="datetimepicker" type="text" size="18" name="end_date" id="end_date" value="<?php echo $end_date ? $end_date : (date("Y-m-d") . " 23:59:00"); ?>" title="<?php  xl('yyyy-mm-dd H:m End Date','e'); ?>" />
 161 </td>
 162 <!--VicarePlus :: Feature For Generating Log For The Selected Patient --!>
 163 <td>
 164 &nbsp;&nbsp;<span class='text'><?php echo htmlspecialchars(xl('Patient'),ENT_NOQUOTES); ?>: </span>
 165 </td>
 166 <td>
 167 <input type='text' size='20' name='form_patient' style='width:100%;cursor:pointer;cursor:hand' value='<?php echo $form_patient ? $form_patient : htmlspecialchars(xl('Click To Select'),ENT_QUOTES); ?>' onclick='sel_patient()' title='<?php echo htmlspecialchars(xl('Click to select patient'),ENT_QUOTES); ?>' />
 168 <input type='hidden' name='form_pid' value='<?php echo $form_pid; ?>' />
 169 </td>
 170 </tr>
 171 <tr><td>
 172 <span class='text'><?php  xl('User','e'); ?>: </span>
 173 </td>
 174 <td>
 175 <?php
 176 echo "<select name='form_user'>\n";
 177 echo " <option value=''>" . xl('All') . "</option>\n";
 178 while ($urow = sqlFetchArray($ures)) {
 179   if (!trim($urow['username'])) continue;
 180   echo " <option value='" . $urow['username'] . "'";
 181   if ($urow['username'] == $form_user) echo " selected";
 182   echo ">" . $urow['lname'];
 183   if ($urow['fname']) echo ", " . $urow['fname'];
 184   echo "</option>\n";
 185 }
 186 echo "</select>\n";
 187 ?>
 188 </td>
 189 <td>
 190 <!-- list of events name -->
 191 <span class='text'><?php  xl('Name of Events','e'); ?>: </span>
 192 </td>
 193 <td>
 194 <?php
 195 $res = sqlStatement("select distinct event from log order by event ASC");
 196 $ename_list=array(); $j=0;
 197 while ($erow = sqlFetchArray($res)) {
 198          if (!trim($erow['event'])) continue;
 199          $data = explode('-', $erow['event']);
 200          $data_c = count($data);
 201          $ename=$data[0];
 202          for($i=1;$i<($data_c-1);$i++)
 203          {
 204                 $ename.="-".$data[$i];
 205         }
 206         $ename_list[$j]=$ename;
 207         $j=$j+1;
 208 }
 209 $res1 = sqlStatement("select distinct event from  extended_log order by event ASC");
 210 // $j=0; // This can't be right!  -- Rod 2013-08-23
 211 while ($row = sqlFetchArray($res1)) {
 212          if (!trim($row['event'])) continue;
 213          $new_event = explode('-', $row['event']);
 214          $no = count($new_event);
 215          $events=$new_event[0];
 216          for($i=1;$i<($no-1);$i++)
 217          {
 218                 $events.="-".$new_event[$i];
 219         }
 220         if ($events=="disclosure")
 221         $ename_list[$j]=$events;
 222         $j=$j+1;
 223 }
 224 $ename_list=array_unique($ename_list);
 225 $ename_list=array_merge($ename_list);
 226 $ecount=count($ename_list);
 227 echo "<select name='eventname' onchange='eventTypeChange(this.options[this.selectedIndex].value);'>\n";
 228 echo " <option value=''>" . xl('All') . "</option>\n";
 229 for($k=0;$k<$ecount;$k++) {
 230 echo " <option value='" .$ename_list[$k]. "'";
 231   if ($ename_list[$k] == $eventname && $ename_list[$k]!= "") echo " selected";
 232   echo ">" . $ename_list[$k];
 233   echo "</option>\n";
 234 }
 235 echo "</select>\n";
 236 ?>
 237 </td>
 238 <!-- type of events ends  -->
 239 <td>
 240 &nbsp;&nbsp;<span class='text'><?php  xl('Type of Events','e'); ?>: </span>
 241 </td><td>
 242 <?php
 243 $event_types=array("select", "update", "insert", "delete", "replace");
 244 $lcount=count($event_types);
 245 if($eventname=="disclosure"){
 246  echo "<select name='type_event' disabled='disabled'>\n";
 247  echo " <option value=''>" . xl('All') . "</option>\n";
 248  echo "</option>\n";
 249 }
 250 else{
 251   echo "<select name='type_event'>\n";}
 252   echo " <option value=''>" . xl('All') . "</option>\n";
 253   for($k=0;$k<$lcount;$k++) {
 254   echo " <option value='" .$event_types[$k]. "'";
 255   if ($event_types[$k] == $type_event && $event_types[$k]!= "") echo " selected";
 256   echo ">" . preg_replace('/^select$/','Query',$event_types[$k]); // Convert select to Query for MU2 requirement
 257   echo "</option>\n";
 258 }
 259 echo "</select>\n";
 260 ?>
 261 </td>
 262 <tr><td>
 263 <span class='text'><?php xl('Include Checksum','e'); ?>: </span>
 264 </td><td>
 265 <?php
 266
 267 $check_sum = formData('check_sum','G');
 268 ?>
 269 <input type="checkbox" name="check_sum" " <?php if ($check_sum == 'on') echo "checked";  ?>"></input>
 270 </td>
 271 <td>
 272 <input type=hidden name="event" value=<?php echo $event ; ?>>
 273 <a href="javascript:document.theform.submit();" class='link_submit'>[<?php  xl('Refresh','e'); ?>]</a>
 274 </td>
 275 <td>
 276 <div id='valid_button'>
 277 <input type=button id='validate_log' onclick='validatelog();' value='<?php echo xla('Validate Log'); ?>'></input>
 278 </div>
 279 <div id='log_loading' style="display: none">
 280 <img src='../../images/loading.gif'/>
 281 </div>
 282 </td>
 283 </tr>
 284 </table>
 285 </FORM>
 286
 287
 288 <?php if ($start_date && $end_date && $err_message!=1) { ?>
 289 <div id="logview">
 290 <table>
 291  <tr>
 292   <!-- <TH><?php  xl('Date', 'e'); ?><TD> -->
 293   <th id="sortby_date" class="text sortby" title="<?php xl('Sort by date/time','e'); ?>"><?php xl('Date','e'); ?></th>
 294   <th id="sortby_event" class="text sortby" title="<?php xl('Sort by Event','e'); ?>"><?php  xl('Event','e'); ?></th>
 295   <th id="sortby_category" class="text sortby" title="<?php xl('Sort by Category','e'); ?>"><?php  xl('Category','e'); ?></th>
 296   <th id="sortby_user" class="text sortby" title="<?php xl('Sort by User','e'); ?>"><?php  xl('User','e'); ?></th>
 297   <th id="sortby_cuser" class="text sortby" title="<?php xl('Sort by Crt User','e'); ?>"><?php  xl('Certificate User','e'); ?></th>
 298   <th id="sortby_group" class="text sortby" title="<?php xl('Sort by Group','e'); ?>"><?php  xl('Group','e'); ?></th>
 299   <th id="sortby_pid" class="text sortby" title="<?php xl('Sort by PatientID','e'); ?>"><?php  xl('PatientID','e'); ?></th>
 300   <th id="sortby_success" class="text sortby" title="<?php xl('Sort by Success','e'); ?>"><?php  xl('Success','e'); ?></th>
 301   <th id="sortby_comments" class="text sortby" title="<?php xl('Sort by Comments','e'); ?>"><?php  xl('Comments','e'); ?></th>
 302  <?php  if($check_sum) {?>
 303   <th id="sortby_checksum" class="text sortby" title="<?php xl('Sort by Checksum','e'); ?>"><?php  xl('Checksum','e'); ?></th>
 304   <?php } ?>
 305  </tr>
 306 <?php
 307
 308 $eventname = formData('eventname','G');
 309 $type_event = formData('type_event','G');
 310 ?>
 311 <input type=hidden name=event value=<?php echo $eventname."-".$type_event ?>>
 312 <?php
 313
 314 $tevent=""; $gev="";
 315 if($eventname != "" && $type_event != "")
 316 {
 317         $getevent=$eventname."-".$type_event;
 318 }
 319
 320         if(($eventname == "") && ($type_event != ""))
 321     {   $tevent=$type_event;
 322     }
 323         else if($type_event =="" && $eventname != "")
 324     {$gev=$eventname;}
 325     else if ($eventname == "")
 326         {$gev = "";}
 327  else
 328     {$gev = $getevent;}
 329
 330 if ($ret = getEvents(array('sdate' => $get_sdate,'edate' => $get_edate, 'user' => $form_user, 'patient' => $form_pid, 'sortby' => $_GET['sortby'], 'levent' =>$gev, 'tevent' =>$tevent,'direction' => $_GET['direction']))) {
 331
 332
 333   foreach ($ret as $iter) {
 334     //translate comments
 335     $patterns = array ('/^success/','/^failure/','/ encounter/');
 336         $replace = array ( xl('success'), xl('failure'), xl('encounter','',' '));
 337
 338         $log_id = $iter['id'];
 339         $commentEncrStatus = "No";
 340         $logEncryptData = logCommentEncryptData($log_id);
 341         if(count($logEncryptData) > 0){
 342                 $commentEncrStatus = $logEncryptData['encrypt'];
 343         }
 344
 345         //July 1, 2014: Ensoftek: Decrypt comment data if encrypted
 346         if($commentEncrStatus == "Yes"){
 347                 $trans_comments = preg_replace($patterns, $replace, aes256Decrypt($iter["comments"]));
 348         }else{
 349                 $trans_comments = preg_replace($patterns, $replace, $iter["comments"]);
 350         }
 351
 352 ?>
 353  <TR class="oneresult">
 354   <TD class="text"><?php echo oeFormatShortDate(substr($iter["date"], 0, 10)) . substr($iter["date"], 10) ?></TD>
 355   <TD class="text"><?php echo preg_replace('/select$/','Query',$iter["event"]); //Convert select term to Query for MU2 requirements ?></TD>
 356   <TD class="text"><?php echo $iter["category"]?></TD>
 357   <TD class="text"><?php echo $iter["user"]?></TD>
 358   <TD class="text"><?php echo $iter["crt_user"]?></TD>
 359   <TD class="text"><?php echo $iter["groupname"]?></TD>
 360   <TD class="text"><?php echo $iter["patient_id"]?></TD>
 361   <TD class="text"><?php echo $iter["success"]?></TD>
 362   <TD class="text"><?php echo nl2br(text(preg_replace('/^select/i','Query',$trans_comments))); //Convert select term to Query for MU2 requirements ?></TD>
 363   <?php  if($check_sum) { ?>
 364   <TD class="text"><?php echo $iter["checksum"]?></TD>
 365   <?php } ?>
 366  </TR>
 367
 368 <?php
 369
 370     }
 371   }
 372 if (($eventname=="disclosure") || ($gev == ""))
 373 {
 374 $eventname="disclosure";
 375 if ($ret = getEvents(array('sdate' => $get_sdate,'edate' => $get_edate, 'user' => $form_user, 'patient' => $form_pid, 'sortby' => $_GET['sortby'], 'event' =>$eventname))) {
 376 foreach ($ret as $iter) {
 377         $comments=xl('Recipient Name').":".$iter["recipient"].";".xl('Disclosure Info').":".$iter["description"];
 378 ?>
 379 <TR class="oneresult">
 380   <TD class="text"><?php echo htmlspecialchars(oeFormatShortDate(substr($iter["date"], 0, 10)) . substr($iter["date"], 10),ENT_NOQUOTES); ?></TD>
 381   <TD class="text"><?php echo htmlspecialchars(xl($iter["event"]),ENT_NOQUOTES);?></TD>
 382   <TD class="text"><?php echo htmlspecialchars(xl($iter["category"]),ENT_NOQUOTES);?></TD>
 383   <TD class="text"><?php echo htmlspecialchars($iter["user"],ENT_NOQUOTES);?></TD>
 384   <TD class="text"><?php echo htmlspecialchars($iter["crt_user"],ENT_NOQUOTES);?></TD>
 385   <TD class="text"><?php echo htmlspecialchars($iter["groupname"],ENT_NOQUOTES);?></TD>
 386   <TD class="text"><?php echo htmlspecialchars($iter["patient_id"],ENT_NOQUOTES);?></TD>
 387   <TD class="text"><?php echo htmlspecialchars($iter["success"],ENT_NOQUOTES);?></TD>
 388   <TD class="text"><?php echo htmlspecialchars($comments,ENT_NOQUOTES);?></TD>
 389   <?php  if($check_sum) { ?>
 390   <TD class="text"><?php echo htmlspecialchars($iter["checksum"],ENT_NOQUOTES);?></TD>
 391   <?php } ?>
 392  </TR>
 393 <?php
 394     }
 395   }
 396 }
 397 ?>
 398 </table>
 399 </div>
 400
 401 <?php } ?>
 402
 403 </body>
 404
 405 <script language="javascript">
 406
 407 // jQuery stuff to make the page a little easier to use
 408 $(document).ready(function(){
 409     // funny thing here... good learning experience
 410     // the TR has TD children which have their own background and text color
 411     // toggling the TR color doesn't change the TD color
 412     // so we need to change all the TR's children (the TD's) just as we did the TR
 413     // thus we have two calls to toggleClass:
 414     // 1 - for the parent (the TR)
 415     // 2 - for each of the children (the TDs)
 416     $(".oneresult").mouseover(function() { $(this).toggleClass("highlight"); $(this).children().toggleClass("highlight"); });
 417     $(".oneresult").mouseout(function() { $(this).toggleClass("highlight"); $(this).children().toggleClass("highlight"); });
 418
 419     // click-able column headers to sort the list
 420     $('.sortby')
 421     $("#sortby_date").click(function() { set_sort_direction(); $("#sortby").val("date"); $("#theform").submit(); });
 422     $("#sortby_event").click(function() { set_sort_direction(); $("#sortby").val("event"); $("#theform").submit(); });
 423     $("#sortby_category").click(function() { set_sort_direction(); $("#sortby").val("category"); $("#theform").submit(); });
 424     $("#sortby_user").click(function() { set_sort_direction(); $("#sortby").val("user"); $("#theform").submit(); });
 425     $("#sortby_cuser").click(function() { set_sort_direction(); $("#sortby").val("user"); $("#theform").submit(); });
 426     $("#sortby_group").click(function() { set_sort_direction(); $("#sortby").val("groupname"); $("#theform").submit(); });
 427     $("#sortby_pid").click(function() { set_sort_direction(); $("#sortby").val("patient_id"); $("#theform").submit(); });
 428     $("#sortby_success").click(function() { set_sort_direction(); $("#sortby").val("success"); $("#theform").submit(); });
 429     $("#sortby_comments").click(function() { set_sort_direction(); $("#sortby").val("comments"); $("#theform").submit(); });
 430     $("#sortby_checksum").click(function() { set_sort_direction(); $("#sortby").val("checksum"); $("#theform").submit(); });
 431
 432     $('.datetimepicker').datetimepicker({
 433        <?php $datetimepicker_timepicker = true; ?>
 434        <?php $datetimepicker_formatInput = false; ?>
 435        <?php require($GLOBALS['srcdir'] . '/js/xl/jquery-datetimepicker-2-5-4.js.php'); ?>
 436        <?php // can add any additional javascript settings to datetimepicker here; need to prepend first setting with a comma ?>
 437     });
 438 });
 439
 440 function set_sort_direction(){
 441         if($('#direction').val() == 'asc')
 442                 $('#direction').val('desc');
 443         else
 444                 $('#direction').val('asc');
 445 }
 446
 447 function validatelog(){
 448          var img = document.getElementById('log_loading');
 449          var btn = document.getElementById('valid_button');
 450          if(img){
 451                  if(img.style.display == "block"){
 452                          return false;
 453                  }
 454                  img.style.display = "block";
 455                 if(btn){btn.style.display = "none"}
 456          }
 457          $.ajax({
 458                         url:"../../library/log_validation.php",
 459                 asynchronous : true,
 460                 method: "post",
 461                 success :function(response){
 462                         if(img){
 463                                 img.style.display="none";
 464                                 if(btn){btn.style.display="block";}
 465                         }
 466                         alert(response);
 467                         },
 468                 failure :function(){
 469                         if(img){
 470                                 img.style.display="none";
 471                                 if(btn){btn.style.display="block";}
 472                         }
 473                         alert('<?php echo xls("Audit Log Validation Failed"); ?>');
 474                 }
 475          });
 476
 477 }
 478 </script>
 479
 480 </html>