interface/globals.php

   1 <?php
   2
   3 // Is this windows or non-windows? Create a boolean definition.
   4 if (!defined('IS_WINDOWS'))
   5  define('IS_WINDOWS', (stripos(PHP_OS,'WIN') === 0));
   6
   7 // Some important php.ini overrides. Defaults for these values are often
   8 // too small.  You might choose to adjust them further.
   9 //
  10 ini_set('session.gc_maxlifetime', '14400');
  11
  12 // This is for sanitization of all escapes.
  13 //  (ie. reversing magic quotes if it's set)
  14 if (isset($sanitize_all_escapes) && $sanitize_all_escapes) {
  15   if (get_magic_quotes_gpc()) {
  16     function undoMagicQuotes($array, $topLevel=true) {
  17       $newArray = array();
  18       foreach($array as $key => $value) {
  19         if (!$topLevel) {
  20           $key = stripslashes($key);
  21         }
  22         if (is_array($value)) {
  23           $newArray[$key] = undoMagicQuotes($value, false);
  24         }
  25         else {
  26           $newArray[$key] = stripslashes($value);
  27         }
  28       }
  29       return $newArray;
  30     }
  31     $_GET = undoMagicQuotes($_GET);
  32     $_POST = undoMagicQuotes($_POST);
  33     $_COOKIE = undoMagicQuotes($_COOKIE);
  34     $_REQUEST = undoMagicQuotes($_REQUEST);
  35   }
  36 }
  37
  38 //
  39 // The webserver_root and web_root are now automatically collected.
  40 // If not working, can set manually below.
  41 // Auto collect the full absolute directory path for openemr.
  42 $webserver_root = dirname(dirname(__FILE__));
  43 if (IS_WINDOWS) {
  44  //convert windows path separators
  45  $webserver_root = str_replace("\\","/",$webserver_root);
  46 }
  47 // Collect the apache server document root (and convert to windows slashes, if needed)
  48 $server_document_root = realpath($_SERVER['DOCUMENT_ROOT']);
  49 if (IS_WINDOWS) {
  50  //convert windows path separators
  51  $server_document_root = str_replace("\\","/",$server_document_root);
  52 }
  53 // Auto collect the relative html path, i.e. what you would type into the web
  54 // browser after the server address to get to OpenEMR.
  55 // This removes the leading portion of $webserver_root that it has in common with the web server's document
  56 // root and assigns the result to $web_root. In addition to the common case where $webserver_root is
  57 // /var/www/openemr and document root is /var/www, this also handles the case where document root is
  58 // /var/www/html and there is an Apache "Alias" command that directs /openemr to /var/www/openemr.
  59 $web_root = substr($webserver_root, strspn($webserver_root ^ $server_document_root, "\0"));
  60 // Ensure web_root starts with a path separator
  61 if (preg_match("/^[^\/]/",$web_root)) {
  62  $web_root = "/".$web_root;
  63 }
  64 // The webserver_root and web_root are now automatically collected in
  65 //  real time per above code. If above is not working, can uncomment and
  66 //  set manually here:
  67 //   $webserver_root = "/var/www/openemr";
  68 //   $web_root =  "/openemr";
  69 //
  70
  71 // This is the directory that contains site-specific data.  Change this
  72 // only if you have some reason to.
  73 $GLOBALS['OE_SITES_BASE'] = "$webserver_root/sites";
  74
  75 // The session name names a cookie stored in the browser.
  76 // Now that restore_session() is implemented in javaScript, session IDs are
  77 // effectively saved in the top level browser window and there is no longer
  78 // any need to change the session name for different OpenEMR instances.
  79 session_name("OpenEMR");
  80
  81 session_start();
  82
  83 // Set the site ID if required.  This must be done before any database
  84 // access is attempted.
  85 if (empty($_SESSION['site_id']) || !empty($_GET['site'])) {
  86   if (!empty($_GET['site'])) {
  87     $tmp = $_GET['site'];
  88   }
  89   else {
  90     if (!$ignoreAuth) die("Site ID is missing from session data!");
  91     $tmp = $_SERVER['HTTP_HOST'];
  92     if (!is_dir($GLOBALS['OE_SITES_BASE'] . "/$tmp")) $tmp = "default";
  93   }
  94   if (empty($tmp) || preg_match('/[^A-Za-z0-9\\-.]/', $tmp))
  95     die("Site ID '". htmlspecialchars($tmp,ENT_NOQUOTES) . "' contains invalid characters.");
  96   if (isset($_SESSION['site_id']) && ($_SESSION['site_id'] != $tmp)) {
  97     // This is to prevent using session to penetrate other OpenEMR instances within same multisite module
  98     session_unset(); // clear session, clean logout
  99     if (isset($landingpage) && !empty($landingpage)) {
 100       // OpenEMR Patient Portal use
 101       header('Location: index.php?site='.$tmp);
 102     }
 103     else {
 104       // Main OpenEMR use
 105       header('Location: ../login/login.php?site='.$tmp); // Assuming in the interface/main directory
 106     }
 107     exit;
 108   }
 109   if (!isset($_SESSION['site_id']) || $_SESSION['site_id'] != $tmp) {
 110     $_SESSION['site_id'] = $tmp;
 111     //error_log("Session site ID has been set to '$tmp'"); // debugging
 112   }
 113 }
 114
 115 // Set the site-specific directory path.
 116 $GLOBALS['OE_SITE_DIR'] = $GLOBALS['OE_SITES_BASE'] . "/" . $_SESSION['site_id'];
 117
 118 require_once($GLOBALS['OE_SITE_DIR'] . "/config.php");
 119
 120 // Collecting the utf8 disable flag from the sqlconf.php file in order
 121 // to set the correct html encoding. utf8 vs iso-8859-1. If flag is set
 122 // then set to iso-8859-1.
 123 require_once(dirname(__FILE__) . "/../library/sqlconf.php");
 124 if (!$disable_utf8_flag) {
 125  ini_set('default_charset', 'utf-8');
 126  $HTML_CHARSET = "UTF-8";
 127  mb_internal_encoding('UTF-8');
 128 }
 129 else {
 130  ini_set('default_charset', 'iso-8859-1');
 131  $HTML_CHARSET = "ISO-8859-1";
 132  mb_internal_encoding('ISO-8859-1');
 133 }
 134
 135 // Root directory, relative to the webserver root:
 136 $GLOBALS['rootdir'] = "$web_root/interface";
 137 $rootdir = $GLOBALS['rootdir'];
 138 // Absolute path to the source code include and headers file directory (Full path):
 139 $GLOBALS['srcdir'] = "$webserver_root/library";
 140 // Absolute path to the location of documentroot directory for use with include statements:
 141 $GLOBALS['fileroot'] = "$webserver_root";
 142 // Absolute path to the location of interface directory for use with include statements:
 143 $include_root = "$webserver_root/interface";
 144 // Absolute path to the location of documentroot directory for use with include statements:
 145 $GLOBALS['webroot'] = $web_root;
 146
 147 // Static assets directory, relative to the webserver root.
 148 // (it is very likely that this path will be changed in the future))
 149 $GLOBALS['assets_static_relative'] = "$web_root/public/assets";
 150 //Composer vendor directory, absolute to the webserver root.
 151 $GLOBALS['vendor_dir'] = "$webserver_root/vendor";
 152
 153 $GLOBALS['template_dir'] = $GLOBALS['fileroot'] . "/templates/";
 154 $GLOBALS['incdir'] = $include_root;
 155 // Location of the login screen file
 156 $GLOBALS['login_screen'] = $GLOBALS['rootdir'] . "/login_screen.php";
 157
 158 // Variable set for Eligibility Verification [EDI-271] path
 159 $GLOBALS['edi_271_file_path'] = $GLOBALS['OE_SITE_DIR'] . "/edi/";
 160
 161 // Include the translation engine. This will also call sql.inc to
 162 //  open the openemr mysql connection.
 163 require_once (dirname(__FILE__) . "/../library/translation.inc.php");
 164
 165 // Include convenience functions with shorter names than "htmlspecialchars" (for security)
 166 require_once (dirname(__FILE__) . "/../library/htmlspecialchars.inc.php");
 167
 168 // Include sanitization/checking functions (for security)
 169 require_once (dirname(__FILE__) . "/../library/formdata.inc.php");
 170
 171 // Include sanitization/checking function (for security)
 172 require_once (dirname(__FILE__) . "/../library/sanitize.inc.php");
 173
 174 // Includes functions for date internationalization
 175 require_once (dirname(__FILE__) . "/../library/date_functions.php");
 176
 177 // Includes compoaser autoload
 178 require_once $GLOBALS['vendor_dir'] ."/autoload.php";
 179
 180 // Includes functions for page validation
 181 require_once (dirname(__FILE__) . "/../library/validation/validate_core.php");
 182
 183 // Defaults for specific applications.
 184 $GLOBALS['weight_loss_clinic'] = false;
 185 $GLOBALS['ippf_specific'] = false;
 186 $GLOBALS['cene_specific'] = false;
 187
 188 // Defaults for drugs and products.
 189 $GLOBALS['inhouse_pharmacy'] = false;
 190 $GLOBALS['sell_non_drug_products'] = 0;
 191
 192 $glrow = sqlQuery("SHOW TABLES LIKE 'globals'");
 193 if (!empty($glrow)) {
 194   // Collect user specific settings from user_settings table.
 195   //
 196   $gl_user = array();
 197   // Collect the user id first
 198   $temp_authuserid = '';
 199   if (!empty($_SESSION['authUserID'])) {
 200     //Set the user id from the session variable
 201     $temp_authuserid = $_SESSION['authUserID'];
 202   }
 203   else {
 204     if (!empty($_POST['authUser'])) {
 205       $temp_sql_ret = sqlQuery("SELECT `id` FROM `users` WHERE `username` = ?", array($_POST['authUser']) );
 206       if (!empty($temp_sql_ret['id'])) {
 207         //Set the user id from the login variable
 208         $temp_authuserid = $temp_sql_ret['id'];
 209       }
 210     }
 211   }
 212   if (!empty($temp_authuserid)) {
 213     $glres_user = sqlStatement("SELECT `setting_label`, `setting_value` " .
 214       "FROM `user_settings` " .
 215       "WHERE `setting_user` = ? " .
 216       "AND `setting_label` LIKE 'global:%'", array($temp_authuserid) );
 217     for($iter=0; $row=sqlFetchArray($glres_user); $iter++) {
 218       //remove global_ prefix from label
 219       $row['setting_label'] = substr($row['setting_label'],7);
 220       $gl_user[$iter]=$row;
 221     }
 222   }
 223   // Set global parameters from the database globals table.
 224   // Some parameters require custom handling.
 225   //
 226   $GLOBALS['language_menu_show'] = array();
 227   $glres = sqlStatement("SELECT gl_name, gl_index, gl_value FROM globals " .
 228     "ORDER BY gl_name, gl_index");
 229   while ($glrow = sqlFetchArray($glres)) {
 230     $gl_name  = $glrow['gl_name'];
 231     $gl_value = $glrow['gl_value'];
 232     // Adjust for user specific settings
 233     if (!empty($gl_user)) {
 234       foreach ($gl_user as $setting) {
 235         if ($gl_name == $setting['setting_label']) {
 236           $gl_value = $setting['setting_value'];
 237         }
 238       }
 239     }
 240     if ($gl_name == 'language_menu_other') {
 241       $GLOBALS['language_menu_show'][] = $gl_value;
 242     }
 243     else if ($gl_name == 'css_header') {
 244         $GLOBALS[$gl_name] = $rootdir.'/themes/'. $gl_value;
 245         $temp_css_theme_name = $gl_value;
 246     }
 247     else if ($gl_name == 'weekend_days') {
 248         $GLOBALS[$gl_name] = explode(',', $gl_value);
 249     }
 250     else if ($gl_name == 'specific_application') {
 251       if ($gl_value == '2') $GLOBALS['ippf_specific'] = true;
 252       else if ($gl_value == '3') $GLOBALS['weight_loss_clinic'] = true;
 253     }
 254     else if ($gl_name == 'inhouse_pharmacy') {
 255       if ($gl_value) $GLOBALS['inhouse_pharmacy'] = true;
 256       if ($gl_value == '2') $GLOBALS['sell_non_drug_products'] = 1;
 257       else if ($gl_value == '3') $GLOBALS['sell_non_drug_products'] = 2;
 258     }
 259     else {
 260       $GLOBALS[$gl_name] = $gl_value;
 261     }
 262   }
 263   // Language cleanup stuff.
 264   $GLOBALS['language_menu_login'] = false;
 265   if ((count($GLOBALS['language_menu_show']) >= 1) || $GLOBALS['language_menu_showall']) {
 266     $GLOBALS['language_menu_login'] = true;
 267   }
 268
 269
 270 // Additional logic to override theme name.
 271 // For RTL languages we substitute the theme name with the name of RTL-adapted CSS file.
 272     $rtl_override = false;
 273     if( isset( $_SESSION['language_direction'] )) {
 274         if( $_SESSION['language_direction'] == 'rtl' &&
 275         !strpos($GLOBALS['css_header'], 'rtl')  ) {
 276
 277             // the $css_header_value is set above
 278             $rtl_override = true;
 279         }
 280     }
 281
 282     else {
 283         //$_SESSION['language_direction'] is not set, so will use the default language
 284         $default_lang_id = sqlQuery('SELECT lang_id FROM lang_languages WHERE lang_description = ?',array($GLOBALS['language_default']));
 285
 286         if ( getLanguageDir( $default_lang_id['lang_id'] ) === 'rtl' && !strpos($GLOBALS['css_header'], 'rtl')) { // @todo eliminate 1 SQL query
 287             $rtl_override = true;
 288         }
 289     }
 290
 291
 292     // change theme name, if the override file exists.
 293     if( $rtl_override ) {
 294         // the $css_header_value is set above
 295         $new_theme = 'rtl_' . $temp_css_theme_name;
 296
 297         // Check file existance
 298         if( file_exists( $include_root.'/themes/'.$new_theme ) ) {
 299             $GLOBALS['css_header'] = $rootdir.'/themes/'.$new_theme;
 300         } else {
 301             // throw a warning if rtl'ed file does not exist.
 302             error_log("Missing theme file ".text($include_root).'/themes/'.text($new_theme)   );
 303         }
 304     }
 305     unset( $temp_css_theme_name, $new_theme,$rtl_override);
 306     // end of RTL section
 307
 308   //
 309   // End of globals table processing.
 310 }
 311 else {
 312   // Temporary stuff to handle the case where the globals table does not
 313   // exist yet.  This will happen in sql_upgrade.php on upgrading to the
 314   // first release containing this table.
 315   $GLOBALS['language_menu_login'] = true;
 316   $GLOBALS['language_menu_showall'] = true;
 317   $GLOBALS['language_menu_show'] = array('English (Standard)','Swedish');
 318   $GLOBALS['language_default'] = "English (Standard)";
 319   $GLOBALS['translate_layout'] = true;
 320   $GLOBALS['translate_lists'] = true;
 321   $GLOBALS['translate_gacl_groups'] = true;
 322   $GLOBALS['translate_form_titles'] = true;
 323   $GLOBALS['translate_document_categories'] = true;
 324   $GLOBALS['translate_appt_categories'] = true;
 325   $GLOBALS['concurrent_layout'] = 2;
 326   $timeout = 7200;
 327   $openemr_name = 'OpenEMR';
 328   $css_header = "$rootdir/themes/style_default.css";
 329   $GLOBALS['css_header'] = $css_header;
 330   $GLOBALS['schedule_start'] = 8;
 331   $GLOBALS['schedule_end'] = 17;
 332   $GLOBALS['calendar_interval'] = 15;
 333   $GLOBALS['phone_country_code'] = '1';
 334   $GLOBALS['disable_non_default_groups'] = true;
 335   $GLOBALS['ippf_specific'] = false;
 336 }
 337
 338 // If >0 this will enforce a separate PHP session for each top-level
 339 // browser window.  You must log in separately for each.  This is not
 340 // thoroughly tested yet and some browsers might have trouble with it,
 341 // so make it 0 if you must.  Alternatively, you can set it to 2 to be
 342 // notified when the session ID changes.
 343 $GLOBALS['restore_sessions'] = 1; // 0=no, 1=yes, 2=yes+debug
 344
 345 // Theme definition.  All this stuff should be moved to CSS.
 346 //
 347 if ($GLOBALS['concurrent_layout']) {
 348  $top_bg_line = ' bgcolor="#dddddd" ';
 349  $GLOBALS['style']['BGCOLOR2'] = "#dddddd";
 350  $bottom_bg_line = $top_bg_line;
 351  $title_bg_line = ' bgcolor="#bbbbbb" ';
 352  $nav_bg_line = ' bgcolor="#94d6e7" ';
 353 } else {
 354  $top_bg_line = ' bgcolor="#94d6e7" ';
 355  $GLOBALS['style']['BGCOLOR2'] = "#94d6e7";
 356  $bottom_bg_line = ' background="'.$rootdir.'/pic/aquabg.gif" ';
 357  $title_bg_line = ' bgcolor="#aaffff" ';
 358  $nav_bg_line = ' bgcolor="#94d6e7" ';
 359 }
 360 $login_filler_line = ' bgcolor="#f7f0d5" ';
 361 $logocode = "<img src='$web_root/sites/" . $_SESSION['site_id'] . "/images/login_logo.gif'>";
 362 // optimal size for the tiny logo is height 43 width 86 px
 363 // inside the open emr they will be auto reduced
 364 $tinylogocode1 = "<img class='tinylogopng' src='$web_root/sites/" . $_SESSION['site_id'] . "/images/logo_1.png'>";
 365 $tinylogocode2 = "<img class='tinylogopng' src='$web_root/sites/" . $_SESSION['site_id'] . "/images/logo_2.png'>";
 366
 367 $linepic = "$rootdir/pic/repeat_vline9.gif";
 368 $table_bg = ' bgcolor="#cccccc" ';
 369 $GLOBALS['style']['BGCOLOR1'] = "#cccccc";
 370 $GLOBALS['style']['TEXTCOLOR11'] = "#222222";
 371 $GLOBALS['style']['HIGHLIGHTCOLOR'] = "#dddddd";
 372 $GLOBALS['style']['BOTTOM_BG_LINE'] = $bottom_bg_line;
 373 // The height in pixels of the Logo bar at the top of the login page:
 374 $GLOBALS['logoBarHeight'] = 110;
 375 // The height in pixels of the Navigation bar:
 376 $GLOBALS['navBarHeight'] = 22;
 377 // The height in pixels of the Title bar:
 378 $GLOBALS['titleBarHeight'] = 40;
 379
 380 // The assistant word, MORE printed next to titles that can be clicked:
 381 //   Note this label gets translated here via the xl function
 382 //    -if you don't want it translated, then strip the xl function away
 383 $tmore = xl('(More)');
 384 // The assistant word, BACK printed next to titles that return to previous screens:
 385 //   Note this label gets translated here via the xl function
 386 //    -if you don't want it translated, then strip the xl function away
 387 $tback = xl('(Back)');
 388
 389 // This is the idle logout function:
 390 // if a page has not been refreshed within this many seconds, the interface
 391 // will return to the login page
 392 if (!empty($special_timeout)) {
 393   $timeout = intval($special_timeout);
 394 }
 395
 396 //Version tag
 397 require_once(dirname(__FILE__) . "/../version.php");
 398 $patch_appending = "";
 399 if ( ($v_realpatch != '0') && (!(empty($v_realpatch))) ) {
 400 $patch_appending = " (".$v_realpatch.")";
 401 }
 402 $openemr_version = "$v_major.$v_minor.$v_patch".$v_tag.$patch_appending;
 403
 404 $srcdir = $GLOBALS['srcdir'];
 405 $login_screen = $GLOBALS['login_screen'];
 406 $GLOBALS['css_header'] = $css_header;
 407 $GLOBALS['backpic'] = $backpic;
 408
 409 // 1 = send email message to given id for Emergency Login user activation,
 410 // else 0.
 411 $GLOBALS['Emergency_Login_email'] = $GLOBALS['Emergency_Login_email_id'] ? 1 : 0;
 412
 413 //set include_de_identification to enable De-identification (currently de-identification works fine only with linux machines)
 414 //Run de_identification_upgrade.php script to upgrade OpenEMR database to include procedures,
 415 //functions, tables for de-identification(Mysql root user and password is required for successful
 416 //execution of the de-identification upgrade script)
 417 $GLOBALS['include_de_identification']=0;
 418 // Include the authentication module code here, but the rule is
 419 // if the file has the word "login" in the source code file name,
 420 // don't include the authentication module - we do this to avoid
 421 // include loops.
 422
 423 if ( ($ignoreAuth_offsite_portal === true) && ($GLOBALS['portal_offsite_enable'] == 1) ) {
 424   $ignoreAuth = true;
 425 }
 426 if (!isset($ignoreAuth) || !$ignoreAuth) {
 427   include_once("$srcdir/auth.inc");
 428 }
 429
 430
 431 // This is the background color to apply to form fields that are searchable.
 432 // Currently it is applicable only to the "Search or Add Patient" form.
 433 $GLOBALS['layout_search_color'] = '#ffff55';
 434
 435 //EMAIL SETTINGS
 436 $SMTP_Auth = !empty($GLOBALS['SMTP_USER']);
 437
 438
 439 //module configurations
 440 $GLOBALS['baseModDir']  = "interface/modules/"; //default path of modules
 441 $GLOBALS['customModDir']= "custom_modules";     //non zend modules
 442 $GLOBALS['zendModDir']  = "zend_modules";       //zend modules
 443
 444 // Don't change anything below this line. ////////////////////////////
 445
 446 $encounter = empty($_SESSION['encounter']) ? 0 : $_SESSION['encounter'];
 447
 448 if (!empty($_GET['pid']) && empty($_SESSION['pid'])) {
 449   $_SESSION['pid'] = $_GET['pid'];
 450 }
 451 elseif (!empty($_POST['pid']) && empty($_SESSION['pid'])) {
 452   $_SESSION['pid'] = $_POST['pid'];
 453 }
 454 $pid = empty($_SESSION['pid']) ? 0 : $_SESSION['pid'];
 455 $userauthorized = empty($_SESSION['userauthorized']) ? 0 : $_SESSION['userauthorized'];
 456 $groupname = empty($_SESSION['authProvider']) ? 0 : $_SESSION['authProvider'];
 457
 458 // global interface function to format text length using ellipses
 459 function strterm($string,$length) {
 460   if (strlen($string) >= ($length-3)) {
 461     return substr($string,0,$length-3) . "...";
 462   } else {
 463     return $string;
 464   }
 465 }
 466
 467 // Override temporary_files_dir if PHP >= 5.2.1.
 468 if (version_compare(phpversion(), "5.2.1", ">=")) {
 469  $GLOBALS['temporary_files_dir'] = rtrim(sys_get_temp_dir(),'/');
 470 }
 471
 472 // turn off PHP compatibility warnings
 473 ini_set("session.bug_compat_warn","off");
 474
 475 //////////////////////////////////////////////////////////////////
 476
 477 /* If the includer didn't specify, assume they want us to "fake" register_globals. */
 478 if (!isset($fake_register_globals)) {
 479         $fake_register_globals = TRUE;
 480 }
 481
 482 /* Pages with "myadmin" in the URL don't need register_globals. */
 483 $fake_register_globals =
 484         $fake_register_globals && (strpos($_SERVER['REQUEST_URI'],"myadmin") === FALSE);
 485
 486
 487 // Emulates register_globals = On.  Moved to the bottom of globals.php to prevent
 488 // overrides of any variables used during global setup.
 489 // EXTR_SKIP flag set to prevent overriding any variables defined earlier
 490 if ($fake_register_globals) {
 491   extract($_GET,EXTR_SKIP);
 492   extract($_POST,EXTR_SKIP);
 493 }
 494
 495 ?>