migrated ubiquitous libraries to composer autoloader (#421)

[openemr.git] / interface / forms / eye_mag / save.php

<?php
/**
 * forms/eye_mag/save.php
 *
 * This saves the submitted data.
 *  Forms: new and updates
 *  User preferences for displaying the form as the user desires.
 *    Each time a form is used, layout choices auto-change preferences.
 *  Retrieves old records so the user can flip through old values within this form,
 *    ideally with the intent that the old data can be carried forward.
 *    Yeah, gotta write that carry forward stuff yet.  Next week it'll be done?
 *  HTML5 Canvas images the user draws.
 *    For now we have one image per section
 *    I envision a user definable image they can upload to draw on and name such as
 *    A face image to draw injectable location/dosage for fillers or botulinum toxins.
 *    Ideally this concept when it comes to fruition will serve as a basis for any specialty image form
 *    to be used.  Upload image, drop widget and save it...
 *
 * Copyright (C) 2016 Raymond Magauran <magauran@MedFetch.com>
 *
 * LICENSE: This program is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU Affero General Public License as
 *  published by the Free Software Foundation, either version 3 of the
 *  License, or (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU Affero General Public License for more details.
 *
 *  You should have received a copy of the GNU Affero General Public License
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * @package OpenEMR
 * @author Ray Magauran <magauran@MedFetch.com>
 * @link http://www.open-emr.org
 */

$fake_register_globals=false;
$sanitize_all_escapes=true;

$table_name   = "form_eye_mag";
$form_name    = "eye_mag";
$form_folder  = "eye_mag";

require_once("../../globals.php");

require_once("$srcdir/html2pdf/vendor/autoload.php");
require_once("$srcdir/api.inc");
require_once("$srcdir/forms.inc");
require_once("php/".$form_name."_functions.php");
require_once("$srcdir/formatting.inc.php");
require_once($srcdir . "/../controllers/C_Document.class.php");
require_once($srcdir . "/documents.php");
require_once("$srcdir/patient.inc");
require_once("$srcdir/options.inc.php");
require_once("$srcdir/acl.inc");
require_once("$srcdir/lists.inc");
require_once("$srcdir/report.inc");
require_once("$srcdir/classes/Document.class.php");
require_once("$srcdir/classes/Note.class.php");
require_once("$srcdir/html2pdf/html2pdf.class.php");

$returnurl = 'encounter_top.php';

if (isset($_REQUEST['id']))
{
$id = $_REQUEST['id'];
}
if (!$id) $id = $_REQUEST['pid'];
$encounter = $_REQUEST['encounter'];

$AJAX_PREFS = $_REQUEST['AJAX_PREFS'];
if ($encounter == "" && !$id && !$AJAX_PREFS && (($_REQUEST['mode'] != "retrieve") or ($_REQUEST['mode'] == "show_PDF"))) {
    echo "Sorry Charlie..."; //should lead to a database of errors for explanation.
    exit;
}
/**
 * Save/update the preferences
 */
if ($_REQUEST['AJAX_PREFS']) {
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
                VALUES
                ('PREFS','VA','Vision',?,'RS','51',?,'1')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_VA']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
                VALUES
                ('PREFS','W','Current Rx',?,'W','52',?,'2')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_W']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
                VALUES
                ('PREFS','W_width','Detailed Rx',?,'W_width','80',?,'100')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_W_width']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','MR','Manifest Refraction',?,'MR','53',?,'3')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_MR']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
                VALUES
                ('PREFS','MR_width','Detailed MR',?,'MR_width','81',?,'110')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_W_width']));

   $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','CR','Cycloplegic Refraction',?,'CR','54',?,'4')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_CR']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','CTL','Contact Lens',?,'CTL','55',?,'5')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_CTL']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS', 'VAX', 'Visual Acuities', ?, 'VAX','65', ?,'15')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_VAX']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','ADDITIONAL','Additional Data Points',?,'ADDITIONAL','56',?,'6')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_ADDITIONAL']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','CLINICAL','CLINICAL',?,'CLINICAL','57',?,'7')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_CLINICAL']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','IOP','Intraocular Pressure',?,'IOP','67',?,'17')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_IOP']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','EXAM','EXAM',?,'EXAM','58',?,'8')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_EXAM']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','CYLINDER','CYL',?,'CYL','59',?,'9')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_CYL']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','HPI_VIEW','HPI View',?,'HPI_VIEW','60',?,'10')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_HPI_VIEW']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','EXT_VIEW','External View',?,'EXT_VIEW','66',?,'16')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_EXT_VIEW']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','ANTSEG_VIEW','Anterior Segment View',?,'ANTSEG_VIEW','61',?,'11')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_ANTSEG_VIEW']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','RETINA_VIEW','Retina View',?,'RETINA_VIEW','62',?,'12')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_RETINA_VIEW']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','NEURO_VIEW','Neuro View',?,'NEURO_VIEW','63',?,'13')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_NEURO_VIEW']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','ACT_VIEW','ACT View',?,'ACT_VIEW','64',?,'14')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_ACT_VIEW']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','ACT_SHOW','ACT Show',?,'ACT_SHOW','65',?,'15')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_ACT_SHOW']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','HPI_RIGHT','HPI DRAW',?,'HPI_RIGHT','70',?,'16')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_HPI_RIGHT']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','PMH_RIGHT','PMH DRAW',?,'PMH_RIGHT','71',?,'17')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_PMH_RIGHT']));
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','EXT_RIGHT','EXT DRAW',?,'EXT_RIGHT','72',?,'18')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_EXT_RIGHT']));
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','ANTSEG_RIGHT','ANTSEG DRAW',?,'ANTSEG_RIGHT','73',?,'19')";
    $result = sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_ANTSEG_RIGHT']));

    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','RETINA_RIGHT','RETINA DRAW',?,'RETINA_RIGHT','74',?,'20')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_RETINA_RIGHT']));
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','NEURO_RIGHT','NEURO DRAW',?,'NEURO_RIGHT','75',?,'21')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_NEURO_RIGHT']));
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','IMPPLAN_RIGHT','IMPPLAN DRAW',?,'IMPPLAN_RIGHT','76',?,'22')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_IMPPLAN_RIGHT']));
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','PANEL_RIGHT','PMSFH Panel',?,'PANEL_RIGHT','77',?,'23')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_PANEL_RIGHT']));
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','KB_VIEW','KeyBoard View',?,'KB_VIEW','78',?,'24')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_KB']));
    $query = "REPLACE INTO ".$table_name."_prefs (PEZONE,LOCATION,LOCATION_text,id,selection,ZONE_ORDER,GOVALUE,ordering)
              VALUES
              ('PREFS','TOOLTIPS','Toggle Tooltips',?,'TOOLTIPS','79',?,'25')";
    sqlQuery($query,array($_SESSION['authId'],$_REQUEST['PREFS_TOOLTIPS']));
}
/**
  * ADD ANY NEW PREFERENCES above, and as a hidden field in the body.
  */

/** <!-- End Preferences --> **/

/**
 * Create, update or retrieve a form and its values
 */
if (!$pid) $pid = $_SESSION['pid'];
$userauthorized = $_SESSION['userauthorized'];
if ($encounter == "") $encounter = date("Ymd");
$form_id        = $_REQUEST['form_id'];
$zone           = $_REQUEST['zone'];

$providerID  =  findProvider($pid,$encounter);
if ($providerID =='0') $providerID = $userauthorized;//who is the default provider?
$providerNAME = getProviderName($providerID);

// The form is submitted to be updated or saved in some way.
// Give each instance of a form a uniqueID.  If the form has no owner, update DB with this uniqueID.
// If the DB shows a uniqueID ie. an owner, and the save request uniqueID does not = the uniqueID in the DB,
// ask if the new user wishes to take ownership?
// If yes, any other's attempt to save fields/form are denied and the return code says you are not the owner...
if ($_REQUEST['unlock'] == '1') {
  // we are releasing the form, by closing the page or clicking on ACTIVE FORM, so unlock it.
  // if it's locked and they own it ($REQUEST[LOCKEDBY] == LOCKEDBY), they can unlock it
  $query = "SELECT LOCKED,LOCKEDBY,LOCKEDDATE from ".$table_name." WHERE ID=?";
  $lock = sqlQuery($query,array($form_id));
  if (($lock['LOCKED'] >'') && ($_REQUEST['LOCKEDBY'] == $lock['LOCKEDBY']))  {
    $query = "update ".$table_name." set LOCKED='',LOCKEDBY='' where id=?";
    sqlQuery($query,array($form_id));
  }
  exit;
} elseif ($_REQUEST['acquire_lock']=="1") {
  //we are taking over the form's active state, others will go read-only
  $query = "UPDATE ".$table_name." set LOCKED='1',LOCKEDBY=? where id=? and LOCKEDBY=?";
  $result = sqlQuery($query,array($_REQUEST['uniqueID'],$form_id,$_REQUEST['locked_by']));
  $query = "SELECT LOCKED,LOCKEDBY,LOCKEDDATE from ".$table_name." WHERE ID=?";
  $lock = sqlQuery($query,array($form_id));
  exit;
} else {
  $query = "SELECT LOCKED,LOCKEDBY,LOCKEDDATE from ".$table_name." WHERE ID=?";
  $lock = sqlQuery($query,array($form_id));
  if (($lock['LOCKED']) && ($_REQUEST['uniqueID'] != $lock['LOCKEDBY']))  {
      // We are not the owner or it is not new so it is locked
      // Did the user send a demand to take ownership?
     if ($lock['LOCKEDBY'] != $_REQUEST['ownership']) {
        //tell them they are locked out by another user now
        echo "Code 400";
        // or return a JSON encoded string with current LOCK ID?
        // echo "Sorry Charlie, you get nothing since this is locked...  No save for you!";
        exit;
      } elseif ($lock['LOCKEDBY'] == $_REQUEST['ownership']) {
        // then they are taking ownership - all others get locked...
        // new LOCKEDBY becomes our uniqueID LOCKEDBY
        $_REQUEST['LOCKED'] = '1';
        $_REQUEST['LOCKEDBY'] = $_REQUEST['uniqueID'];
        //update table
        $query = "update ".$table_name." set LOCKED=?,LOCKEDBY=? where id=?";
        sqlQuery ($query,array('1',$_REQUEST['LOCKEDBY'],$form_id));
        //go on to save what we want...
      }
  } elseif (!$lock['LOCKED']) { // it is not locked yet
    $_REQUEST['LOCKED'] = '1';
    $query = "update ".$table_name." set LOCKED=?,LOCKEDBY=? where id=?";
    sqlQuery($query,array('1',$_REQUEST['LOCKEDBY'],$form_id));
    //go on to save what we want...
  }
  if (!$_REQUEST['LOCKEDBY'])  $_REQUEST['LOCKEDBY'] = rand();
}

if ($_REQUEST["mode"] == "new")             {
  $newid = formSubmit($table_name, $_POST, $id, $userauthorized);
  addForm($encounter, $form_name, $newid, $form_folder, $pid, $userauthorized);
} elseif ($_REQUEST["mode"] == "update")    {
  // The user has write privileges to work with...
  if ($_REQUEST['action']=="store_PDF") {
    /*
    * We want to store/overwrite the current PDF version of this encounter's f
    * Currently this is only called 'beforeunload', ie. when you finish the form
    * In this current paradigm, anytime the form is opened, then closed, the PDF
    * is overwritten.  With esign implemented, the PDF should be locked.  I suppose
    * with esign the form can't even be opened so the only way to get to the PDF
    * is through the Documents->Encounters links.
    */
    $query = "select id from categories where name = 'Encounters'";
    $result = sqlStatement($query);
    $ID = sqlFetchArray($result);
    $category_id = $ID['id'];
    $PDF_OUTPUT='1';

    $filename = $pid."_".$encounter.".pdf";
    $filepath = $GLOBALS['oer_config']['documents']['repository'] . $pid;
    foreach (glob($filepath.'/'.$filename) as $file) {
      unlink($file);
    }
    $sql = "DELETE from categories_to_documents where document_id IN (SELECT id from documents where documents.url like '%".$filename."')";
    sqlQuery($sql);
    $sql = "DELETE from documents where documents.url like '%".$filename."'";
    sqlQuery($sql);
    // We want to overwrite so only one PDF is stored per form/encounter
    // $pdf = new HTML2PDF('P', 'Letter', 'en', array(5, 5, 5, 5) );  // add a little margin 5cm all around TODO: add to globals

    /***********/

    $pdf = new HTML2PDF ($GLOBALS['pdf_layout'],
                         $GLOBALS['pdf_size'],
                         $GLOBALS['pdf_language'],
                         true, // default unicode setting is true
                         'UTF-8', // default encoding setting is UTF-8
                         array($GLOBALS['pdf_left_margin'],$GLOBALS['pdf_top_margin'],$GLOBALS['pdf_right_margin'],$GLOBALS['pdf_bottom_margin']),
                         $_SESSION['language_direction'] == 'rtl' ? true : false
                      );
    ob_start();
    ?>
    <link rel="stylesheet" href="<?php echo $webserver_root; ?>/interface/themes/style_pdf.css" type="text/css">
    <div id="report_custom" style="width:100%;">  <!-- large outer DIV -->
      <?php
      echo report_header($pid);
      include_once($GLOBALS['incdir'] . "/forms/eye_mag/report.php");
      call_user_func($form_name . "_report", $pid, $form_encounter, $N, $form_id);
      if ($printable)
        echo "" . xl('Signature') . ": _______________________________<br />";
      ?>
    </div> <!-- end of report_custom DIV -->

    <?php

    global $web_root, $webserver_root;
    $content = ob_get_clean();
    // Fix a nasty html2pdf bug - it ignores document root!
    $i = 0;
    $wrlen = strlen($web_root);
    $wsrlen = strlen($webserver_root);
    while (true) {
      $i = stripos($content, " src='/", $i + 1);
      if ($i === false) break;
      if (substr($content, $i+6, $wrlen) === $web_root &&
          substr($content, $i+6, $wsrlen) !== $webserver_root)
      {
        $content = substr($content, 0, $i + 6) . $webserver_root . substr($content, $i + 6 + $wrlen);
      }
    }
    $pdf->writeHTML($content, false);
    $temp_filename = '/tmp/'.$filename;
    $content_pdf = $pdf->Output($temp_filename, 'F');
    $type = "application/pdf";
    $size = filesize($temp_filename);
    $return = addNewDocument($filename,$type,$temp_filename,0,$size,$_SESSION['authUserID'],$pid,$category_id);
    $doc_id = $return['doc_id'];
    $sql = "UPDATE documents set encounter_id=? where id=?"; //link it to this encounter
    sqlQuery($sql,array($encounter,$doc_id));
    exit;
  }
  // Store the IMPPLAN area.  This is separate from the rest of the form
  // It is in a separate table due to its one-to-many relationship with the form_id.
  if ($_REQUEST['action']=="store_IMPPLAN") {
    $IMPPLAN = json_decode($_REQUEST['parameter'],true);
    //remove what is there and replace it with this data.
    $query = "DELETE from form_".$form_folder."_impplan where form_id=? and pid=?";
    sqlQuery($query,array($form_id,$pid));

    for($i = 0; $i < count($IMPPLAN); $i++) {
      $query ="INSERT IGNORE INTO form_".$form_folder."_impplan (form_id, pid, title, code, codetype, codedesc, codetext, plan, IMPPLAN_order, PMSFH_link) VALUES(?,?,?,?,?,?,?,?,?,?) ";
      $response = sqlQuery($query, array($form_id,$pid,$IMPPLAN[$i]['title'],$IMPPLAN[$i]['code'],$IMPPLAN[$i]['codetype'],$IMPPLAN[$i]['codedesc'],$IMPPLAN[$i]['codetext'],$IMPPLAN[$i]['plan'],$i,$IMPPLAN[$i]['PMSFH_link']));
      //if it is a duplicate then delete this from the array and return the array via json.
      //or rebuild it from mysql
    }
    //Since we are potentially ignoring duplicates, build json IMPPLAN_items and return it to the user to rebuild IMP/Plan area
    $IMPPLAN_items = build_IMPPLAN_items($pid,$form_id);
    echo json_encode($IMPPLAN_items);
    exit;
  }

  //change PCP
  if ($_REQUEST['action'] == 'docs') {
    $query = "update patient_data set providerID=?,ref_providerID=? where pid =?";
    sqlQuery($query,array($_REQUEST['pcp'],$_REQUEST['rDOC'],$pid));
    exit;
  }

  /*** START CODE to DEAL WITH PMSFH/ISUUE_TYPES  ****/
  if ($_REQUEST['PMSFH_save'] =='1') {
    if (!$PMSFH) $PMSFH = build_PMSFH($pid);
    $issue = $_REQUEST['issue'];
    $deletion = $_REQUEST['deletion'];
    $form_save = $_REQUEST['form_save'];
    $pid = $_SESSION['pid'];
    $encounter = $_SESSION['encounter'];
    $form_id = $_REQUEST['form_id'];
    $form_type = $_REQUEST['form_type'];
    $r_PMSFH = $_REQUEST['r_PMSFH'];
    if ($deletion ==1) {
      row_delete("issue_encounter", "list_id = '$issue'");
      row_delete("lists", "id = '$issue'");
      $PMSFH = build_PMSFH($pid);
      send_json_values($PMSFH);
      exit;
    } else {
      if ($form_type=='ROS') { //ROS
        $query="UPDATE form_eye_mag set ROSGENERAL=?,ROSHEENT=?,ROSCV=?,ROSPULM=?,ROSGI=?,ROSGU=?,ROSDERM=?,ROSNEURO=?,ROSPSYCH=?,ROSMUSCULO=?,ROSIMMUNO=?,ROSENDOCRINE=? where id=? and pid=?";
        sqlStatement($query,array($_REQUEST['ROSGENERAL'],$_REQUEST['ROSHEENT'],$_REQUEST['ROSCV'],$_REQUEST['ROSPULM'],$_REQUEST['ROSGI'],$_REQUEST['ROSGU'],$_REQUEST['ROSDERM'],$_REQUEST['ROSNEURO'],$_REQUEST['ROSPSYCH'],$_REQUEST['ROSMUSCULO'],$_REQUEST['ROSIMMUNO'],$_REQUEST['ROSENDOCRINE'],$form_id,$pid));
        $PMSFH = build_PMSFH($pid);
        send_json_values($PMSFH);
        exit;
      } elseif ($form_type=='SOCH') { //SocHx
        $newdata = array();
        $fres = sqlStatement("SELECT * FROM layout_options " .
          "WHERE form_id = 'HIS' AND uor > 0 AND field_id != '' " .
          "ORDER BY group_name, seq");
        while ($frow = sqlFetchArray($fres)) {
          $field_id  = $frow['field_id'];
          $newdata[$field_id] = get_layout_form_value($frow);
        }
        updateHistoryData($pid, $newdata);
        if ($_REQUEST['marital_status'] >'') {
          // have to match input with list_option for marital to not break openEMR
          $query="select * from list_options where list_id='marital'";
          $fres = sqlStatement($query);
          while ($frow = sqlFetchArray($fres)) {
            if (($_REQUEST['marital_status'] == $frow['option_id'])||($_REQUEST['marital_status'] == $frow['title'])) {
              $status = $frow['option_id'];
              $query = "UPDATE patient_data set status=? where pid=?";
              sqlStatement($query,array($status,$pid));
            }
          }
        }
        if ($_REQUEST['occupation'] > '') {
          $query = "UPDATE patient_data set occupation=? where pid=?";
          sqlStatement($query,array($_REQUEST['occupation'],$pid));
        }
        $PMSFH = build_PMSFH($pid);
        send_json_values($PMSFH);
        exit;
      } elseif ($form_type =='FH') {
        $query = "UPDATE history_data set
                relatives_cancer=?,
                relatives_diabetes=?,
                relatives_high_blood_pressure=?,
                relatives_heart_problems=?,
                relatives_stroke=?,
                relatives_epilepsy=?,
                relatives_mental_illness=?,
                relatives_suicide=?,
                usertext11=?,
                usertext12=?,
                usertext13=?,
                usertext14=?,
                usertext15=?,
                usertext16=?,
                usertext17=?,
                usertext18=? where pid=?";
                //echo $_REQUEST['relatives_cancer'],$_REQUEST['relatives_diabetes'],$_REQUEST['relatives_high_blood_pressure'],$_REQUEST['relatives_heart_problems'],$_REQUEST['relatives_stroke'],$_REQUEST['relatives_epilepsy'],$_REQUEST['relatives_mental_illness'],$_REQUEST['relatives_suicide'],$_REQUEST['usertext11'],$_REQUEST['usertext12'],$_REQUEST['usertext13'],$_REQUEST['usertext14'],$_REQUEST['usertext15'],$_REQUEST['usertext16'],$_REQUEST['usertext17'],$_REQUEST['usertext18'],$pid;
        $resFH = sqlStatement($query,array($_REQUEST['relatives_cancer'],$_REQUEST['relatives_diabetes'],$_REQUEST['relatives_high_blood_pressure'],$_REQUEST['relatives_heart_problems'],$_REQUEST['relatives_stroke'],$_REQUEST['relatives_epilepsy'],$_REQUEST['relatives_mental_illness'],$_REQUEST['relatives_suicide'],$_REQUEST['usertext11'],$_REQUEST['usertext12'],$_REQUEST['usertext13'],$_REQUEST['usertext14'],$_REQUEST['usertext15'],$_REQUEST['usertext16'],$_REQUEST['usertext17'],$_REQUEST['usertext18'],$pid));
        $PMSFH = build_PMSFH($pid);
        send_json_values($PMSFH);
        exit;
      } else {
        if ($_REQUEST['form_title'] =='') return;
        $subtype ='';
        if ($form_type =="POH") {
          $form_type="medical_problem";
          $subtype="eye";
        } elseif ($form_type =="PMH") {
          $form_type="medical_problem";
        } elseif ($form_type =="Allergy") {
          $form_type="allergy";
        } elseif ($form_type =="Surgery") {
          $form_type="surgery";
        } elseif ($form_type =="POS") {
          $form_type="surgery";
          $subtype="eye";
        } elseif ($form_type =="Medication") {
          $form_type="medication";
          if ($_REQUEST['form_eye_subtype']) {
            $subtype="eye";
            //we always want a default begin date
            //if it is empty, fill it with today
            if ($_REQUEST['form_begin'] =='')
              { $_REQUEST['form_begin'] = date("Y-m-d"); }
          }
          if ($_REQUEST['form_begin'] =='') {
            $_REQUEST['form_begin'] = $visit_date;
          }
        }
        $i = 0;
        $form_begin = fixDate($_REQUEST['form_begin'], '');
        $form_end   = fixDate($_REQUEST['form_end'], '');

        /*
         *  When adding an issue, see if the issue is already here.
         *  If so we need to update it.  If not we are adding it.
         *  Check the PMSFH array first by title.
         *  If not present in PMSFH, check the DB to be sure.
         */
        foreach ($PMSFH[$form_type] as $item) {
          if ($item['title'] == $_REQUEST['form_title']) {
            $issue = $item['issue'];
          }
        }
        if (!$issue) {
          if ($subtype == '') {
            $query = "SELECT id,pid from lists where title=? and type=? and pid=?";
            $issue2 = sqlQuery($query,array($_REQUEST['form_title'],$form_type,$pid));
            $issue = $issue2['id'];
          } else {
            $query = "SELECT id,pid from lists where title=? and type=? and pid=? and subtype=?";
            $issue2 = sqlQuery($query,array($_REQUEST['form_title'],$form_type,$pid,$subtype));
            $issue = $issue2['id'];
          }
        }
        $issue = 0 + $issue;
        if ($_REQUEST['form_reinjury_id'] =="") $form_reinjury_id="0";
        if ($_REQUEST['form_injury_grade'] =="") $form_injury_grade="0";
        if ($_REQUEST['form_outcome'] =='') $_REQUEST['form_outcome'] ='0';

        if ($issue != '0') { //if this issue already exists we are updating it...
          $query = "UPDATE lists SET " .
            "type = '"        . add_escape_custom($form_type)                  . "', " .
            "title = '"       . add_escape_custom($_REQUEST['form_title'])        . "', " .
            "comments = '"    . add_escape_custom($_REQUEST['form_comments'])     . "', " .
            "begdate = "      . QuotedOrNull($form_begin)   . ", "  .
            "enddate = "      . QuotedOrNull($form_end)     . ", "  .
            "returndate = "   . QuotedOrNull($form_return)  . ", "  .
            "diagnosis = '"   . add_escape_custom($_REQUEST['form_diagnosis'])    . "', " .
            "occurrence = '"  . add_escape_custom($_REQUEST['form_occur'])        . "', " .
            "classification = '" . add_escape_custom($_REQUEST['form_classification']) . "', " .
            "reinjury_id = '" . add_escape_custom($_REQUEST['form_reinjury_id'])  . "', " .
            "referredby = '"  . add_escape_custom($_REQUEST['form_referredby'])   . "', " .
            "injury_grade = '" . add_escape_custom($_REQUEST['form_injury_grade']) . "', " .
            "injury_part = '" . add_escape_custom($form_injury_part)           . "', " .
            "injury_type = '" . add_escape_custom($form_injury_type)           . "', " .
            "outcome = '"     . add_escape_custom($_REQUEST['form_outcome'])      . "', " .
            "destination = '" . add_escape_custom($_REQUEST['form_destination'])   . "', " .
            "reaction ='"     . add_escape_custom($_REQUEST['form_reaction'])     . "', " .
            "erx_uploaded = '0', " .
            "modifydate = NOW(), " .
            "subtype = '"     . $subtype. "' " .
            "WHERE id = '" . add_escape_custom($issue) . "'";
            sqlStatement($query);
            if ($text_type == "medication" && enddate != '') {
              sqlStatement('UPDATE prescriptions SET '
                . 'medication = 0 where patient_id = ? '
                . " and upper(trim(drug)) = ? "
                . ' and medication = 1', array($pid,strtoupper($_REQUEST['form_title'])) );
            }
        } else {
          $query =  "INSERT INTO lists ( " .
          "date, pid, type, title, activity, comments, ".
          "begdate, enddate, returndate, " .
          "diagnosis, occurrence, classification, referredby, user, " .
          "groupname, outcome, destination,reaction,subtype " .
          ") VALUES ( " .
          "NOW(), ?,?,?,1,?," .
          QuotedOrNull($form_begin).", ".QuotedOrNull($form_end).", ".QuotedOrNull($form_return). ", "  .
          "?,?,?,?,?,".
          "?,?,?,?,?)";
          $issue = sqlInsert($query,array($pid,$form_type,$_REQUEST['form_title'],$_REQUEST['form_comments'],
              $_REQUEST['form_diagnosis'],$_REQUEST['form_occur'],$_REQUEST['form_clasification'],$_REQUEST['form_referredby'],$_SESSION['authUser'],
              $_SESSION['authProvider'],QuotedOrNull($_REQUEST['form_outcome']),$_REQUEST['form_destination'],$_REQUEST['form_reaction'],$subtype));

          // For record/reporting purposes, place entry in lists_touch table.
          setListTouch($pid,$form_type);

          // If requested, link the issue to a specified encounter.
          // we always link them, automatically.
          if ($encounter) {
          $query = "INSERT INTO issue_encounter ( " .
            "pid, list_id, encounter " .
            ") VALUES ( ?,?,? )";
          sqlStatement($query, array($pid,$issue,$encounter));
          }

        }
        $irow = '';
        //if it is a medication do we need to do something with dosage fields?
        //leave all in title field form now.
      }
      $PMSFH = build_PMSFH($pid);
      send_json_values($PMSFH);
      exit;
    }
  }
  if ($_REQUEST['action'] =='code_PMSFH') {
    $query = "UPDATE lists SET diagnosis = ? WHERE id = ?";
    sqlStatement($query,array($_POST['code'],$_POST['issue']));
    exit;
  }

  if ($_REQUEST['action'] == 'code_visit'){
    $CODING = json_decode($_REQUEST['parameter'],true);
    $query  = "delete from billing where encounter =?";
    sqlStatement($query,array($encounter));
    foreach ($CODING as $item) //need toremove duplicate codes
    {
      if ($dups[$item["code"]]=='1') {
        continue;
      }
      $dups[$item["code"]] = "1";
      $sql = "SELECT codes.*, prices.pr_price FROM codes " .
              "LEFT OUTER JOIN patient_data ON patient_data.pid = '$pid' " .
              "LEFT OUTER JOIN prices ON prices.pr_id = codes.id AND " .
              "prices.pr_selector = '' AND " .
              "prices.pr_level = patient_data.pricelevel " .
              "WHERE code =?" .
              " LIMIT 1";
      $result = sqlStatement($sql,array($item['code']));
      while ($res = sqlFetchArray($result)) {
          $item["codedesc"] = $res["code_text"];// eg. = "NP EYE intermediate exam"
          if (!$item["modifier"]) $modifier = $res["modifier"];
          $item["units"] = $res["units"];
          $item["fee"] = $res["pr_price"];
      }
      addBilling($encounter,$item["codetype"],$item["code"],$item["codedesc"],$pid,'1',$providerID,$item["modifier"], $item["units"], $item["fee"],$ndc_info, $justify, $billed, '');
    }
    echo 'ok';
    exit;
  }
  /*** END CODE to DEAL WITH PMSFH/ISUUE_TYPES  ****/

  /* Let's save the encounter specific values.
    // Any field that exists in the database could be updated
    // so we need to exclude the important ones...
    // id  date  pid   user  groupname   authorized  activity.  Any other just add them below.
    // Doing it this way means you can add new fields on a web page and in the DB without touching this function.
    // The update feature still works because it only updates columns that are in the table you are working on.
   */
  $query = "SHOW COLUMNS from ".$table_name."";
  $result = sqlStatement($query);
  if (!$result) {
    return 'Could not run query: No columns found in your table!  ' . mysql_error();
    exit;
  }
  $fields = array();
  if (($_POST['IOPTIME'] == '00:00:00')||(!$_POST['IOPTIME'])) {
    $_POST['IOPTIME'] =  date('H:i:s');
  }
  $_POST['IOPTIME'] = date('H:i:s',strtotime($_POST['IOPTIME']));

  if (sqlNumRows($result) > 0) {
    while ($row = sqlFetchArray($result)) {
      //exclude critical columns/fields and those needing special processing from update
      if ($row['Field'] == 'id' or
         $row['Field'] == 'date' or
         $row['Field'] == 'pid' or
         $row['Field'] == 'user' or
         $row['Field'] == 'groupname' or
         $row['Field'] == 'authorized' or
         $row['Field'] == 'LOCKED' or
         $row['Field'] == 'LOCKEDBY' or
         $row['Field'] == 'activity' or
         $row['Field'] == 'PLAN' or
         $row['Field'] == 'Resource')
        continue;
      if (isset($_POST[$row['Field']])) $fields[$row['Field']] = $_POST[$row['Field']];
    }
    // orders are checkboxes created from a user defined list in the PLAN area and stored as item1|item2|item3
    // if there are any, create the $field['PLAN'] value.
    // Remember --  If you uncheck a box, it won't be sent!
    // So delete all made today by this provider and reload with any Orders sent in this $_POST
    // in addition, we made a special table for orders, and when completed we can mark done?
    $query="select form_encounter.date as encounter_date from form_encounter where form_encounter.encounter =?";
    $encounter_data =sqlQuery($query,array($encounter));
    $dated = new DateTime($encounter_data['encounter_date']);
    $dated = $dated->format('Y-m-d');
    $visit_date = oeFormatShortDate($dated);

    $N = count($_POST['PLAN']);
    $sql_clear = "DELETE from form_eye_mag_orders where ORDER_PID =? and ORDER_PLACED_BYWHOM=? and ORDER_DATE_PLACED=? and ORDER_STATUS ='pending'";
    sqlQuery($sql_clear,array($pid,$providerID,$visit_date));
    if ($N > '0') {
      for($i=0; $i < $N; $i++)
      {
        $fields['PLAN'] .= $_POST['PLAN'][$i] . "|"; //this makes an entry for form_eyemag: PLAN
        $ORDERS_sql = "REPLACE INTO form_eye_mag_orders (ORDER_PID,ORDER_DETAILS,ORDER_STATUS,ORDER_DATE_PLACED,ORDER_PLACED_BYWHOM) VALUES (?,?,?,?,?)";
        $okthen = sqlQuery($ORDERS_sql,array($pid,$_POST['PLAN'][$i],'pending',$visit_date,$providerID));
      }
      $fields['PLAN'] = mb_substr($fields['PLAN'], 0, -1); //get rid of trailing "|"
    }
    if ($_REQUEST['PLAN2']) {
      $fields['PLAN'] .= $_REQUEST['PLAN2'];
      //there is something in the "freeform" plan textarea...
      $ORDERS_sql = "REPLACE INTO form_eye_mag_orders (ORDER_PID,ORDER_DETAILS,ORDER_STATUS,ORDER_PRIORITY,ORDER_DATE_PLACED,ORDER_PLACED_BYWHOM) VALUES (?,?,?,?,?,?)";
      $okthen = sqlQuery($ORDERS_sql,array($pid,$_POST['PLAN'][$i],'pending',"PLAN2:$PLAN2",$visit_date,$providerID));
    }

    $M = count($_POST['TEST']);
    if ($M > '0') {
      for($i=0; $i < $M; $i++)
      {
        $fields['Resource'] .= $_POST['TEST'][$i] . "|"; //this makes an entry for form_eyemag: Resource
       }
      $fields['Resource'] = mb_substr($fields['Resource'], 0, -1); //get rid of trailing "|"
    }

    /** Empty Checkboxes need to be entered manually as they are only submitted via POST when they are checked
      * If NOT checked on the form, they are sent via POST and thus are NOT overridden in the DB,
      *  so DB won't change unless we define them into the $fields array as "0"...
      */
    if (!$_POST['alert']) $fields['alert'] = '0';
    if (!$_POST['oriented']) $fields['oriented'] = '0';
    if (!$_POST['confused']) $fields['confused'] = '0';
    if (!$_POST['PUPIL_NORMAL']) $fields['PUPIL_NORMAL'] = '0';
    if (!$_POST['MOTILITYNORMAL']) $fields['MOTILITYNORMAL'] = '0';
    if (!$_POST['ACT']) $fields['ACT'] = 'off';
    if (!$_POST['DIL_RISKS']) $fields['DIL_RISKS'] = '0';
    if (!$_POST['ATROPINE']) $fields['ATROPINE'] = '0';
    if (!$_POST['CYCLOGYL']) $fields['CYCLOGYL'] = '0';
    if (!$_POST['CYCLOMYDRIL']) $fields['CYCLOMYDRIL'] = '0';
    if (!$_POST['NEO25']) $fields['NEO25'] = '0';
    if (!$_POST['TROPICAMIDE']) $fields['TROPICAMIDE'] = '0';
    if (!$_POST['BALANCED']) $fields['BALANCED'] = '0';
    if (!$_POST['ODVF1']) $fields['ODVF1'] = '0';
    if (!$_POST['ODVF2']) $fields['ODVF2'] = '0';
    if (!$_POST['ODVF3']) $fields['ODVF3'] = '0';
    if (!$_POST['ODVF4']) $fields['ODVF4'] = '0';
    if (!$_POST['OSVF1']) $fields['OSVF1'] = '0';
    if (!$_POST['OSVF2']) $fields['OSVF2'] = '0';
    if (!$_POST['OSVF3']) $fields['OSVF3'] = '0';
    if (!$_POST['OSVF4']) $fields['OSVF4'] = '0';
    if (!$_POST['TEST']) $fields['Resource'] = '';
    if (!$fields['PLAN']) $fields['PLAN'] = '0';

    $success = formUpdate($table_name, $fields, $form_id, $_SESSION['userauthorized']);

    //now save any Wear RXs (1-4) entered.
    $rx_number='1';
    if ($_POST['W_1']=='1') {
      $query = "REPLACE INTO `form_eye_mag_wearing` (`ENCOUNTER` ,`FORM_ID` ,`PID` ,`RX_NUMBER` ,`ODSPH` ,`ODCYL` ,`ODAXIS` ,
        `ODVA` ,`ODADD` ,`ODNEARVA` ,`OSSPH` ,`OSCYL` ,`OSAXIS` ,
        `OSVA` ,`OSADD` ,`OSNEARVA` ,`ODMIDADD` ,`OSMIDADD` ,
        `RX_TYPE` ,`COMMENTS`,
        `ODHPD`,`ODHBASE`,`ODVPD`,`ODVBASE`,`ODSLABOFF`,`ODVERTEXDIST`,
        `OSHPD`,`OSHBASE`,`OSVPD`,`OSVBASE`,`OSSLABOFF`,`OSVERTEXDIST`,
        `ODMPDD`,`ODMPDN`,`OSMPDD`,`OSMPDN`,`BPDD`,`BPDN`,`LENS_MATERIAL`,
        `LENS_TREATMENTS`
        ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)";
      $LENS_TREATMENTS_1 = implode("|",$_POST['LENS_TREATMENTS_1']);
      sqlQuery($query,array($encounter,$form_id,$pid,$rx_number,$_POST['ODSPH_1'],$_POST['ODCYL_1'],$_POST['ODAXIS_1'],
        $_POST['ODVA_1'],$_POST['ODADD_1'],$_POST['ODNEARVA_1'],$_POST['OSSPH_1'],$_POST['OSCYL_1'],$_POST['OSAXIS_1'],
        $_POST['OSVA_1'],$_POST['OSADD_1'],$_POST['OSNEARVA_1'],$_POST['ODMIDADD_1'],$_POST['OSMIDADD_1'],
        0+$_POST['RX_TYPE_1'],$_POST['COMMENTS_1'],
        $_POST['ODHPD_1'],$_POST['ODHBASE_1'],$_POST['ODVPD_1'],$_POST['ODVBASE_1'],$_POST['ODSLABOFF_1'],$_POST['ODVERTEXDIST_1'],
        $_POST['OSHPD_1'],$_POST['OSHBASE_1'],$_POST['OSVPD_1'],$_POST['OSVBASE_1'],$_POST['OSSLABOFF_1'],$_POST['OSVERTEXDIST_1'],
        $_POST['ODMPDD_1'],$_POST['ODMPDN_1'],$_POST['OSMPDD_1'],$_POST['OSMPDN_1'],$_POST['BPDD_1'],$_POST['BPDN_1'],$_POST['LENS_MATERIAL_1'],
        $LENS_TREATMENTS_1 ));
      $rx_number++;
    } else {
        $query = "DELETE FROM form_eye_mag_wearing where ENCOUNTER=? and PID=? and FORM_ID=? and RX_NUMBER=?";
        sqlQuery($query,array($encounter,$pid,$form_id,'1'));
    }
    if ($_POST['W_2']=='1') {
      //store W_2
      $query = "REPLACE INTO `form_eye_mag_wearing` (`ENCOUNTER` ,`FORM_ID` ,`PID` ,`RX_NUMBER` ,`ODSPH` ,`ODCYL` ,`ODAXIS` ,
        `ODVA` ,`ODADD` ,`ODNEARVA` ,`OSSPH` ,`OSCYL` ,`OSAXIS` ,
        `OSVA` ,`OSADD` ,`OSNEARVA` ,`ODMIDADD` ,`OSMIDADD` ,
        `RX_TYPE` ,`COMMENTS`,
        `ODHPD`,`ODHBASE`,`ODVPD`,`ODVBASE`,`ODSLABOFF`,`ODVERTEXDIST`,
        `OSHPD`,`OSHBASE`,`OSVPD`,`OSVBASE`,`OSSLABOFF`,`OSVERTEXDIST`,
        `ODMPDD`,`ODMPDN`,`OSMPDD`,`OSMPDN`,`BPDD`,`BPDN`,`LENS_MATERIAL`,
        `LENS_TREATMENTS`
        ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)";
      $LENS_TREATMENTS_2 = implode("|",$_POST['LENS_TREATMENTS_2']);
      sqlQuery($query,array($encounter,$form_id,$pid,$rx_number,$_POST['ODSPH_2'],$_POST['ODCYL_2'],$_POST['ODAXIS_2'],
        $_POST['ODVA_2'],$_POST['ODADD_2'],$_POST['ODNEARVA_2'],$_POST['OSSPH_2'],$_POST['OSCYL_2'],$_POST['OSAXIS_2'],
        $_POST['OSVA_2'],$_POST['OSADD_2'],$_POST['OSNEARVA_2'],$_POST['ODMIDADD_2'],$_POST['OSMIDADD_2'],
        0+$_POST['RX_TYPE_2'],$_POST['COMMENTS_2'],
        $_POST['ODHPD_2'],$_POST['ODHBASE_2'],$_POST['ODVPD_2'],$_POST['ODVBASE_2'],$_POST['ODSLABOFF_2'],$_POST['ODVERTEXDIST_2'],
        $_POST['OSHPD_2'],$_POST['OSHBASE_2'],$_POST['OSVPD_2'],$_POST['OSVBASE_2'],$_POST['OSSLABOFF_2'],$_POST['OSVERTEXDIST_2'],
        $_POST['ODMPDD_2'],$_POST['ODMPDN_2'],$_POST['OSMPDD_2'],$_POST['OSMPDN_2'],$_POST['BPDD_2'],$_POST['BPDN_2'],$_POST['LENS_MATERIAL_2'],
        $LENS_TREATMENTS_2 ));
      $rx_number++;
    } else {
        $query = "DELETE FROM form_eye_mag_wearing where ENCOUNTER=? and PID=? and FORM_ID=? and RX_NUMBER=?";
        sqlQuery($query,array($encounter,$pid,$form_id,'2'));
    }
    if ($_POST['W_3']=='1') {
    //store W_3
      $query = "REPLACE INTO `form_eye_mag_wearing` (`ENCOUNTER` ,`FORM_ID` ,`PID` ,`RX_NUMBER` ,`ODSPH` ,`ODCYL` ,`ODAXIS` ,
        `ODVA` ,`ODADD` ,`ODNEARVA` ,`OSSPH` ,`OSCYL` ,`OSAXIS` ,
        `OSVA` ,`OSADD` ,`OSNEARVA` ,`ODMIDADD` ,`OSMIDADD` ,
        `RX_TYPE` ,`COMMENTS`,
        `ODHPD`,`ODHBASE`,`ODVPD`,`ODVBASE`,`ODSLABOFF`,`ODVERTEXDIST`,
        `OSHPD`,`OSHBASE`,`OSVPD`,`OSVBASE`,`OSSLABOFF`,`OSVERTEXDIST`,
        `ODMPDD`,`ODMPDN`,`OSMPDD`,`OSMPDN`,`BPDD`,`BPDN`,`LENS_MATERIAL`,
        `LENS_TREATMENTS`
        ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)";
      $LENS_TREATMENTS_3 = implode("|",$_POST['LENS_TREATMENTS_3']);
      sqlQuery($query,array($encounter,$form_id,$pid,$rx_number,$_POST['ODSPH_3'],$_POST['ODCYL_3'],$_POST['ODAXIS_3'],
        $_POST['ODVA_3'],$_POST['ODADD_3'],$_POST['ODNEARVA_3'],$_POST['OSSPH_3'],$_POST['OSCYL_3'],$_POST['OSAXIS_3'],
        $_POST['OSVA_3'],$_POST['OSADD_3'],$_POST['OSNEARVA_3'],$_POST['ODMIDADD_3'],$_POST['OSMIDADD_3'],
        0+$_POST['RX_TYPE_3'],$_POST['COMMENTS_3'],
        $_POST['ODHPD_3'],$_POST['ODHBASE_3'],$_POST['ODVPD_3'],$_POST['ODVBASE_3'],$_POST['ODSLABOFF_3'],$_POST['ODVERTEXDIST_3'],
        $_POST['OSHPD_3'],$_POST['OSHBASE_3'],$_POST['OSVPD_3'],$_POST['OSVBASE_3'],$_POST['OSSLABOFF_3'],$_POST['OSVERTEXDIST_3'],
        $_POST['ODMPDD_3'],$_POST['ODMPDN_3'],$_POST['OSMPDD_3'],$_POST['OSMPDN_3'],$_POST['BPDD_3'],$_POST['BPDN_3'],$_POST['LENS_MATERIAL_3'],
        $LENS_TREATMENTS_3 ));
       $rx_number++;
    } else {
        $query = "DELETE FROM form_eye_mag_wearing where ENCOUNTER=? and PID=? and FORM_ID=? and RX_NUMBER=?";
        sqlQuery($query,array($encounter,$pid,$form_id,'3'));
    }
    if ($_POST['W_4']=='1') {
     //store W_4
      $query = "REPLACE INTO `form_eye_mag_wearing` (`ENCOUNTER` ,`FORM_ID` ,`PID` ,`RX_NUMBER` ,`ODSPH` ,`ODCYL` ,`ODAXIS` ,
        `ODVA` ,`ODADD` ,`ODNEARVA` ,`OSSPH` ,`OSCYL` ,`OSAXIS` ,
        `OSVA` ,`OSADD` ,`OSNEARVA` ,`ODMIDADD` ,`OSMIDADD` ,
        `RX_TYPE` ,`COMMENTS`,
        `ODHPD`,`ODHBASE`,`ODVPD`,`ODVBASE`,`ODSLABOFF`,`ODVERTEXDIST`,
        `OSHPD`,`OSHBASE`,`OSVPD`,`OSVBASE`,`OSSLABOFF`,`OSVERTEXDIST`,
        `ODMPDD`,`ODMPDN`,`OSMPDD`,`OSMPDN`,`BPDD`,`BPDN`,`LENS_MATERIAL`,
        `LENS_TREATMENTS`
        ) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)";
      $LENS_TREATMENTS_4 = implode("|",$_POST['LENS_TREATMENTS_4']);
      sqlQuery($query,array($encounter,$form_id,$pid,$rx_number,$_POST['ODSPH_4'],$_POST['ODCYL_4'],$_POST['ODAXIS_4'],
        $_POST['ODVA_4'],$_POST['ODADD_4'],$_POST['ODNEARVA_4'],$_POST['OSSPH_4'],$_POST['OSCYL_4'],$_POST['OSAXIS_4'],
        $_POST['OSVA_4'],$_POST['OSADD_4'],$_POST['OSNEARVA_4'],$_POST['ODMIDADD_4'],$_POST['OSMIDADD_4'],
        0+$_POST['RX_TYPE_4'],$_POST['COMMENTS_4'],
        $_POST['ODHPD_4'],$_POST['ODHBASE_4'],$_POST['ODVPD_4'],$_POST['ODVBASE_4'],$_POST['ODSLABOFF_4'],$_POST['ODVERTEXDIST_4'],
        $_POST['OSHPD_4'],$_POST['OSHBASE_4'],$_POST['OSVPD_4'],$_POST['OSVBASE_4'],$_POST['OSSLABOFF_4'],$_POST['OSVERTEXDIST_4'],
        $_POST['ODMPDD_4'],$_POST['ODMPDN_4'],$_POST['OSMPDD_4'],$_POST['OSMPDN_4'],$_POST['BPDD_4'],$_POST['BPDN_4'],$_POST['LENS_MATERIAL_4'],
        $LENS_TREATMENTS_4 ));
       $rx_number++;
    } else {
        $query = "DELETE FROM form_eye_mag_wearing where ENCOUNTER=? and PID=? and FORM_ID=? and RX_NUMBER=?";
        sqlQuery($query,array($encounter,$pid,$form_id,'4'));
    }
    for ($i=$rx_number; $i < 5; $i++) {
        $query = "DELETE FROM form_eye_mag_wearing where ENCOUNTER=? and PID=? and FORM_ID=? and RX_NUMBER=?";
        sqlQuery($query,array($encounter,$pid,$form_id,$i));
    }
    //now return the obj
    $send['IMPPLAN_items'] = build_IMPPLAN_items($pid,$form_id);
    $send['Clinical'] = start_your_engines($_REQUEST);
    $send['PMH_panel'] = display_PMSFH('2');
    $send['right_panel'] = show_PMSFH_panel($PMSFH);
    $send['PMSFH'] = $PMSFH[0];
    echo json_encode($send);
    exit;
  }
} elseif ($_REQUEST["mode"] == "retrieve")  {

    if ($_REQUEST['PRIORS_query']) {
      echo display_PRIOR_section($_REQUEST['zone'],$_REQUEST['orig_id'],$_REQUEST['id_to_show'],$pid);
      exit;
    }
}

/**
 * Save the canvas drawings
 */

if ($_REQUEST['canvas']) {
  if (!$pid||!$encounter||!$zone||!$_POST["imgBase64"]) exit;

  $side = "OU";
  $base_name = $pid."_".$encounter."_".$side."_".$zone."_VIEW";
  $filename = $base_name.".jpg";

  $type = "image/jpeg"; // all our canvases are this type
  $data = $_POST["imgBase64"];
  $data = substr($data, strpos($data, ",")+1);
  $data = base64_decode($data);
  $size = strlen($data);
  $query = "select id from categories where name = 'Drawings'";
  $result = sqlStatement($query);
  $ID = sqlFetchArray($result);
  $category_id = $ID['id'];

  // We want to overwrite so only one image is stored per zone per form/encounter
  // I do not believe this function exists in the current library, ie "UpdateDocument" function, so...
  //  we need to delete the previous file from the documents and categories to documents tables and the actual file
  //  There must be a delete_file function in documents class?
  // cannot find it.
  // this will work for harddisk people, not sure about couchDB people:
  $filepath = $GLOBALS['oer_config']['documents']['repository'] . $pid ."/";
  foreach (glob($filepath.'/'.$filename) as $file) {
    unlink($file);
  }

  $sql = "DELETE from categories_to_documents where document_id IN (SELECT id from documents where documents.url like '%".$filename."')";
  sqlQuery($sql);
  $sql ="DELETE from documents where documents.url like '%".$filename."'";
  sqlQuery($sql);
  $return = addNewDocument($filename,$type,$_POST["imgBase64"],0,$size,$_SESSION['authUserID'],$pid,$category_id);
  $doc_id = $return['doc_id'];
  $sql = "UPDATE documents set encounter_id=? where id=?"; //link it to this encounter
  sqlQuery($sql,array($encounter,$doc_id));
  exit;
}

if ($_REQUEST['copy']) {
  copy_forward($_REQUEST['zone'],$_REQUEST['copy_from'],$_SESSION['ID'],$pid);
  return;
}
function QuotedOrNull($fld) {
  if ($fld) return "'".add_escape_custom($fld)."'";
  return "NULL";
}
function debug($local_var) {
    echo "<pre><BR>We are in the debug function.<BR>";
    echo "Passed variable = ". $local_var . " <BR>";
    print_r($local_var);
    exit;
}

/* From original issue.php */

function row_delete($table, $where) {
    $query = "SELECT * FROM $table WHERE $where";
    $tres = sqlStatement($query);
    $count = 0;
    while ($trow = sqlFetchArray($tres)) {
     $logstring = "";
     foreach ($trow as $key => $value) {
      if (! $value || $value == '0000-00-00 00:00:00') continue;
      if ($logstring) $logstring .= " ";
      $logstring .= $key . "='" . addslashes($value) . "'";
    }
    newEvent("delete", $_SESSION['authUser'], $_SESSION['authProvider'], 1, "$table: $logstring");
    ++$count;
    }
    if ($count) {
     $query = "DELETE FROM $table WHERE $where";
     sqlStatement($query);
    }
}
// Given an issue type as a string, compute its index.
// Not sure of the value of this sub given transition to array $PMSFH
// Can I use it to find out which PMSFH item we are looking for?  YES
function issueTypeIndex($tstr) {
  global $ISSUE_TYPES;
  $i = 0;
  foreach ($ISSUE_TYPES as $key => $value) {
    if ($key == $tstr) break;
    ++$i;
  }
  return $i;
}

/**
 *    The following 2 functions can be removed from the production environment
 */

function merge($filename_x, $filename_y, $filename_result) {
  /**
   *    Three png files (OU,OD,OS) per LOCATION (EXT,ANTSEG,RETINA,NEURO)
   *    BASE, found in forms/$form_folder/images eg. OU_EXT_BASE.png
   *          BASE is the blank image to start from and can be customized. Currently 432x150px
   *    VIEW, found in /sites/$_SESSION['site_id']."/".$form_folder."/".$pid."/".$encounter
   *    TEMP, intermediate png merge file of new drawings with BASE or previous VIEW
   *          These are saved to be used in an undo feature...
   *    NO LONGER USING but I kept it here because it is cool and I will use it later
   */
  /*
  This section
  if (file_exists($storage."/OU_".$zone."_VIEW.png")) { //add new drawings to previous for this encounter
      $file_base = $storage."/OU_".$zone."_VIEW.png";
    } else  { //start from the base image
      $file_base = $GLOBALS['webserver_root']."/interface/forms/".$form_folder."/images/OU_".$zone."_BASE.png";
    }
    //merge needs to store to a separate file first, then rename to new VIEW
    $file_temp = $storage."/OU_".$zone."_TEMP.png";
    $file_here = $storage."/OU_".$zone."_VIEW.png";
    merge( $file_draw, $file_base, $file_temp);
    rename( $file_temp , $file_here );
   */
  // Get dimensions for specified images
  list($width_x, $height_x) = getimagesize($filename_x);
  list($width_y, $height_y) = getimagesize($filename_y);

  // Create new image with desired dimensions
  $image = imagecreatetruecolor($width_y, $height_y);

  // Load images and then copy to destination image
  $image_x = imagecreatefrompng($filename_x);
  $image_y = imagecreatefrompng($filename_y);

  imagecopy($image, $image_y, 0, 0, 0, 0, $width_x, $height_x);
  imagecopy($image, $image_x, 0, 0, 0, 0, $width_x, $height_x);

  // Save the resulting image to disk (as png)
  imagepng($image, $filename_result);

  // Clean up
  imagedestroy($image);
  imagedestroy($image_x);
  imagedestroy($image_y);
}

//  this function is here to understand the core openEMR function addBilling, so we can improve the Billing Engine in Eye Form
//  We still need to add modifiers and justify capabilities to the Coding Engine...
function addBilling2($encounter_id, $code_type, $code, $code_text, $pid, $authorized="0", $provider, $modifier="", $units="", $fee="0.00",
  $ndc_info='', $justify='', $billed=0, $notecodes='')
{
  $sql = "insert into billing (date, encounter, code_type, code, code_text, " .
    "pid, authorized, user, groupname, activity, billed, provider_id, " .
    "modifier, units, fee, ndc_info, justify, notecodes) values (" .
    "NOW(), ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, ?, ?, ?, ?, ?, ?)";
  return sqlInsert($sql,array( $encounter_id,$code_type,$code,$code_text,$pid,$authorized,$_SESSION['authId'],$_SESSION['authProvider'], $billed,$provider,$modifier,$units,$fee,$ndc_info,$justify,$notecodes));
}
exit;
?>