library/ajax/document_helpers.php

   1 <?php
   2
   3 /**
   4  * Document Helper Functions for New Documents Module.
   5  *
   6  * @package   OpenEMR
   7  * @link      https://www.open-emr.org
   8  * @author    Jerry Padgett <sjpadgett@gmail.com>
   9  * @author    Brady Miller <brady.g.miller@gmail.com>
  10  * @copyright Copyright (c) 2017-2018 Jerry Padgett <sjpadgett@gmail.com>
  11  * @copyright Copyright (c) 2018 Brady Miller <brady.g.miller@gmail.com>
  12  * @license   https://github.com/openemr/openemr/blob/master/LICENSE GNU General Public License 3
  13  */
  14
  15 require_once(dirname(__FILE__) . "/../../interface/globals.php");
  16
  17 use OpenEMR\Common\Csrf\CsrfUtils;
  18
  19 //verify csrf
  20 if (!CsrfUtils::verifyCsrfToken($_GET["csrf_token_form"])) {
  21     CsrfUtils::csrfNotVerified();
  22 }
  23
  24 $req = array(
  25     'term' => (isset($_GET["term"]) ? filter_input(INPUT_GET, 'term') : ''),
  26     'sql_limit' => (isset($_GET["limit"]) ? filter_input(INPUT_GET, 'limit') : 20),
  27 );
  28
  29 function get_patients_list($req)
  30 {
  31     $term = "%" . $req['term'] . "%";
  32     $clear = "- " . xl("Reset to no patient") . " -";
  33     $response = sqlStatement(
  34         "SELECT CONCAT(fname, ' ',lname,IF(IFNULL(deceased_date,0)=0,'','*')) as label, pid as value
  35             FROM patient_data
  36             HAVING label LIKE ?
  37             ORDER BY IF(IFNULL(deceased_date,0)=0, 0, 1) ASC, IFNULL(deceased_date,0) DESC, lname ASC, fname ASC
  38             LIMIT " . escape_limit($req['sql_limit']),
  39         array($term)
  40     );
  41     $resultpd[] = array(
  42         'label' => $clear,
  43         'value' => '00'
  44     );
  45     while ($row = sqlFetchArray($response)) {
  46         if ($GLOBALS['pid'] == $row['value']) {
  47             $row['value'] = "00";
  48             $row['label'] = xl("Locked") . "-" . xl("In Use") . ":" . $row['label'];
  49         }
  50
  51         $resultpd[] = $row;
  52     }
  53
  54     echo json_encode($resultpd);
  55 }
  56
  57 get_patients_list($req);