Advertisement
Advertisement
| 07.24.2008 at 08:44AM PDT, ID: 23592515 |
|
[x]
Attachment Details
|
||
1: 2: 3: 4: 5: 6: 7: 8: 9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 20: 21: 22: 23: 24: 25: 26: 27: 28: 29: 30: 31: 32: 33: 34: 35: 36: 37: 38: 39: 40: 41: 42: 43: 44: 45: 46: 47: 48: 49: 50: 51: 52: 53: 54: 55: 56: 57: 58: 59: 60: 61: 62: 63: 64: 65: 66: 67: 68: 69: 70: 71: 72: 73: 74: 75: 76: 77: 78: 79: 80: 81: 82: 83: 84: 85: 86: 87: 88: 89: 90: 91: 92: 93: 94: 95: 96: 97: 98: 99: 100: 101: 102: 103: 104: 105: 106: 107: 108: 109: 110: 111: 112: 113: 114: 115: 116: 117: 118: 119: 120: 121: 122: 123: 124: 125: 126: 127: 128: 129: 130: 131: 132: 133: 134: 135: 136: 137: 138: 139: 140: 141: 142: 143: 144: 145: 146: 147: 148: 149: 150: 151: 152: 153: 154: 155: 156: 157: 158: 159: 160: 161: 162: 163: 164: 165: 166: 167: 168: 169: 170: 171: 172: 173: 174: 175: 176: 177: 178: 179: 180: 181: 182: 183: 184: 185: 186: 187: 188: 189: 190: 191: 192: 193: 194: 195: 196: 197: 198: 199: 200: 201: 202: 203: 204: 205: 206: 207: 208: 209: 210: 211: 212: 213: 214: 215: 216: 217: 218: 219: 220: 221: 222: 223: |
<?php require_once('Connections/harveys_connection.php'); ?>
<?php
//initialize the session
session_start();
// ** Logout the current user. **
$logoutAction = $_SERVER['PHP_SELF']."?doLogout=true";
if ((isset($_SERVER['QUERY_STRING'])) && ($_SERVER['QUERY_STRING'] != "")){
$logoutAction .="&". htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($_GET['doLogout'])) &&($_GET['doLogout']=="true")){
//to fully log out a visitor we need to clear the session varialbles
session_unregister('MM_Username');
session_unregister('MM_UserGroup');
$logoutGoTo = "loginmed.php";
if ($logoutGoTo) {
header("Location: $logoutGoTo");
exit;
}
}
?>
<?php
session_start();
$MM_authorizedUsers = "";
$MM_donotCheckaccess = "true";
// *** Restrict Access To Page: Grant or deny access to this page
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) {
// For security, start by assuming the visitor is NOT authorized.
$isValid = False;
// When a visitor has logged into this site, the Session variable MM_Username set equal to their username.
// Therefore, we know that a user is NOT logged in if that Session variable is blank.
if (!empty($UserName)) {
// Besides being logged in, you may restrict access to only certain users based on an ID established when they login.
// Parse the strings into arrays.
$arrUsers = Explode(",", $strUsers);
$arrGroups = Explode(",", $strGroups);
if (in_array($UserName, $arrUsers)) {
$isValid = true;
}
// Or, you may restrict access to only certain users based on their username.
if (in_array($UserGroup, $arrGroups)) {
$isValid = true;
}
if (($strUsers == "") && true) {
$isValid = true;
}
}
return $isValid;
}
$MM_restrictGoTo = "unauthorized.php";
if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {
$MM_qsChar = "?";
$MM_referrer = $_SERVER['PHP_SELF'];
if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
if (isset($QUERY_STRING) && strlen($QUERY_STRING) > 0)
$MM_referrer .= "?" . $QUERY_STRING;
$MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
header("Location: ". $MM_restrictGoTo);
exit;
}
?>
<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
$theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . date("Y-m-d",strtotime($theValue)) . "'" : "NULL";
break;
case "time":
$theValue = ($theValue != "") ? "'" . date("H:i:s",strtotime($theValue)) . "'" : "NULL";
break;
case "datetime":
$theValue = ($theValue != "") ? "'" . date("Y-m-d H:i:s",strtotime($theValue)) . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "frm_pmdo_add")) {
$insertSQL = sprintf("INSERT INTO harvey_patients (hdw_id, Medicare_Number, Patient_Last_Name, Patient_First_Name, Date_of_Birth, HICN_Number, Height, Weight, Group_2_Powerchair_K0823, Heavy_Duty_powerchair_K0824, Reclining_Back_E1226, Flat_Free_Tires_K0093, Adj_Detachable_Arms_E0973, Headrest_E0955, Batteries_E2365, batteries_heavy_duty_E0973, Seat_Belt_Safety_Belt_E0978, Positioning_Cushion_E2611, Back_Support_Cushion_E2611, Elevating_Leg_Rests_E0990, Oxygen_Tank_Holder_E2208, Code, Diagnosis_1, ICD9_Code_1, Diagnosis_2, ICD9_Code_2, Diagnosis_3, ICD9_Code_3, Diagnosis_4, ICD9_Code_4, Length_of_Need, Question_1_yn, Question_1_explain, Question_2_yn, Question_2_explain, Question_3_yn, Question_4_yn, Question_4upper_yn, Question_4lower_yn, Question_4_explain, Question_5_yn, Question_6_yn, Question_7_yn, More_Information, certify, completion_date, practitioners_name, UPIN, `Date`) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",
GetSQLValueString($_POST['Medicare_Number'], "text"),
GetSQLValueString($_POST['Medicare_Number'], "text"),
GetSQLValueString($_POST['Patient_Last_Name'], "text"),
GetSQLValueString($_POST['Patient_First_Name'], "text"),
GetSQLValueString($_POST['Date_of_Birth'], "text"),
GetSQLValueString($_POST['HICN_Number'], "text"),
GetSQLValueString($_POST['Height'], "text"),
GetSQLValueString($_POST['Weight'], "text"),
GetSQLValueString($_POST['Group_2_Powerchair_K0823'], "text"),
GetSQLValueString($_POST['Heavy_Duty_powerchair_K0824'], "text"),
GetSQLValueString($_POST['Reclining_Back_E1226'], "text"),
GetSQLValueString($_POST['Flat_Free_Tires_K0093'], "text"),
GetSQLValueString($_POST['Adj_Detachable_Arms_E0973'], "text"),
GetSQLValueString($_POST['Headrest_E0955'], "text"),
GetSQLValueString($_POST['Batteries_E2365'], "text"),
GetSQLValueString($_POST['batteries_heavy_duty_E0973'], "text"),
GetSQLValueString($_POST['Seat_Belt_Safety_Belt_E0978'], "text"),
GetSQLValueString($_POST['Positioning_Cushion_E2611'], "text"),
GetSQLValueString($_POST['Back_Support_Cushion_E2611'], "text"),
GetSQLValueString($_POST['Elevating_Leg_Rests_E0990'], "text"),
GetSQLValueString($_POST['Oxygen_Tank_Holder_E2208'], "text"),
GetSQLValueString($_POST['Code'], "text"),
GetSQLValueString($_POST['Diagnosis_1'], "text"),
GetSQLValueString($_POST['ICD9_Code_1'], "text"),
GetSQLValueString($_POST['Diagnosis_2'], "text"),
GetSQLValueString($_POST['ICD9_Code_2'], "text"),
GetSQLValueString($_POST['Diagnosis_3'], "text"),
GetSQLValueString($_POST['ICD9_Code_3'], "text"),
GetSQLValueString($_POST['Diagnosis_4'], "text"),
GetSQLValueString($_POST['ICD9_Code_4'], "text"),
GetSQLValueString($_POST['Length_of_Need'], "text"),
GetSQLValueString($_POST['Question_1_yn'], "text"),
GetSQLValueString($_POST['Question_1_explain'], "text"),
GetSQLValueString($_POST['Question_2_yn'], "text"),
GetSQLValueString($_POST['Question_2_explain'], "text"),
GetSQLValueString($_POST['Question_3_yn'], "text"),
GetSQLValueString($_POST['Question_4_yn'], "text"),
GetSQLValueString($_POST['Question_4upper_yn'], "text"),
GetSQLValueString($_POST['Question_4lower_yn'], "text"),
GetSQLValueString($_POST['Question_4_explain'], "text"),
GetSQLValueString($_POST['Question_5_yn'], "text"),
GetSQLValueString($_POST['Question_6_yn'], "text"),
GetSQLValueString($_POST['Question_7_yn'], "text"),
GetSQLValueString($_POST['More_Information'], "text"),
GetSQLValueString($_POST['certify'], "text"),
GetSQLValueString($_POST['completion_date'], "text"),
GetSQLValueString($_POST['practitioners_name'], "text"),
GetSQLValueString($_POST['UPIN'], "text"),
GetSQLValueString($_POST['Date'], "text"));
mysql_select_db($database_harveys_connection, $harveys_connection);
$Result1 = mysql_query($insertSQL, $harveys_connection) or die(mysql_error());
$insertGoTo = "home_med.php";
if (isset($_SERVER['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $_SERVER['QUERY_STRING'];
}
header(sprintf("Location: %s", $insertGoTo));
}
$colname_rs_pmdo = "1";
if (isset($_GET['Medicare_Number'])) {
$colname_rs_pmdo = (get_magic_quotes_gpc()) ? $_GET['Medicare_Number'] : addslashes($_GET['Medicare_Number']);
}
mysql_select_db($database_harveys_connection, $harveys_connection);
$query_rs_pmdo = sprintf("SELECT * FROM harvey_patients WHERE Medicare_Number = '%s'", $colname_rs_pmdo);
$rs_pmdo = mysql_query($query_rs_pmdo, $harveys_connection) or die(mysql_error());
$row_rs_pmdo = mysql_fetch_assoc($rs_pmdo);
$totalRows_rs_pmdo = mysql_num_rows($rs_pmdo);
mysql_select_db($database_harveys_connection, $harveys_connection);
$query_rs_medical_professionals = "SELECT * FROM harvey_registration";
$rs_medical_professionals = mysql_query($query_rs_medical_professionals, $harveys_connection) or die(mysql_error());
$row_rs_medical_professionals = mysql_fetch_assoc($rs_medical_professionals);
$totalRows_rs_medical_professionals = mysql_num_rows($rs_medical_professionals);
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>Power Mobility Detailed Order; Face To Face Examination Report</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
.style4 {font-size: 14px; font-weight: bold; }
.style7 {font-size: 14px}
.style5 {font-weight: bold}
-->
</style>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_findObj(n, d) { //v4.01
var p,i,x; if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
if(!x && d.getElementById) x=d.getElementById(n); return x;
}
function MM_validateForm() { //v4.0
var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
for (i=0; i<(args.length-2); i+=3) { test=args[i+2]; val=MM_findObj(args[i]);
if (val) { nm=val.name; if ((val=val.value)!="") {
if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
if (p<1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
} else if (test!='R') { num = parseFloat(val);
if (isNaN(val)) errors+='- '+nm+' must contain a number.\n';
if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
min=test.substring(8,p); max=test.substring(p+1);
if (num<min || max<num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
} } } else if (test.charAt(0) == 'R') errors += '- '+nm+' is required.\n'; }
} if (errors) alert('The following error(s) occurred:\n'+errors);
document.MM_returnValue = (errors == '');
}
//-->
</script>
|