You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
275 lines
14 KiB
275 lines
14 KiB
2 years ago
|
<?php
|
||
|
|
|
||
|
|
// This program is free software; you can redistribute it and/or
|
||
|
|
// modify it under the terms of the GNU General Public License
|
||
|
|
// as published by the Free Software Foundation; either version 2
|
||
|
|
// of the License, or (at your option) any later version.
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
//INCLUDES, DO ANY ACTIONS, THEN GET OUR DATA
|
||
|
|
require_once("../globals.php");
|
||
|
|
require_once("$srcdir/registry.inc");
|
||
|
|
|
||
|
|
use OpenEMR\Common\Acl\AclMain;
|
||
|
|
use OpenEMR\Common\Acl\AclExtended;
|
||
|
|
use OpenEMR\Common\Csrf\CsrfUtils;
|
||
|
|
use OpenEMR\Common\Forms\CoreFormToPortalUtility;
|
||
|
|
use OpenEMR\Common\Twig\TwigContainer;
|
||
|
|
use OpenEMR\Core\Header;
|
||
|
|
|
||
|
|
if (!AclMain::aclCheckCore('admin', 'forms')) {
|
||
|
|
echo (new TwigContainer(null, $GLOBALS['kernel']))->getTwig()->render('core/unauthorized.html.twig', ['pageTitle' => xl("Forms Administration")]);
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!empty($_GET['method']) && ($_GET['method'] == "enable")) {
|
||
|
|
if (!CsrfUtils::verifyCsrfToken($_GET["csrf_token_form"])) {
|
||
|
|
CsrfUtils::csrfNotVerified();
|
||
|
|
}
|
||
|
|
updateRegistered($_GET['id'], "state=1");
|
||
|
|
} elseif (!empty($_GET['method']) && ($_GET['method'] == "disable")) {
|
||
|
|
if (!CsrfUtils::verifyCsrfToken($_GET["csrf_token_form"])) {
|
||
|
|
CsrfUtils::csrfNotVerified();
|
||
|
|
}
|
||
|
|
updateRegistered($_GET['id'], "state=0");
|
||
|
|
} elseif (!empty($_GET['method']) && ($_GET['method'] == "install_db")) {
|
||
|
|
if (!CsrfUtils::verifyCsrfToken($_GET["csrf_token_form"])) {
|
||
|
|
CsrfUtils::csrfNotVerified();
|
||
|
|
}
|
||
|
|
$dir = getRegistryEntry($_GET['id'], "directory");
|
||
|
|
if (installSQL("$srcdir/../interface/forms/{$dir['directory']}")) {
|
||
|
|
updateRegistered($_GET['id'], "sql_run=1");
|
||
|
|
} else {
|
||
|
|
$err = xl('ERROR: could not open table.sql, broken form?');
|
||
|
|
}
|
||
|
|
} elseif (!empty($_GET['method']) && ($_GET['method'] == "register")) {
|
||
|
|
if (!CsrfUtils::verifyCsrfToken($_GET["csrf_token_form"])) {
|
||
|
|
CsrfUtils::csrfNotVerified();
|
||
|
|
}
|
||
|
|
$newRegisteredFormId = registerForm($_GET['name']) or $err = xl('error while registering form!');
|
||
|
|
if (empty($err)) {
|
||
|
|
// below block of code will insert the patient portal template (if it has not yet already been added) if the
|
||
|
|
// form is patient portal compliant
|
||
|
|
CoreFormToPortalUtility::insertPatientPortalTemplate($newRegisteredFormId);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
$bigdata = getRegistered("%") or $bigdata = false;
|
||
|
|
|
||
|
|
//START OUT OUR PAGE....
|
||
|
|
?>
|
||
|
|
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<?php Header::setupHeader(); ?>
|
||
|
|
</head>
|
||
|
|
<body class="body_top">
|
||
|
|
|
||
|
|
<div class="container-fluid">
|
||
|
|
<!-- Page header -->
|
||
|
|
<div class="row">
|
||
|
|
<div class="col-12">
|
||
|
|
<h2 class="title"><?php echo xlt('Forms Administration');?></h2>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<!-- Form table -->
|
||
|
|
<div class="row">
|
||
|
|
<div class="col-12 mt-3">
|
||
|
|
<?php
|
||
|
|
if (!empty($_POST)) {
|
||
|
|
if (!CsrfUtils::verifyCsrfToken($_POST["csrf_token_form"])) {
|
||
|
|
CsrfUtils::csrfNotVerified();
|
||
|
|
}
|
||
|
|
foreach ($_POST as $key => $val) {
|
||
|
|
if (preg_match('/nickname_(\d+)/', $key, $matches)) {
|
||
|
|
sqlQuery("update registry set nickname = ? where id = ?", array($val, $matches[1]));
|
||
|
|
} elseif (preg_match('/category_(\d+)/', $key, $matches)) {
|
||
|
|
sqlQuery("update registry set category = ? where id = ?", array($val, $matches[1]));
|
||
|
|
} elseif (preg_match('/priority_(\d+)/', $key, $matches)) {
|
||
|
|
sqlQuery("update registry set priority = ? where id = ?", array($val, $matches[1]));
|
||
|
|
} elseif (preg_match('/aco_spec_(\d+)/', $key, $matches)) {
|
||
|
|
sqlQuery("update registry set aco_spec = ? where id = ?", array($val, $matches[1]));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
|
||
|
|
<?php //ERROR REPORTING
|
||
|
|
if (!empty($err)) {
|
||
|
|
echo "<span class='font-weight-bold text-danger'>" . text($err) . "</span>\n";
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
|
||
|
|
<?php //REGISTERED SECTION ?>
|
||
|
|
<span class="font-weight-bold"><?php echo xlt('Registered');?></span>
|
||
|
|
<form method="post" action ='./forms_admin.php'>
|
||
|
|
<span class="font-italic">
|
||
|
|
<?php echo xlt('click here to update priority, category, nickname and access control settings'); ?>
|
||
|
|
</span>
|
||
|
|
<input type="hidden" name="csrf_token_form" value="<?php echo attr(CsrfUtils::collectCsrfToken()); ?>" />
|
||
|
|
<input class="btn btn-primary" type='submit' name='update' value='<?php echo xla('Save'); ?>'>
|
||
|
|
|
||
|
|
<div class="table-responsive mt-3">
|
||
|
|
<table class="table table-striped">
|
||
|
|
<thead>
|
||
|
|
<tr>
|
||
|
|
<th colspan="5"></th>
|
||
|
|
<th><?php echo xlt('Priority'); ?> </th>
|
||
|
|
<th><?php echo xlt('Category'); ?> </th>
|
||
|
|
<th><?php echo xlt('Nickname'); ?> </th>
|
||
|
|
<th><?php echo xlt('Access Control'); ?></th>
|
||
|
|
</tr>
|
||
|
|
</thead>
|
||
|
|
<?php
|
||
|
|
if ($bigdata != false) {
|
||
|
|
foreach ($bigdata as $registry) {
|
||
|
|
$priority_category = sqlQuery(
|
||
|
|
"select priority, category, nickname, aco_spec from registry where id = ?",
|
||
|
|
array($registry['id'])
|
||
|
|
);
|
||
|
|
$patientPortalCompliant = file_exists($GLOBALS['srcdir'] . "/../interface/forms/" . $registry['directory'] . "/patient_portal.php");
|
||
|
|
?>
|
||
|
|
<tr>
|
||
|
|
<td>
|
||
|
|
<span class='text'><?php echo text($registry['id']); ?></span>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<span class='font-weight-bold'>
|
||
|
|
<?php
|
||
|
|
echo text(xl_form_title($registry['name']));
|
||
|
|
echo ($patientPortalCompliant) ? ' <i class="fas fa-cloud-arrow-up" title="' . xla('Patient Portal Compliant') . '"></i>' : '';
|
||
|
|
?>
|
||
|
|
</span>
|
||
|
|
</td>
|
||
|
|
<?php
|
||
|
|
if ($registry['sql_run'] == 0) {
|
||
|
|
echo "<td><span class='text'>" . xlt('registered') . "</span>";
|
||
|
|
} elseif ($registry['state'] == "0") {
|
||
|
|
echo "<td><a class='link_submit text-danger' href='./forms_admin.php?id=" . attr_url($registry['id']) . "&method=enable&csrf_token_form=" . attr_url(CsrfUtils::collectCsrfToken()) . "'>" . xlt('disabled') . "</a>";
|
||
|
|
} else {
|
||
|
|
echo "<td><a class='link_submit text-success' href='./forms_admin.php?id=" . attr_url($registry['id']) . "&method=disable&csrf_token_form=" . attr_url(CsrfUtils::collectCsrfToken()) . "'>" . xlt('enabled') . "</a>";
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<span class='text'><?php
|
||
|
|
if ($registry['unpackaged']) {
|
||
|
|
echo xlt('PHP extracted');
|
||
|
|
} else {
|
||
|
|
echo xlt('PHP compressed');
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
</span>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<?php
|
||
|
|
if ($registry['sql_run']) {
|
||
|
|
echo "<span class='text'>" . xlt('DB installed') . "</span>";
|
||
|
|
} else {
|
||
|
|
echo "<a class='link_submit' href='./forms_admin.php?id=" . attr_url($registry['id']) . "&method=install_db&csrf_token_form=" . attr_url(CsrfUtils::collectCsrfToken()) . "'>" . xlt('install DB') . "</a>";
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
</td>
|
||
|
|
<?php
|
||
|
|
echo "<td><input type='text' class='form-control' size='4' name='priority_" . attr($registry['id']) . "' value='" . attr($priority_category['priority']) . "'></td>";
|
||
|
|
echo "<td><input type='text' class='form-control' size='10' name='category_" . attr($registry['id']) . "' value='" . attr($priority_category['category']) . "'></td>";
|
||
|
|
echo "<td><input type='text' class='form-control' size='10' name='nickname_" . attr($registry['id']) . "' value='" . attr($priority_category['nickname']) . "'></td>";
|
||
|
|
echo "<td>";
|
||
|
|
echo "<select name='aco_spec_" . attr($registry['id']) . "' class='form-control'>";
|
||
|
|
echo "<option value=''></option>";
|
||
|
|
echo AclExtended::genAcoHtmlOptions($priority_category['aco_spec']);
|
||
|
|
echo "</select>";
|
||
|
|
echo "</td>";
|
||
|
|
?>
|
||
|
|
</tr>
|
||
|
|
<?php
|
||
|
|
} //end of foreach
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
<hr>
|
||
|
|
|
||
|
|
<?php //UNREGISTERED SECTION ?>
|
||
|
|
<span class="font-weight-bold"><?php echo xlt('Unregistered'); ?></span>
|
||
|
|
<div class="table-responsive mt-3">
|
||
|
|
<table class="table table-striped">
|
||
|
|
<?php
|
||
|
|
$dpath = "$srcdir/../interface/forms/";
|
||
|
|
$dp = opendir($dpath);
|
||
|
|
|
||
|
|
for ($i = 0; false != ($fname = readdir($dp)); $i++) {
|
||
|
|
if (
|
||
|
|
$fname != "." && $fname != ".." && $fname != "CVS" && $fname != "LBF" &&
|
||
|
|
(is_dir($dpath . $fname) || stristr($fname, ".tar.gz") ||
|
||
|
|
stristr($fname, ".tar") || stristr($fname, ".zip") ||
|
||
|
|
stristr($fname, ".gz"))
|
||
|
|
) {
|
||
|
|
$inDir[$i] = $fname;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// ballards 11/05/2005 fixed bug in removing registered form from the list
|
||
|
|
if ($bigdata != false) {
|
||
|
|
foreach ($bigdata as $registry) {
|
||
|
|
$key = array_search($registry['directory'], $inDir) ; /* returns integer or FALSE */
|
||
|
|
unset($inDir[$key]);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
foreach ($inDir as $fname) {
|
||
|
|
if (stristr($fname, ".tar.gz") || stristr($fname, ".tar") || stristr($fname, ".zip") || stristr($fname, ".gz")) {
|
||
|
|
$phpState = "PHP compressed";
|
||
|
|
} else {
|
||
|
|
$phpState = "PHP extracted";
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
<tr>
|
||
|
|
<td colspan="2">
|
||
|
|
<?php
|
||
|
|
$form_title_file = @file($GLOBALS['srcdir'] . "/../interface/forms/$fname/info.txt");
|
||
|
|
if ($form_title_file) {
|
||
|
|
$form_title = $form_title_file[0];
|
||
|
|
} else {
|
||
|
|
$form_title = $fname;
|
||
|
|
}
|
||
|
|
$patientPortalCompliant = file_exists($GLOBALS['srcdir'] . "/../interface/forms/" . $fname . "/patient_portal.php");
|
||
|
|
?>
|
||
|
|
<span class="font-weight-bold">
|
||
|
|
<?php
|
||
|
|
echo text(xl_form_title($form_title));
|
||
|
|
echo ($patientPortalCompliant) ? ' <i class="fas fa-cloud-arrow-up" title="' . xla('Patient Portal Compliant') . '"></i>' : '';
|
||
|
|
?>
|
||
|
|
</span>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<?php
|
||
|
|
if ($phpState == "PHP extracted") {
|
||
|
|
echo '<a class="link_submit" href="./forms_admin.php?name=' . attr_url($fname) . '&method=register&csrf_token_form=' . attr_url(CsrfUtils::collectCsrfToken()) . '">' . xlt('register') . '</a>';
|
||
|
|
} else {
|
||
|
|
echo '<span class="text">' . xlt('n/a') . '</span>';
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<span class="text"><?php echo xlt($phpState); ?></span>
|
||
|
|
</td>
|
||
|
|
<td>
|
||
|
|
<span class="text"><?php echo xlt('n/a'); ?></span>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
<?php
|
||
|
|
flush();
|
||
|
|
}//end of foreach
|
||
|
|
?>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</form>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|