<?php

/**
 * Imports patient demographics from our custom XML format.
 *
 * @package OpenEMR
 * @link    http://www.open-emr.org
 * @author  Rod Roark <rod@sunsetsystems.com>
 * @author  Roberto Vasquez <robertogagliotta@gmail.com>
 * @copyright Copyright (c) 2005 Rod Roark <rod@sunsetsystems.com>
 * @copyright Copyright (c) 2017 Roberto Vasquez <robertogagliotta@gmail.com>
 * @license https://github.com/openemr/openemr/blob/master/LICENSE GNU General Public License 3
*/

require_once("../interface/globals.php");
require_once("$srcdir/patient.inc");

use OpenEMR\Common\Acl\AclMain;
use OpenEMR\Common\Csrf\CsrfUtils;
use OpenEMR\Common\Twig\TwigContainer;
use OpenEMR\Core\Header;

function setInsurance($pid, $ainsurance, $asubscriber, $seq)
{
    $iwhich = $seq == '2' ? "secondary" : ($seq == '3' ? "tertiary" : "primary");
    newInsuranceData(
        $pid,
        $iwhich,
        ($ainsurance["provider$seq"] ?? ''),
        ($ainsurance["policy$seq"] ?? ''),
        ($ainsurance["group$seq"] ?? ''),
        ($ainsurance["name$seq"] ?? ''),
        ($asubscriber["lname$seq"] ?? ''),
        ($asubscriber["mname$seq"] ?? ''),
        ($asubscriber["fname$seq"] ?? ''),
        ($asubscriber["relationship$seq"] ?? ''),
        ($asubscriber["ss$seq"] ?? ''),
        fixDate($asubscriber["dob$seq"] ?? null),
        ($asubscriber["street$seq"] ?? ''),
        ($asubscriber["zip$seq"] ?? ''),
        ($asubscriber["city$seq"] ?? ''),
        ($asubscriber["state$seq"] ?? ''),
        ($asubscriber["country$seq"] ?? ''),
        ($asubscriber["phone$seq"] ?? ''),
        ($asubscriber["employer$seq"] ?? ''),
        ($asubscriber["employer_street$seq"] ?? ''),
        ($asubscriber["employer_city$seq"] ?? ''),
        ($asubscriber["employer_zip$seq"] ?? ''),
        ($asubscriber["employer_state$seq"] ?? ''),
        ($asubscriber["employer_country$seq"] ?? ''),
        ($ainsurance["copay$seq"] ?? ''),
        ($asubscriber["sex$seq"] ?? '')
    );
}

 // Check authorization.
if (!AclMain::aclCheckCore('patients', 'demo', '', 'write')) {
    echo (new TwigContainer(null, $GLOBALS['kernel']))->getTwig()->render('core/unauthorized.html.twig', ['pageTitle' => xl("Import Patient Demographics XML")]);
    exit;
}

if (!empty($_POST['form_import'])) {
    if (!CsrfUtils::verifyCsrfToken($_POST["csrf_token_form"])) {
        CsrfUtils::csrfNotVerified();
    }

    $apatient    = array();
    $apcp        = array();
    $aemployer   = array();
    $ainsurance  = array();
    $asubscriber = array();

  // $probearr is an array of tag names corresponding to the current
  // container in the tree structure.  $probeix is the current level.
    $probearr = array('');
    $probeix = 0;

    $inspriority = '0'; // 1 = primary, 2 = secondary, 3 = tertiary

    $parser = xml_parser_create();
    xml_parser_set_option($parser, XML_OPTION_SKIP_WHITE, 1);
    $xml = array();

    if (xml_parse_into_struct($parser, $_POST['form_import_data'], $xml)) {
        foreach ($xml as $taginfo) {
            $tag = strtolower($taginfo['tag']);
            $tagtype = $taginfo['type'];
            $tagval = addslashes($taginfo['value']);

            if ($tagtype == 'open') {
                ++$probeix;
                $probearr[$probeix] = $tag;
                continue;
            }

            if ($tagtype == 'close') {
                --$probeix;
                continue;
            }

            if ($tagtype != 'complete') {
                die("Invalid tag type '$tagtype'");
            }

            if ($probeix == 1 && $probearr[$probeix] == 'patient') {
                $apatient[$tag] = $tagval;
            } elseif ($probeix == 2 && $probearr[$probeix] == 'pcp') {
                $apcp[$tag] = $tagval;
            } elseif ($probeix == 2 && $probearr[$probeix] == 'employer') {
                $aemployer[$tag] = $tagval;
            } elseif ($probeix == 2 && $probearr[$probeix] == 'insurance') {
                if ($tag == 'priority') {
                    $inspriority = $tagval;
                } else {
                    $ainsurance["$tag$inspriority"] = $tagval;
                }
            } elseif ($probeix == 3 && $probearr[$probeix] == 'subscriber') {
                $asubscriber["$tag$inspriority"] = $tagval;
            } else {
                $alertmsg = "Invalid tag \"" . $probearr[$probeix] . "\" at level $probeix";
            }
        }
    } else {
        die("Invalid import data!");
    }

    xml_parser_free($parser);

    $olddata = getPatientData($pid);

    if ($olddata['squad'] && ! AclMain::aclCheckCore('squads', $olddata['squad'])) {
        die("You are not authorized to access this squad.");
    }

    newPatientData(
        ($olddata['id'] ?? ''),
        ($apatient['title'] ?? ''),
        ($apatient['fname'] ?? ''),
        ($apatient['lname'] ?? ''),
        ($apatient['mname'] ?? ''),
        ($apatient['sex'] ?? ''),
        fixDate($apatient['dob'] ?? ''),
        ($apatient['street'] ?? ''),
        ($apatient['zip'] ?? ''),
        ($apatient['city'] ?? ''),
        ($apatient['state'] ?? ''),
        ($apatient['country'] ?? ''),
        ($apatient['ss'] ?? ''),
        ($apatient['occupation'] ?? ''),
        ($apatient['phone_home'] ?? ''),
        ($apatient['phone_biz'] ?? ''),
        ($apatient['phone_contact'] ?? ''),
        ($apatient['status'] ?? ''),
        ($apatient['contact_relationship'] ?? ''),
        ($apatient['referrer'] ?? ''),
        ($apatient['referrerID'] ?? ''),
        ($apatient['email'] ?? ''),
        ($apatient['language'] ?? ''),
        ($apatient['ethnoracial'] ?? ''),
        ($apatient['interpreter'] ?? ''),
        ($apatient['migrantseasonal'] ?? ''),
        ($apatient['family_size'] ?? ''),
        ($apatient['monthly_income'] ?? ''),
        ($apatient['homeless'] ?? ''),
        fixDate($apatient['financial_review'] ?? ''),
        ($apatient['pubpid'] ?? ''),
        $pid,
        ($olddata['providerID'] ?? ''),
        ($apatient['genericname1'] ?? ''),
        ($apatient['genericval1'] ?? ''),
        ($apatient['genericname2'] ?? ''),
        ($apatient['genericval2'] ?? ''),
        ($apatient['billing_note'] ?? ''),
        ($apatient['phone_cell'] ?? ''),
        ($apatient['hipaa_mail'] ?? ''),
        ($apatient['hipaa_voice'] ?? ''),
        ($olddata['squad'] ?? 0)
    );

    newEmployerData(
        $pid,
        ($aemployer['name'] ?? ''),
        ($aemployer['street'] ?? ''),
        ($aemployer['zip'] ?? ''),
        ($aemployer['city'] ?? ''),
        ($aemployer['state'] ?? ''),
        ($aemployer['country'] ?? '')
    );

    setInsurance($pid, $ainsurance, $asubscriber, '1');
    setInsurance($pid, $ainsurance, $asubscriber, '2');
    setInsurance($pid, $ainsurance, $asubscriber, '3');

    echo "<html>\n<body>\n<script>\n";
    if ($alertmsg) {
        echo " alert('" . addslashes($alertmsg) . "');\n";
    }

    echo " if (!opener.closed && opener.refreshme) opener.refreshme();\n";
    echo " window.close();\n";
    echo "</script>\n</body>\n</html>\n";
    exit();
}
?>
<html>
<head>
    <?php Header::setupHeader(); ?>
    <title><?php echo xlt('Import Patient Demographics XML'); ?></title>
</head>
<body class="body_top" onload="javascript:document.forms[0].form_import_data.focus()">
<form method='post' action="import_xml.php" onsubmit="return top.restoreSession()">
    <input type="hidden" name="csrf_token_form" value="<?php echo attr(CsrfUtils::collectCsrfToken()); ?>" />
    <div class="container">
        <div class="row">
            <div class="col-12">
                <div class="form-group"></div>
                <div class="form-group">
                    <textarea name='form_import_data' class='form-control' rows='10'></textarea>
                </div>
                <div class="form-group text-right">
                    <div class="btn-group" role="group">
                        <button type='submit' class='btn btn-secondary btn-save' name='form_import' value='bn_import'>
                            <?php echo xlt('Import'); ?>
                        </button>
                        <button type="button" class="btn btn-link btn-cancel" onclick="dlgclose()">
                            <?php echo xlt("Cancel"); ?>
                        </button>
                    </div>
                </div>
            </div>
        </div>
    </div>
</form>
</body>
</html>