Hi Willa,

Thanks a lot. I will xpost your information it to the developer's list
as well.

I will keep you informed about the fix. 

Thanks 
 Robert  

Am Donnerstag, den 23.12.2010, 11:51 +0300 schrieb willa:
> I have discovered several bugs in the system.
> 1. Patient admission handled by aufnahme_start.php file located in  
> registration_admission module.
> When admitting a patient as inpatient,it is required to select a ward to  
> send him/her from a drop down list. However in order to render the  
> available wards the system forces the ward_nr from records pulled from  
> database to be in cur_ward_nr array which happens to contain 0 everytime  
> admission is started, So always the system does not have anything to  
> render in the corresponding drop down list. I am not sure why this  
> condition is enforced here while during registration a patient is not  
> assigned any ward in the first place. The situation is the same when a  
> patient is to be admitted as an outpatient, i.e. department_nr is checked  
> against a cur_dept_nr array leading to the same result.
> Below is a snippet of code which has this bug(line no 20 below)
> 
> 1# If no encounter nr or inpatient, show ward/station info, 1 = inpatient
> 2     if( $encounter_class_nr == 1 ) {
> 3
> 4             if ($errorward||$encounter_class_nr==1) 
> $smarty->assign('LDWard',"<font  
> color=red>$LDPavijon</font>");
> 5             $smarty->assign('LDWard',$LDWard);
> 6             $sTemp = '';
> 7             if($in_ward){
> 9                     while($station=$ward_info->FetchRow()){
> 10                            
> if(isset($current_ward_nr)&&($current_ward_nr==$station['nr'])){
> 11                                    $sTemp = $sTemp.$station['name'];
> 12                                    $sTemp = $sTemp.'<input 
> name="current_ward_nr" type="hidden"   
> value="'.$current_ward_nr.'">';
> 13                                    break;
> 14                            }
> 15                    }
> 16            }else{
> 17                    $sTemp = $sTemp.'<select name="current_ward_nr">';
> 18                    if(!empty($ward_info) && $ward_info->RecordCount()){
> 19                            while($station=$ward_info->FetchRow()){
> 20                                    
> /*if(in_array($station['dept_nr'],$current_dept_nr))*/ {
> 21                                            $sTemp = $sTemp.'<option 
> value="'.$station['nr'].'"  selected >' .  
> $station['name'].'</option>';
> 22                                    }
> 23                            }
> 24                    }
> 25                    $sTemp = $sTemp.'</select>
> 26                                                    <font size=1><img  
> '.createComIcon($root_path,'redpfeil_l.gif','0','',TRUE).'>  
> '.$LDForInpatient.'</font>';
> 27            }
> 28            $smarty->assign('sWardInput',$sTemp);
> 
> 2. When user tries to cancel an admission, he is required to fill in full  
> name and password. First of all it should not show a message "Enter full  
> name" because what is required is login name and second when the system  
> prompts for the password, it is echoed as plain text which compromises the  
> security of the user in question.
> 
> Regards,
> Willa.

-- 
--------------------------------------------
MEROTECH IT Engineering

Robert Meggle
St.-Mang-Str. 8
87616 Marktoberdorf

Germany

Tel: +49(0)8342 - 8956729
Fax: +49(0)8342 - 8956730
mailto:meg...@merotech.de 



------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Care2002-developers mailing list
Care2002-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/care2002-developers

Reply via email to