Update API_TM.php

This commit is contained in:
mikael-zakaria 2026-02-06 10:28:35 +08:00
parent c551d64ed9
commit 2791c013bd

View File

@ -117,13 +117,20 @@ class API_TM extends ResourceController {
$sql = "select PATID, FIRSTNAME, LASTNAME from cmod.dbo.CM_TM_PATIENTS where PATNUMBER='$rm'";
$query = $db->query($sql);
$result = $query->getResultArray();
if(isset($result[0])) { $patid = $result[0]['PATID']; $rfirstname = $result[0]['FIRSTNAME']; $rlastname = $result[0]['LASTNAME']; }
else { $patid = ''; }
if(isset($result[0])) {
$patid = $result[0]['PATID'];
$rfirstname = str_replace("'","''",$result[0]['FIRSTNAME']);
$rlastname = str_replace("'","''",$result[0]['LASTNAME']);
} else { $patid = ''; }
$sql = "select REQID, PATID from cmod.dbo.CM_TM_REQUESTS where REFFID='$reffid'";
$sql = "select REQID, PATID, REQNUMBER from cmod.dbo.CM_TM_REQUESTS where REFFID='$reffid'";
$query = $db->query($sql);
$result = $query->getResultArray();
if(isset($result[0])) { $reqid = $result[0]['REQID']; $rpatid = $result[0]['PATID']; }
if(isset($result[0])) {
$reqid = $result[0]['REQID'];
$rpatid = $result[0]['PATID'];
$rvisitnum = $result[0]['REQNUMBER'];
}
else { $reqid = ''; $rpatid = ''; }
//echo "$patid<br/>$reqid - $rpatid";
@ -149,10 +156,18 @@ class API_TM extends ResourceController {
return $this->failForbidden('Error. Sample already received, cannot update patient data. ');
}
} else {
return $this->failForbidden('Error. Invalid patient data.');
return $this->failForbidden("Error. Invalid patient data. $rfirstname <> $firstname.$rlastname <> $lastname");
}
}
// check f-in visit#
if(isset($rvisitnum)) {
if($rvisitnum != '' && $rvisitnum != $visitnum) {
return $this->failForbidden("Error. Invalid Visit#.");
}
}
if($reqstatus != 1) { // reqstatus = order
if( $reqid == '' ) { // new request
$sql = "INSERT INTO cmod.dbo.CM_TM_REQUESTS (REFFID, REQNUMBER, REQDATE, AGENT, DOC, LOC, PATID, COMPANY, LOGDATE, BW, BH, VISITDESC, VISITTYPE, REQSTATUS)