<?php
/* Connect to DB */

// $string is just a placeholder
function escapeSingleQuotes($string){
//escapse single quotes
$singQuotePattern = "'";
$singQuoteReplace = "''";
return(stripslashes(eregi_replace($singQuotePattern, $singQuoteReplace, $string)));
}
function formatPhoneNumber($strPhone) {
$strPhone = ereg_replace("[^0-9]",'', $strPhone);
if (strlen($strPhone) != 10) {
return $strPhone;
}

$strArea = substr($strPhone, 0, 3);
$strPrefix = substr($strPhone, 3, 3);
$strNumber = substr($strPhone, 6, 4);

$strPhone = "(".$strArea.") ".$strPrefix."-".$strNumber;

return ($strPhone);
}


include '../cCustomConnect.php';

$USR_ID = $_POST['USR_ID'];
$RES_ID = $_POST['RES_ID'];

$activeinfo = mssql_query("Select * FROM Associate where USR_ID = '$USR_ID'");
$menu2 = mssql_result($activeinfo,0,'USR_Menu2');

if($menu2 == 1)
{
echo '<script type="text/javascript">
<!--
parent.location = "LifeList.php?result=1&m=2&i=21"
//-->
</script>
';
die ;
}
$HEA_LivingWill  = ($_POST['HEA_LivingWill'] == 'on')  ? 1 : 0;
$HEA_Medical_Power_Attorney                 = ($_POST['HEA_Medical_Power_Attorney']== 'on')  ? 1 : 0;
$HEA_POLST                                                 = ($_POST['HEA_POLST']== 'on')  ? 1 : 0;
$HEA_MOST                                                 = ($_POST['HEA_MOST']== 'on')  ? 1 : 0;
$HEA_DNR                                                 = ($_POST['HEA_DNR']== 'on')  ? 1 : 0;



$HEA_Vision = $_POST['HEA_Vision'];
$HEA_Hearing = $_POST['HEA_Hearing'];
$HEA_Mobility = $_POST['HEA_Mobility'];
$HEA_Falls = $_POST['HEA_Falls'];
$HEA_Food = $_POST['HEA_Food'];
$HEA_FoodPref = $_POST['HEA_FoodPref'];
$HEA_FoodDetails = escapeSingleQuotes($_POST['HEA_FoodDetails']);
$HEA_Insect = $_POST['HEA_Insect'];
$HEA_InsectDetails = escapeSingleQuotes($_POST['HEA_InsectDetails']);
$HEA_Driver = $_POST['HEA_Driver'];
$HEA_Make = escapeSingleQuotes($_POST['HEA_Make']);
$HEA_Model = escapeSingleQuotes($_POST['HEA_Model']);
$HEA_Year = escapeSingleQuotes($_POST['HEA_Year']);
$HEA_Color = escapeSingleQuotes($_POST['HEA_Color']);
$HEA_Plate = escapeSingleQuotes($_POST['HEA_Plate']);
$HEA_ParkArea = escapeSingleQuotes($_POST['HEA_ParkArea']);
$HEA_Care = $_POST['HEA_Care'];

$HEA_Pendant = escapeSingleQuotes($_POST['HEA_Pendant']);
$HEA_Storage = escapeSingleQuotes($_POST['HEA_Storage']);


$HEA_History1 = $_POST['HEA_History1'];
$HEA_History2 = $_POST['HEA_History2'];
$HEA_History3 = $_POST['HEA_History3'];
$HEA_History4 = $_POST['HEA_History4'];
$HEA_History5 = $_POST['HEA_History5'];
$HEA_History6 = $_POST['HEA_History6'];
$HEA_History7 = $_POST['HEA_History7'];
$HEA_History8 = $_POST['HEA_History8'];
$HEA_History9 = $_POST['HEA_History9'];
$HEA_History10 = $_POST['HEA_History10'];
$HEA_History11 = $_POST['HEA_History11'];
$HEA_History12 = $_POST['HEA_History12'];
$HEA_History13 = $_POST['HEA_History13'];
$HEA_History14 = $_POST['HEA_History14'];
$HEA_History15 = $_POST['HEA_History15'];
$HEA_History16 = $_POST['HEA_History16'];

$HEA_Height = escapeSingleQuotes($_POST['HEA_Height']);
$HEA_Weight = escapeSingleQuotes($_POST['HEA_Weight']);
$HEA_OtherIll = escapeSingleQuotes($_POST['HEA_OtherIll']);
$HEA_HistoryDetails = escapeSingleQuotes($_POST['HEA_HistoryDetails']);
$HEA_HospName = escapeSingleQuotes($_POST['HEA_HospName']);
$HEA_HospPhone = escapeSingleQuotes($_POST['HEA_HospPhone']);
$HEA_PhyName1 = escapeSingleQuotes($_POST['HEA_PhyName1']);
$HEA_PhyAddress1 = escapeSingleQuotes($_POST['HEA_PhyAddress1']);
$HEA_PhyPhone1 = escapeSingleQuotes($_POST['HEA_PhyPhone1']);
$HEA_PhyFax1 = escapeSingleQuotes($_POST['HEA_PhyFax1']);
$HEA_PhyEmail1 = escapeSingleQuotes($_POST['HEA_PhyEmail1']);
$HEA_PhySpecialty1 = escapeSingleQuotes($_POST['HEA_PhySpecialty1']);
$HEA_PhyName2 = escapeSingleQuotes($_POST['HEA_PhyName2']);
$HEA_PhyAddress2 = escapeSingleQuotes($_POST['HEA_PhyAddress2']);
$HEA_PhyPhone2 = escapeSingleQuotes($_POST['HEA_PhyPhone2']);
$HEA_PhyFax2 = escapeSingleQuotes($_POST['HEA_PhyFax2']);
$HEA_PhyEmail2 = escapeSingleQuotes($_POST['HEA_PhyEmail2']);
$HEA_PhySpecialty2 = escapeSingleQuotes($_POST['HEA_PhySpecialty2']);
$HEA_OtherAll = escapeSingleQuotes($_POST['HEA_OtherAll']);
$HEA_OtherDetails = escapeSingleQuotes($_POST['HEA_OtherDetails']);

$HEA_HospPhone = formatPhoneNumber($HEA_HospPhone);
$HEA_PhyPhone1 = formatPhoneNumber($HEA_PhyPhone1);
$HEA_PhyPhone2 = formatPhoneNumber($HEA_PhyPhone2);
$HEA_PhyFax1 = formatPhoneNumber($HEA_PhyFax1);
$HEA_PhyFax2 = formatPhoneNumber($HEA_PhyFax2);


$HEA_DateStamp = date("m/d/Y h:i:s A");

/* Insert Move In Information */
 $create_info = mssql_query("INSERT INTO
 Health
 (RES_ID, HEA_LastUser, HEA_DateStamp, HEA_Vision, HEA_Hearing, HEA_Mobility, HEA_Falls, HEA_Food, HEA_FoodPref, HEA_FoodDetails, HEA_Insect, HEA_InsectDetails, HEA_Driver, HEA_Make, HEA_Model, HEA_Year, HEA_Color, HEA_Plate, HEA_ParkArea, HEA_Care, HEA_Height, HEA_Weight, HEA_History1, HEA_History2, HEA_History3, HEA_History4, HEA_History5, HEA_History6, HEA_History7, HEA_History8, HEA_History9, HEA_History10, HEA_History11, HEA_History12, HEA_History13, HEA_History14, HEA_History15, HEA_History16, HEA_OtherIll, HEA_HistoryDetails, HEA_HospName, HEA_HospPhone, HEA_PhyName1, HEA_PhyAddress1, HEA_PhyPhone1, HEA_PhyFax1, HEA_PhyEmail1, HEA_PhySpecialty1, HEA_PhyName2, HEA_PhyAddress2, HEA_PhyPhone2, HEA_PhyFax2, HEA_PhyEmail2, HEA_PhySpecialty2, HEA_OtherAll, HEA_OtherDetails, HEA_Pendant, HEA_Storage

 ,HEA_LivingWill
  ,HEA_Medical_Power_Attorney
  ,HEA_POLST
  ,HEA_MOST
  ,HEA_DNR     )

 VALUES
 ('$RES_ID', '$USR_ID', '$HEA_DateStamp','$HEA_Vision', '$HEA_Hearing', '$HEA_Mobility', '$HEA_Falls', '$HEA_Food', '$HEA_FoodPref', '$HEA_FoodDetails', '$HEA_Insect', '$HEA_InsectDetails', '$HEA_Driver', '$HEA_Make', '$HEA_Model', '$HEA_Year', '$HEA_Color', '$HEA_Plate', '$HEA_ParkArea', '$HEA_Care', '$HEA_Height', '$HEA_Weight', '$HEA_History1', '$HEA_History2', '$HEA_History3', '$HEA_History4', '$HEA_History5', '$HEA_History6', '$HEA_History7', '$HEA_History8', '$HEA_History9', '$HEA_History10', '$HEA_History11', '$HEA_History12', '$HEA_History13', '$HEA_History14', '$HEA_History15', '$HEA_History16', '$HEA_OtherIll', '$HEA_HistoryDetails', '$HEA_HospName', '$HEA_HospPhone', '$HEA_PhyName1', '$HEA_PhyAddress1', '$HEA_PhyPhone1', '$HEA_PhyFax1', '$HEA_PhyEmail1', '$HEA_PhySpecialty1', '$HEA_PhyName2', '$HEA_PhyAddress2', '$HEA_PhyPhone2', '$HEA_PhyFax2', '$HEA_PhyEmail2', '$HEA_PhySpecialty2', '$HEA_OtherAll', '$HEA_OtherDetails', '$HEA_Pendant', '$HEA_Storage'

 ,$HEA_LivingWill
 ,$HEA_Medical_Power_Attorney
 ,$HEA_POLST
 ,$HEA_MOST
 ,$HEA_DNR
 )") or die ("Error - No record creation");

$activeinfo2 = mssql_query("Select HEA_ID FROM Health ORDER BY HEA_ID DESC");
$HEA_ID2 = mssql_result($activeinfo2,0,'HEA_ID');


 $create_info2 = mssql_query("UPDATE Residents SET HEA_ID = '$HEA_ID2' WHERE RES_ID = '$RES_ID'") or die ("Error - No Residents record Update");


if(isset($_POST['next']))
{

$residentinfosp = mssql_query("Select * FROM Residents where RES_ID = '$RES_ID'");
$LIF_ID = mssql_result($residentinfosp,0,'LIF_ID');
  if($LIF_ID > 0)
       {
         header( 'Location:LifeDetails.php?rid=' . $RES_ID . '&lifid=' . $LIF_ID . '' );
       }
       else
       {
         header( 'Location:LifeDetails.php?rid=' . $RES_ID . '' );
       }
}
elseif(isset($_POST['back']))
{

         header( 'Location:LifeProfile2.php?rid=' . $RES_ID . '' );
}

else
{
echo '<script type="text/javascript">
<!--
parent.location = "LifeList.php?result=7"
//-->
</script>
';
}


?>