Menu
▾
▴
openemr-devel — List for the development of OpenEMR. Post patches, ideas, etc.
You can subscribe to this list here.
| 2014 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
(1) |
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2015 |
Jan
|
Feb
|
Mar
(2) |
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(1) |
Dec
|
| 2016 |
Jan
|
Feb
(2) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2017 |
Jan
|
Feb
|
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Victor M. <vm...@gm...> - 2016-02-10 09:59:58
|
Hi Sorry for the first email. There was an error. I am a University of Zimbabwe final year Honors Computer Science student doing research on the security of open source EHR systems. I am kindly requesting assistance on the security features of your EHR systems in relation to how access control, data encryption (both data in transit and at rest), user identification (including the supporting security measures of authentication mechanisms), audit trails (including the details logged in the audit trail), digital signatures. You can also include any other security provisions that help to ensure availability, integrity, confidentiality, non-repudiation, authorization and authentication. You can use the table attached, you are also free to add roles to the table. Kind Regards Victor Mbubu University Of Zimbabwe www.uz.ac.zw +263 778 194 631 <#UNIQUE_ID_SafeHtmlFilter_> *"A good head and a good heart are a formidable combination"- Nelson Mandela* |
|
From: Victor M. <vm...@gm...> - 2016-02-10 09:56:06
|
Hello I am a University of Zimbabwe final year Honors Computer Science student doing research on the security of open source EHR systems. I am kindly requesting assistance on the security features of Tolven in relation to how access control, data encryption (both data in transit and at rest), user identification (including the supporting security measures of authentication mechanisms), audit trails (including the details logged in the audit trail), digital signatures. You can also include any other security provisions that help to ensure availability, integrity, confidentiality, non-repudiation, authorization and authentication. You can use the table attached, you are also free to add roles to the table. Victor Mbubu University Of Zimbabwe www.uz.ac.zw +263 778 194 631 <#UNIQUE_ID_SafeHtmlFilter_> *"A good head and a good heart are a formidable combination"- Nelson Mandela* |
|
From: Susheel J. <Sus...@Co...> - 2015-11-07 21:46:57
|
Dear OpenEMR Developer and User Community,
We would appreciate your guidance on how to access OpenEMR via reverse
proxy load balancer HAProxy.
We have set up OpenEMR with Apache HTTP server (2.4.12) and MariaDB
(10.0.16).
· We are able to access and log into OpenEMR within company’s
internal network athttp://openemr.local.domain.
· We have configured reverse proxy load balancer (HAProxy) to
access OpenEMR athttp://<FQDN>/openemr/. Unfortunately, we are unable
to access it via HAProxy in various test cases described below.
Our investigation suggests internal hyperlinks of OpenEMR are not
accessible via HAProxy. What coding or other steps do we need to do
solve this issue?
+++++++++++++++++++++++++++++++++
TEST CASE 1:
===========
With the original source code (no changes) of OpenEMR, we are able to
access and login into the product within company’s internal network via
local DNS. But we cannot access the product externally through reverse
proxy HAProxy.
In HAProxy access logs, the prefix /openemr gets deleted after a few
lines (see line#4 in logs below) in internal hyperlinks of the product.
To test, we added this line to ../openemr/interface/login/ login_frame.php
<?php print_r($rootdir);?>
Output on page = /interface
TEST CASE 2:
===========
When we manually input the path as below in ../interface/globals.php, we
are able to access the product from WAN through reverse proxy HAProxy.
But we cannot access it within company’s internal network via local DNS.
In logs below, the prefix /openemr appears in internal hyperlinks of the
product.
Line 67: $webserver_root = "/usr/local/openemr";
Line 68: $web_root = "/openemr";
To test, we added this line to ../openemr/interface/login/ login_frame.php
<?php print_r($rootdir);?>
Output on page = /openemr/interface
+++++++++++
Info.Log of reverse proxy load balancer HAProxy
++++++++
CASE 1: With the original OpenEMR source code installed, we are able to
access it within company’s internal network via local DNS. But we
cannot access the product externally through HAProxy.
Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET
/openemr/interface/login/login_frame.php?site=default HTTP/1.1" 200 1159
"" "" 62551 160 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0"
28 0 1 13 42 ---- 1 1 0 1 0 0 0 "" ""
Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET
/openemr/interface/login/login_frame.php?site=default HTTP/1.1" 200 1159
"" "" 62551 160 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0"
28 0 1 13 42 ---- 1 1 0 1 0 0 0 "" ""
Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET /openemr/interface/themes/login.css
HTTP/1.1" 304 129 "" "" 62551 202 "webapps-frontend~"
"subdomain_p1-backend" "openemr.vm0" 10 0 1 0 11 ---- 1 1 0 1 0 0 0 "" ""
#4: Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET /openemr/interface/themes/login.css
HTTP/1.1" 304 129 "" "" 62551 202 "webapps-frontend~"
"subdomain_p1-backend" "openemr.vm0" 10 0 1 0 11 ---- 1 1 0 1 0 0 0 "" ""
#5: Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET /interface/login/filler.php HTTP/1.1"
503 213 "" "" 62551 214 "webapps-frontend~" "webapps-backend" "<NOSRV>"
2 -1 -1 -1 2 SC-- 2 2 0 0 0 0 0 "" ""
Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET /interface/login/filler.php HTTP/1.1"
503 213 "" "" 62551 214 "webapps-frontend~" "webapps-backend" "<NOSRV>"
2 -1 -1 -1 2 SC-- 2 2 0 0 0 0 0 "" ""
Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET /interface/login/login_title.php
HTTP/1.1" 503 213 "" "" 62557 222 "webapps-frontend~" "webapps-backend"
"<NOSRV>" 4 -1 -1 -1 4 SC-- 3 3 0 0 0 0 0 "" ""
Oct 30 18:25:42 localhost haproxy[18120]: 192.168.100.153 - -
[30/Oct/2015:23:25:42 +0000] "GET /interface/login/login_title.php
HTTP/1.1" 503 213 "" "" 62557 222 "webapps-frontend~" "webapps-backend"
"<NOSRV>" 4 -1 -1 -1 4 SC-- 3 3 0 0 0 0 0 "" ""
---------
CASE 2: When we manually input the path, we are able to access the
product externally through HAProxy. But we cannot access it within
company’s internal network via local DNS.
The prefix /openemr appears in internal hyperlinks of the openemr.
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /openemr/ HTTP/1.1" 302 235 "" ""
63715 211 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0" 35 0
0 1 36 ---- 1 1 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /openemr/ HTTP/1.1" 302 235 "" ""
63715 211 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0" 35 0
0 1 36 ---- 1 1 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET
/openemr/interface/login/login_frame.php?site=default HTTP/1.1" 200 1214
"" "" 63715 248 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0"
2 0 0 13 15 ---- 1 1 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET
/openemr/interface/login/login_frame.php?site=default HTTP/1.1" 200 1214
"" "" 63715 248 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0"
2 0 0 13 15 ---- 1 1 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /openemr/interface/login/filler.php
HTTP/1.1" 200 750 "" "" 63715 264 "webapps-frontend~"
"subdomain_p1-backend" "openemr.vm0" 13 0 0 11 24 ---- 5 5 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /openemr/interface/login/filler.php
HTTP/1.1" 200 750 "" "" 63715 264 "webapps-frontend~"
"subdomain_p1-backend" "openemr.vm0" 13 0 0 11 24 ---- 5 5 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET
/openemr/interface/login/login_title.php HTTP/1.1" 200 659 "" "" 63718
286 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0" 2 0 1 10 13
---- 3 3 1 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET
/openemr/interface/login/login_title.php HTTP/1.1" 200 659 "" "" 63718
286 "webapps-frontend~" "subdomain_p1-backend" "openemr.vm0" 2 0 1 10 13
---- 3 3 1 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /openemr/interface/login/login.php
HTTP/1.1" 200 3907 "" "" 63719 287 "webapps-frontend~"
"subdomain_p1-backend" "openemr.vm0" 2 0 0 34 36 ---- 3 3 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /openemr/interface/login/login.php
HTTP/1.1" 200 3907 "" "" 63719 287 "webapps-frontend~"
"subdomain_p1-backend" "openemr.vm0" 2 0 0 34 36 ---- 3 3 0 1 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /favicon.ico HTTP/1.1" 503 213 "" ""
63719 324 "webapps-frontend~" "webapps-backend" "<NOSRV>" 27 -1 -1 -1 27
SC-- 2 2 0 0 0 0 0 "" ""
Nov 4 13:07:30 localhost haproxy[5246]: 192.168.100.153 - -
[04/Nov/2015:19:07:30 +0000] "GET /favicon.ico HTTP/1.1" 503 213 "" ""
63719 324 "webapps-frontend~" "webapps-backend" "<NOSRV>" 27 -1 -1 -1 27
SC-- 2 2 0 0 0 0 0 "" ""Thank you.
Sincerely,
Susheel Jalali
www.Coscend.com
|
|
From: Wolfgang S. <wol...@ya...> - 2015-04-03 16:49:27
|
Hello, I'd like to add a few charts to the Vitals form in the patient records. The charts should reflect data read in from flat files. Could you please tell me how I would 1) add new charts to the existing Vitals form (or create a new form for them), and 2) read array data in from flat files to create the charts? Thank you very much.Wolf. |
|
From: Wolfgang S. <wol...@ya...> - 2015-03-27 14:33:15
|
Hello, I'd like to be able to add medical device data (like ekg charts) to the patient records in OpenEMR. Could you please tell me how I would modify the patient record form to display the data and how to store the data in the database? Thank you very much.Wolf |
|
From: Mahendran P. <mah...@gm...> - 2015-03-02 06:36:55
|
Hi, I am planning to use openEMR to my uncle's clinic. Also, developing a simple Android mobile app for patients and doctors. Planning to keep common login for web and mobile interface. The OpenEMR encrypting the password and storing on MySQL DB. My mobile app also should do the same. But here I don't know the secret key / IV parameter used by Open EMR. So, How I can find or change this secret key? Looking forward to receive your kind reply. Regards, Mahendran |
|
From: Roland G. <ro...@th...> - 2014-07-02 11:56:40
|
(I moved this here from the users list, since it seems most related questions on this matter are also here) Here's the problem: *We need to give a user access to the dispensing function of the the pharmacy, without allowing that user to change the prescriptions. However, if the prescription allows substitutions, then the user must be able to make and record those. But this user should not be able to see patient records and other confidential information.* The application is in a clinic where there are a team of doctors and nurses as well as an inhouse pharmacy. There is no billing taking place. I practice and member would come to reception, be "signed in", see the doctor (who records the condition(s), treatment(2) and prescription(s). The patient then goes to the pharmacy to collect his medicines. At this stage, the pharmacy nurse should not be able to "do" anything else except fulfilling the prescription. This is crucial both in minimising mistakes and combating fraud. I have read through many of the posts pertaining to ACL's, but haven't found a solution yet. The suggestion to create a second admin account doesn't work, since it is way too risky. The users are not tech savvy enough to allow this level of power in the system. Lastly, should I rather move this question to the developers list, since if might require some coding? thanks & regards Roland Giesler [image: Greentree.jpg] <http://www.thegreentree.za.net/>Green Tree Systems <http://www.thegreentree.za.net/> <http://www.connection-telecom.com/our-solutions/telviva> <http://www.laserfiche.com> Stellenbosch, South Africa Mobile: +27 72 450 2817 Fax: +27 86 551 5629 Office: +27 21 883 8008 ------------------------------ *Please note: Regretfully we are unable to accept email disclaimers. Unless otherwise agreed in advance, all mail sent to thegreentree.za.net <http://thegreentree.za.net> becomes ours (generally like anything else sent to us) and we are free to deal with in any manner we see fit. If you disagree with this, please consider communicating with us in a way you may find more suitable.* ------------------------------ <http://www.facebook.com/greentreesystems> <https://www.linkedin.com/company/green-tree-systems-trust> <http://www.thegreentree.za.net/> <http://twitter.com/rgslr> @rgslr <http://twitter.com/rolandgiesler> <http://www.google.com/calendar/hosted/thegreentree.za.net/embed?src=roland%40thegreentree.za.net&ctz=Africa/Johannesburg> Calendar <http://www.google.com/calendar/hosted/thegreentree.za.net/embed?src=roland%40thegreentree.za.net&ctz=Africa/Johannesburg> Contact: [image: Google Talk] rolandgiesler [image: Skype] rolandgiesler |
|
From: Mona AL-S. <mon...@ho...> - 2014-06-22 19:47:34
|
Dear OpenEMR developers, I am Mona Alsaffar health informatics graduate student at University of California-Davis. I am conducting a study about developers involved in healthcare F/OSS projects. I believe this research is an important work to characterize healthcare F/OSS globally. I would like to ask you for help by answering my survey even if you are no longer an active developer. It is an anonymous and voluntary survey of 20 questions, which will take approximately 5 minutes to complete. If you have any question, feel free to contact me or my chair advisor Dr. Mike Hogarth. Your participation is very valuable. Please kindly, check the following link: http://www.surveygizmo.com/s3/1636553/Open-Source-Electronic-Medical-record-software-survey Mona Alsaffar Health Informatics student (720)325-0264 Dr. Mike Hogarth Professor and Vice Chair, Department of Pathology and Laboratory Medicine at UC-Davis (916)817-9951 http://www.hogarth.org/ |
|
From: Wells, S. S. <ss...@we...> - 2014-04-18 21:34:46
|
Hi, I'm receiving the following error when attempting to login from /emr/interface/main/main_screen.php?auth=login&site=default Fatal error: Cannot redeclare password_hash() in /usr/local/west/openemr-4.1.2/library/authentication/password_hashing.php on line 104 I encountered something similar with setup.php and simply commented out the require_once line for the time being but I've not yet found another point of inclusion that could lead to this error. Thanks, Steve Steve Wells Principal Software Developer West Health Institute ss...@we...<mailto:ss...@we...> T: 858.412.8644 C: 760.525.2574 westhealth.org<http://www.westhealth.org/> | @westhealth<http://www.twitter.com/westhealth> Confidentiality: This email message, including any attachments, is for sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete the original and all copies of this email. |
