Old Outdated OpenEMR Patches

Security Update(10/01/2017) - For OpenEMR 4.2.2 and lower, ensure you REMOVE the setup.php file from your OpenEMR package after you complete the installation

Security Update(02/13/2013) - REMOVE the following file and directory from your OpenEMR installation:

• FILE: openemr/library/openflashchart/php-ofc-library/ofc_upload_image.php
• DIRECTORY: openemr/library/openflashchart/tmp-upload-images/

• (the directory should not exist, but if it does, then remove it)

5.0.0 Patch (3/24/17)

This patch is for OpenEMR version 5.0.0. If you are using a prior OpenEMR version, then you can find most recent patch HERE or find out how to upgrade to 5.0.0 HERE.

Download link

5-0-0-Patch-8.zip

Description

This is the 8th patch. This patch also includes the changes from prior patches. Please read through the list of modified files to ensure you haven't customized any of these, since this will copy over this.

Installation instructions

Windows

1. Extract the zipped file into the openemr web directory, and say yes to copying over files

2. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 2 and follow these instructions)

3. Remove the setup.php file from the openemr web directory (if you need this file in the future, then can download it at setup.php).

4. Remove the library/openflashchart/open-flash-chart.swf file.

Linux

1. Move the patch file to the openemr web directory, then type 'unzip 5-0-0-Patch-8.zip', and confirm ok to copy over files.

2. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 2 and follow these instructions)

3. Remove the setup.php file from the openemr web directory (if you need this file in the future, then can download it at setup.php).

4. Remove the library/openflashchart/open-flash-chart.swf file.

Fixes and New Features

(note the ones with ** are new with this patch):

• Added PACS Imaging Viewer - by Victor, Jerry, and Matthew**
• Added Support for MySQL/MariaDB SSL Connection - by Brady**
• Upgraded graphing to dygraphs that was necessary for a security fix, reported by SEC Consult Vulnerability Lab, fixed by Brady
• Security fix - reported by ADLab of Venustech, fixed by Brady
• Security fixes - fixed by Alfie
• Fix view 835 html report in edihistory - fixed by Stephen
• Fix patient delete bug for tabs layout - fixed by Brady
• Added back the close patient note shortcut - reported by Jeff, fixed by Brady
• Added service location to 2310B for same npi, different address - reported by Carlos, fixed by Stephen
• Fix for box 32b for hfca billing form - reported by Henry, fixed by Stephen
• Fix for modifying external codes - fixed by Brady
• Fix for inventory module destroyed menu link - reported by Nzube, fixed by Brady
• Fixed encounter menu - reported by Daniel, fixed by Ray
• Fixes for calendar - reported by Morten, fixed by epsdky
• Fix nation notes report - fixed by Frankie
• Fix insurance popup in demographics user interface - fixed by Visolve
• Critical security fix - reported by Sven Krewitt, fixed by Brady
• Fix backup module - fixed by Brady
• Critical security fix - reported by Isaac Sears, fixed by Brady
• Fix in Patient PDF report regarding vital signs - reported by Arnab, fixed by Jerry
• Support all diagnostic codes (including ICD10) in post payments - reported by Kim, fixed by Stephen
• Fix delete patient- reported by Terry and APerez; fixed by Stephen
• Fix for duplicate procedures in the procedure order edit form - reported by Sherwin and A1Gard, fixed by Sunset systems
• Fix for tabs layout in Edge browser - reported by Sunset Systems, fixed by Jerry
• Fix to allow multiple codes of same code type on the layout billing code widget - reported by Alfonso, fixed by Brady
• Fix dated reminders to show message when forward it - fixed by Matrix
• Fix to prevent unnecessary encoding errors during upgrade and globals editing - fixed by Brady
• Fix drawable images in layout based forms with larger image sizes - reported by aperez, fixed by Sunset Systems
• Fixes for Eye form - fixed by Ray
• Fix patient report tool for code_text. - fixed by Daniel
• Fix patient report tool for vitals - reported by Arnab, fixed by Arnab, Jerry and Matthew
• Fix fee sheet - reported by Carlos, fixed by Terry
• Fix past appointments widget in patient summary screen - fixed by epsdky
• Fix registration feature - reported by Arnab, fixed by Jerry
• Security fixes - reported by SEC Consult Vulnerability Lab, fixed by Brady. The OpenEMR team thanks Wan Ikram, Fikri Fadzil and Jasveer Singh from SEC Consult Vulnerability Lab (https://www.sec-consult.com/) for responsibly reporting the identified issues and working with us as we addressed them.
• Fix to patient PDF report - reported by Arnab Naha, fixed by Brady Miller and epsdky

List of files (5.0.0)

(note the ones prepended with * have new changes with this patch)

*.bowerrc
acknowledge_license_cert.html
*bower.json
*controllers/C_Document.class.php
*gacl/gacl.class.php
*gacl/setup.php
interface/billing/payment_pat_sel.inc.php
interface/fax/fax_dispatch.php
interface/forms/eye_mag/SpectacleRx.php
interface/forms/eye_mag/a_issue.php
interface/forms/eye_mag/css/style.css
interface/forms/eye_mag/help.php
interface/forms/eye_mag/js/eye_base.php
interface/forms/LBF/new.php
interface/forms/LBF/report.php
interface/forms/procedure_order/new.php
interface/forms/track_anything/history.php
interface/forms/track_anything/report.js
interface/forms/track_anything/report.php
interface/forms/vitals/report.php
interface/forms/vitals/templates/vitals/general_new.html
*interface/globals.php
*interface/main/backup.php
interface/main/backuplog.php
interface/main/backuplog.sh
*interface/main/calendar/config.php
*interface/main/calendar/includes/pnAPI.php
interface/main/calendar/modules/PostCalendar/pnincludes/Date/Calc.php
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/day/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/header.html
interface/main/dated_reminders/dated_reminders_add.php
interface/main/tabs/menu/menu_data.php
*interface/modules/zend_modules/config/autoload/global.php
*interface/modules/zend_modules/module/Application/src/Application/Model/ApplicationTable.php
interface/new/new_comprehensive.php
interface/patient_file/encounter/forms.php
interface/patient_file/encounter/superbill_custom_full.php
interface/patient_file/encounter/trend_form.php
interface/patient_file/report/custom_report.php
interface/patient_file/summary/demographics.php
interface/patient_file/summary/demographics_full.php
interface/patient_file/summary/labdata.php
interface/patient_file/summary/pnotes_full_add.php
interface/product_registration/product_registration_service.php
interface/themes/ajax_calendar.css
interface/themes/style_babyblu.css
interface/themes/style_metal.css
interface/themes/style_oemr.css
interface/themes/style_pdf.css
interface/themes/style_purple.css
interface/themes/style_sky_blue.css
interface/themes/style_tan.css
interface/themes/tabs_style_compact.css
interface/themes/tabs_style_full.css
*library/acl.inc
*library/ADODB_mysqli_log.php
*library/ADODB_mysqli_mod.php
library/ajax/graph_track_anything.php
library/ajax/graphs.php
library/appointments.inc.php
library/calendar.inc
*library/classes/Document.class.php
library/classes/Installer.class.php
library/custom_template/ckeditor/_samples/assets/_posteddata.php
*library/dicom_frame.php
library/edihistory/edih_csv_inc.php
library/edihistory/edih_x12file_class.php
library/encounter_events.inc.php
library/FeeSheet.class.php
library/globals.inc.php
library/gen_hcfa_1500.inc.php
library/gen_x12_837.inc.php
*library/js/dwv/dicom_gui.js
*library/js/dwv/dicom_launcher.js
*library/js/dwv/dwv_i18n.js
library/js/xl/dygraphs.js.php
library/openflashchart/open-flash-chart.swf
library/options.inc.php
library/patient_tracker.inc.php
library/report.inc
library/sanitize.inc.php
*library/sql.inc
public/assets/modified/dygraphs-2-0-0/README.md
public/assets/modified/dygraphs-2-0-0/dygraph.css
public/assets/modified/dygraphs-2-0-0/dygraph.js
setup.php
*sites/default/documents/certificates/README.md
sql/database.sql
sql/patch.sql
*templates/documents/general_list.html
*templates/documents/general_view.html
templates/prescription/general_fragment.html
templates/prescription/general_list.html
*version.php
*public/assets/dwv-0-21-0
*public/assets/flot-0-8-3
*public/assets/i18next-9-0-1
*public/assets/i18next-browser-languagedetector-2-0-0
*public/assets/i18next-xhr-backend-1-4-3
*public/assets/jquery-ui-1-12-1
*public/assets/jszip-3-1-5
*public/assets/konva-1-6-8
*public/assets/magic-wand-js
*public/assets/modernizr-3-5-0

4.2.2 Patch

There were no patches for OpenEMR 4.2.2.

4.2.1 Patch

There were no patches for OpenEMR 4.2.1.

4.2.0 Patch (9/2/15)

Download link

4-2-0-Patch-4.zip

Description

This is the 4th patch, and it includes the fixes from previous patches. There are 35 files that are changed. Please read through the modified 'list of files' below to ensure you haven't customized any of these, since this will copy over this.

(Warning: see Special Issues section below)

(Warning: if you have modified the interface/globals.php script to manually set the $webserver_root and $web_root variables, then you will need to set this again after step 1 but before step 2 of the patch instructions below)

Installation instructions

Windows

1. Extract the zipped file into the openemr web directory, and say yes to copying over files

2. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 2 and follow these instructions)

Linux

1. Move the patch file to the openemr web directory, then type 'unzip 4-2-0-Patch-4.zip', and confirm ok to copy over files.

2. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 2 and follow these instructions)

Special Issues

1. The 3rd patch included a critical patch to fix the login authentication process. If you are locked out of OpenEMR with this patch (the only OS we know at this time that will lock out users is OpenSuse) there are instructions to fix your login at Fix Lock Out; those users that are locked out will see the following error "FATAL ERROR: crypt() function is not working correctly in OpenEMR" which is discussed in more detail at Fatal Crypt Error. Even if your users are not locked out with this patch, do recommend changing all passwords (not for security reasons, but to prevent lock out errors in the future).

Fixes and New Features

(note the ones with ** are new with this patch):

• Fixes to support ICD10 billing - contributed by Terry Hill and Jerry Padgett**
• Critical security fix - reported by Dr. Carsten Bartling
• Critical security fix - reported by Brian Hysell
• Security fixes - contributed by Brady Miller and Sunset Systems
• New feature for DaySheet report (end of day report) - contributed by Terry Hill
• New feature to either Amend or Overwrite the Billing log file - contributed by Brady Miller
• LBF form improvements and fixes - contributed by Sunset Systems
• Fix for inappropriate "Fix this!" messages for some layout data types. - contributed by Sunset Systems and Arnab Naha
• Fix for the IMPORT button to fix CCD import - contributed by ZH Healthcare
• Offsite patient portal fixes - contributed by ZH Healthcare
• Fix for javascript validation of policy and group numbers. - contributed by Kevin Yeh
• Fix for patient notes when showing all notes - contributed by epsdky

List of files (4.2.0)

(note the ones prepended with * have new changes with this patch)

contrib/util/ubuntu_package_scripts/production/README.Debian
contrib/util/ubuntu_package_scripts/production/changelog.Debian
contrib/util/ubuntu_package_scripts/production/control
contrib/util/ubuntu_package_scripts/production/copyright
Documentation/Using The End of Day Report in OpenEmr.pdf
interface/billing/billing_process.php
interface/billing/billing_report.php
interface/billing/print_daysheet_report_num1.php
interface/billing/print_daysheet_report_num2.php
interface/billing/print_daysheet_report_num3.php
interface/forms/fee_sheet/new.php
interface/forms/fee_sheet/review/initialize_review.php
interface/forms/fee_sheet/review/js/fee_sheet_core.js
interface/forms/LBF/new.php
interface/globals.php
interface/new/new_comprehensive.php
interface/patient_file/summary/demographics_full.php
interface/patient_file/summary/pnotes_full.php
interface/reports/appointments_report.php
interface/reports/appt_encounter_report.php
interface/reports/patient_list.php
interface/super/edit_layout.php
interface/usergroup/facility_admin.php
interface/usergroup/user_admin.php
library/appointments.inc.php
library/authentication/password_hashing.php
library/daysheet.inc.php
*library/gen_hfca_1500_02_12.inc.php
*library/gen_x12_837.inc.php
library/globals.inc.php
library/options.inc.php
myportal/soap_service/server_existingpatient.php
myportal/soap_service/server_side.php
templates/documents/general_view.html
*version.php

4.1.2 Patch (6/19/2014)

Download link

4-1-2-Patch-7.zip

Description

This is the 7th patch, and it includes the fixes from previous patches. There are 68 files that are changed. Please read through the modified 'list of files' below to ensure you haven't customized any of these, since this will copy over this. (Warning: if you have modified the interface/globals.php script to manually set the $webserver_root and $web_root variables, then you will need to set this again after step 1 but before step 2 of the patch instructions below)

Installation instructions

Windows

1. Extract the zipped file into the openemr web directory, and say yes to copying over files

2. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 2 and follow these instructions)

3. If using the Offsite Patient Portal, then also follow these instructions.

Linux

1. Move the patch file to the openemr web directory, then type 'unzip 4-1-2-Patch-7.zip', and confirm ok to copy over files.

2. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 2 and follow these instructions)

3. If using the Offsite Patient Portal, then also follow these instructions.

Fixes and New Features

(note the ones with ** are new with this patch):

• Upgrading mechanism fix - contributed by Brady Miller**
• Security fixes - contributed by Brady Miller
• Bug fix of immunization expiration date - contributed by Stephen Waite
• Bug fix for billing HCFA 1500 - contributed by Kevin Yeh
• Bug fix for billing CMS 1500 - contributed by Sunset Systems
• Support CMS-1500 02/12 new format - contributed by Kevin Yeh
• Security fixes - contributed by Fikri Fadzil and bradymiller
• Fixed color for facility style calendar - contributed by Stephen Waite
• Fix for pharmacy dispensory access controls - contributed by Brady Miller
• Typo fix for subscriber phone - contributed by cverk
• Critical security fix - contributed by Patrick Smith and Kevin Yeh
• Critical PHP 5.5 compatibility fixes - contributed by Kevin Yeh
• Critical security fix in multisite module - contributed by Brady Miller
• Security fix to ensure user is active and credentials are current - contributed by Kevin Yeh
• Offsite Patient Portal support for secure vpn connectivity. - contributed by ZH Healthcare
• Direct Messaging Module updates for improved reliability, security, and useability - contributed by EMR Direct
• Bug fix when password strength is set - contributed by Kevin Yeh
• Bug fix to assign an imported document owner id correctly - contributed by Brady Miller
• Bug fix for OUT event calendar bug - contributed by Robert Down
• Bug fix in log viewer bug that caused some entries to go missing from the dropdown of event names. - contributed by Sunset Systems
• Bug Fix to update BMI in vitals form when editing in pounds field - contributed by Kevin Yeh
• Critical bug fix in the vitals form module (date/time entry) - contributed by Kevin Yeh

List of files (4.1.2)

(note the ones prepended with * have new changes with this patch)

ccr/transmitCCD.php
contrib/util/ubuntu_package_scripts/development/changelog.Debian
contrib/util/ubuntu_package_scripts/development/control
contrib/util/ubuntu_package_scripts/development/copyright
contrib/util/ubuntu_package_scripts/development/git-openemr.conf
contrib/util/ubuntu_package_scripts/development/postinst
contrib/util/ubuntu_package_scripts/development/prerm
contrib/util/ubuntu_package_scripts/development/README.Debian
*contrib/util/ubuntu_package_scripts/production/changelog.Debian
contrib/util/ubuntu_package_scripts/production/control
contrib/util/ubuntu_package_scripts/production/copyright
contrib/util/ubuntu_package_scripts/production/openemr.conf
contrib/util/ubuntu_package_scripts/production/postinst
contrib/util/ubuntu_package_scripts/production/prerm
contrib/util/ubuntu_package_scripts/production/README.Debian
contrib/util/ubuntu_package_scripts/README
controllers/C_Document.class.php
index.php
interface/forms/misc_billing_options/date_qualifier_options.php
interface/forms/misc_billing_options/new.php
interface/forms/misc_billing_options/report.php
interface/forms/misc_billing_options/save.php
interface/forms/misc_billing_options/table.sql
interface/forms/vitals/templates/vitals/general_new.html
interface/globals.php
interface/main/left_nav.php
interface/logview/logview.php
interface/new/new_comprehensive_save.php
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/day/ajax_template.html
interface/main/finder/dynamic_finder_ajax.php
interface/patient_file/deleter.php
interface/patient_file/letter.php
interface/patient_file/summary/create_portallogin.php
interface/patient_file/summary/shot_record.php
interface/reports/direct_message_log.php
interface/super/edit_globals.php
interface/themes/ajax_calendar.css
library/adodb/tests/testsessions.php
library/ajax/offsite_portal_ajax.php
library/auth.inc
library/authentication/common_operations.php
library/authentication/login_operations.php
library/authentication/password_change.php
library/authentication/password_hashing.php
library/Claim.class.php
library/classes/Installer.class.php
library/clinical_rules.php
library/direct_message_check.inc
library/documents.php
library/gen_hcfa_1500.inc.php
library/gen_hfca_1500_02_12.inc.php
library/globals.inc.php
library/immunization_helper.php
library/log.inc
library/pid.inc
library/plugins/shared.make_timestamp.php
library/report.inc
library/translation.inc.php
myportal/index.php
myportal/soap_service/portal_connectivity.php
myportal/soap_service/server_side.php
patients/get_patient_info.php
patients/index.php
setup.php
*sql_upgrade.php
sql/database.sql
sql/patch.sql
*version.php

4.1.1 Patch (07/27/2013)

Download link

4-1-1-Patch-14.zip

Description

This is the 14th patch, and it includes the fixes from previous patches. There are 80 files that are changed. Please read through the list of modified files to ensure you haven't customized any of these, since this will copy over this. (Warning: if you have modified the interface/globals.php script to manually set the $webserver_root and $web_root variables, then you will need to set this again after step 2 but before step 3 of the patch instructions below)

Installation instructions

Windows

1. Extract the zipped file into the openemr web directory, and say yes to copying over files

2. If the following directory openemr/library/openflashchart/tmp-upload-images/ exists within your openemr installation, then remove it.

3. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 3 and follow these instructions)

Linux

1. Move the patch file to the openemr web directory, then type 'unzip 4-1-1-Patch-14.zip', and confirm ok to copy over files.

2. If the following directory openemr/library/openflashchart/tmp-upload-images/ exists within your openemr installation, then remove it.

3. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 3 and follow these instructions)

Fixes and New Features

(note the ones with ** are new with this patch):

• Critical bug fix in the immunization module - contributed by bradymiller**
• Security fixes - contributed by bradymiller
• Bug fixes and improvements to Date of Birth calculations, formatting and options - contributed by yehster
• Security fixes - contributed by bradymiller
• Bug fix in billing report - contributed by Sunset Systems
• Bug fix in scanned documents module - contributed by Sunset Systems
• Minor improvement in fee sheet - contributed by bradymiller
• Bug Fix for deleting payments via the Front Office Receipts report - contributed by Sunset Systems
• Bug fix for security vulnerability - contributed by bradymiller
• Bug fix for copays in appointment encounter report - contributed by ZH Healthcare
• Bug fix and improvements to lab display in then onsite patient portal - contributed by bradymiller
• Added feature to show lab results in the offsite patient portal - contributed by Sunset Systems**ZH Healthcare
• Added feature to save new patient data to audit tables in the offsite patient portal - contributed by ZH Healthcare
• Bug fix for emailing reminders - contributed by arnabnaha
• Bug fix in AMC reporting - contributed by pfwilliams
• Improvement to fee sheet code set search selector - contributed by bradymiller
• Bug fix in codes import module - contributed by pfwilliams
• Added feature to focus on field when searching for billing/diagnosis codes - contributed by yehster
• Bug fix in user add/modify gui - contributed by Sunset Systems
• Patient portal (offsite) bug fixes and improvements - contributed by ZH Healthcare
• Bug fixes and improvements of social security form items in demographics/insurance - contributed by yehster
• Bug fix to include Newcrop eRx module medications in AMC report - contributed by ZH Healthcare
• Bug fix for incorrect syntax in disc_fragment.php script - contributed by yehster
• Bug fix to correctly show patient form/note authors - contributed by bradymiller
• Security fix in the chart location module - contributed by yehster
• Bug fix in the code search popup - contributed by bradymiller
• Bug fix in the patient finder - contributed by Sunset Systems
• Bug fix to show correct balance in Payment screen - contributed by ZH Healthcare
• Bug fix in offsite patient portal mail - contributed by ZH Healthcare
• Bug fix for apostrophe in facility name in encounter screen - contributed by bradymiller
• Bug fix for provider Insurance Numbers - contributed by bradymiller
• Major enhancements in CDR based reports (standard rules, CQM, AMC and creation of clinical reminders) that allow tracking and saving of these reports - contributed by bradymiller
• Bug fixes in patient portal - contributed by ZH Healthcare
• Bug fix in claim submission - contributed by Sunset Systems
• Bug fix to show sql errors - contributed by bradymiller
• Removal of a debugging log statement - contributed by MI-Squared
• Bug fix of HCFA/X12 output - contributed by bradymiller
• Processing animation added to the CQM/ACM/Rules reports - contributed by bradymiller
• Bug fix to add multi-provider appointments - contributed by bradymiller
• Improved performance and memory management of Clinical Decision Rules (CDR) engine and reporting - contributed by bradymiller
• Bug fix in billing module patient name filter (bug reported by Jeff) - contributed by bradymiller
• Bug fix in the Add/Edit appointments module - contributed by lullu
• Bug fix in the Access Controls - contributed by bradymiller
• Bug fix to show medical problems correctly in the CCR/CCD reports - contributed by bradymiller
• Bug fix so the External Data Loads feature works in Ubuntu 12.04 - contributed by bradymiller
• Bug fix when setting an appointment as No Show - contributed by bradymiller

List of files (4.1.1)

(note the ones prepended with ** have new changes with this patch)

ccr/createCCRProblem.php
ccr/createCCR.php
custom/chart_tracker.php
custom/code_types.inc.php
custom/export_registry_xml.php
interface/batchcom/batch_reminders.php
interface/code_systems/list_staged.php
interface/fax/fax_dispatch.php
interface/forms/fee_sheet/new.php
interface/forms/newpatient/save.php
interface/forms/vitals/C_FormVitals.class.php
interface/forms/vitals/growthchart/chart.php
interface/forms/vitals/templates/vitals/general_new.html
interface/globals.php
interface/main/calendar/add_edit_event.php
interface/main/finder/dynamic_finder_ajax.php
interface/main/left_nav.php
interface/main/messages/messages.php
interface/main/onotes/office_comments.php
interface/main/onotes/office_comments_full.php
interface/new/new_comprehensive.php
interface/patient_file/deleter.php
interface/patient_file/encounter/find_code_popup.php
interface/patient_file/encounter/forms.php
interface/patient_file/front_payment.php
interface/patient_file/reminder/patient_reminders.php
interface/patient_file/report/custom_report.php
interface/patient_file/summary/clinical_reminders_fragment.php
interface/patient_file/summary/create_portallogin.php
interface/patient_file/summary/demographics_full.php
interface/patient_file/summary/demographics.php
interface/patient_file/summary/disc_fragment.php
interface/patient_file/summary/patient_reminders_fragment.php
interface/reports/appt_encounter_report.php
interface/reports/chart_location_activity.php
interface/reports/cqm.php
interface/reports/custom_report_range.php
interface/reports/report.inc.php
interface/reports/report_results.php
interface/soap_functions/soap_patientfullmedication.php
**interface/super/edit_list.php
interface/usergroup/user_admin.php
library/acl.inc
library/ajax/collect_new_report_id.php
library/ajax/execute_cdr_report.php
library/ajax/execute_pat_reminder.php
library/ajax/status_report.php
library/billrep.inc
library/classes/Provider.class.php
library/classes/rulesets/Amc/library/AbstractAmcReport.php
library/classes/rulesets/Amc/reports/AMC_302d/Numerator.php
library/classes/rulesets/library/RsPatient.php
library/clinical_rules.php
library/formdata.inc.php
library/gen_x12_837.inc.php
library/globals.inc.php
library/htmlspecialchars.inc.php
library/jsonwrapper/JSON/JSON.php
library/jsonwrapper/JSON/LICENSE
library/jsonwrapper/jsonwrapper.php
library/jsonwrapper/jsonwrapper_inner.php
library/lists.inc
library/onotes.inc
library/openflashchart/php-ofc-library/ofc_upload_image.php
library/patient.inc
library/pnotes.inc
library/reminders.php
library/report_database.inc
library/sql-ccr.inc
library/sql.inc
myportal/soap_service/server_audit.php
myportal/soap_service/server_existingpatient.php
myportal/soap_service/server_newpatient.php
myportal/soap_service/server_newpatienttoapprove.php
myportal/soap_service/server_oemruser.php
myportal/soap_service/server_side.php
patients/get_lab_results.php
sql/database.sql
sql/patch.sql
**version.php

4.1.0 Patch (7/26/2012)

Download link

4-1-0-Patch-13.zip

Description

This is the 13th patch, and it includes the fixes from previous patches. There are 133 files that are changed. Please read through the list of modified files to ensure you haven't customized any of these, since this will copy over this. (Warning: if you have modified the interface/globals.php script to manually set the $webserver_root and $web_root variables, then you will need to set this again after step 1 but before step 3 of the patch instructions below)

Installation instructions

Windows

1. Extract the zipped file into the openemr web directory, and say yes to copying over files

2. Remove all files and directories in the openemr/interface/main/calendar/modules/PostCalendar/pntemplates/compiled/ directory.

3. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 3 and follow these instructions)

Linux

1. Move the patch file to the openemr web directory, then type 'unzip 4-1-0-Patch-13.zip', and confirm ok to copy over files.

2. Remove all files and directories in the openemr/interface/main/calendar/modules/PostCalendar/pntemplates/compiled/ directory.

3. Open web browser and go to http://your_server_name_or_ip/openemr/sql_patch.php

(this script will run automatically and patch the database)

(if you are using the Multisite Module, then skip step 3 and follow these instructions)

Fixes and New Features

(note the ones with ** are new with this patch):

• Bug fix in access controls from patch 12.**
• Bug fix to ensure new patient names with UTF8 encoded characters works. - contributed by bradymiller
• Patch script improvements - contributed by TajEmo Enterprises
• Bug fix to make CAMOS form installation work with MySQL 5.5 - contributed by James Stone
• Bug fix to show the correct DOB date on CCR report - contributed by TajEmo Enterprises
• Bug fix to ensure correct display of UTF8 encoded characters - contributed by bradymiller
• Bug fix to allow display of more than one word for translated Login label on the login page - contributed by bradymiller
• Bug fix in access controls - contributed by Sunset Systems
• Bug fix of offsite patient portal when creating a new patient - contributed by Z&H Healthcare
• Bug fix for PHP version 5.4 compatibility - contributed by yehster
• Bug fix to stop time out of AMC/CQM/CDR reports - contributed by bradymiller
• Dated Reminders module bug fixes - contributed by TajEmo Enterprises
• Patient portal SOAP API bug fixes - contributed by Z&H Healthcare
• Bug fix for immunization when using sql collation other than utf8_general_ci - contributed by bradymiller
• SNOMED import script now works with most recent SNOMED release - contributed by bradymiller
• Added access control to viewing vital signs on the patient summary screen - contributed by bradymiller
• Strip spaces or dashes in zip code of X12 - contributed by yehster
• Bug fixes in the find code popup** - contributed by bradymiller
• Critical bug fix to create X12 claims - contributed by yehster
• Bug fix for ERA check number - contributed by Z&H Healthcare
• Dated Reminders feature - contributed by TajEmo Enterprises
• Vitals Form modify observation date/time feature - contributed by Sunset Systems
• Implemented tooltips to show encounter form data from the encounters list - contributed by Sunset Systems
• Bug fix to stop calendar from reseting to show all users - contributed by yehster
• Bug fix to display patient photo if extension is uppercase - contributed by TajEmo Enterprises
• Ensure proper date formatting for X12 5010 - contributed by MI-Squared and yehster
• Billing skip segment 2310B when applicable - contributed by yehster
• Bug fix to pass correct appt category when new encounter is autocreated - contributed by MI-Squared
• Bug fix to pass correct Onset Date when new encounter is autocreated - contributed by MI-Squared
• Security fix - contributed by bradymiller
• X12 Billing bug fix - contributed by yehster and Sunset Systems
• Addition of default patient country code to the eRx Newcrop module - contributed by Z&H Healthcare
• Fix for javascript error triggered when mouse moved over provider name in day view - contributed by yehster
• Bug fix for lists module to add codes to fee sheet - contributed by Health Care Technologies
• Security fix in interface/patient_file/summary/add_edit_issue.php script - contributed by yehster
• Bug fixes in E-prescribing Newcrop module - contributed by Z&H Healthcare
• Bug fixes in X12 module - contributed by Sunset Systems and yehster
• Bug fixes in backup script module - contributed by yehster
• Bug fixes in billing module - contributed by yehster
• Bug fix in the add list item widget - contributed by MMF Systems
• Bug fix in deleter popup - contributed by MMF Systems
• Security fix in interface/login/validateUser.php script - contributed by bradymiller
• 5010 X12 compliance - primarily contributed by Sunset Systems with bug fixes by Kim Weesner
• Can click directly on a calendar slot time to set selected time/provider - contributed by yehster
• New calendar entries will list the current patient by default - contributed by yehster
• Support for multiple modifiers in the Fee sheet - contributed by MI-Squared
• Support justification of non-icd9 diagnosis codes in the Fee sheet - contributed by yehster
• Support for procedure-specific claim notes - contributed by MD-Technologies
• Bug fixes in xmlformgen - contributed by ZoneOne
• Bug fix to show immunizations correctly in the patient report - contributed by bradymiller
• Bug fix to edit immunizations - contributed by bradymiller
• Bug fixes in messages module - contributed by MI-Squared
• Bug fix for encounter date display when showing historical LBF data - contributed by Sunset Systems
• Bug fix to remove non-working dynamic resizing of dialog frame - contributed by yehster
• Fixed time limit expiration bug from the administration clinical reminder module - contributed by bradymiller
• Integrated the new patch mechanism into the multi-site module (admin.php script) - contributed by bradymiller
• Billing module bug fixes related to NDC code and Subscriber RelationShip - contributed by Z&H Healthcare
• Optimized a textarea size in the CAMOS module - contributed by Jeff Guillory
• Bug fix in Messages module - contributed by yehster
• Fixed lots of undefined variables - contributed by yehster
• Bug fix in dates for CCR reporting - contributed by yehster
• Sort fax/scan pages to match the original order in a displayed document - contributed by Sunset Systems
• Nation Notes module bug Fix - contributed by Z&H Healthcare
• Database optimizations to improve OpenEMR performance - contributed by bradymiller
• Calendar feature to increment by months up to a year in the future when clicking the month label on the small calendar - contributed by yehster
• Offsite Portal Patient Link Bug Fixed - contributed by Z&H Healthcare
• Calendar layout bug fixes and improvements - contributed by yehster
• Fixed Disclosure display screen to allow viewing of more than 15 records with pagination - contributed by MMF Systems
• Bug fix to view the billing log file. - contributed by kevmccor
• Bug fix to show appt in patient portal for IE8 and IE9. - contributed by Ryan Madron
• EOB bug fix - contributed by Z&H Healthcare
• Bug fix to not display deleted vital signs - contributed by MMF Systems
• New feature to display warning message when attempt to add duplicate entries to any form fields using the “Add” button - contributed by MMF Systems
• Patient Portal calendar pop-up style bug fix - bug reported by Mauricio

List of files (4.1)

(note the ones prepended with ** have new changes with this patch)

admin.php
ccr/createCCRActor.php
contrib/acog/print_form.php
contrib/forms/formmaker/formscript.pl
contrib/forms/xmlformgen/affirm_sheet.xml
contrib/forms/xmlformgen/dub_soap.xml
contrib/forms/xmlformgen/pelvic_soap.xml
contrib/forms/xmlformgen/urinary_soap.xml
contrib/forms/xmlformgen/vaginitis_soap.xml
contrib/forms/xmlformgen/xslt/common_objects.xslt
contrib/forms/xmlformgen/xslt/field_objects.xslt
contrib/forms/xmlformgen/xslt/new.php.xslt
contrib/forms/xmlformgen/xslt/print.php.xslt
contrib/forms/xmlformgen/xslt/report.php.xslt
contrib/forms/xmlformgen/xslt/report_objects.xslt
contrib/forms/xmlformgen/xslt/save.php.xslt
contrib/forms/xmlformgen/xslt/table.sql.xslt
contrib/forms/xmlformgen/xslt/view.php.xslt
interface/billing/billing_process.php
interface/billing/billing_report.php
interface/billing/sl_eob_process.php
interface/billing/sl_eob_search.php
interface/code_systems/standard_tables_manage.php
interface/eRx.php
interface/eRx_xml.php
interface/fax/fax_dispatch.php
interface/forms/CAMOS/view.php
interface/forms/CAMOS/table.sql
interface/forms/CAMOS/table_no_data.sql
interface/forms/fee_sheet/new.php
interface/forms/LBF/new.php
interface/forms/painmap/templates/podiatry-feet.png
interface/forms/painmap/templates/README.TXT
interface/forms/vitals/C_FormVitals.class.php
interface/forms/vitals/FormVitals.class.php
interface/forms/vitals/templates/vitals/general_new.html
interface/globals.php
interface/login/login.php
interface/login/validateUser.php
interface/logview/erx_logview.php
interface/main/backup.php
interface/main/calendar/add_edit_event.php
interface/main/calendar/index.php
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/day/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/header.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/month/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/monthSelector.php
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/week/ajax_template.html
interface/main/dated_reminders/dated_reminders.php
interface/main/dated_reminders/dated_reminders_add.php
interface/main/dated_reminders/dated_reminders_log.php
interface/main/finder/patient_select.php
interface/main/left_nav.php
interface/main/main_info.php
interface/main/main_screen.php
interface/main/messages/messages.php
interface/new/new_comprehensive.php
interface/new/new_search_popup.php
interface/patient_file/deleter.php
interface/patient_file/encounter/delete_form.php
interface/patient_file/encounter/diagnosis.php
interface/patient_file/encounter/find_code_popup.php
interface/patient_file/encounter/load_form.php
interface/patient_file/encounter/trend_form.php
interface/patient_file/encounter/view_form.php
interface/patient_file/history/encounters.php
interface/patient_file/history/encounters_ajax.php
interface/patient_file/pos_checkout.php
interface/patient_file/reminder/patient_reminders.php
interface/patient_file/report/custom_report.php
interface/patient_file/summary/add_edit_issue.php
interface/patient_file/summary/create_portallogin.php
interface/patient_file/summary/demographics.php
interface/patient_file/summary/demographics_full.php
interface/patient_file/summary/demographics_save.php
interface/patient_file/summary/disclosure_full.php
interface/patient_file/summary/immunizations.php
interface/patient_file/summary/lbf_fragment.php
interface/patient_file/summary/pnotes_fragment.php
interface/patient_file/summary/shot_record.php
interface/patient_file/summary/stats.php
interface/patient_file/summary/stats_full.php
interface/patient_file/summary/vitals_fragment.php
interface/reports/cqm.php
interface/reports/players_report_ajax.php
interface/soap_functions/soap_allergy.php
interface/soap_functions/soap_patientfullmedication.php
interface/super/edit_list.php
interface/themes/ajax_calendar.css
interface/themes/ajax_calendar_ie.css
interface/usergroup/facilities_add.php
interface/usergroup/facility_admin.php
interface/usergroup/user_admin.php
interface/usergroup/usergroup_admin_add.php
**library/acl.inc
library/ajax/addlistitem.php
library/ajax/dated_reminders_counter.php
library/auth.inc
library/billing.inc
library/Claim.class.php
library/classes/Controller.class.php
library/classes/X12Partner.class.php
library/clinical_rules.php
library/custom_template/custom_template.php
library/custom_template/quest_popup.php
library/dated_reminder_functions.php
library/dialog.js
library/erx_javascript.inc.php
library/freeb/xmlrpcs.inc
library/gen_hcfa_1500.inc.php
library/gen_x12_837.inc.php
library/globals.inc.php
library/js/ajtooltip.js
library/js/calendarDirectSelect.js
library/log.inc
library/options_listadd.inc
library/options.inc.php
library/patient.inc
library/pnotes.inc
library/reminders.php
library/sanitize.inc.php
library/sql-ccr.inc
library/sql_upgrade_fx.php
library/standard_tables_capture.inc
myportal/soap_service/server_existingpatient.php
myportal/soap_service/server_newpatient.php
myportal/soap_service/server_side.php
patients/get_appointments.php
patients/summary_pat_portal.php
sql/patch.sql
sql_patch.php
templates/prescription/general_list.html
templates/x12_partners/general_edit.html
**version.php

4.0.0 Patch (04/15/2011)

Download link

4-0-0-Patch-2.zip

Description

This is the 2nd patch, and it includes the fixes from previous patches. There are 8 files that are changed. Please read through the list of modified files to ensure you haven't customized any of these, since this will copy over this.

Installation instructions

Windows

Simply extract the zipped file into the openemr web directory, and say yes to copying over files

Linux

Move the patch file to the openemr web directory, then type 'unzip 4-0-0-Patch-2.zip', and confirm ok to copy over files.

Fixes and New Features

(note the ones with ** are new with this patch):

• Fix for bug in the backup script (Administration->Backup).**
• Fix for bug in the appointment report when listing recurring appointments and filtering by facility.**
• Fix for bug in the Facility data entry form.**
• Fix for published security bug "Local File Inclusion".**
• Fix for published security bug "Arbitrary Database Creation/Database Enumeration".**
• Fix for bug that does not allow modification of Facilities.

List of files (4.0)

contrib/util/express.php
index.php
interface/main/backup.php
interface/globals.php
interface/usergroup/facilities.php
interface/usergroup/facilities_add.php
interface/usergroup/facility_admin.php
library/appointments.inc.php

3.2.0 Patch (10/05/2010)

Download link

3-2-0-Patch-8.zip

Description

This is the 8th patch, and it includes the changes from previous patches. There are 52 files that are changed.. Please read through the list of modified files to ensure you haven't customized any of these, since this will copy over this.

Installation instructions

Windows

Simply extract the zipped file into the openemr web directory, and say yes to copying over files

Linux

Move the patch file to the openemr web directory, then type 'unzip 3-2-0-Patch-8.zip', and confirm ok to copy over files.

Fixes and New Features

(note the ones with ** are new with this patch):

• Bug fix for patient balance computation that was introduced in the previous patch**
• Added ability to delete a payment or adjustment, and to reset statements-sent count
• Added sorting in fax script, so page displays order matches original document
• Fix in EOB in creating ar_session entries
• Fix to prevent cross-scripting security vulnerability (involving the patient name). Thank you Andrew Moore.
• Improvements in demographic form validation.
• Fixed provider matching bug in encounter report.
• Fixed display of provider in Billing Report page.
• Fixed a minor syntax issue in the main database file.
• Can now edit patient insurance information in the new patient form. thank you Ed.
• Link to the new patient form has been added to the calendar scheduler pop-up. than you Visolve.
• CAMOS prescription now works even if no encounter is selected. thank you Kanwaljit Singh.
• Bug fix to not show html code in billing statements. thank you EHR Live.
• Bug fix in the number to text converter. thank you Andrew Moore.
• Bug fix in the language gui to avoid duplicate definitions
• Bug fix in the sl_convert.php script
• Added the initial code for automated bug testing. thank you Andrew Moore.
• Several bug fixes in the formmaker script
• Several bug fixes in the language editor
• Added a customization log feature to the language editor (If you want this feature, more configuration is required; see HERE for instruction)
• Can filter by definitions in the language editor
• Other improvements to the language editor gui
• Imagemagick in custom reports supports Windows (see HERE for more information)
• Support internationalization (utf8 characters) in patient search screen
• Bug fix to show dob and age in header when click encounter link in Billing->Fee screen
• Support use of apostrophes and quotes in the administration->language gui
• CAMOS support to clone justification billing codes
• CAMOS billing codes set to be authorized by default
• CAMOS form placeholders work in the reports
• Increased document upload size limit to 64MB (thank you penguin8r)
• Added option for HCFA text form output (thank you bo2999)
• Ensure a prescription drug name is entered in the prescription entry form (thank you dle5400)
• Fixed CAMOS form title bug in the patient custom reports, and modified so the CAMOS links will not be included when print these reports
• Added a date widget to the insurance effective date entry in the demographics page
• Fixed the insurance date widgets in the demographics page
• Fixed the date widget in the find appointment page (thank you mmfsystems)

List of files (3.2)

contrib/forms/formmaker/formscript.pl
contrib/forms/formmaker/README
controllers/C_Document.class.php
custom/chart_tracker.php
interface/billing/billing_process.php
interface/billing/billing_report.php
interface/billing/sl_eob_invoice.php
interface/billing/sl_eob_process.php
interface/billing/sl_eob_search.php
interface/fax/fax_dispatch.php
interface/forms/CAMOS/content_parser.php
interface/forms/CAMOS/new.php
interface/forms/CAMOS/notegen.php
interface/forms/CAMOS/report.php
interface/forms/CAMOS/rx_print.php
interface/language/lang_constant.php
interface/language/lang_definition.php
interface/language/lang.info.html
interface/language/lang_language.php
interface/language/lang_manage.php
interface/language/language.inc.php
interface/language/language.php
interface/login/login.php
interface/main/authorizations/authorizations.php
interface/main/calendar/add_edit_event.php
interface/main/calendar/find_appt_popup.php
interface/main/calendar/find_patient_popup.php
interface/main/finder/patient_select.php
interface/new/new_comprehensive.php
interface/new/new_comprehensive_save.php
interface/patient_file/encounter/forms.php
interface/patient_file/front_payment.php
interface/patient_file/report/custom_report.php
interface/patient_file/summary/demographics.php
interface/patient_file/summary/demographics_full.php
interface/practice/ins_search.php
interface/reports/encounters_report.php
interface/reports/patient_list.php
library/api.inc
library/classes/NumberToText.class.php
library/forms.inc
library/gen_hcfa_1500.inc.php
library/invoice_summary.inc.php
library/options.inc.php
library/patient.inc
phpunit.xml
sl_convert.php
sql/database.sql
templates/document_categories/general_upload.html
templates/documents/general_upload.html
templates/prescription/general_list.html
Tests/NumberToTextTest.php

3.1.0 Patch (12/17/2009)

Download link

3-1-0-Patch-5.zip

Description

This is the 5th patch, and it includes the fixes from previous patches. There are 50 files that are changed. Please read through the list (bottom of page) to ensure you haven't customized any of these, since this will copy over this.

Installation instructions

Windows

Simply extract the zipped file into the openemr web directory, and say yes to copying over files

Linux

Move the patch file to the openemr web directory, then type 'unzip 3-1-0-Patch-5.zip', and confirm ok to copy over files.

Fixes and New Features

(note the ones with ** are new with this patch):

• Internationalization of the CAMOS form module**
• Fee sheet category bug fix**
• Fixes involving escaping of data and avoiding sql-injection in user input**
• The Backup feature now also works in Windows
• Cosmetic fixes to demographic and calendar display
• Fixes to the Restore script
• Fixes to sql-ledger migration script
• Layout data bug fixes
• Fixed some Report bugs
• Fixed https bug in admin->calendar screen
• allow switching of calendar style without needing to logout
• support clicking of time to open a new appointment in the outlook calendar
• optimize search ordering
• fix contrib/util/load_icd_desc.plx script to work with ICD website change
• internationalization bug fixes in calendar
• in charges screen, support unit numbers and clearing of values when save
• disable a debugging php log error
• fix the 'don't save' link in misc_billing_options form
• clear copay amount when saver in charges screen
• improve flow of authorizations screen
• support line breaks when print pnotes
• fix to support apostrophes in patient names
• fix to support UTF8 encoded patient names in calendar (bug only noted in Windows)

List of files (3.1)

contrib/util/load_icd_desc.plx
contrib/util/restore
gacl/gacl.class.php
interface/forms/CAMOS/admin.php
interface/forms/CAMOS/ajax_save.php
interface/forms/CAMOS/content_parser.php
interface/forms/CAMOS/new.php
interface/forms/CAMOS/notegen.php
interface/forms/CAMOS/report.php
interface/forms/CAMOS/rx_print.php
interface/forms/CAMOS/save.php
interface/forms/CAMOS/view.php
interface/forms/fee_sheet/new.php
interface/forms/misc_billing_options/new.php
interface/forms/misc_billing_options/view.php
interface/main/authorizations/authorizations_full.php
interface/main/backup.php
interface/main/calendar/add_edit_event.php
interface/main/calendar/find_patient_popup.php
interface/main/calendar/includes/pnAPI.php
interface/main/calendar/modules/PostCalendar/pntemplates/default/user/ajax_search.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/day/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/day/orig_default.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/day_print/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/day_print/outlook_ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/month/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/month_print/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/month_print/outlook_ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/week/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/week_print/ajax_template.html
interface/main/calendar/modules/PostCalendar/pntemplates/default/views/week_print/outlook_ajax_template.html
interface/main/calendar/modules/PostCalendar/pnuser.php
interface/main/finder/patient_select.php
interface/patient_file/deleter.php
interface/patient_file/encounter/copay.php
interface/patient_file/encounter/other.php
interface/patient_file/summary/demographics_save.php
interface/patient_file/summary/pnotes_print.php
interface/reports/collections_report.php
interface/reports/inventory_list.php
interface/reports/services_by_category.php
interface/super/edit_layout.php
interface/themes/style_sky_blue.css
interface/usergroup/addrbook_edit.php
interface/usergroup/addrbook_list.php
interface/usergroup/user_admin.php
library/formdata.inc.php
library/options.inc.php
library/patient.inc
sl_convert.php