function obtenerPacientes($palabra)
{
    // Error 1: los pack estaban mal referenciados antes ../modelo/Diseno.php
    // forma correcta ../modelo/diseno.php
    include_once '../modelo/diseno.php';
    $ds = new diseno();
    // Conexi�n a la base de datos, cambiar los par�metros si se requiere
    $conexionBD = mysqli_connect('localhost', 'root', 'sql', 'admproy_cuidados_paliativos_panama');
    //$conexionBD = mysqli_connect('mysql3000.mochahost.com','admproy_panama','cppanama2014','admproy_cuidados_paliativos_panama');
    if (!$conexionBD) {
        die('No se pudo conectar: ' . mysqli_error($conexionBD));
    }
    // Error 2: las mayúsculas y minúsculas son relevantes en Linux
    //Procuren que si las tablas de las base de datos están en minúsculas, realizar las consultas
    // en minúsculas
    $consultaSQL = 'SELECT DESCRIPCION, ID_MEDICAMENTO FROM medicamentos WHERE DESCRIPCION LIKE "%' . strtoupper($palabra) . '%" ORDER BY DESCRIPCION LIMIT 100;';
    // Ejecuta la consulta
    $datos = mysqli_query($conexionBD, $consultaSQL);
    $coincidencias = '';
    // Variable con resultados
    while ($valores = mysqli_fetch_array($datos)) {
        // Recorre los datos
        // Arma la lista de palabras que coinciden y su ID
        $coincidencias .= $valores['DESCRIPCION'] . '|' . $valores['ID_MEDICAMENTO'] . "\n";
    }
    mysqli_close($conexionBD);
    // Cierra la conexi�n
    return UTF8_encode($coincidencias);
    // Devuelve la lista
}

 public function __destruct()
 {
     if ($this->dbConn) {
         mysqli_close($this->dbConn);
         $this->dbConn = null;
     }
 }

/**
 * Make a sql query to the database.
 *
 * @param string $sql
 * @return integer
 */
function query($sql)
{
    $connection = connect();
    $res = mysqli_query($connection, $sql);
    mysqli_close($connection);
    return $res;
}

function Populate()
{
    //mysql connection
    $con = mysqli_connect("eu-cdbr-azure-west-a.cloudapp.net", "b8592f1b44ff9a", "fecb2128", "TeamProject");
    if (mysqli_connect_errno()) {
        $result = "f";
    } else {
        //query
        $query = "SELECT Name,Email FROM Subscriber";
        $result = mysqli_query($con, $query);
        //initialize arrays
        $i = 0;
        $subnames = array();
        $submails = array();
        //loop through the database populating
        while ($sub = mysqli_fetch_assoc($result)) {
            $subnames[$i] = $sub['Name'];
            $submails[$i] = $sub['Email'];
            $i++;
        }
        //close conection and return
        mysqli_close($con);
        return array($subnames, $submails);
    }
}

function getstockprice()
{
    global $con;
    $sql = "SELECT ROUND(current_stock_price, 1) as ct , ROUND(last_stock_price, 1) as lt from stocks";
    $query = mysqli_query($con, $sql);
    if (!$query && !mysqli_num_rows($query)) {
        throw new Exception('Error in SQL');
    }
    $i = 1;
    $ret = array();
    while ($row = mysqli_fetch_assoc($query)) {
        if ($row['ct'] > $row['lt']) {
            $direction = 'up';
            $color = 'green';
        } else {
            $direction = 'down';
            $color = 'red';
        }
        $arr[$i] = array($row['ct'], $direction, $color);
        array_push($ret, $arr[$i]);
        $i++;
    }
    mysqli_close($con);
    return $ret;
}

function Modificar()
{
    global $connect;
    $query = "UPDATE product SET name='{$_POST['name']}', price='{$_POST['price']}', stock='{$_POST['stock']}',\n\t category = '{$_POST['idFkCategory']}', brand='{$_POST['idFkBrand']}' idFkSize = '{$_POST['idFkSize']}',\n\t idFkColor='{$_POST['idFkColor']}' WHERE DNI='{$_POST['id']}';";
    mysqli_query($connect, $query) or die(mysqli_error($connect));
    mysqli_close($connect);
}

 function disconnect()
 {
     if ($this->connectionId) {
         mysqli_close($this->connectionId);
         $this->connectionId = null;
     }
 }

function myAccount()
{
    global $connect;
    $data = json_decode(file_get_contents('php://input'), true);
    $response = array();
    if (!$data) {
        $response['error']['message'] = "Invalid request.";
    } else {
        if (!isset($data['token']) || empty(trim($data['token']))) {
            $response['error']['message'] = "Token is required.";
        } else {
            $token = trim($data['token']);
            $query = mysqli_query($connect, "SELECT firstname, lastname, email, last_login FROM users WHERE token ='{$token}'");
            if ($query->num_rows > 0) {
                while ($row = $query->fetch_assoc()) {
                    $firstname = $row['firstname'];
                    $lastname = $row['lastname'];
                    $email = $row['email'];
                    $lastLogin = $row['last_login'];
                }
                $response = array('okay' => array('firstname' => ucwords(strtolower($firstname)), 'lastname' => ucwords(strtolower($lastname)), 'email' => $email, 'last_login' => date('F d, Y', strtotime($lastLogin))));
            } else {
                $response['error']['message'] = "Token is not correct.";
            }
            mysqli_close($connect);
        }
    }
    echo json_encode($response);
}

function showVotes($db_handle, $db_found)
{
    $func_message = "";
    $username = $_SESSION['username'];
    $uid = getUID($db_handle, $username);
    if ($db_found) {
        //next query to find all files UID has voted on
        $SQL_stmt = "SELECT images_voted FROM users WHERE uid = '{$uid}'";
        $query_result = mysqli_query($db_handle, $SQL_stmt);
        if ($query_result) {
            $actual_result = mysqli_fetch_assoc($query_result);
            $images_voted = $actual_result['images_voted'];
            if ($images_voted != '') {
                $image_array = explode(',', $images_voted);
                foreach ($image_array as $image_id) {
                    $SQL_stmt = "SELECT fname FROM files WHERE fid = '{$image_id}'";
                    $query_result2 = mysqli_query($db_handle, $SQL_stmt);
                    $actual_result2 = mysqli_fetch_assoc($query_result2);
                    //echo $actual_result2['fname'] . "<br>";
                    echo "<a href='imageload.php?image=" . $actual_result2['fname'] . "'>" . $actual_result2['fname'] . " </a><br>";
                }
            } else {
                $func_message = "No files found";
            }
        } else {
            $func_message = "Error querying database";
        }
        mysqli_close($db_handle);
    } else {
        $func_message = "Error connecting to database";
    }
    return $func_message;
}

function insertarTweetInfo($id_tweet, $tweet, $rts, $favs, $fecha_creacion, $usuario, $url_imagen, $followers, $followings, $num_tweets)
{
    //Creamos la conexión a la base de datos
    $conexion = mysqli_connect("localhost", "root", "", "twitterdata");
    //Comprobamos laconexión
    if ($conexion) {
    } else {
        die('Ha sucedido un error inexperador en la conexion de la base de datos<br>');
    }
    //Codificación de la base de datos en utf8
    mysqli_query($conexion, "SET NAMES 'utf8'");
    mysqli_set_charset($conexion, "utf8");
    //Creamos la sentencia SQL para insertar los datos de entrada
    $sql = "insert into tweets (id_tweet,tweet,rt,fav,fecha_creacion,usuario,url_imagen,followers,followings,num_tweets) \n            values (" . $id_tweet . ",'" . $tweet . "'," . $rts . "," . $favs . ",'" . $fecha_creacion . "','" . $usuario . "','" . $url_imagen . "'," . $followers . "," . $followings . "," . $num_tweets . ");";
    $consulta = mysqli_query($conexion, $sql);
    //Comprobamos si la consulta ha tenido éxito
    if ($consulta) {
    } else {
        die("No se ha podido insertar en la base de datos<br><br>" . mysqli_error($conexion));
    }
    //Cerramos la conexión de la base de datos
    $close = mysqli_close($conexion);
    if ($close) {
    } else {
        die('Ha sucedido un error inexperado en la desconexion de la base de datos<br>');
    }
}

function get_search()
{
    $strSQL = '';
    if (isset($_POST['searchtext'])) {
        $searchtext = $_POST['searchtext'];
        if ((string) (int) $searchtext == $searchtext) {
            $price = intval($searchtext);
            $strSQL = "SELECT m.deviceid,m.model FROM mobiles m, features f\n\t\t\t\t\t\tWHERE f.price BETWEEN {$price}-50 AND {$price}+50 AND m.DeviceID = f.DeviceID;";
        } else {
            $strSQL = "SELECT m.deviceid,m.model FROM mobiles m WHERE m.manufacture = '" . $searchtext . "' OR m.model = '" . $searchtext . "';";
        }
        $con = mysqli_connect("127.0.0.1", "root", "", "mobistore") or die(mysql_error());
        $rs = mysqli_query($con, $strSQL);
        $mobiles = array();
        while ($object = mysqli_fetch_object($rs)) {
            $mobiles[] = $object;
        }
        $display_str = "<table><tr>  <th>Sl No. </th> <th> DEVICES </th> </tr> ";
        $i = 0;
        foreach ($mobiles as $mobile) {
            if (intval($mobile->deviceid) < 50) {
                $display_str .= ' ' . "<tr> <td> " . ++$i . "</td> <td> <a href=" . $mobile->deviceid . ".php>" . $mobile->model . "</a> </td> </tr>";
            } else {
                $display_str .= ' ' . "<tr> <td> " . ++$i . "</td> <td> <a href=defaultdevice.php>" . $mobile->model . "</a> </td> </tr>";
            }
        }
        $display_str .= ' ' . "</table>";
        mysqli_close($con);
        return $display_str;
    }
}

 private function validate()
 {
     if (DB_DRIVER == 'mysql') {
         if (!($connection = @mysql_connect(DB_HOSTNAME, DB_USERNAME, DB_PASSWORD))) {
             $this->error['warning'] = $this->language->get('error_db_connect');
         } else {
             if (!mysql_select_db(DB_DATABASE, $connection)) {
                 $this->error['warning'] = 'Error: Database "' . DB_DATABASE . '" does not exist!';
             }
             mysql_close($connection);
         }
     }
     if (DB_DRIVER == 'mysqli') {
         $link = mysqli_connect(DB_HOSTNAME, DB_USERNAME, DB_PASSWORD, DB_DATABASE);
         if (mysqli_connect_errno()) {
             $this->error['warning'] = 'Error database connect: "' . mysqli_connect_error() . '"';
             exit;
         }
         if (!mysqli_ping($link)) {
             $this->error['warning'] = 'Error database server: "' . mysqli_error($link) . '"';
         }
         mysqli_close($link);
     }
     if (!$this->error) {
         return true;
     } else {
         return false;
     }
 }

function fetchdata()
{
    if (connectdb()) {
        $conn = connectdb();
    }
    echo "<html><head><script type=\"text/javascript\" src=\"script.js\"></script>\n\t\t<link href=\"editpage.css\" rel=\"stylesheet\" type=\"text/css\">\n\t\t</head>";
    $data1 = mysqli_query($conn, "Select * from formdata");
    echo "<h1> Subscriber details </h1>";
    echo "<h2 id='message'></h2>";
    echo "<table border=1 width=100>\n\t\t<tr>\n\t\t<th>Name</th>\n\t\t<th>Sex</th>\n\t\t<th>Email</th>\n\t\t<th>Country</th>\n\t\t<th>State</th>\n\t\t<th>Address</th>\n\t\t<th>Mobileno</th>\n\t\t<th>Interests</th>\n\t\t<th>Favorites</th>\n\t\t<th>EDIT</th>\n\t\t<th>Delete</th>\n\t\t</tr>";
    while ($result = mysqli_fetch_array($data1)) {
        echo "<tr >";
        echo "<form method='post' style='width:200px'>";
        echo "<td>" . "<input type='text' name='name' value='" . $result['name'] . "'></td>";
        echo "<td>" . "<input type='text' name='sex' value='" . $result['sex'] . "'></td>";
        echo "<td>" . "<input type='text' name='email' value='" . $result['email'] . "'></td>";
        echo "<td>" . "<input type='text' name='country' value='" . $result['country'] . "'></td>";
        echo "<td>" . "<input type='text' name='state' value='" . $result['state'] . "'></td>";
        echo "<td>" . "<input type='text' name='address' value='" . $result['address'] . "'></td>";
        echo "<td>" . "<input type='text' name='mobileno' value='" . $result['mobileno'] . "'></td>";
        echo "<td>" . "<input type='text' name='interests' value='" . $result['interest'] . "'></td>";
        echo "<td>" . "<input type='text' name='favorites' value='" . $result['favorites'] . "'></td>";
        echo "<td>" . "<input type='button' name='edit' value='edit' onclick='modifydata(this)'>" . "</td>";
        echo "<td>" . "<input type='button' name='delete' value='delete' onclick='modifydata(this)''>" . "</td>";
        echo "</form>";
        echo "</tr>";
    }
    echo "</table>";
    echo "</html>";
    mysqli_close($conn);
}

function Decider($dname, $dmail)
{
    $name = $dname;
    $mail = strtolower($dmail);
    //connect to the database
    $con = mysqli_connect("eu-cdbr-azure-west-a.cloudapp.net", "b8592f1b44ff9a", "fecb2128", "TeamProject");
    $name = mysqli_real_escape_string($con, $name);
    if (mysqli_connect_errno()) {
        return "f";
    }
    $query = "SELECT Email FROM Subscriber WHERE Email='" . $mail . "'";
    $result = mysqli_query($con, $query);
    if (mysqli_num_rows($result) > 0) {
        $result = Unsub($mail);
    } else {
        if (empty($mail)) {
            $result = Unsub($name);
        } else {
            $result = Subscribe($name, $mail);
        }
    }
    // Free result set
    mysqli_free_result($result);
    mysqli_close($con);
    return $result;
}

function insertDatabaseFunc($username, $password, $queryType, $entity)
{
    require_once 'queryDatabaseHelper.php';
    if (validUsernameAndPassword($username, $password)) {
        $link = mysqli_connect("localhost", "Tommy", "pickles", "Model");
        if (strcmp($queryType, 'Unsubs') == 0) {
            $query = 'DELETE FROM `subscription` WHERE `username`=\'' . $username . '\' AND `orgnumber`=\'' . $entity . '\'';
        } elseif (strcmp($queryType, 'RSVP') == 0) {
            $query = 'INSERT IGNORE INTO `rsvp`(`username`, `eventnumber`) VALUES (\'' . $username . '\',' . $entity . ')';
        } elseif (strcmp($queryType, 'Subs') == 0) {
            $query = 'INSERT INTO `subscription`(`username`, `orgnumber`) VALUES (\'' . $username . '\',\'' . $entity . '\')';
        } elseif (strcmp($queryType, 'AndroidDevice') == 0) {
            $query = 'INSERT IGNORE INTO `androiddevice`(`username`, `device_id`) VALUES (\'' . $username . '\',\'' . $entity . '\')';
        }
        if (mysqli_connect_errno()) {
            printf("Connect failed: %s\n", mysqli_connect_error());
            exit;
        }
        if (mysqli_query($link, $query)) {
            echo 'true';
        } else {
            echo 'false';
        }
        mysqli_close($link);
    } else {
        echo 'false';
    }
}

 /**
  * __construct function
  *
  * @return void
  */
 public function __construct()
 {
     log_message('debug', 'Enter Testsql construct');
     ini_set('memory_limit', '-1');
     $this->_ci =& get_instance();
     $db = $this->readTestDBConfig('default');
     $dw = $this->readTestDBConfig('dw');
     $_hostname = $db['hostname'];
     $_username = $db['username'];
     $_password = $db['password'];
     $_database_db = $db['database'];
     $_database_dw = $dw['database'];
     $_prefix_db = $db['dbprefix'];
     $_prefix_dw = $dw['dbprefix'];
     $this->_install = new Installation();
     $con = mysqli_connect($_hostname, $_username, $_password);
     if (!$con) {
         die('Could not connect: ' . mysqli_error());
     }
     $file_dir = dirname(dirname(__FILE__)) . "/assets/sql";
     //db
     $this->operatedatabase($_database_db, $con);
     $sqlPath = $file_dir . "/dbtables.sql";
     $this->_install->createdatabasesql($_hostname, $_username, $_password, $_database_db, $sqlPath, null, $_prefix_db);
     //dw
     $this->operatedatabase($_database_dw, $con);
     $sqlPath = $file_dir . "/dwtables.sql";
     $this->_install->createdatabasesql($_hostname, $_username, $_password, $_database_dw, $sqlPath, null, $_prefix_dw);
     //producre
     $sqlPath = $file_dir . "/";
     $this->_install->createallproducre($_hostname, $_username, $_password, $_database_dw, $sqlPath, $_database_db . '.' . $_prefix_db, $_prefix_dw);
     mysqli_close($con);
 }

function db_stop()
{
    $db = get_var('db');
    if ($db) {
        mysqli_close($db);
    }
}

function update_vote($image_id)
{
    //get number of votes and update
    global $link;
    /*$result = mysqli_query($link, "SELECT `amount` FROM `votes_amount` WHERE `imageID`=".$image_id.";") or die(mysqli_error($link));
    	$amount = mysqli_fetch_assoc($result);
    	$new_amount = $amount['amount']+1;
    	mysqli_query($link, "UPDATE `votes_amount` SET `amount`=".$new_amount." WHERE `imageID`=".$image_id.";") or die(mysqli_error($link));*/
    $stmt = mysqli_stmt_init($link);
    mysqli_stmt_prepare($stmt, "SELECT `amount` FROM `votes_amount` WHERE `imageID`=?;") or die(mysqli_error($link));
    mysqli_stmt_bind_param($stmt, 'i', $image_id);
    mysqli_stmt_execute($stmt);
    $result = mysqli_stmt_get_result($stmt);
    mysqli_stmt_close($stmt);
    $amount = mysqli_fetch_assoc($result);
    $new_amount = $amount['amount'] + 1;
    $stmt = mysqli_prepare($link, "UPDATE `votes_amount` SET `amount`=" . $new_amount . " WHERE `imageID`=?;") or die(mysqli_error($link));
    mysqli_stmt_bind_param($stmt, 'i', $image_id);
    mysqli_stmt_execute($stmt);
    mysqli_stmt_close($stmt);
    //return ajax data
    if (isset($_SESSION['id']) && !isset($_POST['action']) && !isset($_POST['votePic'])) {
        $data = array('new_amount' => $new_amount, 'imageID' => $image_id);
    } elseif (isset($_POST['action']) && $_POST['action'] == 'anonymous_voting') {
        //get another two images
        $result = mysqli_query($link, "SELECT * FROM `image` ORDER BY RAND() LIMIT 2;") or die(mysqli_error($link));
        $data = array();
        while ($row = mysqli_fetch_assoc($result)) {
            $data[] = $row;
        }
    }
    mysqli_close($link);
    return $data;
}

 public function close()
 {
     if ($this->mysqlCon != null) {
         mysqli_close($this->mysqlCon);
         $this->mysqlCon = null;
     }
 }

function ejecutar_sentencia($query)
{
    $conectar = conectar_servidor();
    $rs_resultado = mysqli_query($conectar, $query);
    mysqli_close($conectar);
    return $rs_resultado;
}