Secure online form - adding "attachments"

See previous post for set up:
http://www.chronoengine.com/forums/index.php?option=com_chronoforums&cont=posts&f=5&t=88316, quoting in part:

Hi Bob,
A couple of years ago Fredrik & you helped me set this up in Joomla 1.5. Once done worked beautifully.

Here's an outline of the setup we used:

When form is submitted, the info goes to site server database, a "thank you someone will follow up shortly" message appears, and an email is sent to the admin assistant notifying her of the submission. She then retrieves a formatted record for to create a patient record.

We used ChronoConnectivity to format the retrieval.

The retrieved formatted form, which was submitted by medical offices, is then faxed to the appropriate providers so they can provide services.

My client would now like to provide the doctors the ability to attach patient records to the referral form https://helptherapist.com/index.php?option=com_chronoforms&chronoform=referral2013 as in an email. I've explained a little to her about the difference between this and an email (database, & all).

She would still like to find some way to do this as it would be very popular with their clients (doctors) to just be able to upload patient files to the referral form as they fill it out.

We also explored the difficulty that each of the medical offices would have their own form layout and their not accepting a uniform form that would be distributed by the client.

Additional info:
She would like to keep the formatted form she retrieves from the database via ChronoConnectivity to one page - as it barely is now. She had thought there'd be a link to the files on the input side that would expand when she retrieved them.

I can see two possible ways this might work:
1. her opening a link and adding it to the retrieved form
2. passing the link on in the fax she distributes and letting the provider open the link.

I guess it would be between the receiver (she or provider) and the medical office to arrange encrypting.
Any thoughts on this?

Do you see another way to get this to work the way she'd like?

Thanks,
Scott

Hi Scott,

I've read this a couple of time and I'm still not quite sure what the extra files are. Assuming that they are 'normal' files e.g.doc, pdf, etc. then there is no problem in adding File inputs to the form, saving them in a way that they can be linked to the individual record and accessing them either by attaching to an email, or from a link in the CC listing.

The main thing is to make sure that you use file paths that are re-accessible - either use the same folder(s) so you can re-build the path when needed or save the full path in the db table and not just the file name.

Security problems increase a bit here and would probably be best to store the files outside the server root so that they are not directly accessible by url.

Bob

She added today when I asked about specifics on what she meant by "link",

Basically a place were we can upload a file or document when submitting a referral.

She meant "the doctors" when she wrote "we."

Best,
Scott

Hi Scott,

That should be no problem then.

Bob

Bob, I've been on hiatus and just getting back to this. I've read your two posts on this and not sure how to do this.

Again, what they want for the form is a way for the doctor to attach patient files as they to the form they are submitting.

Here in the US we have strict privacy issues which is why the form goes to site database then via ChronoConnectivity the admin. assist. retrieves it.

I understand the docs may have the patient info electronically on their computers or may have hard copies in Word or pdf.

You wrote,

"adding File inputs to the form, saving them in a way that they can be linked to the individual record and accessing them either by attaching to an email, or from a link in the CC listing"

How do I add file inputs, for starters.

Thanks,
Scott

Hi Scott,

Please see this FAQ for info on File Uploads.

Bob