registro_escolar/enfermeria.py

# coding=utf-8
# from sqlalchemy import metadata
import sqlalchemy as db

#########################
# stack overflow:
    # Python sanitizing html from a string
def escape(htmlstring):
    escapes = {'\"': '"',
               '\'': ''',
               '<': '&lt;',
               '>': '&gt;'}
    # This is done first to prevent escaping other escapes.
    htmlstring = htmlstring.replace('&', '&amp;')
    for seq, esc in escapes.iteritems():
        htmlstring = htmlstring.replace(seq, esc)
    return htmlstring
#########################

# connect to server
engine = db.create_engine('mysql+pymysql://root:@0.0.0.0/registro_escolar_1')

connection = engine.connect()
# estudiantes = db.Table('estudiantes', metadata, autoload=True, autoload_with=engine)
# usuarios = db.Table('usuarios', metadata, autoload=True, autoload_with=engine)

def visitas():
    query ='SELECT t1.id, t2.nombres e_nombre, t2.apellidos e_apellido,\
                t1.nombres p_nombre, t1.apellidos p_apellido, t1.razon, t1.acciones\
            FROM (SELECT v.id, u.nombres, u.apellidos,v.razon, v.acciones\
                  	FROM visitas_enfermeria v, usuarios u\
                  	WHERE v.estudiante_id = u.id) t1,\
            	 (SELECT v.id, u.nombres, u.apellidos\
                  	FROM visitas_enfermeria v, usuarios u\
                  	WHERE v.enfermera_id = u.id) t2\
            WHERE t1.id=t2.id'
    result_db = connection.execute(query).fetchall()

    ###### headers

    headers = '['
    headers += '{"nombre":"Nombre Enfermera"}'
    headers += ','
    headers += '{"nombre":"Nombre Estudiante"}'
    headers += ','
    headers += '{"nombre":"Razon"}'
    headers += ','
    headers += '{"nombre":"Informacion"}'
    headers += ','
    headers += '{"nombre":"Editar"}'
    headers += ']'

    ###### tabla

    modal_content = '['
    tabla = '['
    i = 0
    len_result = len(result_db)
    for q in result_db:
        i = i+1
        tabla           += '{'
        modal_content   += '{'
        tabla           += '"Nombre Enfermera":"'+escape(q[1])+' '+escape(q[2])+'"'
        modal_content   += '"Nombre Enfermera":"'+escape(q[1])+' '+escape(q[2])+'"'
        tabla           += ','
        modal_content   += ','
        tabla           += '"Nombre Estudiante":"'+escape(q[3])+' '+escape(q[4])+'"'
        modal_content   += '"Nombre Estudiante":"'+escape(q[3])+' '+escape(q[4])+'"'
        tabla           += ','
        modal_content   += ','

        tabla           += '"Razon":"'+escape(q[5])+'"'
        modal_content   += '"Razon":"'+escape(q[5])+'"'
        modal_content   += ','
        modal_content   += '"Explicación":"'+escape(q[6])+'"'


        tabla           += ','
        modal_content   += ','
        tabla           += '"user_id":"'+str(q[0])+'"'
        modal_content   += '"user_id":"'+str(q[0])+'"'
        tabla           += '}'
        modal_content   += '}'
        if i < len_result:
            tabla        += ','
            modal_content+= ','
    tabla               += ']'
    modal_content       += ']'

    ###### info

    info = '{'
    info += '"dash_name":"Enfermeria- Manejar Visitas"'
    info += ','
    info += '"dash_link":"/enfermeria/ver/"'
    info += ','
    info += '"dash_sub_name":"Visitas hechas"'
    info += ','
    info += '"add":"Anadir Visita"'
    info += ','
    info += '"add_link":"/enfermeria/forma/add/visita/"'
    info += ','
    info += '"dir1":"#"'
    info += ','
    info += '"dir2":"/enfermeria/forma/edit/visita/"'
    info += '}'

    ###### modal
    modal = '{'
    modal += '"infoName":"Ver informacion"'
    modal += ','
    modal += '"editName":"#"'
    modal += '}'

    result = '{"headers":'+headers+',"tabla":'+tabla+',"modal_content":'+modal_content+',"info":'+info+',"modal":'+modal+'}'

    # print(result)
    return(result)