內容簡介
Referti IGEA 外掛為 WordPress 網站新增一個私人區域，讓使用 IGEA CRM 的註冊病人能夠下載醫療報告。病人可透過義大利稅號進行身份驗證，並使用一次性密碼或個人密碼進行安全登入。
【主要功能】
• 安全身份驗證：稅號 + SMS OTP 或個人密碼
• 自動生成個人密碼，隨「報告準備好」郵件發送
• 報告列表顯示日期、類型、專科及描述
• 一鍵下載，下載追蹤功能
• 可配置的新報告通知：電子郵件或 SMS
• 訪問審計日誌，記錄登入與下載
外掛標籤
開發者團隊
原文外掛簡介
Referti IGEA adds a private area to your WordPress site where registered patients of a facility using the IGEA CRM by S0ft.it can download their medical reports (referti).
Patients identify themselves with their Italian fiscal code (validated with check digit and “omocodia” support) and verify their identity with a one-time password sent via SMS or with a personal password issued in the “report ready” email — optionally combined (two-step verification).
Reports are exported by the CRM to docs/{PATIENT_ID}/referti/ and registered with the PUSHReferto() helper, which updates the referti table and notifies the patient by email and/or SMS according to the plugin settings.
Main features
Secure identification: fiscal code + SMS OTP, personal password, or both — with optional two-step verification (password + OTP)
Personal password automatically generated and delivered with the “report ready” email
Report list with date, type, specialty, description and “new” badge for reports never downloaded
One-click download; download tracking (first download date, counter)
Configurable notifications on new report: email (with password when first issued) and/or SMS (short text, no clinical details)
Configurable visibility: immediately, after approval from the CRM (PubblicaReferto()), or after N days
Access audit log on the CRM (logins and downloads, with IP) — reports are health data
Rate limiting, OTP expiry and attempt limits, password lockout after repeated failures
Temporary suspension of the service with a custom message
Customizable colors to match your theme; same look & feel as Prenotazioni IGEA
No external dependencies: all CSS and JavaScript is bundled with the plugin
Security
The API key never leaves the server: the patient’s browser only talks to WordPress, which forwards requests to the CRM. Nonce on every call, field whitelisting, session tokens issued only after identity verification, ownership check on every download, path hardening on the CRM side, rate limiting per IP and per patient.
Requirements
This plugin is a connector: it requires an installation of the IGEA CRM by S0ft.it, reachable over HTTPS, with the referti_api.php endpoint, the referti_push.php helper, the SQL script (referti.sql) executed, and — for OTP and SMS notifications — an SMS provider configured. Without the CRM the plugin has no standalone functionality. More about the CRM: www.s0ft.it.
External services
This plugin sends data to the IGEA CRM server configured by the site administrator (URL and API key in the plugin settings). The data transmitted is what the patient enters in the form (fiscal code, verification codes or password) plus the visitor’s IP address, used exclusively for anti-abuse rate limiting and access logging. Downloaded reports travel from your CRM server to the patient’s browser through your WordPress site. No data is ever sent to S0ft.it or to any third party by this plugin: the destination server is chosen and operated by the site owner.
