Dublin Core
Title
MOJE ZDRAVLJE
Abstract
The increasing need for digital transformation in healthcare has driven the development of modern web-based solutions that facilitate communication between patients and healthcare providers. This thesis presents the design and implementation of "Moje Zdravlje", a secure and user-friendly web application that enables patients to schedule medical appointments, view their health records, laboratory results, and prescriptions, while allowing doctors to manage patient data, diagnoses, and treatment plans.
The problem addressed in this project is the lack of centralized, real-time access to personal medical information for patients, and inefficient manual processes in health institutions. To solve this, the application was developed using a modular architecture consisting of a frontend interface built with HTML, CSS, and JavaScript, and a backend implemented in PHP following the RESTful API principles. The backend is organized into DAO, service, and route layers, and communicates with a MySQL database.
Advanced features include two-factor authentication (OTP via email or SMS), Google OAuth login, hCaptcha bot protection, and secure password checks using the HaveIBeenPwned API. Role-based access control (RBAC) was implemented to ensure that patients and doctors access only the data relevant to their role. The application also includes validation of phone numbers and email domains (TLD and MX records), and follows modern web security practices.
The result is a responsive and secure web application that streamlines interaction between patients and healthcare providers, improves the organization of medical data, and enhances user experience. Testing has confirmed that the system performs reliably across different scenarios, and offers a foundation for potential integration with official e-health systems
The problem addressed in this project is the lack of centralized, real-time access to personal medical information for patients, and inefficient manual processes in health institutions. To solve this, the application was developed using a modular architecture consisting of a frontend interface built with HTML, CSS, and JavaScript, and a backend implemented in PHP following the RESTful API principles. The backend is organized into DAO, service, and route layers, and communicates with a MySQL database.
Advanced features include two-factor authentication (OTP via email or SMS), Google OAuth login, hCaptcha bot protection, and secure password checks using the HaveIBeenPwned API. Role-based access control (RBAC) was implemented to ensure that patients and doctors access only the data relevant to their role. The application also includes validation of phone numbers and email domains (TLD and MX records), and follows modern web security practices.
The result is a responsive and secure web application that streamlines interaction between patients and healthcare providers, improves the organization of medical data, and enhances user experience. Testing has confirmed that the system performs reliably across different scenarios, and offers a foundation for potential integration with official e-health systems
Keywords
health web application, patient management, PHP backend, REST API, OTP verification, role-based access control, medicine