About this plugin
it can request the repetition of drugs they were already prescribed.
Patients identify themselves with their Italian fiscal code (validated with check digit and “omocodia” support) and confirm their identity with a one-time password sent via SMS. They then see their prescription history (deduplicated by AIC code, configurable depth), choose a quantity for each drug, add optional notes for the doctor and submit the request.
Every request goes into review: it is stored on the CRM with status “in_revisione” and must be approved or rejected by the doctor from the CRM backend. The plugin never generates prescriptions by itself. The patient’s phone number on file (the one verified via OTP) is stored with each request for audit purposes.
Main features
- Secure identification: fiscal code + SMS OTP (expiring codes, limited attempts)
- Prescription history of the last N months, deduplicated by AIC code, with last-prescribed date and times prescribed
- Quantity selector per drug (0 to a maximum configured server-side on the CRM)
- Optional free-text requests (configurable on the CRM): patients can describe drugs not in their history — including patients with no prescriptions at all
- Optional pickup choice (configurable on the CRM): at the facility or at the pharmacy
- Optional notes to the doctor with each request
- Confirmation screen with animated check mark and a customizable message after each submission
- Optional confirmation to the patient on submission: email (CRM template SEND_FARM with fallback body) and/or SMS, configurable on the CRM
- Requests always subject to doctor review; the patient sees the status (in review, approved, rejected) and the doctor’s reply
- Patients can withdraw a request while it is still in review
- Server-side validation: only drugs actually present in the patient’s history can be requested; quantities and request counts are capped on the CRM
- One pending request at a time and a daily cap (both configurable on the CRM)
- Optional internal email alert to the staff on each new request
- Access audit log on the CRM (logins, listings, requests, with IP)
- Temporary suspension of the service with a custom message
- Customizable colors; same look & feel as Prenotazioni IGEA and Referti IGEA
- No external dependencies: all CSS and JavaScript is bundled with the plugin
Security
The API key never leaves the server: the patient’s browser only talks to WordPress, which forwards requests to the CRM. Nonce on every call, field whitelisting, session tokens issued only after OTP verification, every requested drug re-validated server-side against the patient’s own prescription history, rate limiting per IP and per patient.
Requirements
sql ) executed, and an SMS provider configured for the OTP codes. Without the CRM the plugin has no standalone functionality. it.
External services
This plugin sends data to the IGEA CRM server configured by the site administrator (URL and API key in the plugin settings). The data transmitted is what the patient enters in the form (fiscal code, verification codes, selected drugs and quantities, notes) plus the visitor’s IP address, used exclusively for anti-abuse rate limiting and access logging. it or to any third party by this plugin: the destination server is chosen and operated by the site owner.