Hospital management system for a multi-doctor eye hospital
The situation
OPD registration on paper, billing in spreadsheets, patient reports scattered across a shared drive, and no reliable answer to "what did we actually earn this month?" Staff were reconciling registers long after the last patient left.
What we built
A single web-based system covering the hospital's real workflow, deployed on their own hosting and adapted to their existing print formats.
- Patient registration with mobile-number search and duplicate detection
- OPD register, case papers and prescription printing
- IPD admission, running bills and discharge flow
- Invoicing with part-payments, receipts and PDF generation
- Expense entry, day-book and net-profit reporting
- Role-based staff access with a full audit log
- Patient portal — mobile-number login to view only your own records
How we secured it
Every patient query is scoped by the identity in the session rather than a URL parameter, so no patient can reach another's file by editing a link. Prescription PDFs are streamed only after an ownership check instead of sitting in a publicly guessable folder. Passwords are bcrypt-hashed, logins are throttled after repeated failures, and sensitive forms carry CSRF tokens.
Stack
Deliberately conventional, so the hospital's own IT vendor can support it and hosting costs stay low.