Update an existing project for the physician's web site

I have an existing site that has two objectives: Note- the system requires a secure login. 1) Allow a physician to input a code into a text box and receive back an authorization code fro the system. This code is generated in two ways, a simple table lookup an algorhim written in C. 2) Present links to many, many pages, some are secure, some are not. ## Deliverables Physician Web Site Documentation **Note- this system is complete and installed in production. There is currently a bug. Sometimes, on specific computers, the authorization code part of the system, instead of presenting a code, presents the login screen again!** National Biologic Corporation Original Specification Physician's Secure Website for obtaining a Controlled Prescription Timer Code (a.k.a. CPT? Treatment Authorization Code) Objectives: To allow a Physician to log onto a website designed by Millas Designs to a. view secured web content or b. obtain a secured Controlled Prescription Timer authorization. The codes will be generated via a lookup one of a set of tables.[ Better?] The site will be designed to allow for expansion as desired. Overview: 1. The name of the new website will be supplied by Pam. <!-- --> 1. The website will be hosted by Dynamics Online. The following information will be provided by Pam: 1. Ftp domain, login and pw to the hosting service. 2. Location of the mySql tables 3. A tool such as phpMyAdmin for building and querying the mySql tables <!-- --> 1. The home page for this site will present fields to enter a login id and password with a 'login' button as well as a join button. The join process is outlined in the next section. <!-- --> 1. After logging in, a new page will be presented where the physician will enter Patient's Current Treatment Authorization Code; Model Number (list), Device Type (list); Serial Number; and the Number of Treatments to Authorize (list). For each list, a new mySql table will be created with information provided by Pam. <!-- --> 1. A message will be displayed on a new 'success' page that the New Treatment Authorization Code has been sent. <!-- --> 1. An email is sent providing New Treatment Authorization Code. <!-- --> 1. There will be a page that will allow the physician to change their password and demographic information about themselves. <!-- --> 1. Pam will create all content and populate with downloadable articles on topics regarding skin conditions. The content will not focus narrowly on the benefits of phototherapy nor will the goal of the content be specifically to sell National Biological products. Rather, the goal will be to provide value to Dermatologists and Costmetic Surgeons. Programmatic Details: * The home page will have a login and password. The home page will also have a button, "Login' and a button "Join". * If the Physician enters their login id and password correctly, the authorization request page will be presented. * If the Physician selects Join, a join page will be presented. <!-- --> * The join page will collect all necessary demographic information. This demographic information will include Physician Name, DEA Number, E-mail, and desired Userid. It will send an email to National Biologcal for approval of the physician nbc@[login to view URL] (or anther address to be determined). The page presented to the physician will indicate that it will take up to 1 business day for NatBioCorp to respond with a password. The login id and the Physician information will be added to the table at this time. This information will be encrypted. A password will be created, stored on the table but will only be presented to the new Physician after the Physician is approved by NBC. <!-- --> * Once approved, the Physician will be allowed to change their password via a screen that will allow the Physician to enter the old password and enter the new password two times. <!-- --> * In order to approve a new Physician or remove a previously approved Physician, there will be an administration approval screen where an authorized person may login, select the new Physician and click check or uncheck approve. Once a new Physician is approved, an email containing the password will be sent to the new Physician. There will also be an admin screen allowing NatBioCorp to modify the demographic information on the Physician's table. There will be a page allowing the Physician to retrieve a lost password. For security purposes, this page will generate an email to NatBioCorp who will in turn send an email with a new random password to the Physician. The Physician will also be given a phone number so that a call can be made to obtain the new random password. * Code Lookup. There will be a screen that will allow for entry of: o Current Treatment Authorization Code (4 digit including leading zeros) Is this the same thing as the patient code number referenced in the blue, yellow and white tables? [Yes. NBC is still using multiple names internally. I will clarify which name once and for all and stick to it.] * * Model Number (drop down) * Device Type (drop down) * Serial Number (numeric) * Number of Treatments to Authorize (drop down = 75, 150, 250, or unlimited). 1. Drop down values are provided ([login to view URL] drop-downs tab). If Model Number is entered, the system will automatically populate Device Type to ensure that the Physician does not inadvertently enter conflicting data. [Why does the physician have to enter both a model number and a device type rather than just a model number? S/he shouldn't. Do you have better proposal?] 2. There are currently three tables containing new authorization codes ([login to view URL] BLUE, YELLOW, and WHITE tabs). The choice of which table to use is based on the device's serial number and device type. Each table handles a given range of serial numbers for each device type (see [login to view URL] WhichBook tab). As time progresses, we will add more tables to accommodate the new devices (which have higher valued serial numbers). [change accepted] 3. If insufficient information is provided, the BLUE code table will be the default. [Change accepted.] [In what scenario would insufficient information be given? Doc often knows nothing except current treatment authorization code. In 2010, 80% use blue, but going forward???] 4. After one of the tables is chosen, the system will utilize the entered values for Current Authorization Code and Number of Treatments to identify a New Treatment Authorization Code. [change accepted] * The Physician will be directed to a completion page which will instruct the physician to check their email for New Treatment Authorization Code. This page will provide a National Biological phone number to contact in case of questions or if Treatment Authorization Code does not work. <!-- --> * The system will email the physician the New Treatment Authorization Code.