Security and PHP EMR software .
as am a developer ( software manufacture ) also a doctor ( end user ) of the EMR , EHR software , I tried many PHP / EMR software , somehow they simple usable , mainly browser based software . somehow what i didn’t like in many of them , usually the DB , Configured adding the Database Account details in open file :
// ** MySQL settings ** //
define(‘DB_NAME’, ‘EMR’); // Database Name
define(‘DB_USER’, ‘root’); // MySQL Username
define(‘DB_PASSWORD’, ‘mysqlpassword’); //Password
define(‘DB_HOST’, ‘localhost’); //sometimes you won’t need to change this value
i didn’t realize this till , one of my teacher was using a PHP/EMR software , and accidentally he loses the main account password , and as he re-installed a a new one , he realizes he wants the old backup , so he called me , kindly all what i did , is logging to the MySQL , using the Details listed in the DB connection file , and export the old one , and importing the Backup to the new DB installed , easily he can use the same DB if he used the same values rather than creating a new DB.
The security , i was thinking soon as this PC becomes Venerable and exposed to any who ( the case study PC, was quite usable for 8 users , 6 are doctors , 2 nurses , 1 assistants and 1 technician ) ,. who has some knowledge , he can access directly to the DB in less than a Min ( if he knows what he is looking for , and if he is familiar with the system used ) . i can give it some mins for a geek . let’s say : seeing the patient’s Details Open wild not a good thing . and was not the aim of EMR software .
With open discussion with a friend , other follow Java Developer , he believed that would be one of the reasons why the Free Open source code using some languages hold exposed bugs , and that would be risky on Privacy demanded software as EMR .
Conclusion :
1- Please Use Your PHP/EMR software , On a security guarded software , Oops : not quite a practical solution but : at lest define the people who are using it . ( for more security and assurance you may install KeyLogger : Just Kidding of course you can’t cause it’s a violation to privacy to whom using the PC )
2-PHP softwares cold be more useful as when run as web applications . especially when many EMR ( PHP powered ) made to be so .
3- Note for a developer : You could encrypt the DB Connection Details in a file , it’s not that time consuming as it’ll help your software becomes more usable in the venerable common used computers .
Tags: EMR, PHP , Secuirty , Software , Tips , EHR
Related posts
- Bookmarks for February 11th from 09:14 to 13:41
- 4 Web based DICOM tools .
- ACAFE : Open source ASP.NET clinical decision support EMR
- Medical and Healthcare related software at Software Repositories/Directories
- Can we intergrate facebook in our medical and healthcare related application ?!
- How to make a social bookmark and social news
- Open source C# ECG Toolkit
- iPhone applications for Medicine
- OsiriX : Open source PACS Workstation and DICOM Viewer for your iPhone
- Gapminder : Beautify your presentation and redevelop your world
[...] Nigel Cheshire wrote an interesting post today onHere’s a quick excerptas am a developer ( software manufacture ) also a doctor ( end user ) of the EMR , EHR software , I tried many PHP / EMR software , somehow they simple usable , mainly browser based software . somehow what i didn’t like in many of them … [...]
[...] unknown wrote an interesting post today onHere’s a quick excerptas am a developer ( software manufacture ) also a doctor ( end user ) of the EMR , EHR software , I tried many PHP / EMR software , somehow they simple usable , mainly browser based software . somehow what i didn’t like in many of them … [...]
Wow, that's crazy! I didn't realize my EMR could be so vulnerable. But I guess you need to anticipate these kinds of situations on a shared machine
Wow, that's crazy! I didn't realize my EMR could be so vulnerable. But I guess you need to anticipate these kinds of situations on a shared machine
need to work on EMr to be converted in open source
need to work on EMr to be converted in open source
agreed
sadly i caught in obligatory service in my country where NO computer as well as internet allowed
agreed
sadly i caught in obligatory service in my country where NO computer as well as internet allowed
Really appreciate your post. I'm blind to php:(
nice sharing by writers…thx
well you need to change the coutry