Developed as the capstone project during my software engineering internship, this application is a comprehensive, full-stack Content Management System (CMS) designed specifically for a physiotherapy and rehabilitation clinic. The platform serves a dual purpose: a dynamic public-facing portal for patients to discover services, and a secure, role-based internal dashboard for clinic staff to manage daily operations, content, and patient intake.
My Role & Contribution
Operating as a Full-Stack Developer, I was responsible for the end-to-end architecture, development, and deployment of the platform. I gathered requirements, designed the database schema, implemented the backend business logic, and built the interactive front-end interfaces.
Key Features (Public-Facing Portal)
Dynamic Content Showcase: Developed responsive pages to display the clinic’s healthcare services, promotional offers, and detailed doctor profiles.
Knowledge Base & Feedback: Built a fully functional blog system for health tips and articles, integrated alongside a community-driven customer reviews section.
Careers & Internships Module: Created a dedicated portal advertising available internships and careers, allowing applicants to apply directly through the platform.
Secure Registration System: Implemented a robust patient/user registration flow featuring modern security standards to ensure data integrity and prevent spam.
Key Features (Admin Dashboard & CMS)
- Interactive Admin Panel: Built a comprehensive back-office dashboard to manage all website domains (Services, Blogs, Doctors, Offers, Reviews, Careers).
Role-Based Access Control (RBAC): Engineered a multi-tiered permission system for clinic staff:
Super Admin: Full, unrestricted access to all system modules, configurations, and user management.
Content/Blog Admin: Restricted access specifically tailored for managing, editing, and publishing blog posts and marketing content.
Registration & Review Admin: Dedicated access for reviewing, approving, or rejecting new customer registrations, career applications, and customer reviews.
Security Implementations
- Bot Protection: Integrated Google reCAPTCHA within the registration and application pipelines to prevent automated spam and malicious bot activity.
Two-Factor Verification: Engineered an OTP (One-Time Password) system during the registration process to securely verify user identity and ensure authentic customer onboarding.