About this plugin
it.
Patients identify themselves with their Italian fiscal code (validated with check digit and “omocodia” support) and confirm their identity with a one-time password (OTP) sent via SMS. They can then book one or more services, pick a practitioner or the first available time slot, and manage their own appointments.
Main features
- Secure identification: fiscal code + SMS OTP (expiring codes, limited attempts)
- Guided registration for new patients with mandatory privacy consent (GDPR) and consent logging
- Booking of one or more services, filtered by specialty
- Choice of practitioner, or “first available” search across all practitioners
- Availability browsing: page through upcoming and previous days
- Optional display of service prices
- “My bookings”: patients see their upcoming appointments and can cancel them online (minimum notice configurable on the CRM)
- Confirmation email with calendar invite (.ics) attached
- Optional confirmation SMS and 24-hour reminder SMS
- Pre-visit preparation instructions sent by email, immediately or 24/48 hours before the visit
- Anti-repetition rule: prevents re-booking the same service within a configurable interval
- Temporary suspension of bookings with a custom message
- Customizable colors to match your theme
- No external dependencies: all CSS and JavaScript is bundled with the plugin
Security
The API key never leaves the server: the patient’s browser only talks to WordPress, which forwards requests to the CRM. Nonce on every call, field whitelisting, rate limiting and anti-bot protections on the CRM side, booking and cancellation only after OTP verification.
Requirements
it, reachable over HTTPS, with its bookings API endpoint and an SMS provider configured. Without the CRM the plugin has no standalone functionality. it.
External services
This plugin sends data to the IGEA CRM server configured by the site administrator (URL and API key in the plugin settings). The data transmitted is what the patient enters in the form (fiscal code, personal details during registration, chosen services and time slots, consents) plus the visitor’s IP address, used exclusively for anti-abuse rate limiting and privacy-consent logging. it or to any third party by this plugin: the destination server is chosen and operated by the site owner.
Publishing an adequate privacy policy is the site owner’s responsibility (the plugin lets you link it next to the mandatory consent checkbox).
Credits
The animated confirmation icons are adapted from vue-sweetalert-icons (MIT license), re-implemented in pure CSS with no dependencies.