NHS UHNM Active Directory security in PHP

The University Hospitals of North Midlands (UHNM) comprises of Royal Stoke University Hospital, County Hospital in Stafford, and Staffordshire Children’s Hospital at Royal Stoke.

This project was another part of my role supporting the internal PHP systems at Royal Stoke Hospital.

The hospital utilised numerous PHP-based administrative applications, totalling approximately 20 in areas such as managing doctor study leave, car parking payments, flu vaccination tracking, capital bids, purchasing systems, and the helpdesk.

My task was to integrate the existing security measures within these PHP applications with the hospital’s site-wide Active Directory authentication system.

To achieve this, I developed a PHP utility designed to seamlessly integrate into each existing application. This utility verified if the user was logged into an Active Directory session. If authenticated, it proceeded to validate the query string in the URL and correct any falsified credentials. If authentication was unsuccessful, users were prompted to log in using the organization’s standard authentication process.

Note: This project focused exclusively on administrative systems for staff and did not involve any systems handling patient data.