Data must be accessible for authorized clinical staff.
User’s permissions are granted through MySQL (“users”
table) and PHP scripts. The application performs user’s
registration and when a user logs in, information is kept
in session variables, instead of using cookies. This
increases portability and compatibility, since there might
be users whose browsers do not allow cookies.