Unauthorized adding patient in add_patient.php

[xunyang1]

Version: 1.0
No login is required
Steps to reproduce
1.Send the data packet as shown，You can see that there is no cookie.

2.After logging in, I found that the addition was successful

Source code review
add_patient.php line13

Enter the noAccessIfNotLoggedIn function

The problem is that although the redirection is made, exit() is not executed, causeing to continue to execute the code below.

Succeeded in adding patient without authorization