The Challenge
ABFPRS certifies facial plastic surgeons across the U.S. and internationally, and their digital needs go far beyond a standard website. They needed a secure platform for delivering board certification exams online, a public directory where patients can find qualified surgeons near them, member management for over 1,000 physicians, and international affiliate sites, all sharing the same member data and login credentials while operating as independent, secure properties. Their previous systems were siloed, aging, and couldn't keep up with the organization's growing demands.
Our Solution
Over the past decade, FatLab designed and built a five-site ecosystem where each property serves a distinct purpose, but they all work together as one platform. The main ABFPRS site is the central hub, handling the physician directory, member management, dues payments, and administrative tools. Two exam platforms deliver official board certification exams and practice tests online, saving the organization tens of thousands annually compared to in-person testing. Two international sites extend the organization's reach globally. Members log in once, and their credentials work across all five sites, with member data staying in sync automatically.
What We Built
- A five-site ecosystem with shared member login across all properties
- Two online exam platforms delivering official board certification and practice tests
- A public physician directory with map-based search so patients can find surgeons near them
- A member management system handling over 1,000 physician records with bulk import tools
- Dues and purchase processing with secure online payments
- Two international affiliate sites extending the organization's global reach
- 14+ years of full-service hosting, maintenance, and ongoing development
Project Overview
The American Board of Facial Plastic and Reconstructive Surgery (ABFPRS) is the credentialing authority for facial plastic surgeons in the United States, with international reach through its affiliated organizations IBCFPRS and the Global Alliance of Facial Plastic and Reconstructive Surgery Societies. Their mission demands a digital platform that serves multiple audiences simultaneously: patients searching for qualified surgeons, physicians managing their certifications, candidates preparing for board exams, and staff administering the entire process.
FatLab has partnered with ABFPRS since 2011, growing from an initial website overhaul into a fully managed relationship across five integrated WordPress sites. What makes this project architecturally distinctive is not just the individual complexity of each site, but how they work together - a custom REST API layer handles authentication, member verification, and data synchronization across all properties, creating a unified platform from independent WordPress installations.
The five sites span the full scope of the organization's mission: a public website and member portal (abfprs.org), two exam delivery platforms (faceforward.abfprs.org and practice.abfprs.org), and two international affiliate sites (ibcfprs.org and globalalliancefprs.org).
Custom Applications
ABFPRS needed more than websites - they needed software. FatLab designed and built two standalone platforms that handle some of the organization's most consequential work: certifying surgeons.
Board Certification Exam Platform (faceforward.abfprs.org)
This platform delivers official Maintenance of Certification (MOC) and Continuing Medical Education (CME) examinations - real board exams that count toward professional recertification for facial plastic surgeons worldwide. FatLab built the entire system from scratch: three custom post types (Exam, Module, Protocol) organized hierarchically, with the full question bank managed through ACF repeater fields so non-technical staff can create and retire exam content without code changes.
The exam engine implements a pedagogically informed two-attempt scoring model - candidates get a second chance on incorrect answers, producing clean scoring data that also reveals which questions cause the most difficulty. Scores are calculated per-protocol, averaged at the module level, with a 65% passing threshold and color-coded results. The platform runs dual parallel exam systems (MOC and CME) sharing identical logic but separate database tables, with dedicated support for ACCME accreditation reviewers who need to experience the exam without being ABFPRS diplomates.
Practice Exam Preparation Platform (practice.abfprs.org)
A standalone learning management system where authorized candidates prepare for board examinations using the same interface, question format, and scoring methodology they'll encounter on the real exam. FatLab built this as a separate WordPress installation that mirrors the FaceForward architecture, giving candidates a faithful preview of the certification experience.
Access is controlled through real-time eligibility gating - the platform checks a REST API endpoint on the main ABFPRS site to verify whether a candidate has been authorized for practice exams in the current year. The system implements tiered authorization with smart caching: active exams always maintain access so candidates can never be locked out mid-exam, recent verifications are cached for 4 hours to reduce API load, and fresh checks happen automatically when no valid cache exists.
How the Sites Connect
Rather than using WordPress Multisite (which shares a single database), each site is a fully independent WordPress installation connected through purpose-built REST APIs. This design gives ABFPRS the best of both worlds: shared data and authentication where needed, with complete independence for deployment, security, and maintenance.
The main ABFPRS site serves as the single source of truth for all member data and exposes custom API endpoints that the exam platforms use for authentication and authorization. The international sites share design standards and infrastructure but operate independently.
Cross-Site Authentication
When a diplomate logs into the FaceForward exam platform, their credentials are validated in real time against the main ABFPRS user database via REST API. If valid, the exam platform creates or updates a local account with the diplomate's profile data - certification dates, MOC status, dues standing. The system never caches actual passwords and will not fall back to stale local credentials, preventing access for any diplomate whose credentials have been revoked.
Real-Time Eligibility Verification
The practice exam site uses a different API endpoint to determine whether a candidate is authorized to take practice exams in the current year. The system implements tiered caching: active exams always maintain access (candidates cannot be locked out mid-exam), recent verifications are cached for 4 hours to reduce API load, and fresh checks are performed automatically when no valid cache exists.
Technical Implementation
Main Website and Physician Directory (abfprs.org)
The primary ABFPRS site serves as both the public face of the organization and the operational backbone of the entire ecosystem. The custom WordPress theme is built on the UnderStrap framework with Bootstrap 4, featuring 12+ flexible content layouts powered by ACF Pro that give the editorial team full drag-and-drop page building through a clean, intuitive interface.
The centerpiece is a custom-built geographic physician directory - not a directory plugin, but a purpose-built system. When a diplomate's address is entered or updated, the system calls the Google Maps Geocoding API to convert it to latitude/longitude coordinates, stored in a dedicated database table optimized for spatial queries. Visitor searches trigger Haversine formula calculations directly in MySQL to find physicians within a configurable radius. Each diplomate can have up to three office locations, all independently geocoded and searchable.
Member Management and Data Import
The platform manages over 1,000 diplomate members, each with 40+ metadata fields. A custom bulk import system (now in its fourth major version) handles the full complexity of this data: drag-and-drop CSV upload, 55+ column mapping, batch processing to avoid timeouts, automatic change detection with audit trails, and queued geocoding for new or changed addresses. Staff can export downloadable reports of everything that changed during an import.
International Sites (ibcfprs.org and globalalliancefprs.org)
IBCFPRS is the international credentialing arm of ABFPRS, certifying facial plastic surgeons globally. Its site features a custom AJAX physician directory with real-time search by country and name, and 15+ flexible content layouts mirroring the main site's editorial capabilities. The Global Alliance site uses a modern Bootstrap 5.3 stack with ITCSS architecture, featuring a video background hero, director showcase grids, and AJAX-paginated content.
Custom Plugin Architecture
FatLab built and maintains six custom plugins across the ecosystem, each handling specific business logic:
| Plugin | Site | Purpose |
|---|---|---|
| ABFPRS Admin (v1.7.1) | abfprs.org | Member import, geocoding, API endpoints, practice exam authorization, change tracking |
| ABFPRS Admin for FaceForward (v4.1) | faceforward | Exam management dashboard, statistics, CSV export, individual score drill-down |
| ABFPRS Sync API (v1.1.0) | faceforward | REST endpoints for member data sync - create, update, delete diplomate accounts |
| Practice Exam Authorization (v1.0.0) | practice | Tiered authorization with API verification, session management, active-exam protection |
| Practice Exam Admin | practice | Exam management dashboard mirroring FaceForward's functionality |
| Custom Admin (ibcfprs.org) | ibcfprs.org | Physician directory management and content administration |
Plugin Stack
Across all five sites, the plugin strategy follows a deliberate, minimalist philosophy - every plugin earns its place:
| Category | Key Plugins | Role |
|---|---|---|
| Content Management | ACF Pro, Classic Editor | Structured content, flexible page builder, exam question banks |
| Forms & Payments | Gravity Forms, Stripe Add-On | Dues processing, certificate orders, donations across 5 payment forms |
| Search | FacetWP | Advanced faceted search and filtering |
| Member Management | Theme My Login, User Role Editor, WP Remote Users Sync | Custom login flows, role management, cross-site user synchronization |
| Performance | Breeze, Redis Cache, Imagify | Page caching with Varnish, Redis object caching, image optimization |
| SEO | Yoast SEO | Search optimization with ACF content awareness |
| Data Import | WP All Import Pro | Bulk data management supplementing the custom importer |
Total active plugins across the ecosystem: abfprs.org (34), faceforward (21), practice (21), ibcfprs.org (20), globalalliancefprs.org (11).
Security and Infrastructure
A medical certification board handling physician credentials, exam materials, and financial transactions demands security at every layer. FatLab built and manages the full security stack across all five properties:
- API authentication with 32-character randomly generated keys and rate limiting (100-750 requests/hour depending on endpoint)
- AES-256-CBC encryption for stored API keys and session cookies
- No credential caching - the exam platforms never store actual diplomate passwords
- Cloudflare Enterprise WAF and DDoS protection
- Imunify360 real-time malware scanning
- Request logging for audit trails on all cross-site API communication
- SSL management, weekly updates, and 24/7 monitoring across all five properties
All sites are hosted on FatLab's managed cloud infrastructure, with Redis object caching, Varnish edge caching, and 2GB of memory for reliable performance during content editing, bulk imports, and exam sessions. FatLab provides ongoing maintenance and managed security to ensure this mission-critical platform stays protected and available around the clock.
Results and Impact
This platform represents FatLab's most architecturally ambitious WordPress project - five independent sites connected by custom APIs, sharing authentication and data while maintaining full deployment independence. Every theme is custom-built. Every plugin that handles business logic was written specifically for ABFPRS.
Over 14 years, the partnership has delivered measurable results: the board saves tens of thousands annually by delivering certification exams online instead of in person, the public surgeon directory sees 5x more usage after a mobile-first redesign, and physicians have 24/7 access to manage certifications, dues, and purchases through a streamlined member portal. FatLab continues to serve as ABFPRS's technical partner, providing fully managed hosting, proactive maintenance, custom development, and strategic infrastructure guidance.
Results
- Tens of thousands saved annually by shifting board certification exams online
- 5x increase in public surgeon directory usage after mobile-first redesign
- 1,000+ diplomate members managed through custom import and tracking system
- Exam platforms serve both official MOC/CME certification and practice preparation
- Zero credential-related security incidents across the cross-site authentication system
- 14+ years of continuous partnership with proactive hosting, monitoring, and development