How to Create One Time Password (OTP) in PHP

Anant Sharma
10y
120.7k
0
2

Article

A One Time Password (OTP) is a very popular way to use online transactions. It is used for real-time banking and monetary transactions. The following procedure is used by the OTP:

Check email, phone number and user ID.
You can change or reset user profile information.
Real-time transaction authentication.
Check the validation of the email and mobile number.

Create a One Time Password (OTP) in PHP

Step 1

Create the file otppass.php with the following code:
1. <?php
2. /**** ANANT ONE-TIME PASSWORD EXAMPLE ****/
4. session_start(); //STARTING THE SESSION AND THE
6. session_set_cookie_params(360);//SESSION EXPIRES IN 6 MINUTES
8. // USERNAME AND PASSWORD ARRAYS
10. $user = array(
11. 'user1' => annat,
12. 'scott' => tiger,
13. ‘anat’ => xxxxxxx,
14. );
16. $phone = array(
17. 'user1' => '+5353535333,
18. 'scott' => '+44243535353,
19. anat’ => '+23554444444,
20. );
22. // Login information for anant NG - SMS Gateway
23. $anant_user = "admin";
24. $anant_password = "abc123";
25. $anant_url = "http://127.0.0.1:9501/api?";
28. // Functions used to send the SMS message
29. function httpRequest($url){
30. $pattern = "/http...([0-9a-zA-Z-.]*).([0-9]*).(.*)/";
31. preg_match($pattern,$url,$args);
32. $in = "";
33. $fp = fsockopen("$args[1]", $args[2], $errno, $errstr, 30);
34. if (!$fp) {
35. return("$errstr ($errno)");
36. } else {
37. $out = "GET /$args[3] HTTP/1.1\r\n";
38. $out .= "Host: $args[1]:$args[2]\r\n";
39. $out .= "User-agent: anant PHP client\r\n";
40. $out .= "Accept: */*\r\n";
41. $out .= "Connection: Close\r\n\r\n";
43. fwrite($fp, $out);
44. while (!feof($fp)) {
45. $in.=fgets($fp, 128);
46. }
47. }
48. fclose($fp);
49. return($in);
50. }
52. function anantSend($phone, $msg, $debug=false){
53. global $anant_user,$anant_password,$anant_url;
54. $url = 'username='.$anant_user;
55. $url.= '&password='.$anant_password;
56. $url.= '&action=sendmessage';
57. $url.= '&messagetype=SMS:TEXT';
58. $url.= '&recipient='.urlencode($phone);
59. $url.= '&messagedata='.urlencode($msg);
61. $urltouse = $anant_url.$url;
62. //if ($debug) { echo "Request: <br>$urltouse<br><br>"; }
64. //Open the URL to send the message
65. $response = httpRequest($urltouse);
66. if ($debug) {
67. echo "Response: <br><pre>".
68. str_replace(array("<",">"),array("<",">"),$response).
69. "</pre><br>"; }
70. return($response);
71. }
74. //FUNCTION TO GENERATE ONE-TIME PASSWORD
75. function anantOTP($length = 8, $chars = 'abcdefghijklmnopqrstuvwxyz1234567890')
76. {
77. $chars_length = (strlen($chars) - 1);
78. $string = $chars{rand(0, $chars_length)};
79. for ($i = 1; $i < $length; $i = strlen($string))
80. {
81. $r = $chars{rand(0, $chars_length)};
82. if ($r != $string{$i - 1}) $string .= $r;
83. }
84. return $string;}
87. //IF DEBUG VARIABLE IS TRUE, THE RESPONSE OF THE HTTP REQUEST WILL BE WRITTEN TO THE SCREEN
88. $debug = false;
90. // IF NOT POSTED ANYTHING YET, THE LOGIN PAGE IS LOADING
91. if (emptyempty($_POST)){
92. $i=0;
93. echo('
94. <html>
95. <body>
96. <h1>One Time Password Form</h1>
97. <form method="POST">
98. <table border=1>
99. <tr>
100. <td>Username:</td>
101. <td><input type="text" name="username"></td>
102. </tr>
103. <tr>
104. <td>Password</td>
105. <td><input type="password" name="password"></textarea></td>
106. </tr>
107. <tr>
108. <td> </td>
109. <td><input type=submit name=submit value="Get Otp" OnClick="anantSend(this.form);"></td>
110. </tr>
111. </table>
112. </form>
113. </body>
114. </html>');}
116. //IF OTP HAS POSTED YET, anantOTP FUNCTION WILL GENERATE ONE
117. if (emptyempty($_POST['otphtml'])){
118. $_SESSION['otp']=anantOTP();
121. // CHECKING USER CREDENTIALS
122. if ($password!=$user[$username] || ((emptyempty($_POST['username']) && (!emptyempty($_POST['password'])))) || (emptyempty($_POST['password']) && (!emptyempty($_POST['username']))))
123. echo ('Please enter a valid username or password!');
124. elseif ((!emptyempty($_POST['submit'])) && (emptyempty($_POST['password'])) && (emptyempty($_POST['username'])))
125. echo ('No username or password entered');
127. elseif($password=$user[$username]){
129. //SENDING THE PASSWORD AND LOADING THE OTP-VERIFYING PAGE
130. anantSend($phone[$_POST['username']],'Dear '.$username.'! Your One-Time password is: '.$_SESSION['otp'],$debug);
131. echo (' <html>
132. <body>
133. <h1>Please enter your One-Time password to enter the site!</h1>
134. <form method="POST">
135. <table border=1>
136. <tr>
137. <td>Your One-time password:</td>
138. <td><input type="text" name="otphtml"></td>
139. </tr>
140. <tr>
141. <td> </td>
142. <td><input type=submit name=submit value="Confirm OTP"></td>
143. </tr>
144. </table>
145. </form>
146. </body>
147. </html>');
148. }}
149. else{
151. //IF AN OTP HAS ALREADY SENT, CHECKING ITS VALIDITY AND REDIRECTING TO THE PROTECTED CONTENT
152. $otp1=$_POST['otphtml'];
153. include('protectedcontent.php');}
155. ?>
Step 2

Create another file protectedcontent.php.
1. <?php
3. if ($_SESSION['otp']==$otp1){
4. echo('<html>
5. <body><h2>You\'ve been successfully verified your One-Time Password</h2></body>
6. </html>');}
8. else { echo('<html>
9. <body><h2>Wrong Password!</h2></body>
10. </html>');}
12. ?>

Up Next

Ebook Download

View all

Printing in C# Made Easy

Read by 10.8k people

Download Now!

Learn

View all