A One Time Password (OTP) is a very popular way to use online transactions. It is used for real-time banking and monetary transactions. The following procedure is used by the OTP:

  1. Check email, phone number and user ID.
  2. You can change or reset user profile information.
  3. Real-time transaction authentication.
  4. Check the validation of the email and mobile number.

Create a One Time Password (OTP) in PHP

  1. Step 1

    Create the file otppass.php with the following code:
    1. <?php
    2. /**** ANANT ONE-TIME PASSWORD EXAMPLE ****/
    4. session_start(); //STARTING THE SESSION AND THE
    6. session_set_cookie_params(360);//SESSION EXPIRES IN 6 MINUTES
    8. // USERNAME AND PASSWORD ARRAYS
    10. $user = array(
    11. 'user1' => annat,
    12. 'scott' => tiger,
    13. ‘anat’ => xxxxxxx,
    14. );
    16. $phone = array(
    17. 'user1' => '+5353535333,
    18. 'scott' => '+44243535353,
    19. anat’ => '+23554444444,
    20. );
    22. // Login information for anant NG - SMS Gateway
    23. $anant_user = "admin";
    24. $anant_password = "abc123";
    25. $anant_url = "http://127.0.0.1:9501/api?";
    28. // Functions used to send the SMS message
    29. function httpRequest($url){
    30. $pattern = "/http...([0-9a-zA-Z-.]*).([0-9]*).(.*)/";
    31. preg_match($pattern,$url,$args);
    32. $in = "";
    33. $fp = fsockopen("$args[1]", $args[2], $errno, $errstr, 30);
    34. if (!$fp) {
    35. return("$errstr ($errno)");
    36. } else {
    37. $out = "GET /$args[3] HTTP/1.1\r\n";
    38. $out .= "Host: $args[1]:$args[2]\r\n";
    39. $out .= "User-agent: anant PHP client\r\n";
    40. $out .= "Accept: */*\r\n";
    41. $out .= "Connection: Close\r\n\r\n";
    43. fwrite($fp, $out);
    44. while (!feof($fp)) {
    45. $in.=fgets($fp, 128);
    46. }
    47. }
    48. fclose($fp);
    49. return($in);
    50. }
    52. function anantSend($phone, $msg, $debug=false){
    53. global $anant_user,$anant_password,$anant_url;
    54. $url = 'username='.$anant_user;
    55. $url.= '&password='.$anant_password;
    56. $url.= '&action=sendmessage';
    57. $url.= '&messagetype=SMS:TEXT';
    58. $url.= '&recipient='.urlencode($phone);
    59. $url.= '&messagedata='.urlencode($msg);
    61. $urltouse = $anant_url.$url;
    62. //if ($debug) { echo "Request: <br>$urltouse<br><br>"; }
    64. //Open the URL to send the message
    65. $response = httpRequest($urltouse);
    66. if ($debug) {
    67. echo "Response: <br><pre>".
    68. str_replace(array("<",">"),array("<",">"),$response).
    69. "</pre><br>"; }
    70. return($response);
    71. }
    74. //FUNCTION TO GENERATE ONE-TIME PASSWORD
    75. function anantOTP($length = 8, $chars = 'abcdefghijklmnopqrstuvwxyz1234567890')
    76. {
    77. $chars_length = (strlen($chars) - 1);
    78. $string = $chars{rand(0, $chars_length)};
    79. for ($i = 1; $i < $length; $i = strlen($string))
    80. {
    81. $r = $chars{rand(0, $chars_length)};
    82. if ($r != $string{$i - 1}) $string .= $r;
    83. }
    84. return $string;}
    87. //IF DEBUG VARIABLE IS TRUE, THE RESPONSE OF THE HTTP REQUEST WILL BE WRITTEN TO THE SCREEN
    88. $debug = false;
    90. // IF NOT POSTED ANYTHING YET, THE LOGIN PAGE IS LOADING
    91. if (emptyempty($_POST)){
    92. $i=0;
    93. echo('
    94. <html>
    95. <body>
    96. <h1>One Time Password Form</h1>
    97. <form method="POST">
    98. <table border=1>
    99. <tr>
    100. <td>Username:</td>
    101. <td><input type="text" name="username"></td>
    102. </tr>
    103. <tr>
    104. <td>Password</td>
    105. <td><input type="password" name="password"></textarea></td>
    106. </tr>
    107. <tr>
    108. <td> </td>
    109. <td><input type=submit name=submit value="Get Otp" OnClick="anantSend(this.form);"></td>
    110. </tr>
    111. </table>
    112. </form>
    113. </body>
    114. </html>');}
    116. //IF OTP HAS POSTED YET, anantOTP FUNCTION WILL GENERATE ONE
    117. if (emptyempty($_POST['otphtml'])){
    118. $_SESSION['otp']=anantOTP();
    121. // CHECKING USER CREDENTIALS
    122. if ($password!=$user[$username] || ((emptyempty($_POST['username']) && (!emptyempty($_POST['password'])))) || (emptyempty($_POST['password']) && (!emptyempty($_POST['username']))))
    123. echo ('Please enter a valid username or password!');
    124. elseif ((!emptyempty($_POST['submit'])) && (emptyempty($_POST['password'])) && (emptyempty($_POST['username'])))
    125. echo ('No username or password entered');
    127. elseif($password=$user[$username]){
    129. //SENDING THE PASSWORD AND LOADING THE OTP-VERIFYING PAGE
    130. anantSend($phone[$_POST['username']],'Dear '.$username.'! Your One-Time password is: '.$_SESSION['otp'],$debug);
    131. echo (' <html>
    132. <body>
    133. <h1>Please enter your One-Time password to enter the site!</h1>
    134. <form method="POST">
    135. <table border=1>
    136. <tr>
    137. <td>Your One-time password:</td>
    138. <td><input type="text" name="otphtml"></td>
    139. </tr>
    140. <tr>
    141. <td> </td>
    142. <td><input type=submit name=submit value="Confirm OTP"></td>
    143. </tr>
    144. </table>
    145. </form>
    146. </body>
    147. </html>');
    148. }}
    149. else{
    151. //IF AN OTP HAS ALREADY SENT, CHECKING ITS VALIDITY AND REDIRECTING TO THE PROTECTED CONTENT
    152. $otp1=$_POST['otphtml'];
    153. include('protectedcontent.php');}
    155. ?>
  2. Step 2

    Create another file protectedcontent.php.
    1. <?php
    3. if ($_SESSION['otp']==$otp1){
    4. echo('<html>
    5. <body><h2>You\'ve been successfully verified your One-Time Password</h2></body>
    6. </html>');}
    8. else { echo('<html>
    9. <body><h2>Wrong Password!</h2></body>
    10. </html>');}
    12. ?>