Hi,
I want to set the login popup in seperate page is it possbile? I’m using Twillio.
]]>Google Firebase offers free 10,000 OTPs for testing, I suggest this plugin should add it to be complete. Thanks
]]>Hi, I installed this plugin and now this plugin is working correctly for a single country. I just wanted the functionality so that it can work with multiple countries i.e I want to add more countries to send SMS. Please help me on this.
Thanks in Advance.
]]>Hi,
I was wondering if you could help me with redirection after logging in or give me an advice. When customer is logged in, it goes always towards the home page, not sure if this is the plugin’s behaviour.
I added below function, but it’s not making any changes:
if ( (isset($_GET['action']) && $_GET['action'] != 'logout') || (isset($_POST['login_location']) && !empty($_POST['login_location'])) ) {
add_filter('login_redirect', 'my_login_redirect', 10, 3);
function my_login_redirect() {
$location = $_SERVER['HTTP_REFERER'];
wp_safe_redirect($location);
exit();
}
}Looking forward to your support.
]]>Hello, I am using the plugin and configure the Twillo API. OTP sending to the mobile but after entering the OTP it is not login. It is redirecting to the home page. I am using WooCommerce and using this on my account login page.
How do I fix this issue?
]]>we have installed your plugin..but we are unable to enter number in the number field as it is not active on login field..i have done all the settings can u tell u why it is happening.?
]]>Hello,
I would like to use this module on my stores, but there is missing a specific sms gateway I want to use.
Is it possible to add smschef.com gateway to the gateway list?
I think it will be useful to others users also, including me, because it’s a very cheap alternative to nowdays expensive SMS Gateways.
Thank you!
Jason
Hello!
First of all, i wanna to thank u guys fot this awesome work. This plugin is a really really handly tool that i used on my wordpress projects.
In one of this projects, i need to custom the mask of the phone input field of the popup that shows up after click on SMS button.
The current status of the input is [+55input-values].
What i need is custom this pre-formated mask to the Brazil phone standards.
I tried to override the mask on the field, but it goes wrong. How can i customize the input mask without change the core of the plugin’s code.
]]>Hi Support,
We have installed and configured this plugin on our website and works great. But apart from this, we want the same to be also enabled and shown in our Mobile Application. Can you let us know if we can have the same and how that can be enabled?
Regards,
Shab
Hi,
It is feature request for support for AWS SNS as a sms gateway.
AWS has pay as you go model and prices are really good https://aws.amazon.com/sns/sms-pricing/
they have SDK which use can utilize and can add aws sns quickly to your plug-in
Thanks,
Homesh
Hello Imran!
I need to put together a classifieds WordPress website, using the following theme / plugin: https://templatic.com/wordpress-classifieds-themes/classifieds
The registration form / form to submit a new advert can be custom. I do have login details just to a demo version of the admin.
The community this website will be targeted at are cellphone people and not people looking at emails or have a computer. I found your plugin in the WordPress repo and watched the Orion Login with SMS Features | Clickatell WordPress Plugin YouTube video. Do you think there is a way that this plugin can link to the form to allow people access via phone instead of email?
Or can offer, paid for custom development? Is that something that you do? I have not bought the above mentioned theme to test…
Regards
Elzette
How can a user be redirected to a page after successful login based on role ?
]]>First, please create a GitHub repository so that people like me can create a pull request or maybe discuss these types of issues more privately. WordPress website is not exactly known for development tools.
And second, the code created for ClickATell and ClickSend providers is pretty much vulnerable to brute force attacks; not on the login process itself, but rather on the hash of the OTP code sent; which is worse since it is not possible to mitigate.
Both these plugins send the hash of the phone number and the generated OTP code to the client and since the phone number is known, the attacker only needs to crack the hash for the 9999 possible OTP codes. It takes less than a second for anyone sophisticated enough to crack the hash and to be honest you don’t need to be an expert to do so. So its a quite serious problem that might allow access to an administrator account to anyone with little knowledge.
Following is a quick fix for this; just replace
$hash = md5( $str_mobile . $str_otp );
with
$hash = md5( md5( $str_mobile . $str_otp ) . wp_salt());
in “class-olws-clickatell-api.php” and “class-olws-clicksend-api.php” files.
This simple change makes it a lot harder for anyone to crack the hash. A better solution would be to keep the hash in a table and not send it to the user. Or at least keep it in the PHP session.
https://www.php.net/manual/en/reserved.variables.session.php
]]>Hello, the plugins works great but I need it to be able to send SMS to more than one country, I wonder if there is anything I can do so we are able to select the country code from the front-end
]]>Hello, is it possible to set up the plugin so that the user can only login if he enters the received code? Or is it always to login with only Username and Password?
]]>Add Account Kit option for sms in the plugin
]]>Hello, thank you for this great plugin.
Unfortunately i’m unable to add the button to the WordPress default login form, i enter the id #loginform in the Login Form Selector field but the button doesn’t appear.
Can you help me please?
Thanks
Hello,
I would like to restrict the user login, say to just 1 session was able to do it with one of the plugin loggedin.
But with orion, how do we do that? as the session is not saved in the DB for login with otp I believe.
]]>I’m trying to create button for Login with OTP but my button is not clickable Please help me.
]]>Hi.
The plugin works absolutely fine with our requirements except for the redirection URL. After a successful login, we would like to redirect to a custom URL. Can you help me in the same.. how do we go about?
]]>Very nice plugin and the Twilio integration works perfectly. Is there a support article detailing how to display the OTP login as the only option? Instead of having OTP as an option that displays in the popup modal. Thank you!
]]>Hi,
We’re looking at your plugin to use for a project, but you don’t have integration with ZipWhip. Can you let us know if you can add ZipWhip to your SMS Gateways. If we have to pay for this level of customization, please contact me and let us know what the cost would be to implement.
]]>Hello,
This seems like a fantastic plugin but the sms gateways used here are paid versions. Is it possible to implement support for google firebase? It’s free for authentication purposes, which is exactly the purpose of this plugin. I think it would be a fantastic addition to this plugin and can potentially make a free of cost ultimate sms login solution. Also it can really help this plugin reach the next level. Looking forward for a positive response.
Thank you.
]]>I think found a bug.
On 32bit systems converting the phone number to int fails with large digits resulting OTP verification fails
Location 1:
class-olws-ajax-request-handler -> olws_handle_otp_verification :
$result = $this->handle_messaging->olws_verify_otp(
(int) $phone_without_country, <– Problem!!
(string) $phone_without_country,
Location 2:
class-olws-handle-messaging ->olws_verify_otp:
$phone = filter_var( $phone, FILTER_VALIDATE_INT ); <– Problem!
May be use of ctype_digit()?
]]>