如何使用OTP验证登录

Question

Is there any way to authenticate login in PHP using One Time Password which should be in digits and login.php asks on submission of form. Once a user input login information and submit the form. System send a OTP to user email and asks to input the OTP to get access to member area.

I have google out but all ways are SMS based which costs a lot. I need email based login code to authenticate login and secure member area from unwanted login attempts.

If someone has PHP coding then please share with me.

Answer 1

The question is, if you really want to only rely on email. Which is probably worse than SMS. And if you want to implement it on your own.

You may want to take a look at privacyIDEA (Disclaimer: My project), which can manage all kinds of tokens for your users. SMS, email but also hardware tokens like Yubikey and Smartphone apps like Google Authenticator.

There are several PHP examples, since it is all about calling a REST API: https://github.com/privacyidea/simplesamlphp-module-privacyidea/blob/master/lib/Auth/Source/privacyidea.php https://github.com/cornelinux/wordpress-strong-authentication/blob/master/strong-authentication.php