Authyo OTP for Elementor Form
| 开发者 | konceptwise |
|---|---|
| 更新时间 | 2026年9月8日 19:54 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- 11 field types: First Name, Last Name, Email, Phone, Message, Dropdown, Checkbox, Radio Button, File Upload, Hidden Field, Multi-Step Form
- Enable OTP toggle on Email and Phone fields individually
- Multi-channel OTP delivery: Email, SMS, WhatsApp, Voice Call
- Configurable OTP length (4–8 digits), expiry (1–60 minutes), resend cooldown, and max resend limit
- Failsafe protection: allow forms to submit even if OTP delivery fails (e.g. low balance)
- Built-in country code selector with 250+ countries via the Authyo API, with a bundled static fallback
- Clean, modern settings panel with vertical tab layout
- Rate limiting on send and verify endpoints to prevent abuse
- Full WordPress REST API integration with nonce verification
安装:
- Log in to your WordPress admin panel.
- Go to Plugins → Add New → Upload Plugin.
- Choose the plugin ZIP file and click Install Now.
- Click Activate Plugin.
- Upload the
authyo-otp-for-elementor-formfolder to/wp-content/plugins/. - Activate the plugin through the Plugins menu in WordPress.
- Navigate to Authyo OTP for Elementor Form → General Settings.
- Enter your App ID, Client ID, and Client Secret from your Authyo dashboard.
- Enable the OTP channels you want to use under the OTP Channel tab.
- In the Elementor editor, add the Authyo Form widget to any page.
- In the widget's repeater fields, enable OTP on any Email or Phone field.
常见问题:
Do I need an Authyo account?
Yes. You need a free or paid Authyo account to obtain your API credentials (App ID, Client ID, Client Secret). Sign up at https://app.authyo.io.
Which OTP channels are supported?
Email, SMS, WhatsApp, and Voice Call. Each channel can be enabled or disabled individually under Authyo OTP for Elementor Form → General Settings → OTP Channel.
Does it work without Elementor Pro?
Yes. The plugin works with both the free Elementor plugin and Elementor Pro.
What happens if the Authyo API is unreachable?
If the Failsafe Protection option is enabled (under General Settings), forms will still submit even if the OTP cannot be delivered. You can configure a notification email to be alerted when this occurs.
What data is sent to Authyo?
When sending an OTP, the user's phone number or email address, the selected OTP channel, and OTP length/expiry settings are sent to the Authyo API. When verifying, the maskId (a temporary session token returned by Authyo) and the OTP entered by the user are sent. No personally identifiable information is stored by this plugin beyond standard WordPress transients used for session management.
Is the country list cached?
Yes. The country list is fetched from the Authyo API once and cached as a WordPress option. You can refresh it manually from the Country tab in the settings panel.
更新日志:
- Compatibility: the REST nonce and OTP session tokens are now fetched at runtime instead of being embedded in the page, so forms work correctly behind server-level and CDN page caches (Varnish, Nginx FastCGI, Cloudflare) that cannot honour DONOTCACHEPAGE.
- Reliability: a request rejected because a cached page supplied an expired nonce is now retried automatically with a fresh one.
- Maintenance: page caches are purged automatically after a plugin update.
- Added the
authyo_ef_disable_page_cachefilter for site owners who prefer to keep form pages cached.
- Initial release.
- Supports Email, SMS, WhatsApp, and Voice Call OTP channels.
- 11 field types in the Elementor widget.
- Rate limiting, failsafe protection, and country dropdown with cache.