HantarSMS – OTP & Marketing SMS for Malaysia
| 开发者 | imeiie1231 |
|---|---|
| 更新时间 | 2026年10月24日 04:16 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- "Log in with an SMS code" on the WordPress login page, or anywhere with the
[hantarsms_otp_login]shortcode. - Codes are random, stored only as a keyed hash, expire after a few minutes and allow five attempts.
- Limits per phone number and per IP address stop bots from running up your SMS bill through your login form.
- The form does not reveal whether a number belongs to an account, and no SMS is sent (or paid for) when it does not.
- Administrators cannot log in with an SMS code alone, by default.
- Developers can use
hantarsms_otp_send()andhantarsms_otp_verify()in their own forms.
- An SMS to the customer when an order becomes Processing, Completed, Cancelled, Refunded and more — each status with its own editable template.
- A new-order alert to your own phone numbers.
- Placeholders such as
{first_name},{order_number},{order_total}and{shop}. - Sent in the background with Action Scheduler, so checkout is never slowed down. Each SMS is noted on the order.
- Compatible with High-Performance Order Storage and the block-based checkout.
- An optional, unticked "Send me offers by SMS" checkbox at checkout (classic and block checkout), and a consent setting on each user profile.
- Write a campaign, see the character count, number of segments and estimated cost while you type, review, then send now or schedule it.
- Send to everyone who agreed to marketing SMS, or paste your own list (you confirm you have consent).
- Unsubscribe built in: recipients cannot reply to a short code, so the plugin creates an unsubscribe page and can add its link to every campaign. Unsubscribed numbers are removed from every marketing send.
- Batches of up to 10,000 numbers per request, each with an idempotency key, so a retry never sends the same campaign twice.
- Balance and price per SMS on the settings screen, and a test SMS button.
- A log of every send with cost and any error, kept for 180 days. Phone numbers in the log are masked and OTP codes are never stored.
hantarsms_send_sms( $to, $text )for developers, plus filters and actions to change messages and recipients.
安装:
- Install and activate the plugin.
- Create a HantarSMS account at https://hantarsms.com/ and add credit. New accounts can ask for free trial credit on WhatsApp.
- In the HantarSMS console, open API keys and create a key.
- In WordPress, go to HantarSMS → Settings, paste the key and save. Send yourself a test SMS.
- Turn on what you need: OTP login, WooCommerce order SMS, and under Marketing create the unsubscribe page.
wp-config.php instead of the database:
define( 'HANTARSMS_API_KEY', 'sk_live_...' );屏幕截图:
常见问题:
Which numbers can I send to?
Malaysian mobile numbers only (60 1X…). Numbers in other formats are skipped and shown as invalid before you send.
How much does it cost?
You pay HantarSMS per SMS segment, from RM0.20, from prepaid credit that does not expire. The plugin itself is free. One segment holds 156 characters of plain English, or 66 characters if the message contains Chinese, emoji or other special characters. The send screen shows the segment count and estimated cost before you confirm. See https://hantarsms.com/en/pricing.
Can recipients reply, or reply STOP?
No. Messages come from a shared, send-only short code (66886). That is why the plugin has an unsubscribe page, and why every message should start with your business name.
Do I need consent to send marketing SMS?
Yes. Under Malaysia's Personal Data Protection Act you need consent for direct marketing and must stop when someone asks. The plugin only sends campaigns to people who ticked the consent box (or to a list you confirm has consented), and always removes unsubscribed numbers. Order updates and OTP codes are not marketing.
How do users log in with an SMS code?
Their number must be saved on their account: the "Mobile number (SMS)" field on the WordPress profile, or the WooCommerce billing phone. If two accounts share a number, SMS login is refused for that number.
Can I use the OTP functions in my own forms?
Yes:
$sent = hantarsms_otp_send( $phone, 'my-form' );
$ok = hantarsms_otp_verify( $phone, $code, 'my-form' );
Both return true or a WP_Error. The purpose ('my-form') makes sure a code sent for one form cannot be used in another.
My site is behind Cloudflare or a proxy. Are the IP limits correct?
By default the plugin uses REMOTE_ADDR, because forwarded headers can be forged. If your server sees the proxy's address, return the real visitor IP with the hantarsms_client_ip filter.
Where are delivery reports?
The plugin log shows whether HantarSMS accepted each send. Per-number delivery results are in your HantarSMS console.
更新日志:
- First release: OTP login, WooCommerce order SMS, SMS marketing campaigns with consent and unsubscribe, send log.