TRC OTP Login
| 开发者 | theringconcept |
|---|---|
| 更新时间 | 2026年11月11日 06:54 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
TRC OTP Login lets your visitors log in, register and reset their password with a one-time code sent to their WhatsApp number. It works on its own: no other login plugin is needed.
- Login with a WhatsApp code, with an optional password login (phone number or email).
- Registration verified by WhatsApp: name, email and password can each be required, optional or hidden.
- Lost password: WhatsApp code, then a new password.
- Country code selector (245 countries, translated names), priority countries and an optional allow-list.
- Login page with 4 layouts (brand panel, centered card, full-screen photo, minimal): colors, logos, font, texts and custom CSS, with a live preview in the admin.
- Site-wide popup; menu links (#trc-login, #trc-register) and links to old login pages open it.
- Redirects old login addresses (e.g. /my-account/?tab=login), optionally wp-login.php, and replaces the WooCommerce login forms.
- Existing accounts: numbers saved by WooCommerce (billing_phone), "OTP Login With Phone Number" (phone_number) or any meta key you add are recognized, and an import normalizes them.
- Security: hashed codes, limited attempts, resend delay, limits per number and per IP address, honeypot field, fresh nonce for cached pages.
- Sending: Meta WhatsApp Cloud API (approved templates), UltraMsg, Green-API or a custom HTTP API.
安装:
- Upload the plugin (Plugins → Add New → Upload Plugin) and activate it.
- Settings → TRC OTP Login → WhatsApp API and Message: enter your provider credentials and template, then use the Test tab.
- Pages & popup: click "Create the Login page", then add the old login addresses to replace.
- Design: layout, colors, logos.
- Migration: "Import numbers" if your members already have a phone number on their account.
- Check that an existing account can log in, then deactivate your previous login plugin.
屏幕截图:
常见问题:
Do I need a WhatsApp Business account?
Yes. With the Meta WhatsApp Cloud API you need a WhatsApp Business account, a phone number ID, a permanent access token and an approved message template (an "Authentication" template is recommended). UltraMsg and Green-API work with their own WhatsApp instances.
Can I keep a password login?
Yes. The login method can be "WhatsApp code only", "WhatsApp code with password option" or "password only" (registration is then still verified by WhatsApp).
Where are phone numbers stored?
In the user meta trc_wa_phone (international format, digits only). The verified number is also copied into empty phone fields (WooCommerce billing_phone and the fields you list). Numbers are kept when the plugin is uninstalled.
Can I customize the login page template?
Copy templates/login-page.php into your theme as trc-otp-login/login-page.php.
更新日志:
2.3.0
- Plugin renamed "TRC OTP Login" (slug trc-otp-login). Settings, phone numbers and shortcodes are unchanged.
- All names stored by the plugin now use the trc_wa_ prefix (user meta, shortcodes, AJAX actions, scripts). Existing user data and shortcodes in posts and Elementor are migrated automatically; update shortcodes placed in widgets by hand.
- Rate limits and code attempts use atomic counters, so simultaneous requests cannot exceed them.
- If you use the WhatsApp gateway of "OTP Login With Phone Number", select it again in that plugin's settings (its identifier is now trc_wa_whatsapp).
- New accounts can never receive a privileged role, even through filters.
- The custom CSS field was removed: use Appearance → Customize → Additional CSS instead.
- Scripts and styles are always enqueued; translations are delivered by translate.wordpress.org.
- First public release on WordPress.org: English source strings with French translation.
- Removed compatibility code for third-party login popup plugins (their shortcodes, buttons and phone fields). Phone fields from any plugin can still be added under Forms → Existing accounts.
- Default country: Benin. Scripts loaded with the defer strategy.
- Settings page renamed "TRC OTP Login", with the plugin icon.
- Adjustable per-IP code limit (Forms tab), with one-click temporary lift (1 h, 4 h, 24 h) or full disable from the settings or the "TRC OTP Login" dashboard widget. Useful when several people register in a row on the same device.
- Only codes actually sent count toward the limits.
- Benin: +229 XX XX XX XX and +229 01 XX XX XX XX are the same account; the number is always saved and contacted in the 10-digit format (01). Old 8-digit accounts are updated at login or during import.
- Username of new accounts built from the name (firstname.lastname), optionally with the last 4 digits, or the phone number only.
- The verified number is always saved in the phone fields (billing_phone, added fields): at registration, at each login and during import, without overwriting another number.
- Role of new accounts: the site default role (Settings → General) instead of "Customer"; button to apply it to accounts already created.
- "Check a number" tool (Migration tab): recognized account and source field, without sending or changing anything.
- Additional configurable phone fields.
- The embedded form (shortcodes, WooCommerce) is shown as a centered card, even on a full-width page. Option style="plain".
- "Yellow and slate" color preset.
- Link color computed to stay readable on white, even with a light primary color.
- Standalone plugin: WhatsApp login, registration and lost password forms.
- Designed login page (4 layouts) with live preview, popup, old page redirects, WooCommerce and wp-login.php replacement.
- Recognition and import of existing numbers (WooCommerce and LWP).
- "Full payload" mode, payload generated from Meta templates, payload preview, Meta errors explained.
- Initial release (WhatsApp gateway for "OTP Login With Phone Number").