G Online Sites

<p><strong>G Online SMS</strong> connects your WordPress site to the <a href="https://sms.gonlinesites.com/app" rel="nofollow ugc">G Online SMS gateway</a> so you can send SMS messages automatically based on events in WordPress, or manually to any phone number.</p>
<h4>Features</h4>
<ul>
<li><strong>OTP / Two-Factor Authentication:</strong>
<ul>
<li>SMS verification code on WordPress login (2FA after password check).</li>
<li>Phone number verification at WooCommerce checkout before order placement.</li>
<li>Phone number confirmation on user registration.</li>
<li>Verify new phone number when changed in WooCommerce My Account.</li>
<li>Configurable code length (4–8 digits) and expiry (1–30 minutes).</li>
<li>Maximum 3 failed attempts before code is invalidated.</li>
</ul>
</li>
<li><strong>Send single or bulk SMS</strong> directly from the WordPress admin.</li>
<li><strong>Bulk SMS by user role</strong> — target all subscribers, customers, or any custom role.</li>
<li><strong>User lifecycle notifications:</strong>
<ul>
<li>Notify admin when a new user registers.</li>
<li>Send a welcome SMS to every new user.</li>
<li>Send a farewell SMS when an account is deleted.</li>
<li>Optional login-alert SMS to admin.</li>
</ul>
</li>
<li><strong>WooCommerce integration:</strong>
<ul>
<li>Customise SMS messages per order status (pending, processing, completed, refunded, etc.).</li>
<li>Notify admin when a new order is placed.</li>
<li>Supports rich order placeholders: <code>{order_id}</code>, <code>{order_total}</code>, <code>{customer_name}</code>, <code>{order_items}</code>, and many more.</li>
</ul>
</li>
<li><strong>Contact Form 7 integration:</strong>
<ul>
<li>Send SMS to admin AND the form submitter simultaneously on submission.</li>
<li>Per-form overrides via the Additional Settings tab.</li>
</ul>
</li>
<li><strong>Gravity Forms integration:</strong>
<ul>
<li>Send SMS to admin AND the submitter when an entry is submitted.</li>
<li>Use <code>{field_id:N}</code> or <code>{Field Label}</code> placeholders.</li>
</ul>
</li>
<li><strong>SMS Log</strong> — every sent and failed message is recorded with status, recipient and trigger source.</li>
<li><strong>Test SMS button</strong> — verify your API key right from the settings page.</li>
<li>Fully translatable (<code>.pot</code> file included).</li>
<li>No Bootstrap or external CSS loaded site-wide — lightweight admin-only assets.</li>
</ul>
<h4>Supported Placeholders (WooCommerce)</h4>
<pre><code>{order_id} `{order_number}` `{order_total}` `{order_status}` `{order_date}` `{customer_name}` `{customer_first_name}` `{customer_last_name}` `{customer_email}` `{customer_phone}` `{billing_address}` `{shipping_address}` `{payment_method}` `{shipping_method}` `{order_items}` `{subtotal}` `{tax_amount}` `{currency}` `{coupon_code}` `{site_name}` `{site_url}`
</code></pre>
<h4>Supported Placeholders (User notifications)</h4>
<pre><code>{first_name} `{last_name}` `{display_name}` `{user_email}` `{user_login}` `{site_name}` `{site_url}`
</code></pre>
<h3>External Services</h3>
<p>This plugin connects to the <strong>G Online SMS gateway</strong> to send SMS messages and check account balance. This is a third-party service operated by G Online Sites.</p>
<h4>What data is sent and when</h4>
<ul>
<li><strong>When sending an SMS</strong> — the recipient’s phone number, the message text, your Sender ID, and your API key are transmitted to the gateway. This happens every time an SMS is triggered (user registration, WooCommerce order status change, form submission, manual send, etc.).</li>
<li><strong>When checking balance</strong> — only your API key is sent. This happens each time the plugin dashboard page is loaded.</li>
</ul>
<h4>No data is sent without your action</h4>
<p>No data is ever transmitted unless you have entered a valid API key in the plugin settings. The plugin makes no external calls on the front end of your website.</p>
<h4>Service provider details</h4>
<ul>
<li><strong>Service:</strong> G Online SMS — bulk SMS messaging gateway for Ghana and beyond.</li>
<li><strong>Provider:</strong> G Online Sites</li>
<li><strong>Gateway URL:</strong> https://sms.gonlinesites.com/app</li>
<li><strong>Terms of Service:</strong> https://sms.gonlinesites.com/app/terms</li>
<li><strong>Privacy Policy:</strong> https://sms.gonlinesites.com/app/privacy</li>
</ul>
<p>By using this plugin you agree to the terms of service and privacy policy of the G Online SMS gateway listed above.</p>


G Online SMS

Send automated SMS notifications from WordPress — OTP/2FA, WooCommerce orders, Contact Form 7, Gravity Forms and more.

WFMattR

Mark Maunder

wfryan

wfmatt

<h3>WORDFENCE LOGIN SECURITY</h3>
<p>Wordfence Login Security contains a subset of the functionality found in the full Wordfence plugin: Two-factor Authentication, XML-RPC Protection, and Login Page CAPTCHA.</p>
<p><strong>This plugin is being discontinued on or around July 1, 2026.</strong></p>
<p>All of its features are already included in the main Wordfence plugin, which is also available to use for free. We recommend installing Wordfence to continue receiving updates, security improvements, and full functionality.</p>
<p><a href="https://wordpress.org/plugins/wordfence/" rel="ugc">Install the full Wordfence plugin</a></p>
<h4>TWO-FACTOR AUTHENTICATION</h4>
<ul>
<li>Two-factor authentication (2FA), one of the most secure forms of remote system authentication available.</li>
<li>Use any TOTP-based authenticator app or service like Google Authenticator, Authy, 1Password or FreeOTP.</li>
<li>Enable 2FA for any WordPress user role.</li>
<li>Completely free to use, no limits or restrictions of any kind.</li>
</ul>
<h4>LOGIN PAGE CAPTCHA</h4>
<ul>
<li>Easily enable Google ReCAPTCHA v3 on your login and registration pages.</li>
<li>Stops bots from logging in without inconveniencing your site visitors.</li>
<li>Robust protection against password guessing and credential stuffing attacks distributed across large IP pools</li>
</ul>
<h4>XML-RPC PROTECTION</h4>
<ul>
<li>XML-RPC is the biggest target for WordPress attacks, but is often overlooked.</li>
<li>Protect XML-RPC with 2FA or disable it altogether if it’s not needed.</li>
</ul>


Wordfence Login Security

The Plugin works and integrates nicely into wordfence security and wp itself. TOTP works great, and the captcha integration works too. Sadly it doesn't support multiple 2fa methods like TOTP & "backup codes" as well as email as backup. Other 2fa methods like U2F are not supported. This Plugin doesn't work with the yubico yubikey hardware keys. 

Good, but somewhat limited

Good compliment to Wordfence, but please add login URL obfuscation!

Because you do not do this either I take another plugin as well like WPS Hide Login, or I just take WP Cerber which does everything!

Great, but...

Easy to use


Does not include the ability to limit login attempts, add password complexity requirements, or anything that would comprise modern security best practices. It's strictly a 2FA plugin, which is done more simply and better by other plugins. It does work tho.


Too much load for a simple 2FA plugin

Secure your website with Wordfence Login Security, providing two-factor authentication, login and registration CAPTCHA, and XML-RPC protection.

G Online SMS vs Wordfence Login Security