onlinecity

<p>Send SMS notifications for WooCommerce orders, create SMS campaigns, manage contacts, and add two-factor authentication – powered by GatewayAPI.com.</p>
<h3>📝 Description</h3>
<p>GatewayAPI for WordPress is a powerful SMS plugin that combines WooCommerce transactional SMS notifications with a high-performance campaign and contact management system.</p>
<p>The plugin allows you to automatically send SMS messages when WooCommerce orders change status, as well as create and send personalized SMS campaigns to large contact lists.</p>
<p>You can also add an extra layer of security to your WordPress site with SMS-based two-factor authentication, helping protect your login process with verification codes sent directly to your mobile device.</p>
<p>Version 2 is a complete rewrite of the plugin, with a strong focus on performance, reliability, and modern WordPress standards.</p>
<p>All SMS messages are delivered via GatewayAPI.com, one of Europe’s leading SMS gateways.</p>
<h3>⭐ Main Features</h3>
<h4>🛒 WooCommerce SMS Notifications</h4>
<ul>
<li>Send automatic SMS messages based on WooCommerce order status changes</li>
<li>Separate message templates for customer and internal recipients</li>
<li>Fully configurable per order status</li>
<li>Supports all standard WooCommerce order statuses</li>
</ul>
<h4>🔐 Two-Factor Authentication</h4>
<ul>
<li>Add an extra layer of security to your WordPress login</li>
<li>SMS-based verification codes sent automatically during login</li>
<li>Can be limited to specific roles and phone countries</li>
<li>Works with standard WordPress authentication</li>
<li>Uses GatewayAPI’s reliable SMS delivery</li>
</ul>
<h4>📢 SMS Campaigns & Broadcasts</h4>
<ul>
<li>Send SMS campaigns to large contact lists</li>
<li>High throughput and stable delivery using Action Scheduler</li>
<li>Designed to work reliably even on shared web hosting</li>
<li>Background processing</li>
</ul>
<h4>📇 Contact & List Management</h4>
<ul>
<li>Manage contacts directly in WordPress</li>
<li>Import and export contacts using CSV files</li>
<li>Store custom fields per contact</li>
<li>Reusable contact lists for campaigns</li>
<li>Use contact fields for mail-merged SMS content</li>
</ul>
<h4>✉️ Personalized Message Templates</h4>
<ul>
<li>Mail-merge support for campaigns and WooCommerce messages</li>
<li>Use dynamic placeholders such as customer data, order data, and custom fields</li>
<li>Supports both GSM and Unicode SMS</li>
<li>Configurable sender ID per message</li>
</ul>
<h4>🧩 Frontend Shortcodes</h4>
<ul>
<li>Signup: Allow users to subscribe to your SMS lists directly from your website.</li>
<li>Update Profile: Enable users to update their contact details and group subscriptions.</li>
<li>Unsubscribe: Provide a simple way for users to opt-out of SMS communications.</li>
<li>Send SMS: Enable SMS sending from the frontend (e.g. for internal tools).</li>
</ul>
<h4>🚀 Built for Reliability & Scale</h4>
<ul>
<li>Uses Action Scheduler (the same job system used by WooCommerce)</li>
<li>Non-blocking background processing</li>
<li>Suitable for very large campaigns (100,000+ recipients)</li>
<li>No PHP timeouts or long-running requests</li>
</ul>
<h3>⚠️ Coming from v1.x? Some features are gone</h3>
<p>The following features are not part of this plugin anymore:</p>
<ul>
<li>Receiving or processing incoming SMS messages</li>
<li>Contact Form 7-integration</li>
</ul>
<p>These features had very low usage and were removed to simplify the plugin. If you need this, consider the legacy version of the plugin (any version before 2.0).</p>
<h3>🌍 About GatewayAPI.com</h3>
<ul>
<li>Founded in 1999</li>
<li>One of Europe’s leading SMS providers</li>
<li>Offices in Copenhagen, Odense, and Aalborg, Denmark</li>
<li>Hundreds of millions of SMS messages delivered yearly</li>
<li>No subscriptions – pay only for what you send</li>
<li>Fast and reliable SMS delivery worldwide</li>
</ul>
<h3>🔧 Installation</h3>
<ol>
<li>Create a free account at https://gatewayapi.com/</li>
<li>Install and activate the plugin</li>
<li>Go to GatewayAPI <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings</li>
<li>Add your API Token from your GatewayAPI.com account</li>
<li>Play around! Send a test campaign or setup a WooCommerce Order hook</li>
</ol>
<h3>🚀 Getting Started</h3>
<h4>🛍️ WooCommerce Notifications</h4>
<p>After installation, you can enable SMS notifications per WooCommerce order status.<br />
Each status can send messages to customers, internal recipients, or both.</p>
<p>Place a test order to confirm everything is working as expected.</p>
<h4>📨 Campaign Messaging</h4>
<p>You can create SMS campaigns without WooCommerce:</p>
<ul>
<li>Import contacts via CSV or add them manually</li>
<li>Organize contacts into lists</li>
<li>Create a personalized SMS campaign</li>
</ul>
<h4>🔐 Two-Factor Authentication</h4>
<p>To add SMS-based two-factor authentication to your WordPress site:</p>
<ul>
<li>Go to GatewayAPI <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Two-Factor</li>
<li>Enable two-factor authentication</li>
<li>Configure which user roles should use two-factor authentication</li>
<li>Optionally limit to specific phone countries for security</li>
<li>Set a grace period if needed</li>
</ul>
<h3>🧩 Shortcodes</h3>
<p>The plugin provides shortcodes to integrate SMS features into your frontend.</p>
<h4>📝 Common Attributes</h4>
<ul>
<li>action: (required) One of signup, update, unsubscribe, send_sms.</li>
<li>recaptcha: Set to 1 to enable Google reCAPTCHA (must be configured in settings).</li>
<li>embed_css: Set to 1 to embed basic styling for the form.</li>
<li>groups: Comma-separated list of group/tag IDs to target.</li>
<li>allowed_countries: Comma-separated list of country codes (e.g., 45,44).</li>
</ul>
<h4>➕ Signup Form</h4>
<p>[gatewayapi action=”signup” groups=”1,2,3″]</p>
<h4>🔄 Update Profile</h4>
<p>[gatewayapi action=”update”]</p>
<h4>❌ Unsubscribe</h4>
<p>[gatewayapi action=”unsubscribe”]</p>
<h4>✉️ Send SMS</h4>
<p>[gatewayapi action=”send_sms” groups=”1″]</p>
<p>Security Warning: The send_sms action allows sending SMS messages from your frontend. This can be dangerous if left open to the public as it could be abused to send spam or drain your GatewayAPI credits.</p>
<p>We strongly recommend combining this with a security system, such as:<br />
* Placing the shortcode on a password-protected page.<br />
* Restricting access to specific user roles using a membership plugin.<br />
* Always enabling recaptcha=”1″ to prevent automated abuse.</p>
<h3>❓ Frequently Asked Questions</h3>
<h4>Can this plugin handle very large SMS campaigns?</h4>
<p>Yes. Campaigns are processed using Action Scheduler, ensuring stable delivery, high throughput, and retries — even on shared hosting environments.</p>
<h4>Does this plugin support personalized SMS messages?</h4>
<p>Yes. You can use dynamic placeholders from contacts and WooCommerce orders to send fully personalized, mail-merged SMS messages.</p>
<h4>Is WooCommerce required?</h4>
<p>WooCommerce is only required for order-based SMS notifications.<br />
Campaign messaging and contact management work without WooCommerce.</p>
<h3>🔗 External services</h3>
<p>This plugin connects to the GatewayAPI.com service to send SMS messages. This external service is required for the plugin’s primary functionality, which is delivering transactional and campaign SMS messages.</p>
<p>When sending an SMS, the plugin transmits the recipient phone number, message content, and related metadata (such as sender ID) to GatewayAPI.com. For WooCommerce notifications, order-related data may be used to generate the message content before it is sent.</p>
<p>No data is sent to GatewayAPI.com unless an SMS is actively being sent by the site administrator or triggered by configured WooCommerce events.</p>
<p>This service is provided by GatewayAPI ApS.</p>
<p>Privacy policy, terms and conditions, data processing agreement, and security certifications (including ISAE 3000 and ISAE 3402) are available at:<br />
https://gatewayapi.com/security-and-compliance/</p>
<h3>📋 Changelog</h3>
<h4>2.1.4</h4>
<ul>
<li>Improved UI for tag dropdowns when there are many items.</li>
</ul>
<h4>2.1.3</h4>
<ul>
<li>New bulk actions for all contacts matching current filters: Delete/deactivate/activate contact + add/remove tag.</li>
<li>Contacts list UI update, more sleek import/export buttons.</li>
</ul>
<h4>2.1.2</h4>
<ul>
<li>Improved contact import: Papa Parse CSV parser with auto-delimiter detection and auto-created meta fields from unknown columns.</li>
<li>Fallback support: Support for our previous (<v2.0) CSV format support.</li>
</ul>
<p><h4>2.1.1</h4>
</p>
<ul>
<li>Bugfix: The recipient tags were not properly sent to the campaign creation UI.</li>
</ul>
<h4>2.1.0</h4>
<ul>
<li>New feature: Shortcodes for signup, updating contact details, and unsubscription.</li>
<li>New feature: Shortcode for sending SMS from the frontend (use with caution and combine with security-system).</li>
<li>Bugfix: Contacts filtering by tag didn’t work.</li>
</ul>
<h4>2.0.8</h4>
<ul>
<li>The migration tool should now be available to all users of the 1.x-versions, as some were missing it.</li>
</ul>
<h4>2.0.7</h4>
<ul>
<li>Tool for easy and automatic migration of old contacts, contact fields and contact groups included.</li>
<li>Automatically migrates and uses old OAuth key.</li>
</ul>
<h4>2.0.5</h4>
<ul>
<li>Bugfix: For users upgrading from 1.x, a missing capability upgrade made the plugin unavailable until deactivate + reactivate.</li>
</ul>
<h4>2.0.4</h4>
<ul>
<li>Two-factor authentication has been re-added to the plugin.</li>
</ul>
<h4>2.0.2-2.0.3</h4>
<ul>
<li>No changes. These versions exist because we have been working on automating release processes.</li>
</ul>
<h4>2.0.1</h4>
<ul>
<li>Minor modifications to ensure best-practices as per WordPress guidelines.</li>
</ul>
<h4>2.0.0</h4>
<ul>
<li>Complete rewrite of the plugin!</li>
</ul>
<h4>1.8.3</h4>
<ul>
<li>Compability up to WordPress 6.3.1.</li>
</ul>
<h4>1.8.2</h4>
<ul>
<li>Bugfix: Built in shortcode defaulted to the posts title as the name of the new recipient. Now defaults to ”, as expected.</li>
</ul>
<h4>1.8.1</h4>
<ul>
<li>Bugfix: Built in shortcode for signup did not work properly, when allowing the user to select groups.</li>
</ul>
<h4>1.8.0</h4>
<ul>
<li>Support for using our GatewayAPI.eu-setup!</li>
<li>Bugfix: 2FA login security could fail on PHP 7.4+.</li>
</ul>
<h4>1.7.6</h4>
<ul>
<li>Bugfix: Fixing that GatewayAPI Shortcode for signup had stopped saving some meta-fields since 1.7.2.</li>
</ul>
<h4>1.7.5</h4>
<ul>
<li>Bugfix: Default country code did not apply correctly in the country drop downs.</li>
</ul>
<h4>1.7.4</h4>
<p>Compability with Contact Form 7.</p>
<ul>
<li>Bugfix: Signup via Contact Form 7 works again (upgraded to being compatible with CF7’s newer window.fetch based approach of AJAX).</li>
<li>Bugfix: Notices in CF7-integration (PHP) and a typo, causing an exception in frontend JS on CF7-forms.</li>
</ul>
<h4>1.7.3</h4>
<p>Bugfix release.</p>
<ul>
<li>Bugfix: Saving recipient details using the UI and via Excel-importer, works properly again.</li>
<li>Bugfix: SMS Reply-feature works again.</li>
</ul>
<h4>1.7.2</h4>
<p>This release strengthens the overall security, thanks to input from an external security audit.</p>
<p>We highly recommend upgrading to this version, as it hardens the security of our plugin, especially on WordPress-installation with multiple users<br />
which may have users of lower roles than editor.</p>
<ul>
<li>Consistent use of nonce’s in AJAX requests, to prevent CSRF and prevent privilege escalation.</li>
<li>Enforce correct roles for various actions, preventing potential privilege escalation.</li>
<li>Improved sanitizing, validation and escaping of input and output.</li>
<li>All PHP-files are now secured from direct access.</li>
<li>Refactored function prefixes from <code>gwapi_</code>, <code>_gwapi_</code> and <code>_gatewayapi_</code> to <code>gatewayapi_</code> only.</li>
</ul>
<h4>1.7.1</h4>
<ul>
<li>Bugfix: Notifications were not sent.</li>
</ul>
<h4>1.7.0</h4>
<ul>
<li>New: Notification module: Receive SMS-notifications when various actions occur in WordPress
<ul>
<li>BETA: Please get in touch if you have ideas/suggestions for improving this feature.</li>
</ul>
</li>
<li>New: Default country code field setting (previously all country selectors defaulted to +45/Denmark).</li>
<li>New: Programmer actions <code>gwapi_form_subscribe</code> and <code>gwapi_form_unsubscribe</code> added. The first is triggered when new recipients complete signup via<br />
our shortcode-forms and the latter on unsubscription via the shortcode-forms.</li>
<li>Optimization: Removed various unneeded dependencies.</li>
<li>Danish translation updated, including the notification-module.</li>
<li>Readme updated to inform about notification-module and other text improvements.</li>
</ul>
<h4>1.6.9</h4>
<ul>
<li>New! Create Notifications to automatically notify recipients by SMS when a WP action is executed.</li>
</ul>
<h4>1.6.8</h4>
<ul>
<li>Bugfix: Prefix wasn’t specified for all instances of db_table usages.</li>
</ul>
<h4>1.6.7</h4>
<ul>
<li>Bugfix: Previously imported recipients was prevented from being re-imported if they had been deleted.</li>
</ul>
<h4>1.6.6</h4>
<ul>
<li>Bugfix: While using recipients import, group recipients was not counted correctly after the import was completed.</li>
</ul>
<h4>1.6.5</h4>
<ul>
<li>Improved: Import of recipients optimized.</li>
</ul>
<h4>1.6.4</h4>
<ul>
<li>Compatible with WordPress 5.5</li>
<li>Improved: Integration with Contact Form 7 now supports shortcode for mandatory fields</li>
<li>Tweak: Updated UI and descriptions.</li>
</ul>
<h4>1.6.3</h4>
<ul>
<li>Compatible with WordPress 5.4</li>
<li>New! Recipient groups can now default to unchecked when using short-code</li>
<li>Tweak: Minor updates to UI.</li>
</ul>
<h4>1.6.2</h4>
<ul>
<li>Tweak: The frontend forms now use regular SMS instead of Display SMS for two-factor, as requested by multiple users.</li>
<li>Bugfix: When using tags, the list of tags sent to GatewayAPI could end in a situation, with the same tag-data repeated.</li>
</ul>
<h4>1.6.1</h4>
<ul>
<li>Removed URL in two-factor SMS as it was unnecessary and caused SMS’es to be blocked by GatewayAPI’s new link-scanner.</li>
</ul>
<h4>1.6.0</h4>
<ul>
<li>New! Custom encoding for SMS’es, allowing SMS’es with emojis and other special characters.
<ul>
<li>UI which detects what encoding should be used, always recommending the cheapest option (ie. most characters per SMS).</li>
<li>API-method <code>gwapi_send_sms</code> has new argument for setting encoding.</li>
<li>Fully backwards-compatible, defaulting to standard-encoding.</li>
</ul>
</li>
<li>Compatible with WordPress 5.1</li>
</ul>
<h4>1.5.2</h4>
<ul>
<li>Compable with WordPress 5.0.3.</li>
<li>Fix: Excel-export of recipients did not work unless “SMS Inbox” was enabled.</li>
<li>Fix: Notices in Excel-export.</li>
</ul>
<h4>1.5.1</h4>
<ul>
<li>Updated Danish translations (primarily the two-factor settings and frontend).</li>
<li>Fix: Our shortcode had unintentionally been renamed. We now support both <code>[gwapi]</code> and <code>[gatewayapi]</code>.</li>
<li>Fix: Two-factor-module caused fatal error on PHP 5. Also fixed general notices in two-factor module.</li>
<li>Fix: Two-factor module caused fatal error when creating new WordPress-users.</li>
</ul>
<h4>1.5.0</h4>
<ul>
<li>New! Two-factor security upgrade to your WordPress! (optional)</li>
<li>New! Blacklisting of phone numbers.</li>
<li>Improved: Searching recipients by phone number works.</li>
<li>Improved: Better support for 10.000+ recipients + a progress bar for showing progress.</li>
</ul>
<h4>1.4.2</h4>
<ul>
<li>Recipients:
<ul>
<li>Added option to blacklist phone numbers.</li>
<li>Added support for searching recipients list by phone number (previously only by name).</li>
<li>Added drop down on recipients list, for filtering by group.</li>
</ul>
</li>
<li>Fix: Improved handling of huge lists of recipients (ie. 1.000+ recipients in one SMS)</li>
</ul>
<h4>1.4.1</h4>
<ul>
<li>Fix: List of countries is now always correctly parsed, even when the JSON-file (which is fetched via AJAX) does not have right mime-type.</li>
</ul>
<h4>1.4.0</h4>
<p>Note: <strong>v1.4.0 may break your Countact Form 7-forms containing GatewayAPI-fields</strong>, as the shortode-syntax has slightly changed for most of our fields. We needed to do this change to fix multiple bugs and inconsistencies. Please re-add the GatewayAPI-fields to your Contact Form 7-forms when updating the plugin.</p>
<ul>
<li>
<p>Contact Form 7:</p>
<ul>
<li>Ability to send SMS’es from the frontend.</li>
<li>Updating a subscriber: Forms now only updates groups specifically selected for the form.</li>
<li>Bugfixes and code cleanup, improved shortcode syntax.</li>
</ul>
</li>
<li>
<p>Complete user guide for the system (available online).</p>
</li>
<li>Export of recipients to Excel and CSV-formats.</li>
</ul>
<h4>1.3.3</h4>
<ul>
<li>Contact Form 7: Added support for forms which also contained a reCaptcha-field.</li>
<li>Code cleanup</li>
</ul>
<h4>1.3.2</h4>
<ul>
<li>Bugfix: A menu item had gone missing in the backend.</li>
</ul>
<h4>1.3.1</h4>
<ul>
<li>New UI for creating automated actions. Currently supports “autoreply” based on keyword.</li>
</ul>
<h4>1.3.0</h4>
<ul>
<li>Support for receiving SMS’es added, including setup-wizard and inbox.</li>
</ul>
<h4>1.2.3</h4>
<ul>
<li>Bugfix: The new verification SMS for Contact Form 7 had a typo, breaking verification SMS’es.</li>
<li>Missing translations: The popup-messages related to verification were not translated to danish.</li>
</ul>
<h4>1.2.2</h4>
<ul>
<li>Better international phone numbers support: Prefixed 0’s in the phone number itself (between country prefix and phone number) is now correctly working.</li>
</ul>
<h4>1.2.1</h4>
<ul>
<li>User synchronization:
<ul>
<li>No longer requires a country code meta field, instead allowing a default country code when this value is missing.</li>
<li>Now possible to trigger a “one time” synchronization.</li>
</ul>
</li>
<li>Contact Form 7:
<ul>
<li>Now possible to send an SMS-reply on form success automatically.</li>
<li>SMS-validation for signup, before allowing the form to submit successfully.</li>
<li>Bugfix: Validation now works for all GatewayAPI-fields.</li>
</ul>
</li>
</ul>
<h4>1.2.0</h4>
<ul>
<li>Contact Form 7: Integration supporting signup, update and unsubscribe forms for frontend. Two-factor flow possible for update-flow.</li>
</ul>
<h4>1.1.6</h4>
<ul>
<li>Bugfix: Safari-specific issue with SMS-counter.</li>
<li>Bugfix: Hidden required fields  …</li>
</ul>


GatewayAPI

Send SMS notifications for WooCommerce orders, create SMS campaigns, manage contacts, and add two-factor authentication - powered by GatewayAPI.com.

ForthFocus

vgnavada

<p>ForthFocus SMS is built for Indian WooCommerce stores that need DLT-ready transactional SMS, order notifications, OTP verification, and operational visibility in one place. It sends order-status notifications to customers and adds phone-number OTP verification to important store touchpoints such as login, registration, cart, and checkout.</p>
<p>It is built for production: instant order-status sends with optional async queue, a custom log table with filtering, search, retry and CSV export, per-template DLT enforcement, real rate-limiting on OTP requests and verifications, segment-aware authoring with live variable-syntax linting, HTTP diagnostics for gateway communication, and a 3-step setup wizard so first-time configuration takes minutes instead of hours.</p>
<p>The plugin currently supports SMSGatewayHub, ForthFocus SMS Gateway, Gupshup, Fast2SMS, and 2Factor. Additional providers (MSG91, Twilio, Kaleyra) are on the roadmap. The architecture is provider-agnostic — the same templates, OTP flows, and logging continue to work as new providers are added.</p>
<h4>What makes it different</h4>
<p>Most SMS plugins focus only on sending a message or adding a basic OTP form. ForthFocus SMS is focused on the Indian WooCommerce + DLT workflow: every enabled template needs its own DLT Template ID, template syntax is checked before sending, customer OTP flows are rate-limited, gateway responses are logged, balance checks are available inside WordPress, and Diagnostics shows the actual WordPress HTTP request lifecycle for supported gateway communication.</p>
<h4>What it sends</h4>
<ul>
<li><strong>Order Processing: Online Payment</strong> — when a non-COD order moves to Processing</li>
<li><strong>Order Processing: Cash on Delivery</strong> — when a COD order moves to Processing</li>
<li><strong>Order Completed</strong> — when an order is marked Completed</li>
<li><strong>Order Cancelled</strong> — when an order is cancelled</li>
<li><strong>Order Refunded</strong> — when a refund is issued</li>
<li><strong>OTP for login</strong> — alongside the standard email/password login</li>
<li><strong>OTP for registration</strong> — verify the phone number before account creation</li>
<li><strong>OTP at checkout</strong> — verify the phone before the customer hits “Place Order” (cuts down on fake / COD fraud orders)</li>
</ul>
<h4>Why DLT compliance matters</h4>
<p>In India, every commercial SMS must use a sender ID and template registered on the DLT (Distributed Ledger Technology) portal of your telecom operator. Sending unregistered content gets rejected at the operator side, often silently. This plugin enforces DLT correctness at every layer:</p>
<ul>
<li>Each template requires its own DLT template ID before it can be enabled.</li>
<li>The plugin refuses to send any template that has no DLT ID — and logs the attempt so you can see what was skipped and why.</li>
<li>A live syntax linter catches the most common authoring mistakes (<code>{order_id)</code> instead of <code>{order_id}</code>, <code>{#var#}</code> placeholders pasted verbatim from the DLT portal) before they cause silent rejections.</li>
</ul>
<h4>Privacy</h4>
<ul>
<li>The plugin sends data to the configured SMS gateway only when an SMS-related action is performed, such as sending an order notification, sending an OTP, testing a template, or refreshing the SMS balance.</li>
<li>For SMS sending, the data sent to the selected gateway may include the recipient phone number, rendered SMS message body, sender ID/mask, route, channel, Entity ID/principalEntityId, DLT Template ID, provider credentials, and a unique provider message ID where supported.</li>
<li>For balance checks, the plugin sends the required provider credentials to the selected gateway’s balance endpoint.</li>
<li>Plugin scripts, styles, and images are loaded locally from the plugin folder. The plugin does NOT load anything from external CDNs or third-party servers on either admin or customer-facing pages.</li>
<li>The plugin does NOT send usage analytics, telemetry, tracking events, or call-home data to ForthFocus.</li>
<li>OTP codes are hashed (with a per-phone salt) before storage. Plaintext OTP codes are redacted from log entries.</li>
<li>Store owners are responsible for ensuring that their SMS use complies with applicable consent, privacy, telecom, DLT, and customer communication rules.</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to the SMS gateway selected by the site owner to send transactional SMS messages and fetch SMS balance information. A gateway account, API key, approved sender ID/Header, Entity ID, and approved DLT templates are required for live SMS delivery.</p>
<p>The plugin currently supports the following gateway endpoints:</p>
<ul>
<li><code>https://www.smsgatewayhub.com/api/mt/SendSMS</code> — used when the site owner sends an SMS through SMSGatewayHub, such as an order-status notification, OTP message, or template test. The plugin sends the recipient phone number, rendered message body, sender ID, route, channel, Entity ID, DLT Template ID, and the site’s SMSGatewayHub API key.</li>
<li><code>https://www.smsgatewayhub.com/api/mt/GetBalance</code> — used when the dashboard or gateway settings page fetches the SMSGatewayHub balance. The plugin sends the site’s SMSGatewayHub API key.</li>
<li><code>https://sms.forthfocus.com/api/mt/SendSMS</code> — used when the site owner sends an SMS through ForthFocus SMS Gateway, such as an order-status notification, OTP message, or template test. The plugin sends the recipient phone number, rendered message body, sender ID, route, channel, Entity ID, DLT Template ID, and the site’s ForthFocus SMS Gateway API key.</li>
<li><code>https://sms.forthfocus.com/api/mt/GetBalance</code> — used when the dashboard or gateway settings page fetches the ForthFocus SMS Gateway balance. The plugin sends the site’s ForthFocus SMS Gateway API key.</li>
<li><code>https://enterprise.smsgupshup.com/GatewayAPI/rest</code> — used when the site owner sends an SMS through Gupshup, such as an order-status notification, OTP message, or template test. The plugin sends the recipient phone number, rendered message body, approved sender ID/mask, Gupshup User ID, and Gupshup Password. For Gupshup, sender ID, entity, and DLT template mapping must be configured on the Gupshup account.</li>
<li><code>https://enterprise.smsgupshup.com/apps/apis/accInfo</code> — used when the dashboard or gateway settings page fetches the Gupshup balance. The plugin sends the site’s Gupshup User ID and Password.</li>
<li><code>https://www.fast2sms.com/dev/bulkV2</code> — used when the site owner sends an SMS through Fast2SMS, such as an order-status notification, OTP message, or template test. The plugin sends the recipient phone number, rendered message body, Fast2SMS Authorization Key, DLT-approved sender ID, Entity ID, DLT Template ID, and the fixed <code>dlt_manual</code> route.</li>
<li><code>https://www.fast2sms.com/dev/wallet</code> — used when the dashboard or gateway settings page fetches the Fast2SMS wallet balance. The plugin sends the site’s Fast2SMS Authorization Key.</li>
<li><code>https://2factor.in/API/R1/</code> — used when the site owner sends an SMS through 2Factor, such as an order-status notification, plugin-generated OTP message, or template test. The plugin sends the recipient phone number, rendered DLT-approved message body, 2Factor API Key, Sender ID/Header, PE ID, and DLT Template ID through the Transactional SMS API. The plugin does not use 2Factor’s OTP generation or OTP verification APIs.</li>
<li><code>https://2factor.in/API/V1/{API_KEY}/ADDON_SERVICES/BAL/TRANSACTIONAL_SMS</code> — used when the dashboard or gateway settings page fetches the 2Factor Transactional SMS balance. The plugin places the site’s 2Factor API Key in the endpoint path as required by the provider.</li>
</ul>
<p>SMS content and phone numbers are sent to the selected gateway only when the site owner enables the plugin and performs an SMS-related action or when a configured WooCommerce/OTP event triggers an SMS.</p>
<p>Service provider: SMSGatewayHub<br />
Terms and Conditions: https://www.smsgatewayhub.com/terms-and-conditions<br />
Privacy Policy: https://www.smsgatewayhub.com/privacy-policy<br />
API Documentation: https://www.smsgatewayhub.com/free-sms-gateway-developer-api</p>
<p>Service provider: ForthFocus SMS Gateway<br />
Terms and Conditions: https://forthfocus.com/terms-and-conditions/<br />
Privacy Policy: https://forthfocus.com/privacy-policy/<br />
Website: https://forthfocus.com/</p>
<p>Service provider: Gupshup<br />
Website: https://www.gupshup.ai/<br />
Terms and Conditions: https://www.gupshup.ai/terms-and-conditions<br />
Privacy Policy: https://www.gupshup.ai/privacy-policy</p>
<p>Service provider: Fast2SMS<br />
Website: https://www.fast2sms.com/<br />
Terms and Conditions: https://www.fast2sms.com/terms-conditions<br />
API Documentation: https://docs.fast2sms.com/</p>
<p>Service provider: 2Factor<br />
Website: https://2factor.in/<br />
Terms and Privacy: https://2factor.in/v3/tos<br />
API Documentation: https://documenter.getpostman.com/view/301893/TWDamFGh</p>
<h4>Compatibility</h4>
<p>The plugin works on both classic (shortcode-based) and block-based WooCommerce checkout, but the depth of integration differs:</p>
<ul>
<li><strong>Classic checkout</strong> (<code>[woocommerce_checkout]</code> shortcode, used by Storefront, Astra, GeneratePress, Flatsome, URNA, Dokan-style themes, and any site with the WC checkout shortcode) — full integration. The OTP gate renders above the checkout form, the billing phone field is automatically locked to the verified number once verification is complete, and the user uses a “Change phone” link if they need to switch numbers.</li>
<li><strong>Block-based checkout</strong> (the new WC Checkout Block, used by Twenty Twenty-Five and other FSE themes by default) — basic integration. The OTP gate renders above the checkout block. The billing phone field inside the React-managed block cannot be locked from outside the block API, so the user is technically able to edit it after verifying. However, the server-side Store API guard rejects order placement if the submitted phone does not match the verified number — so the verification is still enforced, just at submission rather than at the field level. Tightening this into a native checkout-block extension is on the v1.1 roadmap.</li>
</ul>
<p>For the strictest UX and behavior (auto-locked phone field, no possibility of submitting a mismatched number), use the classic checkout. To switch from block-based to classic on a Twenty Twenty-Five site, edit the Checkout page and replace the “Checkout” block with the <code>[woocommerce_checkout]</code> shortcode.</p>
<h4>Setup wizard</h4>
<p>A 3-step setup wizard guides you through:</p>
<ol>
<li>Gateway selection and credentials (provider-specific credentials such as API key, Fast2SMS Authorization Key, 2Factor API Key, or Gupshup User ID/Password, sender ID/mask, route/channel where applicable, and DLT details where applicable)</li>
<li>Notification templates (DLT ID + approved message body for each order event you want to notify on)</li>
<li>OTP verification (which flows to enable, and the OTP message templates)</li>
</ol>
<p>You can re-run the wizard from the Dashboard at any time, or skip it entirely if you prefer to configure manually.</p>
<h3>Trademark Notice</h3>
<p>ForthFocus is a trademark of FORTHFOCUS GROUP.</p>
<p>WordPress, WooCommerce, and Woo are trademarks of their respective owners. This plugin is not affiliated with, endorsed by, sponsored by, or officially associated with the WordPress Foundation, Automattic Inc., WooCommerce, or Woo.</p>
<p>SMSGatewayHub, MSG91, Gupshup, Fast2SMS, 2Factor, Twilio, and Kaleyra are trademarks or brands of their respective owners. This plugin currently integrates with SMSGatewayHub, ForthFocus SMS Gateway, Gupshup, Fast2SMS, and 2Factor. MSG91, Twilio, and Kaleyra are referenced only as examples of additional providers planned for future releases. The plugin is not officially endorsed by or affiliated with third-party gateway brands unless stated through a formal partnership.</p>


ForthFocus SMS – OTP Verification, Order Notifications & Indian DLT for WooCommerce

Indian DLT-compliant SMS for WooCommerce: order-status notifications, OTP at login / signup / checkout, full delivery logs.

GatewayAPI vs ForthFocus SMS – OTP Verification, Order Notifications & Indian DLT for WooCommerce