rathsh

<p><strong>Rat Two-Factor Authentication</strong> is a lightweight yet powerful security plugin that adds an extra layer of protection to your WordPress site through email-based One-Time Password (OTP) verification.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Email-based OTP verification</strong> – Secure 6-digit codes sent to user’s email</li>
<li><strong>Lightweight and fast</strong> – Minimal impact on site performance</li>
<li><strong>User-friendly interface</strong> – Clean, responsive design that works on all devices</li>
<li><strong>Flexible settings</strong> – Enable 2FA globally or per user</li>
<li><strong>Role-based requirements</strong> – Require 2FA for specific user roles</li>
<li><strong>Session management</strong> – Secure session handling with timeout protection</li>
<li><strong>AJAX-powered</strong> – Smooth user experience without page reloads</li>
<li><strong>Auto-submit functionality</strong> – Automatically submits form when 6 digits are entered</li>
<li><strong>Resend functionality</strong> – Users can request new codes with cooldown protection</li>
<li><strong>Mobile-friendly</strong> – Optimized for mobile login experiences</li>
<li><strong>Security-first</strong> – Nonce protection, input sanitization, and secure coding practices</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>User enters their username and password normally</li>
<li>If 2FA is enabled, they’re redirected to an OTP verification screen</li>
<li>A 6-digit code is sent to their registered email address</li>
<li>User enters the code to complete login</li>
<li>Code expires after 10 minutes for security</li>
</ol>
<h4>Perfect For</h4>
<ul>
<li><strong>Business websites</strong> requiring enhanced security</li>
<li><strong>E-commerce stores</strong> protecting customer accounts</li>
<li><strong>Membership sites</strong> with sensitive user data</li>
<li><strong>Multi-author blogs</strong> securing contributor access</li>
<li><strong>Any WordPress site</strong> wanting better login security</li>
</ul>
<h4>Admin Features</h4>
<ul>
<li><strong>Global 2FA setting</strong> – Enable for all users</li>
<li><strong>Force 2FA option</strong> – Make it mandatory for selected roles</li>
<li><strong>Role-based configuration</strong> – Choose which roles require 2FA</li>
<li><strong>User profile integration</strong> – Users can enable/disable 2FA individually</li>
<li><strong>Clean admin interface</strong> – Easy to configure and manage</li>
</ul>
<h4>Developer Friendly</h4>
<ul>
<li><strong>Well-documented code</strong> with inline comments</li>
<li><strong>WordPress coding standards</strong> compliant</li>
<li><strong>Hook system</strong> for customization</li>
<li><strong>Lightweight codebase</strong> for easy modification</li>
<li><strong>No external dependencies</strong> – Pure WordPress integration</li>
</ul>
<h4>Security Features</h4>
<ul>
<li><strong>Nonce verification</strong> for all AJAX requests</li>
<li><strong>Input sanitization</strong> and validation</li>
<li><strong>Secure OTP generation</strong> using WordPress built-in functions</li>
<li><strong>Session timeout</strong> protection (10 minutes)</li>
<li><strong>Rate limiting</strong> on resend requests</li>
<li><strong>No plain text storage</strong> of OTP codes</li>
</ul>
<h3>Configuration</h3>
<h4>Global Settings</h4>
<p>Navigate to <strong>Settings > Two-Factor Auth</strong> to configure:</p>
<ul>
<li><strong>Enable 2FA Globally</strong>: Turn on 2FA for all users</li>
<li><strong>Force 2FA for All Users</strong>: Make 2FA mandatory regardless of user preference</li>
<li><strong>Required User Roles</strong>: Select specific roles that must use 2FA</li>
</ul>
<h4>User Settings</h4>
<p>Each user can enable/disable 2FA in their profile:</p>
<ol>
<li>Go to <strong>Users > Profile</strong> (or <strong>Users > Your Profile</strong>)</li>
<li>Find the “Two-Factor Authentication” section</li>
<li>Check “Enable 2FA” to activate for that user</li>
<li>Save the profile</li>
</ol>
<h4>Email Configuration</h4>
<p>The plugin uses WordPress’s built-in <code>wp_mail()</code> function. Ensure your site can send emails properly. Consider using:</p>
<ul>
<li>SMTP plugins for reliable email delivery</li>
<li>Email services like SendGrid, Mailgun, or Amazon SES</li>
<li>Proper SPF/DKIM records for your domain</li>
</ul>
<h3>Support</h3>
<p>For support, feature requests, or bug reports:</p>
<ul>
<li><strong>Plugin Support</strong>: <a href="https://wordpress.org/support/plugin/rat-two-factor-authentication" rel="ugc">WordPress.org Support Forum</a></li>
<li><strong>Documentation</strong>: Available in the plugin’s admin area</li>
<li><strong>Bug Reports</strong>: Please provide detailed information about your setup</li>
</ul>
<h3>Contributing</h3>
<p>We welcome contributions! The plugin follows WordPress coding standards and best practices.</p>
<h3>Privacy Policy</h3>
<p>This plugin:<br />
* Stores minimal user data (2FA preference and temporary OTP hashes)<br />
* Does not send data to external services<br />
* Uses WordPress’s built-in email system<br />
* Follows WordPress privacy guidelines<br />
* Allows data export/erasure as per GDPR requirements</p>
<h3>Technical Requirements</h3>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>MySQL 5.6 or higher (or equivalent MariaDB)</li>
<li>Ability to send emails from WordPress</li>
<li>Modern web browser with JavaScript enabled</li>
</ul>
<h3>Credits</h3>
<p>Developed with ❤️ by the Rat Plugins team, focused on creating lightweight, powerful, and user-friendly WordPress plugins.</p>
<h3>License</h3>
<p>This plugin is licensed under the GPL v2 or later.</p>
<blockquote>
<p>This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.</p>
<p>This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.</p>
</blockquote>


Rat Two-Factor Authentication

Lightweight and powerful Two-Factor Authentication plugin for WordPress with email-based OTP verification.

onlinecity

<p>This plugin enables you to send SMS messages straight from the WordPress backend or via the programmer’s API.</p>
<p>Also included is a free SMS two-factor authentication module, which hardens the security of your site considerably.</p>
<p>All you need is the plugin and a free <a href="https://gatewayapi.com/" rel="nofollow ugc">GatewayAPI.com</a> account.</p>
<p>Main features:</p>
<ul>
<li>
<p><strong>📱 Send SMS messages / texts</strong></p>
<ul>
<li>Add custom data to recipients to perform mail merge.</li>
<li>Import recipient lists from CSV/Excel.</li>
<li>Manage target groups.</li>
<li>Manage broadcasts.</li>
<li>Easy-to-use programmer’s API.</li>
<li>Short codes for signup/unsubscribe/edit profile forms.</li>
<li>Automatic integration with Contact Form 7.</li>
</ul>
</li>
<li>
<p><strong>🔐 Two-factor authentication</strong></p>
<ul>
<li>Easy-to-use: No apps needed!</li>
<li>Easy for admins: Just tick a box and it works!</li>
<li>High level of security!</li>
<li>Pick roles to enable mandatory two-factor authentication.</li>
<li>Re-authorise at each login or remember devices for up to 30 days.</li>
</ul>
</li>
<li>
<p><strong>✊ Receive SMS messages</strong></p>
<ul>
<li>Use your own keyword(s) or phone numbers to receive SMS messages.</li>
<li>View incoming messages.</li>
<li>Auto-reply to incoming SMS messages.</li>
</ul>
</li>
<li>
<p>🔔 Notification module for admins <strong>(BETA)</strong></p>
<ul>
<li>Receive an SMS message when important changes occur.</li>
<li>Choose from a long list of triggers.</li>
<li>Receive an SMS when a new user is created, when certain pages are edited or when new pages are published.</li>
<li>Configure which users will receive SMS messages. Can be role-based or user-based.</li>
<li><strong>BETA</strong>: Please write to us and let us know what you like, and what you feel is missing (or broken), so we can improve upon this new feature.</li>
</ul>
</li>
</ul>
<p><strong>Easy to get started:</strong></p>
<ul>
<li>Complete step-by-step user guide with several screenshots</li>
<li>The plugin has help texts included.</li>
<li>Live chat support and mail support from GatewayAPI.com.</li>
</ul>
<p><strong>SMS messages provided by one of the leading SMS Gateways in Europe</strong></p>
<ul>
<li>GatewayAPI.com sends hundreds of millions of SMS messages each year on behalf of tens of thousands of customers all over the globe.</li>
<li>Offices in Copenhagen, Odense and Aalborg, Denmark.</li>
<li>Company founded in 1999.</li>
<li>Free support, no subscription, AND unbeatable prices.</li>
<li>Most SMS messages are delivered within 0.3 seconds.</li>
</ul>
<p>If you prefer to disable the UI-features and manage broadcasts from code instead, then that is also possible. For this purpose, you can use the method gwapi_send_sms. The method supports specification of content, broadcast to multiple recipients, specification of sender ID and specification of type of SMS.</p>
<h4>Getting Started</h4>
<p>We have created a number of tutorials, demonstrating how to get started and how to use the various features. Watch the following video on how to set everything up and send your first SMS message:</p>
<p><a href="https://wordpress.org/plugins/gatewayapi/installation/" rel="ugc">Click here for more videos</a>.</p>
<h3>How to use</h3>
<h4>Most users: User Guide</h4>
<p>Most topics are shown in a step-by-step style with numerous screenshots in our User Guide – even quite advanced topics.</p>
<p><a href="https://github.com/onlinecity/wp-gatewayapi/wiki/User-Guide" rel="nofollow ugc">Open the User Guide</a></p>
<h4>Advanced: Programmers API</h4>
<p>Send an SMS message to one or multiple recipients by calling <code>gwapi_send_sms</code>with the following arguments</p>
<ul>
<li>$message (string) A string containing the message to be sent.</li>
<li>$recipients (array|string) A single recipient or a list of recipients.</li>
<li>$sender (string, optional) Sender text (11 chars or 15 digits)</li>
<li>$destaddr (string, optional) Type of SMS – Can be MOBILE (regular SMS) or DISPLAY (shown immediately on phone and usually not stored, also knows as a Flash SMS)</li>
</ul>
<p>Returns the GatewayAPI.com message-ID on success and a WP_Error on failure.</p>
<p>The recipients-argument may consist of either:</p>
<ul>
<li>An integer or string, containing an MSISDN (CC + number, digits only).<br />
Example number: Country code 45. Phone number: 12 34 56 78.<br />
Resulting MSISDN: “4512345678”.</li>
<li>An array containing MSISDN (see above).</li>
<li>An array in which MSISDN’s are keys and their values are arrays of tags.<br />
Example in JSON:<br />
{ “4512345678”: { “%NAME%”: “John Doe”, “%GENDER%”: “Male” } }</li>
</ul>
<p>Note: SMS messages sent via <code>gwapi_send_sms</code> are NOT saved in WordPress. They are however still accessible via the traffic log on GatewayAPI.com</p>
<h3>**Screenshots**</h3>
<p>Set up your OAuth key and secret here. This settings page is available for administrators only.</p>
<p>If the SMS Sending UI is enabled, this is how you can send an SMS from the backend.</p>
<p>Contact Form 7: GatewayAPI automatically adds extra controls for supporting signup/update/unsubscribe in the Contact Form 7 form builder.</p>
<p>Contact Form 7: Creating a “recipient groups” selection field.</p>


GatewayAPI

Send SMS'es and enable SMS-based two-factor security.

Rat Two-Factor Authentication vs GatewayAPI