ANONY WhatsApp OTP Sender

A professional WordPress plugin for sending One-Time Passwords (OTP) via WhatsApp using the WhatsApp Cloud API.

Features

• Secure OTP Generation: Generates cryptographically secure 6-digit OTPs
• WhatsApp Cloud API Integration: Uses Meta's official WhatsApp Cloud API
• Professional Admin Interface: Clean, modern WordPress admin interface
• Input Validation: Comprehensive validation for phone numbers, tokens, and templates
• Error Handling: Detailed error logging and user-friendly error messages
• Connection Testing: Built-in connection test to verify API credentials
• WordPress Coding Standards: Fully compliant with WPCS
• Security First: No hardcoded credentials, proper sanitization, and nonce verification

Requirements

• WordPress 5.0 or higher
• PHP 7.4 or higher
• WhatsApp Business Account
• WhatsApp Cloud API access token

Installation

1. Upload the plugin files to /wp-content/plugins/anony-sendotp/
2. Activate the plugin through the 'Plugins' screen in WordPress
3. Navigate to 'WA OTP Sender' in the WordPress admin menu
4. Configure your WhatsApp Cloud API credentials

Configuration

Getting WhatsApp Cloud API Credentials

1. Create a Meta Business Account
2. Set up a WhatsApp Business Account
3. Create a WhatsApp Business App
4. Get your Phone Number ID and Access Token

Plugin Settings

1. Phone Number ID: Your WhatsApp Business phone number ID
2. Access Token: Your WhatsApp Cloud API access token
3. Template Name: The name of your approved WhatsApp template
4. Language Code: Language code for your template (e.g., ar, ar_EG, en_US)

Usage

1. Configure your API credentials in the plugin settings
2. Test your connection using the "Test Connection" button
3. Enter a phone number in E.164 format (e.g., +2126xxxxxxx)
4. Click "Send OTP via WhatsApp" to send the OTP

Security Features

• Input Sanitization: All user inputs are properly sanitized
• Nonce Verification: All forms use WordPress nonces for security
• Capability Checks: Only users with manage_options capability can access the plugin
• Secure Logging: Sensitive data is redacted from logs
• No Hardcoded Credentials: All credentials must be configured by the user

Error Handling

The plugin includes comprehensive error handling:

• API Error Logging: All API requests and responses are logged (when WP_DEBUG is enabled)
• User-Friendly Messages: Clear error messages for common issues
• Connection Testing: Built-in test to verify API credentials
• Input Validation: Real-time validation of phone numbers and other inputs

Development

Code Standards

This plugin follows WordPress Coding Standards (WPCS) and includes:

• Proper documentation for all functions and classes
• Consistent naming conventions
• Proper escaping and sanitization
• Security best practices

File Structure

anony-sendotp/
├── anony-sendotp.php          # Main plugin file
├── includes/
│   └── class-anony-wa-otp-admin.php  # Admin functionality
└── README.md                  # This file

Support

For support and questions, please refer to the WordPress plugin documentation or contact the plugin author.

Changelog

1.3.0

• Complete rewrite with professional code structure
• Added comprehensive input validation
• Implemented proper error handling and logging
• Added connection testing functionality
• Improved admin interface with modern styling
• Full WordPress Coding Standards compliance
• Enhanced security measures

License

This plugin is licensed under the GPL v2 or later.

Credits

Developed by Genevsky Dev for professional WhatsApp OTP integration.