How to send SMS verification code when user logs in in PHP

How to send SMS verification codes when users log in in PHP

In modern Internet applications, it is crucial to ensure the security of user accounts. When users log in, using SMS verification codes for verification is currently one of the common and safe ways. This article will introduce how to send SMS verification codes when users log in in PHP, and provide specific code examples.

First, we need an SMS service provider’s API for sending SMS verification codes. Here we take the Alibaba Cloud SMS service as an example. The following are the basic steps and code examples:

1. Register an Alibaba Cloud account and activate the SMS service, and obtain the AccessKeyId and AccessKeySecret. These are necessary for calling the API for authentication. certificate.
2. Install aliyun-php-sdk-core, which is a PHP SDK used to access various Alibaba Cloud services. It can be installed through Composer:

composer require alibabacloud/sdk

3. Create a PHP file named sms_send.php to handle the sending logic of SMS verification codes. The code is as follows:

<?php
require 'vendor/autoload.php'; // 引入阿里云SDK

use AlibabaCloudClientFactoryConfigLoader;
use AlibabaCloudClientAlibabaCloud;
use AlibabaCloudClientExceptionClientException;
use AlibabaCloudClientExceptionServerException;

function sendSMS($phoneNumber, $code) {
    $config = Loader::loadDefault();
    AlibabaCloud::accessKeyClient($config['accessKeyId'], $config['accessKeySecret'])
                    ->regionId($config['region'])
                    ->asDefaultClient();

    try {
        $result = AlibabaCloud::rpc()
                            ->product('Dysmsapi')
                            ->version('2017-05-25')
                            ->action('SendSms')
                            ->method('POST')
                            ->host('dysmsapi.aliyuncs.com')
                            ->options([
                                'query' => [
                                    'RegionId' => $config['region'],
                                    'PhoneNumbers' => $phoneNumber,
                                    'SignName' => $config['signName'],
                                    'TemplateCode' => $config['templateCode'],
                                    'TemplateParam' => '{"code":"' . $code . '"}'
                                ],
                            ])
                            ->request();
        return $result->toArray();
    } catch (ClientException $e) {
        // 处理异常
    } catch (ServerException $e) {
        // 处理异常
    }
}

4. In your login page, when the user enters their mobile phone number and clicks the "Send Verification Code" button, call sms_send.php to send the SMS verification code. The code is as follows:

<?php
// 在这之前需要引入sms_send.php并调用sendSMS函数

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $phoneNumber = $_POST['phoneNumber'];

    // 生成一个6位随机验证码
    $code = rand(100000, 999999);

    // 发送短信验证码
    $result = sendSMS($phoneNumber, $code);

    // 根据API的返回结果处理逻辑
    if ($result['Code'] == 'OK') {
        // 短信发送成功，将验证码保存到session中或者其他持久化方式
        $_SESSION['sms_code'] = $code;
        // 返回成功的提示
    } else {
        // 短信发送失败，根据具体情况进行错误处理
    }
}

In the above sample code, we use the API of Alibaba Cloud SMS Service to send SMS verification codes. You can use the APIs of other SMS service providers according to your own needs.

Summary: Through the above steps, we successfully implemented the function of sending SMS verification codes when users log in in PHP. Please note that the sample code is for reference only. In actual applications, it needs to be further optimized and improved according to specific business logic and security requirements.

The above is the detailed content of How to send SMS verification code when user logs in in PHP. For more information, please follow other related articles on the PHP Chinese website!