SMS OTP Login & Registration Plugin for Botble

The SMS OTP Login & Registration plugin is a lightweight, secure, and fully localized solution for Botble CMS that lets you replace the traditional email/password flow with a login and signup process built entirely around phone numbers and one-time SMS verification codes.

Built from the ground up for Iranian SMS gateways (MeliPayamak and IPPanel), the plugin has a very small footprint and integrates cleanly with Botble's architecture, with no extra dependencies required.

Why This Plugin?

• Users no longer need to remember a password — they simply log in with their phone number and an SMS code.
• Phone-based login noticeably improves signup conversion rates for Iranian storefronts.
• Mandatory phone verification confirms real user identities and helps prevent orders placed with fake numbers.
• SMS order notifications keep both customers and store admins reliably informed of order status.

Key Features

1. Phone-Only Login & Registration

With a single settings toggle, Botble's default login/register form is replaced by an SMS widget: the user enters their phone number, receives a code, and is instantly signed in — whether they're an existing customer or a brand-new one. You can switch this off at any time and revert to the standard Botble form without losing any other settings.

2. Mandatory Phone Verification

Users who register through other means (e.g. Botble's default form) can also be required to verify their phone number. Until verified, they're blocked from account-area pages (orders, addresses, account settings, etc.), while store browsing and checkout remain open.

3. Support for Two Iranian SMS Gateways

• MeliPayamak
• IPPanel

Sending supports both plain text and SMS patterns/templates — you can set a dedicated pattern code in the settings panel for each event (OTP code, customer order notification, admin order notification).

4. SMS Order Notifications

On every new order, both the customer and the store admin receive an SMS notification — each configurable with its own independent pattern.

5. Country-Based Sending Filter

For each SMS gateway, you can restrict sending to numbers from a specific country (e.g. Iran only), so users with numbers outside the gateway's coverage never get funneled into a flow they can't complete.

6. Advanced Rate Limiting

To prevent abuse and code-guessing (brute-force) attacks, the plugin includes a multi-layered, fully admin-configurable rate-limiting system:

• Separate limits for sending a code and failed code verification attempts
• Independent tracking by: phone number, IP address, User-Agent, phone+IP, and phone+User-Agent
• Each with its own configurable threshold, counting window, and block duration

7. Complete SMS Logging

Every SMS sent (OTP codes, verifications, order notifications) is logged in the plugin's log section, making it easy to review and troubleshoot.

8. Attractive, Responsive Design

The OTP code widget features a modern design with individual input boxes per digit, and full support for both right-to-left (RTL) and left-to-right (LTR) layouts.

9. Lightweight, No Extra Dependencies

Built with a small footprint and clean code so it doesn't add unnecessary load to your site's performance.

Security Features

• Full CSRF token validation on every request
• Multi-layered rate limiting for sending and verifying codes (detailed above)
• Sensitive account-area pages fully locked until the phone number is verified

Requirements

• Botble CMS version 7.3 or higher
• An active account with either MeliPayamak or IPPanel

Support

For any questions, feature requests, or bug reports, please reach out through the support channel so they can be addressed in future plugin updates.