twilio.php

<?php
namespace mnml2fa;
defined('ABSPATH') || exit;

/**
 * https://www.twilio.com/docs/messaging/api/message-resource#create-a-message-resource
 */
function send_via_twilio( $to, $code='', $link='' ) {

	$to = apply_filters( 'mnml2fa_phone_number', $to );
	if ( ! $to ) return false;
	$to = '+'. trim( $to, ' +' );
	$post = [ 'To' => $to ];

	$settings = get_option( 'mnml2fa' );
	$sid = $settings['twilio_account_sid'];// Account SID
	$user = $settings['twilio_api_sid'];// API SID
	$pass = $settings['twilio_api_secret'];// API Secret

	// phone OR can just be a text string if supported country, and may need to be registered: https://www.twilio.com/docs/glossary/what-alphanumeric-sender-id#twilio-docs-content-area
	if ( !empty( $settings['twilio_from'] ) ) {
		$post['From'] = trim( $settings['twilio_from'], ' +' );
		if ( is_numeric( $post['From'] ) ) $post['From'] = '+'. $post['From'];
	}

	if ( !empty( $settings['twilio_messaging_service_sid'] ) ) $post['MessagingServiceSid'] = $settings['twilio_messaging_service_sid'];// starts with MG https://help.twilio.com/articles/223181308-Getting-started-with-Messaging-Services

	if ( empty( $post['From'] ) && empty( $post['MessagingServiceSid'] ) ) return false;// need one or the other to send.

	$body_c = $body_l = '';

	if ( $code ) {
		$body_c = "Your security code is $code";// default
		if ( !empty($settings['code_sms_message']) ) {
			$body_c = str_ireplace( '%code%', $code, $settings['code_sms_message'], $n );
			if (0===$n) $body_c .= " $code";// add the code on the end if they didn't use the %code% merge tag in their message
		}
	}
	if ( $link ) {
		$body_l = "Click to sign in: $link";// default
		if ( !empty($settings['link_sms_message']) ) {
			$body_l = str_ireplace( '%link%', $link, $settings['link_sms_message'], $n );
			if (0===$n) $body_l .= " $link";// add the code on the end if they didn't use the %code% merge tag in their message
		}
		if ( $body_c ) $body_l = " OR " . lcfirst( $body_l );
	}
	$post['Body'] = $body_c . $body_l;
	if ( empty( $post['Body'] ) ) return false;

	// could add domain-specific code: https://developer.apple.com/news/?id=z0i801mg
	// @example.com #123456

	// https://www.php.net/manual/en/function.curl-setopt.php
	// https://github.com/twilio/twilio-php/blob/main/src/Twilio/Http/CurlClient.php
	$setopt = [
		CURLOPT_URL => "https://api.twilio.com/2010-04-01/Accounts/$sid/Messages.json",
		CURLOPT_RETURNTRANSFER => true,
		// CURLOPT_HEADER => true,// helped with debugging
		CURLOPT_TIMEOUT => 60,
		CURLOPT_POST => true,
		CURLOPT_HTTPHEADER => ['Authorization: Basic ' . base64_encode("$user:$pass")],
		CURLOPT_POSTFIELDS => http_build_query($post),
	];
	$ch = curl_init();
	curl_setopt_array($ch, $setopt);
	$result = curl_exec($ch);
	curl_close($ch);
	$result = json_decode($result);

	if ( empty( $result->date_created ) || !empty( $result->code ) ) {
		error_log("twilio failed: " . var_export($result,true));
		error_log("request body: " . var_export($post,true));
		return false;
	}
	return true;
}


/**
 * phone number field in user profile
 */
add_action('show_user_profile',__NAMESPACE__.'\usermeta_form_field');
add_action('edit_user_profile',__NAMESPACE__.'\usermeta_form_field');
add_action('personal_options_update',__NAMESPACE__.'\usermeta_form_field_update');
add_action('edit_user_profile_update',__NAMESPACE__.'\usermeta_form_field_update');
function usermeta_form_field( $user ) {
	?>
	<h3>2FA Settings</h3>
	<table class="form-table">
		<tr>
			<th><label for="mnml2fano">2FA Phone Number</label></th>
			<td>
				+<input class="regular-text ltr" id="mnml2fano" name="mnml2fano" value="<?php echo esc_attr( get_user_meta( $user->ID, 'mnml2fano', true ) ) ?>">
				<p class="description">Include country code</p>
	</table>
	<?php
}
function usermeta_form_field_update( $user_id ) {
	if ( ! current_user_can( 'edit_user', $user_id ) ) return false;
	// $number = ltrim( filter_input( INPUT_POST, "mnml2fano", FILTER_SANITIZE_NUMBER_INT ), '+' );
	if ( isset( $_POST['mnml2fano'] ) ) {// not sure if its ever not set
		if ( $_POST['mnml2fano'] ) 
			return update_user_meta( $user_id, 'mnml2fano', preg_replace('/\D/', '', $_POST['mnml2fano'] ) );
		else
			return delete_user_meta( $user_id, 'mnml2fano' );
	}
	return;
}