WP-OTP

注意: 从2014.10.1.起不再维护。

Notice: No longer maintained From 2014.10.1.

=====================

WP_OTP: wordpress 动态密码认证插件 (wordpress one-time-password plug)


分为wp_plug_oath_otp(wp插件部分) 和 ios客户端 wordpress_otp.ipa(app store) 。

It contains two parts,the one is the wordpress php plug wp_plug_oath_otp ,and the ios client side(Download from (app store).

windows phone 7版本(需要xx才能部署): wp_otp_xap

Note: You can download the detail installation document (English version) at here.

机制: timestamp+握手密钥,sha1之后,取前面六位,每个30秒变化一次. 要求博客空间时间和手机时间同步.

Mechanisms: timestamp + handshake key, then use sha1, and taken in front of six,.notice:each 30 seconds change. Asked the blog space, time and phone time synchronization.

时间同步方式的动态密码,最方便的是 客户端不需要上网,看个人取舍了.

目前仅推出了ios客户端,等解决方案完善后,再移植到其他平台.

一般来说,在握手密钥未知的情况下,还是比原来验证码机制可靠.比较廉价的解决方案吧.

wordpress php插件下载地址(wordpress php plug download url):wp_plug_oath_otp

使用方法(Usage):

1.【插件】页面上传wp_plug_oath_otp.zip,启用,并点击插件OATHOTP设置页面,设置好握手密钥。

1. Login to your wordpress's  admin page,then goto the plug management page,upload [wp_plug_oath_otp].

when the plug is installed successfully,you can click the OATHOTP link,then setup the handshake key.



 

2.app store上面下载wordpress otp应用(目前需要0.99$).

客户端验证过IOS4.3.3和5.0.1 ,正常使用.(多用户界面如下)

可以使用“+”,增加一个博客;点击对应博客名称,进入详细界面,设置共享密钥,保存到本地即可。

若有想删除一个博客,向右滑动,选择删除即可。

2.Download our wordpress otp app from app store.

To add a blog,you can click the navigation  button "+";then click the blog name,and input the shakehand key(same with the wordpress blog php plug-in),then click the "SAVE" button to save the information to local.

If you want to delete a blog,just slide from left to right,then click DEL button.



 

3.和平时一样登录即可. 注意,动态密码一次仅保留30秒(每30秒自动更新一次).

注意: 由于是时间同步方式的验证机制,必须确保worldpress服务器时间和手机时间同步.

3.When you logon to wordpress blog,you must input the otp code at OATH_OTP field.It changes once every 30 seconds.

Warning:  Your phone's time is must be synchronized with your blog's time.
| 0个评论