diff --git a/guest_ajax.php b/guest_ajax.php
index b80560d5..7bc84ff3 100644
--- a/guest_ajax.php
+++ b/guest_ajax.php
@@ -10,6 +10,8 @@ require_once "config.php";
 
 require_once "functions.php";
 
+require_once "rfc6238.php";
+
 
 /*
  * Creates & Returns a Stripe Payment Intent for a particular invoice ID
@@ -119,3 +121,9 @@ if (isset($_GET['stripe_create_pi'])) {
     }
 
 }
+
+if (isset($_GET['get_totp_token'])) {
+    $otp = TokenAuth6238::getTokenCode(strtoupper($_GET['totp_secret']));
+
+    echo json_encode($otp);
+}
diff --git a/guest_view_item.php b/guest_view_item.php
index 82e4150d..2352dc46 100644
--- a/guest_view_item.php
+++ b/guest_view_item.php
@@ -201,9 +201,9 @@ if ($item_type == "Document") {
 
     <script>
         function showOTP(id, secret) {
-            //Send a GET request to ajax.php as ajax.php?get_totp_token=true&totp_secret=SECRET
+            //Send a GET request to ajax.php as guest_ajax.php?get_totp_token=true&totp_secret=SECRET
             jQuery.get(
-                "ajax.php",
+                "guest_ajax.php",
                 {get_totp_token: 'true', totp_secret: secret},
                 function(data) {
                     //If we get a response from post.php, parse it as JSON