function mask_number_with_stars_except_the_last_4_digits($cardNumber) {
$last4Digits = substr($cardNumber, -4);
$maskedNumber = str_pad($last4Digits, strlen($cardNumber), '*', STR_PAD_LEFT);
return $maskedNumber;
}
$cardNumber = '9003125334656789';
$maskedNumber = mask_number_with_stars_except_the_last_4_digits($cardNumber);
echo $maskedNumber;
/*
run:
************6789
*/