function maskNumberWithStarsExceptFirstSixAndLastFour($cardNumber) {
$first6Digits = substr($cardNumber, 0, 6);
$last4Digits = substr($cardNumber, -4);
$requiredMask = str_repeat("*", strlen($cardNumber) - strlen($first6Digits) - strlen($last4Digits));
return $first6Digits . $requiredMask . $last4Digits;
}
$cardNumber = "9003125334656789";
$maskedNumber = maskNumberWithStarsExceptFirstSixAndLastFour($cardNumber);
echo $maskedNumber;
/*
run:
900312******6789
*/