$num = "13966778888"
$str = substr_replace($num,'****',3,4);