My wordpress site sits behind Akamai, which is a cacheing service similar to Cloudflare. I make the following API call: GET /wp-json/mytheme/v1/get-posts?post_type=videos This … Read more
I’m trying to verify that the nonce I created exists but for some reason it keeps returning false, why is this happening? Creating … Read more
This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, … Read more
On using inspect element to check the ‘href’ attribute of ‘Deactivate’ links for the plugins listed on plugins.php page, I found that the … Read more
Here’s an interesting experiment: Go to wordpress plugins listing page, notice the activate, deactivate links all have a nonce part in the request. … Read more
Goal: I want to cache the full WordPress response via NGINX and exclusively use the REST API for the user specific parts. Issue: … Read more
Alright, so let’s say you develop a website where you enqueue a js script on a page X of your frontend, using: wp_enqueue_script( … Read more
I have my wp-admin section forced to HTTPS via a plugin. I also have specific pages that are using https on the frontend … Read more
W3C says there is a new attribute in HTML5.1 called nonce for style and script that can be used by the Content Security … Read more
I am using a plugin which makes its code publicly available. Therefore, anyone can see the $action and $name parameters used to generate … Read more