I’m developing a plugin and after reading through wp-login.php, I can’t seem to work out why some things are done the way they are. Why does WordPress hide the reset password key from the URL? After reading this question, it appears that I am not the only one. However, in additional to the question linked, … Read more
I have came across the WordPress logout error several times but I really never figured out the cause of it. In earlier days, it was generally that I was missing a nonce but now even with logout link generated by wp_logout_url();, I am greeted with the WP die screen: You are attempting to log out … Read more
I have a form with the action going to a different wordpress site. I want to use wp_nonce to generate fields in the form on site A. Can I use wp_verify_nonce on site B to verify the nonce fields? 1 Answer 1 In theory yes, but it will be a very bad thing to do. … Read more
I noticed while looking at the HTML of an edit page that WordPress uses a lot of hidden input elements for storing nonces. Is there a significant advantage to using either this style of storing nonces for AJAX use or using those stored via the wp_localize_script style? 2 Answers 2 Depends, will the form work … Read more
I have a plugin, a cron job runs refresh_my_plugin() daily. I need a button on my plugins Settings/option page, allowing a user to manually run said function, and I want it inline, with ajax. I’ve got the following, which should work – but how would I add WordPress Nonces to it? <?php if (isset($_POST[‘refresh_my_plugin’])) { … Read more
All, I’ve got two wordpress pages. One wordpress page displays a form to do some registration stuff for the website. The second wordpress page actually processes the data and inserts it into a custom MySQL table that I have. I’d like to use the nonce functionality inherit to WordPress. The user doesn’t have to be … Read more
Imagine the following scenario: John has an account on my website, but is currently not logged in. He clicks the “upvote” button on an article, but is redirected to the login page because only logged-in users can upvote. In the referral URL (to which John is redirected after login) the following parameters are passed: action=upvote … Read more
I am creating a plugin to display all posts from all custom post type. It is something like in edit.php, but instead of displaying single post type, I would like to display all posts in one page from multiple custom post type. I follow the tutorial at here to create the plugin and I did … Read more
I’m trying to add a nonce to my plugin’s Ajax. I’m not sure why I’m getting this error: Fatal error: Call to undefined function wp_create_nonce() In my php file : wp_localize_script(‘my-ajax-handle’, ‘the_ajax_script’, array(‘ajaxurl’=> admin_url(‘admin-ajax.php’), ‘my_nonce’ => wp_create_nonce(‘myajax-nonce’))); In js file: jQuery.post(the_ajax_script.ajaxurl, {my_nonce : the_ajax_script.my_nonce}, jQuery(“#theForm”).serialize() + “&maxLat=”+ map_bounds[0] + “&maxLong=”+ map_bounds[1] + “&minLat=”+ map_bounds[2] + … Read more
I need to do something specific in my save_post callback for bulk and/or quick edits, so how do I check the nonce for that? I can only find _wpnonce in the edit.php html source, but can’t find an action to match it with. I also tried check_admin_referrer() (no arguments) but it fails. What nonce whould … Read more
