Tag Info

New answers tagged


wp_create_nonce is a pluggable function loaded after plugins are loaded. Be sure to call your class method on proper hook, 'init' (or later) is a good place: once your function output something (a form) there is no reason to run earlier than that.


You should not. Nonce is used to protect against cross site request forgery attacks (CSRF) in which another aite tries to trick you into submitting a form to your site which will perform some hostile action. Nonces are unique value that can be generated only by a specific site at a specific time and therefor can not be guess by the attacking site. What you ...

Top 50 recent answers are included