To me it makes sense to send via GET to the page you are currently on.
That way you just hook into admin_init and check for your GET variables.
As for security you can pass nonces via URLS: http://codex.wordpress.org/Function_Reference/wp_nonce_url
Related Posts:
- wp_create_nonce function doesn’t work inside a plugin?
- What are the common security flaws I need to look for? [closed]
- WordPress Capabilities: edit_user vs edit_users
- Plugin development: how to create a form and get custom data?
- Security error WP 4.0 + WP phpBB Bridge [closed]
- Should I use RIPS tool to test my themes and plugins?
- shortcode doesn’t work
- When is it useful to use wp_verify_nonce
- Admin page: form with enctype=”multipart/form-data” does not transfer its data
- Escape when echoed
- How to trigger $_GET request within admin plugin page?
- Custom form action to handle data inside a plugin
- New User Form – Custom Menu Page
- Using a custom plugin to capture input data via Ajax and PHP
- Checkbox conflict in my custom plugin admin page
- I should enable automatic updates?
- Prevent direct access to WordPress plugin assets?
- Submit Form data to another page via Ajax (WordPress Way)
- How to prevent plugins from sniffing/stealing other plugins’ options?
- Select Form Element Not Saving from Plugin Options
- How to append new form elements in “Add New” form of Users in WordPress admin panel?
- Security of a WordPress Plugin
- User loggedin as Subscriber form not sending
- Help to Create a Simple Plugin to make a post
- Content-Security-Policy implementation with WordPress W3Total Cache plugin installed
- Securing a plugin pop-up window
- submit form data to wordpress existing database table using my plugin
- wp_verify_nonce fails always
- WP_Filesystem usage within a block of code
- How can i see/log all requests coming from a registration form (not from the UI)?
- Validating values using Settings API?
- Linking Plugin Files to WP
- Create plugin with form in post and submit it to specific form
- Capturing POST data
- Creating fields in the database
- Undefined variable _POST
- Display file contents within Plugin
- Get plugin directory from a theme
- Rewriting every url
- Custom admin column disappearing when using Quick Edit [duplicate]
- Create page when plugin is activated
- How to un-attach rich text editor from named textarea elements
- How to test a WordPress plugin through the upgrade automatically feature
- Disabled plugins are security holes – rumor or reality?
- How to Create a Directory in a Plugin Folder?
- Declaring script dependencies between scripts enqueued with different action hooks
- Does flush_rewrite_rules() remove all rules added by other plugins as well as mine?
- Create plugin that works in background
- Checking for user role in a custom plugin
- Extend Elementor Archive Posts widget with a custom skin in order to show multiple badges
- HELP: Integrating WP with raw PHP code once published button is hit
- Custom preview_post_link not working for draft post
- wp_enqueue_script fails to include in footer
- jQuery function didn’t work in my plugin
- How can we deal with unmaintained plugins with vulnerabilities?
- How to make Http Request to a php file present in plugin directory of wordpress
- All Users > User List > Update User Meta Field Inline
- Correct way to perform non-cacheable DB query
- How to check current user before all actions and filters?
- Plugin: register_deactivation_hook works perfectly well, while register_activation_hook suddenly stopped working
- How to Add Custom New Published Post Counter Icon on Top of the WordPress Site [closed]
- Adding CSS to custom post type admin page causes error
- How to pass variables to a function argument using add_action [duplicate]
- Activate my plugins via FTP
- How to add apply_filter for a class property in plugin
- wp_list_table class is not safe to use
- update_option_{$option} not showing old value
- creating a plug in that would tap into save/update action of posts [closed]
- A server-side hook failed when committing plugin code to SVN
- Content-Security-Policy Headers are there and showing the correct settings, but still getting a refused connection
- SMTP Error: Could not authenticate [closed]
- Development of plugins to add components like JqueryUI
- plugin enqueue style on all pages
- How can ι create my own (custom) WordPress table/list?
- How to delete all categories programatically?
- File Uploader – Upload without adding to Media Library
- Adding submenu to custom plugin menu page created with add_menu_page() function
- What is necessary to secure a WP plugin against direct file access attempts?
- why the wp_register_script doesn’t work for register_activation_hook
- Add a Custom Field in Comment Box next to the Text area
- How do you create a re-useable HTML fragment in wordpress
- Plugin for visitors to edit content without logging in? [closed]
- WordPress Forms Advance Conditional Logic
- woocommerce: Customize email with item total count
- The styles in the recent posts widgets plugin not working
- implement checkbox or toggle switch in plugin code
- How to put a maximum real-time users limit
- Creating posts with acf_form() that has a relationship type field
- Custom admin plugin read CSV
- How to get short description under heading – Visual Composer [closed]
- plugin installing error
- How can I use wp_ajax_response for front-end error reporting?
- Force download a file within plugin file
- Is it possible to run javascript on plugin deactivated?
- Gutenberg: Dynamic Block – Show saved data in the editor
- How to fix ‘Call to undefined function do_settings()’ error?
- Build a Boat Form Plugin [closed]
- wp_handle_upload – specified file failed upload test
- how to make wordpress remember my choice
- wordpress admin-ajax bad request 400