Security error WP 4.0 + WP phpBB Bridge [closed]

Hopefully this is a temporary fix for you. The idea is to override the nonce.

Add the following in a functions.php file or in the plugin itself

function wp_verify_nonce($nonce, $action = -1) {
return 1;
}

For now, this works on the bridge I use on my site (A different bridge for a different forum software package). I’d love to figure out how to use WP_Session_Tokens to set this up so the nonce is verified.

Maybe this reference will be helpful.

http://developer.wordpress.org/reference/classes/wp_session_tokens/get_instance/

as well as this ticket:

https://core.trac.wordpress.org/ticket/20276

IMHO: I disagree that the question is off-topic. It is very much on topic because external authentication has been changed in WordPress 4.0 and may cause many people issues. After all, the developers added the session file and that is probably the root to the problem.