How to add WordPress nonces to ajax request

I figured it out. Simply, in my request, under data, I added

"nonce" : "<?php echo wp_create_nonce( 'refresh_my_plugin' ); ?>"

then to verify 

if (isset($_POST['refresh_my_plugin']))
    if ( wp_verify_nonce( $_POST['nonce'], 'refresh_my_plugin' ) )
        refresh_my_plugin();

With incorrect wp_verify_nonce, I instead get a 403, which is reflected on the button with the error handler.

Related Posts:

  1. How to get a unique nonce for each Ajax request?
  2. Nonces and Cache
  3. Is it safe to assume that a nonce may be validated more than once?
  4. Multiple ajax nonce requests
  5. Using Nonces for AJAX that only retrieves data
  6. How to verify nonce from Bulk/Quick Edit in save_post?
  7. Nonces and Ajax request to REST API and verification
  8. Ajax function returns -1
  9. Serving nonces through AJAX is not refreshing nonce, returning 403 error
  10. wp_verify_nonce always returns false when logged in as admin
  11. ajax and nonce when JavaScript is in a seperate file
  12. wp_verify_nonce doesn’t return true on server when it matches the nonce
  13. AJAX requests broken due to HTTPS for wp-admin
  14. Nonces, AJAX, script variables & security in WordPress
  15. Why does WordPress Heartbeat login not refresh the nonces?
  16. wp-admin AJAX with Fetch API is done without user
  17. How do I check if AJAX nonces are implemented correctly?
  18. How to check an ajax nonce in PHP
  19. Can a wp_nonce created from domain 1 to be verified on domain 2?
  20. how to send Ajax request in wordpress backend
  21. Identical wp_rest nonce returned from rest_api
  22. WP Admin AJAX Security – using POST to include a relative URL
  23. wp_create_nonce() in REST API makes user->ID zero
  24. ajax nonce verification failing
  25. SSO autologin WordPress + Ajax
  26. Nonce fails on ajax save
  27. Unable to successfully verify nonce
  28. Cache plugins and ajax nonce verification
  29. Nonce doesn’t validate in nopriv call
  30. Why does check_ajax_referer give a 403 error on https websites?
  31. WordPress is creating nonce as a logged in user but verifying it incorrectly
  32. javascript ajax and nonce
  33. How to check nonce lifetime value of plugins?
  34. Using nonce when loading posts with AJAX
  35. Should wordpress nonce be placed in html form or in javascript file
  36. wp_verify_nonce not working on the mobile device
  37. How do I mitigate replay attacks when talking about actions that shouldn’t happen twice?
  38. AJAX form not working, still reloads on submit
  39. Ajax Security regarding user priviliges and nonces
  40. How to use nonces for frontend AJAX voting if the page gets cached?
  41. WordPress wp_localize_script nonce and ajax URL
  42. How to stop a nonce from being cached in an inline script, or alternatives to regenerate it if expired?
  43. Ajax in a settings page (update_option is undefined)
  44. Nonces can be reused multiple times? Bug / Security issue?
  45. gettext does not translate when called in ajax
  46. Execute one AJAX request after another AJAX request finished
  47. Load tinyMCE / wp_editor() via AJAX [duplicate]
  48. Load page content with AJAX using Fancybox?
  49. Dynamically changing navigation links (next and previous) via AJAX
  50. AJAX action not triggering PHP function
  51. add_action and Ajax
  52. Enqueue script dinamically
  53. Most performant way of fetching remote API data?
  54. Admin-ajax responds with 0 due to empty $_REQUEST
  55. Help with AJAX front end comment moderation
  56. wp_ajax_nopriv_xxx is not firing on one site, works on all others. -1 for logged out users
  57. Ajax Modal Flickers When Opened Multiple Times
  58. Increased CPU load due to admin-ajax.php spam
  59. Ajax image upload with media_handle_upload and form.js
  60. Can’t get result from sql using ajax result
  61. Theme Customizer – Conditional Controls
  62. WordPress AJAX – how to return true or false in the callback function
  63. WordPress Ajax POST Error 403 admin-ajax.php
  64. Ajax post returning full html page as response
  65. Which allowed API hooks work to add wp_ajax action?
  66. Why ajax doesn’t work on certain wordpress hooks?
  67. Pass additional parameter with async upload
  68. Performance optimization of tree like structure
  69. WordPress search results with Ajax, get_post_type() not working
  70. Audio TAG Not using MediaElement When Page is loaded through ajax
  71. WordPress ajax call returns a zero though die()
  72. wp_update_post onclick button using ajax
  73. wp_ajax declaration confusing for Front end
  74. WP_query offset seems to be counting draft post – AJAX load more
  75. Can’t load search results with ajax
  76. wp_ajax is not calling the action
  77. Deny dashboard access breaks ajax requests
  78. Run javascript upon successfully set featured image
  79. update_option in WordPress AJAX
  80. ajax in admin menu
  81. Ajax Favorite from foreach (how to specify which result result is processed)
  82. change wordpress pagination url after doing the request
  83. WordPress responds to the ajax request with readyState 1, 2, 3 before responding with 4
  84. Filter images from media library by guid meta field
  85. Counting Posts with multiple taxonomy and terms condition using MySQL and AJAX
  86. 400 Bad Request getting on AJAX Call
  87. admin-ajax.php 403 errors – no caching, permissions are fine
  88. How to add Ajax to this Pagination i made?
  89. Adding user using admin ajax by a user with custom role
  90. How can I run two AJAX requests simultaneously in WordPress?
  91. Issue developing an AJAX form with WordPress
  92. Can Ajax Action [add_action(‘wp_ajax_{action_name}’, ‘{action_name}’] be hooked into wp hook
  93. Strange AJAX problem (SOMETIMES works in Chrome/FF, ALWAYS works in Midori)
  94. How to check for dependencies for a specific page and enqueue them
  95. Loads posts of different year via AJAX call
  96. Ajax object comes back empty
  97. WordPress & Ajax
  98. wordpress ajax always return 0
  99. Can’t have two simultaneous charts using Apex Charts
  100. WordPress REST API FormData: Form Not Submitted When No Files Attached

Leave a Comment