How to add WordPress nonces to ajax request

I figured it out. Simply, in my request, under data, I added

"nonce" : "<?php echo wp_create_nonce( 'refresh_my_plugin' ); ?>"

then to verify 

if (isset($_POST['refresh_my_plugin']))
    if ( wp_verify_nonce( $_POST['nonce'], 'refresh_my_plugin' ) )
        refresh_my_plugin();

With incorrect wp_verify_nonce, I instead get a 403, which is reflected on the button with the error handler.

Related Posts:

  1. How to get a unique nonce for each Ajax request?
  2. Nonces and Cache
  3. Is it safe to assume that a nonce may be validated more than once?
  4. Multiple ajax nonce requests
  5. Using Nonces for AJAX that only retrieves data
  6. How to verify nonce from Bulk/Quick Edit in save_post?
  7. Nonces and Ajax request to REST API and verification
  8. Ajax function returns -1
  9. Serving nonces through AJAX is not refreshing nonce, returning 403 error
  10. wp_verify_nonce always returns false when logged in as admin
  11. ajax and nonce when JavaScript is in a seperate file
  12. wp_verify_nonce doesn’t return true on server when it matches the nonce
  13. AJAX requests broken due to HTTPS for wp-admin
  14. Nonces, AJAX, script variables & security in WordPress
  15. Why does WordPress Heartbeat login not refresh the nonces?
  16. wp-admin AJAX with Fetch API is done without user
  17. How do I check if AJAX nonces are implemented correctly?
  18. How to check an ajax nonce in PHP
  19. Can a wp_nonce created from domain 1 to be verified on domain 2?
  20. how to send Ajax request in wordpress backend
  21. Identical wp_rest nonce returned from rest_api
  22. WP Admin AJAX Security – using POST to include a relative URL
  23. wp_create_nonce() in REST API makes user->ID zero
  24. ajax nonce verification failing
  25. SSO autologin WordPress + Ajax
  26. Nonce fails on ajax save
  27. Unable to successfully verify nonce
  28. Cache plugins and ajax nonce verification
  29. Nonce doesn’t validate in nopriv call
  30. Why does check_ajax_referer give a 403 error on https websites?
  31. WordPress is creating nonce as a logged in user but verifying it incorrectly
  32. javascript ajax and nonce
  33. How to check nonce lifetime value of plugins?
  34. Using nonce when loading posts with AJAX
  35. Should wordpress nonce be placed in html form or in javascript file
  36. wp_verify_nonce not working on the mobile device
  37. How do I mitigate replay attacks when talking about actions that shouldn’t happen twice?
  38. AJAX form not working, still reloads on submit
  39. Ajax Security regarding user priviliges and nonces
  40. How to use nonces for frontend AJAX voting if the page gets cached?
  41. WordPress wp_localize_script nonce and ajax URL
  42. ASP.NET MVC controller actions that return JSON or partial html
  43. How to check if I am in admin-ajax.php?
  44. Ajax in a settings page (update_option is undefined)
  45. Nonces can be reused multiple times? Bug / Security issue?
  46. admin-ajax.php vs Custom Page Template for Ajax Requests
  47. AJAX Implementation
  48. how to use ajax in plugin admin area?
  49. Load page content with AJAX using Fancybox?
  50. edit-comments.php comment_row_actions ajax problem
  51. jQuery UI Autocomplete showing all results
  52. How to Access custom database content with AJAX onClick refresh of div inside member-only WordPress page?
  53. Ajaxing in functions.php
  54. add_action and Ajax
  55. Embedded Twitter feed won’t render nicely when loaded via Ajax
  56. Enqueue script dinamically
  57. Most performant way of fetching remote API data?
  58. Admin-ajax responds with 0 due to empty $_REQUEST
  59. Using ajax with wordpress
  60. Using foreach inside an ajax function
  61. Ajax Modal Flickers When Opened Multiple Times
  62. Ajax image upload with media_handle_upload and form.js
  63. Caching-Plugins and Ajax-Page-Parts
  64. Ajax loading duplicate post
  65. WordPress Ajax POST Error 403 admin-ajax.php
  66. How do I detect in which page ajax_query_attachments_args is loaded?
  67. Ajax post returning full html page as response
  68. Which allowed API hooks work to add wp_ajax action?
  69. Why ajax doesn’t work on certain wordpress hooks?
  70. Ajax store response json in variables
  71. Performance optimization of tree like structure
  72. WordPress search results with Ajax, get_post_type() not working
  73. How can I set cookies on both secure and non-secure origins at the same time?
  74. Variable Products Being Added to Cart with AJAX on Shop and Category Pages
  75. Is it secure to use admin-ajax.php in front?
  76. Best way to use ajax front-end?
  77. merge wp rest api query to get posts per category does not work
  78. use jQuery.load() to include a php file in a div, wp_query() is part of php file
  79. Load more posts in the same category – Ajax + Timber
  80. admin-ajax.php returns 0 even when the post status code is 200 OK
  81. is there’s a way to get the next page content generated by page break block with ajax call?
  82. Merge PDF files from post custom fields(ACF) into one PDF file and respond back the created PDF file, WordPress(AJAX Request)
  83. Passing value from select form with Ajax not working
  84. Sending email through Ajax without page refresh hangs on admin_ajax.php
  85. Is there a public ajax endpoint?
  86. Why Ajax Doesn’t Work?
  87. How can i do public ajax call?
  88. How to prevent multiple post with same meta value being created simultaneously in WordPress (with ajax)
  89. Can’t GET Variable from AJAX URL
  90. JS global variable doesn’t update
  91. How to update cart total after AJAX success
  92. How to implement AJAX within a class storing shortcode atts as class variables
  93. Jquery wrap permalink in a data-attribute?
  94. (Frontend AJAX) get post data WITH image thumbnail?
  95. Load .php file into div using ajax
  96. AJAX Post from same domain to a wordpress page
  97. Add Ajax loaded posts to existing posts
  98. Using AJAX for dynamic settings pages
  99. ‘Dehighlighting’ navigation once clicked
  100. Run PHPMailer function after ajax function completes that adds row to custom table

Leave a Comment