You don’t need a nonce for every field, a single nonce should suffice
This is because a nonce isn’t tied to a field, it’s tied to a request, and verifies that you did indeed intend to press update, or click a link, submit a form, etc
As an example, back in the days of MySpace, they didn’t verify intention on the logout script, so you could put an image tag on your profile and set the src
as the logout URL. Anybody who visited your profile would get logged out.
If MySpace had added a nonce, they’d have been able to verify if you’d arrived at the URL intentionally, or by accident/malice.
As a result, you should never need to verify multiple nonces at the same time, you only need 1.
Related Posts:
- wp_verify_nonce vs check_admin_referer
- Setting admin edit panels & metaboxes positions and visibility for ALL users and admins
- Remove default WordPress styling from metaboxes on edit post pages?
- Create a Meta Box in the Admin User Screen?
- How to remove “publish metabox” from each post type
- Make the Status, Visibility, or Date fields opened by default in the Publish box
- Set Edit Post meta boxes inactive
- add instructions to upload pages and / or forms
- Get content of publish box
- Adding additional text fields and image upload to a Page?
- Remove “minor-publishing” div from Publish admin metabox
- Where in WP can I check history or log of updates of plugins etc?
- How does admin-ajax.php work?
- Hide other users’ posts in admin panel
- Editor Styles and Typekit
- WordPress admin stylesheet
- Is it possible to create a WordPress tour? V3.3.1
- Securing Admin Accounts – Username Discovery
- Can an admin check passwords of registered users?
- Prevent author from changing their posts if admin has modified
- Showing WP_Error message with admin_notice action hook
- Set Featured Image programmatically (in admin) with JavaScript?
- Can I set a default dashboard layout for all users?
- Taxonomy/category hierarchy lost when editing posts [closed]
- Making the thumbnails in the backend Media section bigger
- How to remove “Super Admin” from All Users for those that are not a “Super Admin”?
- Customize the upload screen
- How to print the output of the get_num_queries function from frontend to backend?
- Custom Meta Boxes – Nonce Issue – Move to trash issue
- Javascript not working in admin
- Setting Login with User Name and Password default option for Jetpack Admin Login
- Downloading entire site locally with httrack
- add_submenu_page set for multiple roles [duplicate]
- Adminstering Large Number of WordPress Sites
- How To Create User Specific Admin User Pages?
- Adding markup to column text in “Edit Pages” admin page
- Disable HTML (Text) Tab in Post Editor
- Admin: global $post empty
- Change home-url in dashboard
- Admin doesn’t have sufficient permissions to plugin’s page
- How to restrict the editors from viewing/editing pages created by admin?
- Admin multiple column sorting
- How do I add a contact form?
- Unable to login, old site with previous developer gone
- How to default display name to first name and last and disable the profile field
- Adding html format on tinymce visual editor
- Hide metabox dependant on page template chosen
- How can I show the contents of only a few users
- WordPress ACL (folder + permissions)
- Editors change a permalink on an unpublished post, but only admins change a permalink on a post that has ever been published?
- Locked out of admin and some pictures don’t show after failed SSL installation
- How-to turn off mobile admin mode?
- How can I make the user names of commentors clickable links to the user’s profile from the admin comment screen?
- Grabbing the first image attached to a post and use it with the admin columns
- Keep Logged in Users out of Admin Panel
- Add Custom Script in Other Plugin’s Options page
- Is there a wp-config.php option or constant that I can set to allow me to download nightly / beta builds?
- Shared account / dual blogging in WordPress
- WordPress Brute Force Prevention
- How To Make Iris Color Picker Showed Up Over Form and Text?
- admin_enqueue_scripts not rending JS file correctly
- my checkbox is not saving it’s value
- Can’t login to my admin area
- how to show admin notice in custom menu page after submitting the form?
- Accidentally changed website url
- Private post hidden from Admin too
- Send admin to a different login than users?
- How much traffic is real traffic?
- How to change the descriptive text on the menus admin page?
- Getting rid of menu items on a custom taxonomy
- Having problem creating local instance of wordpress site
- WordPress Plugin Admin Tab
- Parsing post->ID in included plugin file
- Gutenberg UI has changed
- Call require_once form admin page with checkbox
- How To Remove Import/Export Option From Tools?
- Highlight active Admin Menu when added though add_menu_page
- Unable to access admin web page
- Error “Sorry, you are not allowed to access this page”
- Create WordPress Menu Item Without Linking to a Custom Page
- Search Only Works when Logged into Admin
- exclude ID on avatar
- Missing content on website. Admins cant sign in
- Different role for free and pro users in wordpress without using bbpress
- Is Post-Form Resubmission somehow prevented in WordPress 4.2.2?
- WordPress login not working
- Enqueue script throws error in console
- How to sort post_meta in edit.php?
- Scripts are not called until I login from wordpress backend
- Link to all posts page?
- WP Logs me out after updating anything on dashboard
- Calculate and save an average in a meta
- If the only thing I use MySQL for is WordPress, do I need MySQL’s timezone tables?
- plugin to upload to youtube via wordpress [closed]
- How to fix: Clicking ‘Quick Edit’ link in Admin (edit.php) makes posts disappear?
- My Account Lost Administrator permission
- WordPress admin panel is blank
- Use the wordpress admin table
- deploying a standard build of wordpress in WHM/cPanel
- What Role to assign remote site developer?