This question still unanswered for long time. I answer it if anyone reaches here, just in case. When you are using WP_List_Table (perhaps by extending the class), the generated code for single delete and bulk delete differs. The single delete is sent over a GET request by setting query params, but the bulk delete is … Read more
Is nonce in PHP form and Ajax both necessary?
x-wp-nonce across domains
Draft preview and customize permission problems on multisite main site
Ali, as mentioned in the comments here’s the method I’d use to save. As you can see, it sets out the assorted fields and then runs the save process a single time, rather than setting the logic over and over for each field. function save_book_meta_data( $post_id ) { if( !current_user_can( ‘edit_post’, $post_id ) ) { … Read more
Cookies are sent to the browser. The next time the browser sends a request for a page, it sends the cookie information back and the page can make use of it – it is not available without a new request being made.
Okay, not sure what was wrong with my original code, but this post put me on the right path. To generate the nonce, use: wp_nonce_field( plugin_basename( __FILE__ ), ‘my_reset_nonce’,true,false); To verify, use: if ( ! isset( $_POST[‘my_reset_nonce’] ) || ! wp_verify_nonce( ( $_POST[‘my_reset_nonce’] ), plugin_basename( __FILE__ ) ) ) { die; } else { // … Read more
“The link you followed has expired” & “Error while saving” messages when adding new post
WordPress do not accept nonce in the slug that you are trying to provide in the above code. I mean in this line: ‘my_dashboard&nonce-field=’ . wp_create_nonce(‘my_action’), ‘show_dashboard’ I was facing the same issue like you are facing. As the admin menu already verified for specific users so we don’t need to verify it again with … Read more
When using save_post you are usually add/updating user-inputted data from a metabox into the database. When do this you should check that your metabox’s nonce is valid. You should also check permissions as save_post is triggered inside wp_insert_post(), and not just when the you create/edit a post admin side.