Why does check_ajax_referer give a 403 error on https websites?

that looks good in my eyes. but i just had the same issue, that’s why i stumbled over your question.

i fixed it in my case with

if (!wp_verify_nonce($_POST['nonce'], 'nonce')) {
    die(__('Security Check failed', 'textdomain'));
}

at the very beginning of my ajax action. no idea, where the 403 issue came from, since it worked on desktop machines, but not on my mobile. weird.. give it a shot and let me know, if this helps.

one other thing i saw in your code, but not sure, if it is causing issues: one time you use single quotes, the other time doubles. try to be consistent here.

wp_verify_nonce()

Related Posts:

  1. Nonces and Cache
  2. Is it safe to assume that a nonce may be validated more than once?
  3. Multiple ajax nonce requests
  4. AJAX requests broken due to HTTPS for wp-admin
  5. Nonces, AJAX, script variables & security in WordPress
  6. How do I check if AJAX nonces are implemented correctly?
  7. WP Admin AJAX Security – using POST to include a relative URL
  8. ajax nonce verification failing
  9. Using nonce when loading posts with AJAX
  10. Should wordpress nonce be placed in html form or in javascript file
  11. Ajax Security regarding user priviliges and nonces
  12. How to get a unique nonce for each Ajax request?
  13. WordPress Ajax Data Security
  14. Nonces can be reused multiple times? Bug / Security issue?
  15. SSL breaks customizer: page isn’t returned from ajax
  16. Using Nonces for AJAX that only retrieves data
  17. How to verify nonce from Bulk/Quick Edit in save_post?
  18. How to add WordPress nonces to ajax request
  19. Security – Ajax and Nonce use [closed]
  20. Nonces and Ajax request to REST API and verification
  21. Ajax function returns -1
  22. Serving nonces through AJAX is not refreshing nonce, returning 403 error
  23. wp_verify_nonce always returns false when logged in as admin
  24. ajax and nonce when JavaScript is in a seperate file
  25. wp_verify_nonce doesn’t return true on server when it matches the nonce
  26. Why does WordPress Heartbeat login not refresh the nonces?
  27. wp-admin AJAX with Fetch API is done without user
  28. How to check an ajax nonce in PHP
  29. Can a wp_nonce created from domain 1 to be verified on domain 2?
  30. Is it safe to manually sign a user in using AJAX?
  31. how to send Ajax request in wordpress backend
  32. Identical wp_rest nonce returned from rest_api
  33. wp_create_nonce() in REST API makes user->ID zero
  34. SSO autologin WordPress + Ajax
  35. Should I check for privileges before hooking into `wp_ajax_$handle` or after?
  36. How can I set cookies on both secure and non-secure origins at the same time?
  37. Nonce fails on ajax save
  38. Images loading over http instead of https
  39. Is it secure to use admin-ajax.php in front?
  40. Unable to successfully verify nonce
  41. Cache plugins and ajax nonce verification
  42. Nonce doesn’t validate in nopriv call
  43. WordPress is creating nonce as a logged in user but verifying it incorrectly
  44. javascript ajax and nonce
  45. How to check nonce lifetime value of plugins?
  46. 200 return code on ‘POST /wp-admin/admin-ajax.php’ while NOT logged in
  47. Custom RPC end-point security best pratice?
  48. How to prevent my external API call from being called by anyone but me (my site)
  49. wp_verify_nonce not working on the mobile device
  50. How do I mitigate replay attacks when talking about actions that shouldn’t happen twice?
  51. check_ajax_reffer not working when logged
  52. How to safely pass post_id and user_id via AJAX to the backend (prevent user from changing it via JS)?
  53. AJAX form not working, still reloads on submit
  54. How to force the admin-ajax.php file to load over HTTPS?
  55. How to use nonces for frontend AJAX voting if the page gets cached?
  56. Can I make an ajax response cross-domain?
  57. WordPress wp_localize_script nonce and ajax URL
  58. Using Backbone with the WordPress AJAX API
  59. Why is a 500 error generated by admin-ajax.php not going into the Apache error log?
  60. Verify nonce in REST API?
  61. How do I hook an Ajax request into a PHP callback?
  62. Gutenberg – how to correctly perform ajax request on backend
  63. get_template_part execute with ajax
  64. How declare Ajax functions ussing SHORTINIT
  65. Load custom formatted comment with AJAX: reply link isn’t rendered?
  66. Is there a way to optimize function that is used for returning data in an ajax-call?
  67. WP REST API route request explain
  68. Check if username exist with AJAX
  69. How to localized one js file for different actions?
  70. WooCommerce: Translation lost on AJAX call in Checkout page [closed]
  71. Async Loading of Custom Posts
  72. How to add WP API and JS featured image attachment
  73. Using AJAX with Forms
  74. Get Author Post on author.php with AJAX
  75. Can’t publish post using ajax
  76. Customizer AJAX using buttons
  77. Can’t trigger an AJAX function with a submit button in the dashboard
  78. AJAX Call is Only Returning 100 Results from Query
  79. AJAX and -1 response
  80. How to make custom button link on the WordPress Admin Bar run by AJAX
  81. Ways to load admin-ajax faster without initializing all plugins?
  82. is_single() conditional check inside ajax php function
  83. Why do Metabox use Nonces?
  84. Ajax call in WordPress – unable to display the data on the page
  85. How to reuse get_template_part() containing a simple loop to work with AJAX correctly?
  86. Need help with ajax
  87. Tabbed feeds with ajax vs. without on homepage [closed]
  88. javascript onClick update user_meta from jquery.ajax
  89. How to ignore WP_ERROR caused by “get_the_excerpt” method in an AJAX call?
  90. Not getting ajax success response on insert/update row to database
  91. https rewrite not working for All in one security Brute force > rename login url
  92. enqueue style using admin-ajax.php
  93. Can’t get next post info with ajax
  94. How to inject data content from external json into a modal, using UIkit?
  95. How to paginate Ajax result
  96. Cannot access class properties from ajax call in wpordrpess
  97. why is my main.js not loading?
  98. Enqueue dynamically generated javascript
  99. First time doing Ajax with WP, how to do it?
  100. Run PHPMailer function after ajax function completes that adds row to custom table