WpNonce
WpNonce is a static wrapper class for Wordpress wp_nonce* functions., (*1)
Install
composer require alexlg89/wpnonce
Or just add, (*2)
"require alexlg89/wpnonce": "0.0.1"
to your compsoer.json
file and run a compposer update., (*3)
Usage:
Create an URL with a nonce parameter
$url = 'http://mysite.com/custommers';
$action = 'add-customer';
$name = '_myNonce';
$nonceUrl = WpNonce::url($url, $action, $name);
Or just use the default name by skipping the last parameter., (*4)
$nonceUrl = WpNonce::url($url, $action);
Create a nonce field with a specific action
$action = 'add-customer';
WpNonce::field($action);
You also can set the referer as second parameter, (*5)
$referer = 'http://mysite.com/dashboard';
WpNonce::field($action, $referer);
The third parameter alows you to just get the nonce field and skip the referer field, if set to false., (*6)
WpNonce::field($action, $referer, false);
You can let the field function return the html as string, if you set the fourth parameter to false., (*7)
$html = WpNonce::field($action, $referer, true, false);
Create a nonce with a specific action
$action = 'add-customer';
$nonce = WpNonce::create($action);
Check an URL for a vaild nonce
$action = 'add-customer';
$name = '_myNonce';
$retval = WpNonce::checkAdminReferer($action, $name);
Or just use the default name by skipping the last parameter., (*8)
$retval = WpNonce::checkAdminReferer($action);
Check an AJAX URL for a vaild nonce
$action = 'add-customer';
$queryArg = '_myNonce';
$retval = WpNonce::check_ajax_referer($action, $queryArg);
If the third parameter is set to false, the script won't die, if the nonce is invalid, (*9)
$retval = WpNonce::check_ajax_referer($action, $queryArg, false);
Verify a nonce with a specific action
$nonce = 'an2bf72h';
$action = 'add-customer';
$retval = WpNonce::verify($nonce, $action);
Default nonce
const DEFAULT_NONCE = '_wpnonce';