url security

Improving security in WordPress plugins using Nonces

Nov 19th, 2008

Using a nonce (number used once) is the best way to protect your plugin against a cross-site request forgery (CSRF) hacker-attack. Nonces are used on requests (saving options in admin, Ajax requests, performing an action etc) and prevent unauthorized access by providing a secret 'key' and checking it each time the code is used. Nonces [...]

Menu
- Manage all your WordPress sites easily using ManageWP.com
- Download SEO Doctor, an amazing SEO tool (and it's free!)
- Get SEO Smart Links, and SEO Friendly Images, premium WordPress plugins
- Check out my free WordPress plugins, free WordPress themes or the list of Best New WP Plugins.
- Get a copy of my WordPress plugin development book
- Want to hire us? Check out our Services
Follow @vprelovac

Error: Twitter did not respond. Please wait a few minutes and refresh this page.
Recent Comments
- Elena Popescu on SEO Doctor – Free SEO Audit Tool 410 comment(s)
- Peter on Smart Youtube WordPress Plugin 1023 comment(s)
- Jillur on Best practice for adding JavaScript code to WordPress plugins 45 comment(s)
- Vladimir on Thankful for WordPress 2 comment(s)
- Mitul on Insights 416 comment(s)
- Gaspare on Theme Test Drive 285 comment(s)
- mark newton on Incredible Wave Pictures 142 comment(s)
- Stevo on SEO Smart Links 1221 comment(s)

About

Vladimir Prelovac is CEO of Prelovac Media, a computer engineer by profession and an adventurer by state of mind. more +

"I would love to change the world, I just don't have the source code yet."

Services

Manage multiple WordPress sites

Built for WordPress enthusiasts, ManageWP helps you manage all your WordPress sites from one central location.

Books

Read my book WordPress Plugin Development: Beginner's Guide

Published by Packt Publishing, available online through Amazon.