wordpress url security

Improving security in WordPress plugins using Nonces

Nov 19th, 2008

Using a nonce (number used once) is the best way to protect your plugin against a cross-site request forgery (CSRF) hacker-attack. Nonces are used on requests (saving options in admin, Ajax requests, performing an action etc) and prevent unauthorized access by providing a secret 'key' and checking it each time the code is used.

Menu
- Manage all your WordPress Blogs easily using ManageWP.com
- Download SEO Doctor, our amazing SEO tool (and it's free!)
- Get SEO Smart Links, the Premium WordPress SEO plugin
- Check out my WordPress plugins, free WordPress themes or the list of Best New WordPress Plugins.
- Get a copy of my WordPress plugin development book
- Want to hire us? Check out our Services
Recent Articles
Recent Comments
- nicolas@optionbinair on SEO Doctor – Free SEO Audit Tool 304 comment(s)
- Idham on 10 Online Services for Tracking Keyword Rankings in Search Engines 2 comment(s)
- hiroshi on SEO Super Comments 327 comment(s)
- hiroshi on Blue Grace 204 comment(s)
- Bend Real Estate on SEO Friendly Images 312 comment(s)
- zarko on What should we write about next – WordPress plugin 2 comment(s)
- maria on Good Life Quotes 45 comment(s)
- FrançoisXavier Bodin on Things are good. Actually, great. 12 comment(s)
@vprelovac tweets
- Apple now worth more than Google and Microsoft combined http://t.co/aHgW6MHd via @zite 2 days ago
- Chang Yung-Fa to Give Away His Billions http://t.co/xtLnUG8t via @zite 2 days ago
- Double Fine Raises $1 Million for New Adventure Game http://t.co/Cpn8stKd via @zite 2 days ago
- Don’t Build A Company To Sell, Build It To Last http://t.co/jV8FV1mo via @zite 2 days ago
- The #1 VC in the World: Customers http://t.co/D3uv81Jq via @zite 2 days ago

About

Vladimir Prelovac is CEO of Prelovac Media, a computer engineer by profession and an adventurer by state of mind. more +

"I would love to change the world, I just don't have the source code yet."

Services

Manage multiple WordPress sites

Built for WordPress enthusiasts, ManageWP helps you manage all your WordPress sites from one central location.

Books

Read my book WordPress Plugin Development: Beginner's Guide

Published by Packt Publishing, available online through Amazon.