[wp-hackers] Nonce and Caching Issue
wp-hackers at thecodecave.com
Mon Sep 26 20:15:33 UTC 2011
On 9/26/2011 3:26 PM, John Turner wrote:
> I have a form that displays on the front end of the wp site. I use ajax to
> submit it back to the backend. I'm having an issue when using a caching
> plugin where the nonce is invalid because of the cached page being server
> has an expire nonce.
> Are there any best practices to get around this?
Since you are displaying this form when no one is logged (I know this
because the page cache is in effect), this by definition a non-secured
process. I would question if you even need a nonce.
If you do feel you need a nonce, a simple fix would be to serve the form
via an iframe or even via Ajax. Then the source code for the home page
would remain the same for each load. It would in turn call the iframe
source or ajax - which you would configure to be outside of the caching
More information about the wp-hackers