Nonce verification in Wordpress - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a nonce in WordPress?

A nonce is a special token used to verify that a request comes from a trusted source, helping to protect against attacks like CSRF (Cross-Site Request Forgery).

beginner

How do you create a nonce in WordPress?

Use the function wp_create_nonce('action_name') to generate a nonce tied to a specific action.

beginner

Which function verifies a nonce in WordPress?

The function wp_verify_nonce($nonce, 'action_name') checks if the nonce is valid and was created for the given action.

beginner

Why should you verify a nonce before processing form data?

Verifying a nonce ensures the form submission is genuine and prevents unauthorized or malicious requests from being processed.

beginner

What happens if nonce verification fails in WordPress?

If verification fails, you should stop processing the request and show an error or redirect, protecting your site from potential attacks.

Which WordPress function generates a nonce?

A wp_create_nonce()

B wp_verify_nonce()

C nonce_generate()

D create_nonce_token()

The function wp_create_nonce() is used to generate a nonce in WordPress.

What is the main purpose of nonce verification?

A To prevent Cross-Site Request Forgery (CSRF)

B To check user passwords

C To speed up page loading

D To encrypt data

Nonce verification helps prevent CSRF attacks by ensuring requests are from trusted sources.

Which function checks if a nonce is valid?

A wp_create_nonce()

B check_nonce()

C wp_verify_nonce()

D validate_nonce()

wp_verify_nonce() is the function used to verify if a nonce is valid.

When should you verify a nonce in your code?

A After sending emails

B Before processing form submissions

C When loading images

D During theme activation

Nonce verification should happen before processing form data to ensure security.

What should you do if nonce verification fails?

A Ignore and continue

B Process the request anyway

C Reload the page automatically

D Stop processing and show an error

If nonce verification fails, stop processing the request and show an error to protect the site.

Explain what a nonce is in WordPress and why it is important.

Think about how websites keep forms safe from fake submissions.

Describe the steps to create and verify a nonce in WordPress when handling a form submission.

Consider what happens before showing the form and after receiving the form data.