Security – Thumbs-rating

I’ll take a look, thanks for the heads up!

Rick

Hi there,

I’ve been looking into this and it looks like I need to implement it in the Thumbs Rating.

However, how do I do that with my current code?

If you take a look at the files I’ve separated the JavaScript in /js/general.js so I can not call the wp_create_nonce() to create it there.

Do I have to output a hidden input somewhere with the nonce as a value and then use the .js file to include that value in the Ajax request?

Is there a better way to do this?

Links:

https://codex.www.ads-software.com/Function_Reference/check_ajax_referer
https://markjaquith.wordpress.com/2006/06/02/wordpress-203-nonces/

Hi there,

I’ve found a way to implement this and I’ve pushed a new update (1.8).

Here you can check the differences.

Give it a try and let me know!

Thanks.

Hi, thank you for your response. Great job!

Do you think it is worth adding this to the code?

if ( ! wp_verify_nonce($_POST['nonce'], 'thumbs-rating-nonce ) )
		die ( 'Error #1');

?

Anyway, thanks a lot.

Greetings.
Frankie.

Not sure, I’ll look into it.

Best,

Rick