WP_NONCE in URL

  • Hi All, can check is there a way to hide the nonce value on the URL. I recently upgraded my site and the wp_nonce value start to appear on my URL. Please advise.

Viewing 4 replies - 1 through 4 (of 4 total)

  • These are security mechanisms, used to ensure the integrity of transactions and sessions, it prevents old actions from being replayed. Do they give you any specific problems, or is it just their messiness ?

    NONCE = nonsence used once, changes for every session.

    Almost certainly they come from one of your plugins, very likely after you did an update recently.

    The only way I can think of not having them in your URL is to have the nonce put into a form as a hidden field, or as page parameter somehow. This would be a significant job.

    Thread Starter darylaurito

    (@darylaurito)

    Hi @rossmitchell, thanks, probably is the woocommerce plugin giving that issue. Previously, it doesn’t have the wp_nonce. Because I am doing a campaign frequently, so many times need to specify the url. Which the nonce is giving me the issue currently.

    Try leaving the nonce out of the URL, what happens, does it still work ?

    Thread Starter darylaurito

    (@darylaurito)

    If you mean campaign, not yet try out. But when accessing the site, after I login and access the site without nonce in the url. This make my account sign out, but when I refresh again the nonce value is there and also signed in.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘WP_NONCE in URL’ is closed to new replies.