Thanks for that. The strange thing is whenever I remove:
add_action(‘init’, ‘security_nonce’);
function security_nonce(){ ?>
<script type=”text/javascript”>var securityNonce = <?php echo json_encode(wp_create_nonce(‘you can never be too careful’)); ?></script>
<?php }
it breaks the css and I can’t work out why. For some reason wordpress seems to need the nonce to be created using the init hook otherwise the css becomes messed up. Your method works in so much as we can now add featured images but I then have this seperate issue regarding the css. I’ve never come across this before. The check_ajax_referer function isn’t recognising the nonce either but that’s kind of a seperate issue.