WordPress Expert — Easy
Key points
- `wp_create_nonce()` prevents Cross-Site Request Forgery attacks
- Verification requires `wp_verify_nonce()` or `check_admin_referer()`
- Always include a capability check for added security
Ready to go further?
Related questions