Nonce question

  • Resolved joy0114

    (@joy0114)


    4 days, 10 hours ago

    Hi,

    I think one or more nonces used in one of my plugins (Unipixel) are causing me problems.
    This plugin has stopped using jQuery and seems to rely more on AJAX.
    As a result, I’m now getting 403 errors on admin-ajax.php.

    In theory, at the very least, the ajax-nonce should be excluded from the cache.

    I think this is an issue with cached nonces, since the problem doesn’t appear immediately.

    Unfortunately, I CAN’T enable ESI because the ASTRA Pro plugin isn’t compatible with ESI.

    Is there a way to prevent all Unipixel nonces (and ajax-nonce) from being cached ? Without using ESI, of course… otherwise, the site won’t work anymore.

    Thanks ever so much for any advice.
    Best regards

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support qtwrk

    (@qtwrk)

    3 days, 21 hours ago

    well , if no ESI , then you have 2 possible option :

    first , reduce the cache TTL , and schedule a purge twice per day to clear cache when nonce regenerates

    second , extend the nonce token life.

    Thread Starter joy0114

    (@joy0114)

    3 days, 9 hours ago

    Hi Qtwrk,

    Ok, I’m going to try the first solution, since extending the lifetime of nonces isn’t recommended for security reasons.

    Thank you all for your advice.
    Best regards

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.