Caching and Error 403

  • Hi!

    I use W3TC Plugin with long caching time (> 24 hours).

    The method init() creates local script with ‘_wpnonce’ for all: logged in and NON logged in users.

    For this reason after ~ 24 hours WP Search Suggest returns 403 error: on caching page wpnonce is timed out.

    —
    I temporarily solved the problem by adding the is_user_logged_in() condition to the ajax_response() and post_url () methods (for check_ajax_referer()), but this is a BAD solution. I think it would be better to change the code of the init() method and add the ‘_wpnonce’ key only for authorized users.

Viewing 1 replies (of 1 total)
  • Plugin Author Konstantin Obenland

    (@obenland)

    I’m on the fence about this. Those Ajax requests are probably okay to not protect with a nonce. On the other hand, why not limit cache life to 24h?

Viewing 1 replies (of 1 total)
  • The topic ‘Caching and Error 403’ is closed to new replies.