• Resolved net

    (@krstarica)


    I see that nonce check is used all over the code.

    This has huge implications on cached pages, see:
    https://docs.wp-rocket.me/article/975-nonces-and-cache-lifespan

    Smaller websites have indefinite cache lifespan due to budget hosting plans, so setting cache lifespan to 10 hours or less is not an option.

    Contact Form 7 deliberately disabled nonce check due to undesirable side effects:
    https://contactform7.com/2017/08/18/contact-form-7-49/
    The strangest thing is that this plugin forces nonce check for such forms, too.

    Is it possible to implement option to completely disable nonce check everywhere and probably disable it automatically (on installation) when cache plugins are detected?

Viewing 1 replies (of 1 total)
  • Plugin Contributor kaggdesign

    (@kaggdesign)

    I appreciate your consideration.

    In version 1.14.0 of the plugin, I have changed the nonce verification. Now it is verified for logged-in users only.

    We will release this version today or tomorrow.

Viewing 1 replies (of 1 total)
  • The topic ‘Cannot fill forms on cached pages due to nonce verification’ is closed to new replies.