# jetformbuilder/3.6.6/modules/security/wp-nonce/module.php

JetFormBuilder — Dynamic Blocks Form Builder, version 3.6.6. 122 lines.

- Page: https://pluginprobe.com/plugins/jetformbuilder/3.6.6/code/modules/security/wp-nonce/module.php
- Raw: https://pluginprobe.com/plugins/jetformbuilder/3.6.6/raw/modules/security/wp-nonce/module.php
- Modified: 2026-06-12T14:14:06+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/jetformbuilder/3.6.6/code/modules/security/wp-nonce/module.php#L10-L20`.

```php
<?php


namespace JFB_Modules\Security\Wp_Nonce;

use JFB_Components\Module\Base_Module_It;
use JFB_Modules\Security\Exceptions\Spam_Exception;

// If this file is called directly, abort.
if ( ! defined( 'WPINC' ) ) {
	die;
}

class Module implements Base_Module_It {

	const KEY               = '_wpnonce';
	const NONCE_ACTION_PREF = 'jet-form-builder-wp-nonce-';
	const SPAM_EXCEPTION    = 'nonce_failed';

	public function __construct() {
		add_filter( 'jet-form-builder/security/spam-statuses', array( $this, 'add_spam_statuses' ) );
	}
	public function add_spam_statuses( $statuses ) {
		$statuses[] = self::SPAM_EXCEPTION;
		return $statuses;
	}

	public function rep_item_id() {
		return 'wp-nonce';
	}

	public function condition(): bool {
		return true;
	}

	public function init_hooks() {
		add_filter(
			'jet-form-builder/request-handler/request',
			array( $this, 'handle_request' )
		);
		add_filter(
			'jet-form-builder/message-types',
			array( $this, 'handle_messages' )
		);
		add_filter(
			'jet-form-builder/after-start-form',
			array( $this, 'on_render_form' )
		);
	}

	public function remove_hooks() {
		remove_filter(
			'jet-form-builder/request-handler/request',
			array( $this, 'handle_request' )
		);
		remove_filter(
			'jet-form-builder/message-types',
			array( $this, 'handle_messages' )
		);
		remove_filter(
			'jet-form-builder/after-start-form',
			array( $this, 'on_render_form' )
		);
	}

	public function on_render_form( string $html ): string {
		if ( ! jet_fb_live_args()->is_use_nonce() ) {
			return $html;
		}

		return ( $html . $this->get_nonce_field() );
	}

	public function get_nonce_id(): string {
		$form_id = jet_fb_live()->form_id;

		return self::NONCE_ACTION_PREF . $form_id;
	}

	public function get_nonce_field(): string {
		$form_id  = jet_fb_live()->form_id;
		$field_id = self::KEY . '_' . $form_id;
		return sprintf(
			'<input type="hidden" id="%1$s" name="%2$s" value="%3$s" />',
			esc_attr( $field_id ),
			esc_attr( self::KEY ),
			esc_attr( wp_create_nonce( $this->get_nonce_id() ) )
		) . wp_referer_field( false );
	}

	public function verify( $nonce ): bool {
		return ( ! jet_fb_live_args()->is_use_nonce() || wp_verify_nonce( $nonce, $this->get_nonce_id() ) );
	}

	/**
	 * @param array $request
	 *
	 * @return array
	 * @throws Spam_Exception
	 */
	public function handle_request( array $request ): array {
		$nonce = $request[ self::KEY ] ?? '';

		if ( ! $this->verify( $nonce ) ) {
			// phpcs:ignore WordPress.Security.EscapeOutput.ExceptionNotEscaped
			throw new Spam_Exception( self::SPAM_EXCEPTION );
		}

		return $request;
	}

	public function handle_messages( array $messages ): array {
		$messages[ self::SPAM_EXCEPTION ] = array(
			'label' => __( 'WP nonce validation failed', 'jet-form-builder' ),
			'value' => __( 'Invalid nonce', 'jet-form-builder' ),
		);

		return $messages;
	}

}

```