tokenName] ); return $this; if( ! isset($_POST[$this->tokenName])){ // echo "want token name " . $this->tokenName . '
'; // _print_r( $_POST ); echo 'csrf: no token'; exit; } $nonce = $_POST[$this->tokenName]; if( ! wp_verify_nonce( $nonce, $this->actionName ) ){ echo 'csrf: token mismatch'; exit; } // We kill this since we're done and we don't want to polute the _POST array unset( $_POST[$this->tokenName] ); return $this; } public function prepareOutput( $output ) { // $hidden = wp_nonce_field( $this->actionName, $this->tokenName, TRUE, FALSE ); $nonceVal = wp_create_nonce( 'shiftcontroller' ); $hidden = ''; $output = str_replace('', $hidden . '', $output); return $output; } }