內容簡介
核心功能的文檔說明指出， WordPress 核心和其他外掛中使用的一種小的有效性令牌 “nonce”，有 1 天的壽命，但它們的壽命可能只有一半的時間。對於常規用途，這可能不是什麼問題，但如果這種壽命被有意義地依賴，就會發生無法解釋的失敗。例如，縮短壽命的過濾器可能會在非法令牌過期之前隨機地使某些任務變得困難。許多緩存和 SEO 優化外掛設置的非常長的壽命可能會導致表單和其他操作在緩存內容到期之前突然中斷，並生成新的 "nonce" 。想象一下一個緩存的聯繫表單，在經過 4 天後無法工作，但在清除緩存後又可以運作。對於 “caching nonce expired wordpress” 等關鍵詞的簡略搜索將產生許多相關問題的結果。
此外掛保證非法令牌至少能持續預期壽命的时间，但多出的时间最多為預期壽命的 1/8。默認情況下，這意味著這種令牌將持續 24 至 27 個小時，而不是 12 至 24 個小時。這是因為更改這些老代碼的行為是不合適的（在 ticket #53236 中已證實），因為這些功能是可插拔的。
沙漏圖標由 mavadee提供。
外掛標籤
開發者團隊
原文外掛簡介
The core functions’ documentation states that nonces, small validity tokens used throughout WordPress core and other plugins, have a lifespan of 1 day, however they can last as little as half that time. For common usage that may not be a problem, but if that lifespan is relied upon in any meaningful way, inexplicable failures can occur. For example, filters that shorten the lifespan may randomly make it difficult to complete some tasks before their nonce expires. Very long lifespans, such as those set by many caching and SEO optimization plugins, can result in forms and other actions suddenly breaking before the cached content expires and new nonces get generated. Imagine a contact form that’s cached for a week but stops working after 4 days, then starts working again if that cache is cleared. A cursory search for terms like caching nonce expired wordpress yields many results for relevant problems.
This plugin guarantees a nonce will last at least as long as it’s intended to, but up to ⅛ of a lifepsan more. By default, this means a nonce will last from 24 up to 27 hours, rather than anywhere from 12 to 24 hours. It was created because changing the behaviour of such old code was deemed inappropriate (in ticket #53236), given the functions are pluggable.
Hourglass icon by mavadee.