Title: Nonce Failure Explainer Author: Syed Shahzaib Hassan Published: 19 آگوست 2026 Last modified: 19 آگوست 2026 --- جستجوی افزونه‌ها ![](https://ps.w.org/nonce-failure-explainer/assets/banner-772x250.png?rev=3655387) ![](https://ps.w.org/nonce-failure-explainer/assets/icon.svg?rev=3655387) # Nonce Failure Explainer توسط [Syed Shahzaib Hassan](https://profiles.wordpress.org/shahzaibhassan/) [دانلود](https://downloads.wordpress.org/plugin/nonce-failure-explainer.1.0.0.zip) * [جزئیات](https://fa.wordpress.org/plugins/nonce-failure-explainer/#description) * [نقد و بررسی‌ها](https://fa.wordpress.org/plugins/nonce-failure-explainer/#reviews) * [نصب](https://fa.wordpress.org/plugins/nonce-failure-explainer/#installation) * [توسعه](https://fa.wordpress.org/plugins/nonce-failure-explainer/#developers) [پشتیبانی](https://wordpress.org/support/plugin/nonce-failure-explainer/) ## توضیحات “Security check failed” is an outcome, not a diagnosis. It does not tell you whether the nonce field was missing, the action string differed, the session ended, a cached page served a stale value, or the nonce simply expired. Nonce Failure Explainer records every failed nonce check and states the most likely cause, along with the specific thing to check next. #### What it records For each failure: * The most likely cause, with an explicit confidence level * A concrete next check to run * The nonce action string * The request type (ajax, rest, admin, admin-post, cron, cli, frontend), method, and path * A best-effort guess at which plugin or theme ran the check * Whether the user was logged in #### What it never records * The nonce value itself * Authentication cookies or session tokens * Passwords, API keys, or any request body * Query strings, which routinely carry one-time tokens Function arguments are excluded from the stack trace capture, so sensitive values are never even loaded into memory during attribution. #### Causes it distinguishes * **No nonce was submitted** — the field or query argument never reached the server. Confirmed, not inferred. * **The session ended** — an auth cookie arrived but no longer resolves to a user. * **A cached page served a stale nonce** — detected when an anonymous request fails while a known caching layer is active. * **No session token** — the user is logged in but has no session for the nonce to key against. * **Expired or mismatched action** — everything needed was present, so the value itself did not match. #### Design Read-only. The plugin observes and explains; it never alters a request, extends a nonce lifetime, or changes site behaviour in any way. Storage is a single non- autoloaded option capped at 200 events with a seven-day expiry, so it cannot grow unbounded on a busy site. Nothing is sent anywhere. There is no external service, no telemetry, and no phone- home. ## عکس‌های صفحه [⌊Tools → Nonce Failures. Each failure carries a confidence level, the specific thing to check next, the request context it came from, and where possible the plugin that ran the check.⌉⌊Tools → Nonce Failures. Each failure carries a confidence level, the specific thing to check next, the request context it came from, and where possible the plugin that ran the check.⌉[ Tools Nonce Failures. Each failure carries a confidence level, the specific thing to check next, the request context it came from, and where possible the plugin that ran the check. ## نصب 1. Upload the plugin to `/wp-content/plugins/nonce-failure-explainer`, or install it through the Plugins screen. 2. Activate it. 3. Reproduce the failing request. 4. Visit **Tools Nonce Failures**. ## سوالات متداول ### Does this fix nonce failures? No, and deliberately so. Version 1 is a diagnostic tool. Automatically extending nonce lifetimes or bypassing checks would weaken the protection nonces exist to provide. ### Will it slow my site down? The recorder only does work when a check actually fails, which on a healthy site is never. There is no cost on successful requests. ### Why does it say “possible cause” rather than telling me exactly what happened? Because WordPress does not distinguish an expired nonce from one generated for a different action — both simply fail to match. Where the cause can be established as fact, the plugin says “Confirmed”. Where it is inference, it says so. ### Is it safe on a production site? Yes. It is read-only, stores no secrets, and caps its own storage. The clearing action is capability-checked and nonce-protected. ### Does it work with multisite? Yes. The log is per-site, and uninstalling clears it across every site in the network. ## نقد و بررسی‌ها نقد و بررسی‌ای برای این افزونه یافت نشد. ## توسعه دهندگان و همکاران “Nonce Failure Explainer” نرم افزار متن باز است. افراد زیر در این افزونه مشارکت کرده‌اند. مشارکت کنندگان * [ Syed Shahzaib Hassan ](https://profiles.wordpress.org/shahzaibhassan/) [ترجمه “Nonce Failure Explainer” به زبان شما.](https://translate.wordpress.org/projects/wp-plugins/nonce-failure-explainer) ### علاقه‌ مند به توسعه هستید؟ [کد را مرور کنید](https://plugins.trac.wordpress.org/browser/nonce-failure-explainer/)، [مخزن SVN](https://plugins.svn.wordpress.org/nonce-failure-explainer/) را بررسی کنید، یا از طریق [RSS](https://plugins.trac.wordpress.org/log/nonce-failure-explainer/?limit=100&mode=stop_on_copy&format=rss) در [گزارش توسعه](https://plugins.trac.wordpress.org/log/nonce-failure-explainer/) مشترک شوید. ## گزارش تغییرات #### 1.0.0 * Initial release. ## اطلاعات * نگارش **1.0.0** * آخرین به‌روزرسانی **2 روز پیش** * نصب‌های فعال **کمتر از 10** * نگارش وردپرس ** 5.6 یا بالاتر ** * آزمایش‌شده تا **7.1** * نگارش PHP ** 7.4 یا بالاتر ** * زبان * [English (US)](https://wordpress.org/plugins/nonce-failure-explainer/) * برچسب * [ajax](https://fa.wordpress.org/plugins/tags/ajax/)[debugging](https://fa.wordpress.org/plugins/tags/debugging/) [developer](https://fa.wordpress.org/plugins/tags/developer/)[nonce](https://fa.wordpress.org/plugins/tags/nonce/) [security](https://fa.wordpress.org/plugins/tags/security/) * [نمایش پیشرفته](https://fa.wordpress.org/plugins/nonce-failure-explainer/advanced/) ## امتیازها هنوز هیچ نقدی ارسال نشده است. [بررسی شما](https://wordpress.org/support/plugin/nonce-failure-explainer/reviews/#new-post) [مشاهدهٔ همهٔ بررسی‌ها](https://wordpress.org/support/plugin/nonce-failure-explainer/reviews/) ## مشارکت کنندگان * [ Syed Shahzaib Hassan ](https://profiles.wordpress.org/shahzaibhassan/) ## پشتیبانی چیزی برای گفتن دارید؟ نیاز به کمک دارید؟ [مشاهده انجمن پشتیبانی](https://wordpress.org/support/plugin/nonce-failure-explainer/)