Invalid nonce triggers E_ERROR

  • Resolved Tomas Eklund

    (@tomas-eklund)


    9 months, 1 week ago

    I think there is a bug in the nonce-handling when saving a map.

    I had been logged out of the WP Admin panel but logged back in using the login popup. I was on the edit map screen. I edited the name of the map and pressed “Save map”. This resulted in:

    "There has been a critical error on this website. Please check your site admin email inbox for instructions. If you continue to have problems, please try the support forums."

    The actual error message (translated from Swedish and redacted):

    If you request assistance with this issue, you may be asked to provide some of the following information:
    WordPress version 6.8
    Active theme: Hello [Redacted] (version 1.2.0)
    Current plugin: WP Go Maps (formerly WP Google Maps) (version 9.0.45)
    PHP version 8.3.20

    Error details
    =====================
    An error of type E_ERROR occurred on line 417 in the following file: 
    .../wp-content/plugins/wp-google-maps/includes/map-edit-page/class.map-edit-page.php. 
    Error reason: Uncaught Exception: Invalid nonce in 
    .../wp-content/plugins/wp-google-maps/includes/map-edit-page/class.map-edit-page.php:417
    Stack trace:
    #0 .../wp-content/plugins/wp-google-maps-pro/includes/map-edit-page/class.pro-map-edit-page.php(326): WPGMZA\MapEditPage->onSubmit()
    #1 .../wp-content/plugins/wp-google-maps/includes/map-edit-page/class.map-edit-page.php(482): WPGMZA\ProMapEditPage->onSubmit()
    #2 .../wp-includes/class-wp-hook.php(324): WPGMZA\{closure}()
    #3 .../wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters()
    #4 .../wp-includes/plugin.php(517): WP_Hook->do_action()
    #5 .../wp-admin/admin-post.php(82): do_action()
    #6 {main}
     thrown
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author DylanAuty

    (@dylanauty)

    9 months, 1 week ago

    Hi @tomas-eklund,

    Thank you for getting in touch and reporting this to us, we do appreciate it.

    I’ve just had a look at how we handle this, and you are correct, we do not currently refresh in-page nonce values when the login popup appears. Meaning we rely on the nonce value which is present at page only.

    With that said, the page should not have failed with an error, but instead should have failed gracefully with an error report.

    I’ve logged this on our development task list, and we will resolve the critical error in our next update, and add refresh support as well for the map editor.

    Thread Starter Tomas Eklund

    (@tomas-eklund)

    9 months, 1 week ago

    Thanks

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Invalid nonce triggers E_ERROR’ is closed to new replies.