mysql - 如何从以下代码验证 WordPress 随机数？

Question

请检查块引用代码。它不适用于标题。我认为这种情况不能采用从正文到标题的值。但是，它的解决方案是什么？

<?php
/**
* Template Name: Manage Days
*/


if ( isset($_GET['remove_date']) && isset($_GET['_wpnonce']) ) {
    $delete_date = $_GET['remove_date'];
    $delete_nonce = $_GET['_wpnonce'];

    if ( ! wp_verify_nonce( $delete_nonce, 'holiday_nonce' ) ) {
        die( 'Failed security check' );
    } else {
        $delete_holiday = $wpdb->delete( 
        $wpdb->prefix . 'ab_holidays',
            [ 'staff_id' => $staff_id, 'date' => $delete_date ],
            [ '%d', '%s' ] );
    }

}

get_header(); ?>

    <?php
        $disable_dates = $wpdb->get_results("SELECT * FROM {$wpdb->prefix}ab_holidays WHERE staff_id = '$staff_id'");

        foreach ( $disable_dates as $disable_date ) {
            $originalDate = $disable_date->date;
            $newDate = date("F j, Y", strtotime($originalDate));

            $nonce = wp_create_nonce( 'holiday_nonce' . $originalDate );
            echo '<a href="' . get_permalink() . '?remove_date=' . $originalDate . '&_wpnonce=' . $nonce . '" class="delete-holiday"><i class="fa fa-times-circle"></i></a>' . $newDate . '<br />';
        }
    ?>

<?php
get_footer();

if ( ! wp_verify_nonce( $delete_nonce, 'holiday_nonce' ) ) { .... } else { ..... }

标签： mysqlwordpressnonce