Hi,

I’m making an external post form and I’m sending POST information to the bb-post.php

There’s to main fields:

• Textarea name=”post_content“
• Hidden input name=”topic_id“

I can easily get those values, but this isn’t enought for a posting to work.

There’s a strage field named name=”_wpnonce” value=”4ecbe24030″ and another named name=”_wp_http_referer” value=”/forum/topic/post-slug” that I tought it was for the final redirect, it isn’t.

So I’m having here some basic doubts:

1. Besides “post_content” and “post_id”, what other parameter is necessary for a sucessfull post with bb-post.php?
2. What’s “_wpnonce”
3. What’s “_wp_http_referer”

Best regards.

[@filiped Member 15 years, 8 months ago]

I could directly insert this at the bb_posts table, but I think this isn’t very smart, considering the system wont block what that user can or cannot do and will not do post counting and other stuff extended by plugins.

This can’t be very hard. I just can’t find what I’m missing.

[@ipstenu Moderator 15 years, 8 months ago]

2. https://codex.wordpress.org/Function_Reference/wp_nonce_field

Don’t worry about the nonce field, it’s just for WP side and doesn’t translate, as of yet, to BB.

3. I think it’s just the internal http referrer, but I could be wrong.

[@filiped Member 15 years, 8 months ago]

Ipstenu, thanks for your help.

Looks like the nonce field is very important to prevent spam posting.

Form submitting doens’t work if you specify a wrong nonce. Take a look at my searchings:

post_form’s _wponce, what is it?

http://phpdoc.ftwr.co.uk/bbpress/bbPress/_bb-includes—functions.bb-pluggable.php.html

http://svn.automattic.com/bbpress/trunk/bb-includes/functions.bb-pluggable.php

You can create a nonce key with this funcion:

bb_create_nonce();

I will continue with the searching and testings.

[@filiped Member 15 years, 8 months ago]

Finally figure it out.

It’s the bb_create_nonce();

It’s like an MD5 hash, formed by “create-post_” + “topic_id”

for example:

<input type="hidden" name="_wpnonce" value="<?=bb_create_nonce('create-post_3');?>"

With this, you can create replies (posts) within the topic with id 3.

Best regards.