Hello @thegulshankumar
Fluent Forms use nonce on the backend ajax calls and it does not use nonce at the frontend forms by default. You can enable that by the nonce filter hook and in that case, It’s normal as WordPress provides by default.
To enable nonce verification at frontend please use this:
add_filter('fluentform_nonce_verify', '__return_true');
Hello!
This was appearing by default. It’s ok. I see, it just doesn’t verify nonce by default.
<input type="hidden" id="_fluentform_1_fluentformnonce" name="_fluentform_1_fluentformnonce" value="18639e5693">
Though, my question is still same –
Let suppose I enabled verification to prevent spam
add_filter('fluentform_nonce_verify', '__return_true');
Then how many hours approximately, Fluent Form nonce would be valid? That’s precisely my question.
Thanks & Regards,
Gulshan
By default, the nonce lifespan is 86400 seconds of 24 hours.
Thanks