AJAX Referer Fix

Fixes a problem that causes “You don’t have permission to do that” errors. It replaces the pluggable check_ajax_referer() with a safe alternative.

Author:Bas van Doren (profile at wordpress.org)
WordPress version required:2.0.3
WordPress version tested:2.3.3
Plugin version:0.1
Added to WordPress repository:28-08-2007
Last updated:03-04-2008
Warning! This plugin has not been updated in over 2 years. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.
Rating, %:0
Rated by:0
Plugin URI:http://sparepencil.com/code/ajax-referer-fix/
Total downloads:1 862
Active installs:10+
plugin download
Click to start download

Note: This plugin does not work in WP 2.5. The AJAX referer check in WP 2.5 does not conflict with a hardened version of PHP, so this plugin is no longer adequate.
If you still experience the permission problem it is likely your browser or a plugin.

This plugin fixes an issue that can cause several problems in the Administration Panel, including the following:

  1. The “You don’t have permission to do that” error when performing certain actions, even though you are in fact logged in
  2. The “Are you sure you want to edit this page: “”?” confirmation when trying to save a post or page
  3. Inability to remove pages or posts using the Management panels
  4. And possibly other problems that have similar symptoms

Most people who get these problems seem to be on a server that uses a hardened version of PHP. This version adds several security measures to PHP, including transparent cookie encryption. The WordPress function that checks whether you can perform certain actions in the Administration Panel (check_ajax_referer()) does not function properly because of this. This plugin replaces that function with a something that does take the cookie encryption into account.