You can read the task, take hints and check your answer — but nothing is saved. No XP, no skill points, and this task will not be marked complete.
Which WordPress function verifies a nonce on an admin form submission, dying if it is invalid?
What this proves: Bind state-changing requests to a token the attacker cannot forge.
Need assistance? You can reveal sequential hints. Each hint applies a minor penalty to your score.
If you are completely stuck, you can unlock the full step-by-step walkthrough.