我构建了一个插件，但现在我不确定nonce 集成正确，我不知道如何测试它们。

有没有人能帮我测试一下，或者让我知道nonce 是否正确集成？

下面是我的代码中的一个示例：

PHP：

public function __construct() {
    if ( ! is_admin() ) {
        add_action( \'wp_head\', array( $this, \'pp_html_template\' ) );
        add_action( \'init\', array( $this, \'pp_html_process\' ) );
    }

    add_action( \'wp_ajax_pp_html_process\', array( $this, \'pp_html_process\' ) );
}

public function pp_html_template() {
    ?>
    <form id="pp-form-submit" name="pp-form-submit" class="pp-form-submit" enctype="multipart/form-data">
        <?php wp_nonce_field( \'pp_publisher_save\', \'pp_publisher_name\' ); ?>
        <div class="pp-row">
            <label for="pp-title"><?php esc_attr_e( \'Title\', \'post-publisher\' ) ?></label>
            <input type="text" id="pp-title" name="pp_title" required>
        </div>
    
        <div class="pp-row">
            <label for="pp-content"><?php esc_attr_e( \'Content\', \'post-publisher\' ) ?></label>
            <textarea id="pp-content" name="pp_content" cols="30" rows="10" required></textarea>
        </div>
    
        <div class="pp-row">
            <label for="pp-featured-image"><?php esc_attr_e( \'Featured Image\', \'post-publisher\' ) ?></label>
            <input type="file" id="pp-featured-image" name="pp_featured_image" required>
        </div>
        <input type="hidden" name="action" value="pp_html_process"/>
        <div class="pp-row">
            <input type="submit" name="pp_submit" id="pp-submit">
        </div>
    
        <div class="pp-row">
            <div id="pp-response"></div>
            <div class="pp-posts-area"></div>
        </div>
    </form>
<?php }

public function pp_html_process() {
    if ( isset( $_POST[\'pp_submit\'] ) ) {
        if ( ! isset( $_POST[\'pp_publisher_name\'] ) || ! wp_verify_nonce( $_POST[\'pp_publisher_name\'], \'pp_publisher_save\' ) ) {
            esc_attr__( \'Sorry, this action is not allowed.\', \'post-publisher\' );
            exit;
        } else {
            $inc = new Pp_Includes();
            $inc->pp_post_data(\'pp_title\', \'pp_content\', \'pp_featured_image\');

            global $current_user;

            $user_login   = $current_user->user_login;
            $user_id      = $current_user->ID;
            $post_title   = sanitize_text_field( $_POST[ \'pp_title\' ] );
            $post_content = sanitize_textarea_field( $_POST[ \'pp_content\' ] );

            $arg = array(
                \'post_title\'   => $post_title,
                \'post_content\' => $post_content,
                \'post_author\'  => $user_id,
                \'post_type\'    => \'post\',
                \'post_status\'  => \'draft\',
                \'post_name\'    => str_replace( \' \', \'-\', $post_title ),
            );

            $post_id = wp_insert_post( $arg, true );

            if ( ! function_exists( \'wp_generate_attachment_metadata\' ) ) {
                require_once( ABSPATH . "wp-admin" . \'/includes/image.php\' );
                require_once( ABSPATH . "wp-admin" . \'/includes/file.php\' );
                require_once( ABSPATH . "wp-admin" . \'/includes/media.php\' );
            }

            $featured_image = media_handle_upload( \'pp_featured_image\', $post_id );

            if ( is_wp_error( $featured_image ) ) {
                wp_die( $featured_image );
            }

            if ( $featured_image > 0 ) {
                update_post_meta( $post_id, \'_thumbnail_id\', $featured_image );
            }

            if ( wp_doing_ajax() ) {
                wp_die();
            }
        }
    }
}

public function pp_enqueue_public_styles() {
    wp_enqueue_script( \'pp_public_ajax\', plugins_url( \'/assets/js/pp-public-ajax.js\', __FILE__ ), array( \'jquery\' ), null, true );
    wp_localize_script( \'pp_public_ajax\', \'pp_public_ajax\',
        array(
            \'pp_ajaxurl\'             => admin_url( \'admin-ajax.php\' ),
            \'pp_publisher_name\'      => wp_create_nonce( \'pp_publisher_save\' )
        )
    );
}

function ppAjaxSubmit() {
    var ppFormData = new FormData(this);

    ppFormData.append(\'pp_submit\', 1);
    ppFormData.append(\'security\', pp_public_ajax.pp_publisher_name)

    $.ajax({
        action: \'pp_featured_image\',
        type: \'POST\',
        url: pp_public_ajax.pp_ajaxurl,
        data: ppFormData,
        processData: false,
        contentType: false,
        success: function () {
            console.log(data);
        },
        error: function () {
            console.log(err)
        }
    });

    return false;
}

$(\'#pp-form-submit\').submit(ppAjaxSubmit);