WordPress Form Processing

<!-- WordPress form with nonce for security -->
<form action="<?php echo esc_url(admin_url('admin-post.php')); ?>" method="post">
    <input type="hidden" name="action" value="custom_form_action">
    <?php wp_nonce_field('custom_form_nonce', 'custom_form_nonce'); ?>
    
    <label for="name">Name:</label>
    <input type="text" id="name" name="name" required>
    
    <button type="submit">Submit</button>
</form>

<!-- WordPress form processing in functions.php or plugin file -->
<?php
// Hook for both logged in and non-logged in users
add_action('admin_post_custom_form_action', 'handle_custom_form');
add_action('admin_post_nopriv_custom_form_action', 'handle_custom_form');

function handle_custom_form() {
    // Verify nonce
    if (!isset($_POST['custom_form_nonce']) || 
        !wp_verify_nonce($_POST['custom_form_nonce'], 'custom_form_nonce')) {
        wp_die('Security check failed');
    }
    
    // Get and sanitize data
    $name = sanitize_text_field($_POST['name']);
    
    // Process data (e.g., save to database)
    // ...
    
    // Redirect after processing
    wp_redirect(home_url('/thank-you/'));
    exit;
}
?>

WordPress AJAX Form Processing

<!-- WordPress AJAX form -->
<form id="ajax-form">
    <input type="text" name="name" required>
    <button type="submit">Submit</button>
</form>

<div id="response"></div>

<script>
jQuery(document).ready(function($) {
    $('#ajax-form').on('submit', function(e) {
        e.preventDefault();
        
        $.ajax({
            type: 'POST',
            url: '<?php echo admin_url('admin-ajax.php'); ?>',
            data: {
                action: 'my_ajax_action',
                name: $('input[name="name"]').val(),
                security: '<?php echo wp_create_nonce('my_ajax_nonce'); ?>'
            },
            success: function(response) {
                $('#response').html(response.data);
            }
        });
    });
});
</script>

<!-- WordPress AJAX handler in functions.php or plugin file -->
<?php
// Hook for both logged in and non-logged in users
add_action('wp_ajax_my_ajax_action', 'handle_ajax_request');
add_action('wp_ajax_nopriv_my_ajax_action', 'handle_ajax_request');

function handle_ajax_request() {
    // Verify nonce
    check_ajax_referer('my_ajax_nonce', 'security');
    
    // Get and sanitize data
    $name = sanitize_text_field($_POST['name']);
    
    // Process data
    // ...
    
    // Send response
    wp_send_json_success('Form submitted successfully!');
}
?>