We have forms that take different actions depending on whether or not they are submitted by a logged in user. The forms work perfectly except for one thing. I haven’t found a way to enable nonce validation just for logged in users. Has anyone found a way to achieve this? I’d prefer not having two identical forms with only a single setting (requireLogin) differing.
(The gform_require_login filter cannot be used since it isn’t affected by the user’s login state. Adding the gform_require_login filter through gform_pre_render, gform_pre_validation and gform_pre_submission_filter adds the necessary nonce but it doesn’t get validated on submission.)