出于某些原因，我正在尝试创建一个没有设置API的管理选项页面。如果我这样做了，我听说我需要使用nonce来保证安全性。我想知道正确的使用方法。

这是我通过以下页面尝试的内容：Using nonce external of WP Admin管理

<?php
/*
Plugin Name: Demo for Using Nonce
Description: Demo plugin demonstrating how to use nonce
Author: Teno
*/

// define constants
define("DEMONONCE", "demo_nonce");
define("DEMONONCEPAGESLUG", "demo_nonce_adminpage");

// create an option array
$arrOption = get_option(DEMONONCE);
update_option(DEMONONCE, array_merge(array(), is_array($arrOption) ? $arrOption : array()));

// admin menu
add_action(\'admin_menu\', \'demo_nonce_adminmenu\');
function demo_nonce_adminmenu() {
    add_options_page(\'Demo Plugin Menu for Nonce without Settings API\', \'Demo Plugin Menu for Nonce without Settings API\', \'manage_options\', DEMONONCEPAGESLUG, \'demo_nonce_adminpage\');
}
// admin page
function demo_nonce_adminpage() {
    $options = get_option(DEMONONCE);

    print_r($_POST); // for debugging
    echo \'<br />\';

    if(isset($_POST[DEMONONCE][\'submitted\']) && !wp_verify_nonce($_POST[\'name_of_nonce_field\'], \'name_of_my_action\')){
        return;
    }

    if(isset($_POST[DEMONONCE][\'submitted\']) && $_POST[DEMONONCE][\'submitted\'] == 1){
        if (strlen(trim($_POST[DEMONONCE][\'option_a\'])) == 0) {
            $options[\'invalid\'] = True;     
            echo \'<div class="error settings-error"><p>Options are not saved.</p></div>\';
        } else {    
            $options = array_merge($options, $_POST[DEMONONCE]); // it seems the tab caption is erased here
            update_option(DEMONONCE, $options);
            echo \'<div class="updated"><p>Updates are saved.</p></div>\';
        }
    }   
    ?>
    <div class="wrap">
        <?php // heading 
        screen_icon(); ?> <h2>Demo Plugin for Nonces without Settings API</h2>
        <h3>Page 1</h3>
        <form method="post" action="">  <?php // \'action=""\' means to send the form post data to this page itself. ?>
            <?php wp_nonce_field(\'name_of_my_action\', \'name_of_nonce_field\'); ?>
            <input type="hidden" name="<?php echo DEMONONCE; ?>[submitted]" value="1" />
            <table class="form-table">
                <tbody>
                <tr valign="top">
                    <th scope="row">Option A</th>
                    <td>
                        <input name="<?php echo DEMONONCE; ?>[option_a]" size="40" type="text" value="<?php echo $options[\'invalid\']  ? $_POST[DEMONONCE][\'option_a\'] : $options[\'option_a\']; ?>" />
                        <?php echo ($options[\'invalid\'] && $options[\'invalid\'] ) ? \'<font color="red">* cannot be blank.</font>\' :\'\' ?>
                    </td>
                </tr>
                <tr valign="top">
                    <th scope="row">Option B</th>
                    <td>
                        <input name="<?php echo DEMONONCE; ?>[option_b]" size="40" type="text" value="<?php echo $options[\'invalid\'] ? $_POST[DEMONONCE][\'option_b\'] : $options[\'option_b\']; ?>" />
                    </td>
                </tr>
                </tbody>
            </table>
            <?php submit_button(); ?>   
        </form>     
    </div> <!-- end the admin page wrapper -->
    <?php
}
?>

我还是不确定这一切是否都好。“name\\u of\\u nonce\\u field”和“name\\u of\\u my\\u action”应该输入什么字符串？他们会是我叫什么名字？

除了nonces之外，我还应该做些什么来创建更安全的管理页面？