wp_nonce_field()

wp_nonce_field() — Retrieves or display nonce hidden field for forms. The nonce field is used to validate that the contents of the form came from the location on the current site and not somewhere else. The nonce does not offer absolute protection, but should protect against most cases. It is very important to use nonce field in forms. The $action and $name are optional, but if you want to have better security, it is strongly suggested to set those two parameters.

Inputs: $action (int|string): Optional. Action name. Default -1. $name (string): Optional. Nonce name. Default ‘_wpnonce’. $referer (bool): Optional. Whether to set the referer field for validation. Default true. $display (bool): Optional. Whether to display or return hidden form field. Default true.

Returns string: Nonce field HTML markup.