[wp-hackers] wp_nonce_field() bug?

Philip Walton philip at philipwalton.com
Mon May 2 22:39:15 UTC 2011

I just came across what seems like a bug to me, but may very well be 
intentional, so I wanted to run it by you all fist

The function function wp_nonce_field() will, by default, echo a hidden 
field for the _nonce and _wp_http_referer values.

If, however, I pass false as the fifth argument to have it return the 
fields instead of echo, it does not return the _wp_http_referer field.

Is this intentional? It seems weird that it would be, but perhaps I'm 
missing something.

More information about the wp-hackers mailing list