Title: HTML form rendering with weird hidden input fields
Last modified: April 13, 2021

---

# HTML form rendering with weird hidden input fields

 *  Resolved [stevecarrus](https://wordpress.org/support/users/stevecarrus/)
 * (@stevecarrus)
 * [5 years, 2 months ago](https://wordpress.org/support/topic/html-form-rendering-with-weird-hidden-input-fields/)
 * I have a new ecommerce site, which uses lead forms to collect customer info. 
   On our live production site, there are hidden input fields with encrypted looking
   name and value attributes. Here is an example:
 * <input type=”hidden” name=”fxOAgTXmrd_k” value=”MHVgCPf2J”>
    <input type=”hidden”
   name=”jEvdKncJwDa” value=”UFQPsvy5bx60OL”> <input type=”hidden” name=”lcZhEMQDb-”
   value=”nNrvImtYAwde]L”>
 * These hidden fields are not in the actual page templates, so I don’t know where
   they’re coming from. I posted this question on Stack Overflow, and someone noted
   that they look like CSRF tokens. I haven’t done anything to set up CSRF tokens,
   and don’t know much about them.
 * I did discover that we have the WP Cerber plugin activated on the site. Does 
   WP Cerber automatically add tokens like this to html forms?
 * If not, is it possible the presence of these hidden fields indicates some sort
   of hacking attempt?

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Plugin Author [gioni](https://wordpress.org/support/users/gioni/)
 * (@gioni)
 * [5 years, 2 months ago](https://wordpress.org/support/topic/html-form-rendering-with-weird-hidden-input-fields/#post-14315982)
 * No worries, there is no hacking attempt. Those tokens are generated by WP Cerber.
   They are used by the anti-spam engine.
 *  Thread Starter [stevecarrus](https://wordpress.org/support/users/stevecarrus/)
 * (@stevecarrus)
 * [5 years, 2 months ago](https://wordpress.org/support/topic/html-form-rendering-with-weird-hidden-input-fields/#post-14318569)
 * Ah, very good. Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘HTML form rendering with weird hidden input fields’ is closed to new 
replies.

 * ![](https://s.w.org/plugins/geopattern-icon/wp-cerber_77a9bf.svg)
 * [WP Cerber Security, Anti-spam & Malware Scan](https://wordpress.org/plugins/wp-cerber/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wp-cerber/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wp-cerber/)
 * [Active Topics](https://wordpress.org/support/plugin/wp-cerber/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wp-cerber/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wp-cerber/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [stevecarrus](https://wordpress.org/support/users/stevecarrus/)
 * Last activity: [5 years, 2 months ago](https://wordpress.org/support/topic/html-form-rendering-with-weird-hidden-input-fields/#post-14318569)
 * Status: resolved