Shortcode

Documentation Functions Shortcode

Overview

Shortcodes can be used within a WYGIWYG to display another field’s value. To learn more about shortcodes, click here.

From ACF 6.3.0, the ACF shortcode is disabled by default for new installs of ACF. If you need to enable it, see enabling the ACF shortcode.

For security, we recommend disabling the ACF shortcode if you are not using it.

Usage

Place the shortcode marker with the desired field within your wysiwyg content. This shortcode runs the same as the the_field() function.

[acf field="field_name" post_id="123"]

Example

This is a story about a boy named [acf field="name"]. He is [acf field="age"] years old.

Limitations

• Only works for simple text based values

Disabling the Shortcode

The ACF shortcode allows access to any field on any post type as was enabled by default any install of ACF created before the release of ACF 6.3. This means any user who has permission to publish posts on your site can view any ACF data if they know the field name or key. For this reason, we recommend you disable the shortcode if your site is not using it. You can use the following setting to disable it:

add_action( 'acf/init', 'set_acf_settings' );
function set_acf_settings() {
    acf_update_setting( 'enable_shortcode', false );
}

Enabling the Shortcode

When enabled, the ACF shortcode allows access to any field on any post type. This means any user who has permission to publish posts on your site can view any ACF data if they know the field name or key. For this reason, from ACF 6.3 the shortcode is disabled by default for new installs. If you do need to use it, for example for a page builder, you can use the following setting to enable it:

add_action( 'acf/init', 'set_acf_settings' );
function set_acf_settings() {
    acf_update_setting( 'enable_shortcode', true );
}

Related

• Features: Updates to ACF Field Functions in 5.11
• Filters: acf/shortcode/prevent_access
• Getting Started: Displaying Values in Your Theme
• Field Types: User
• Functions: acf_form()