nonce
From WordPress Codex:
<?php check_ajax_referer( $action, $query_arg, $die ) ?>
This function can be replaced via plugins. If plugins do not redefine these functions, then this will be used instead.
Verifies the AJAX request to prevent processing requests external of the blog.
Nonces should never be relied on for authentication or authorization, access control. Protect your functions using current_user_can(), always assume Nonces can be compromised.