CSRF + ajax/jquery problem

You will need to return the new CSRF hash value to your ajax success method and use the value to update the hidden CSRF field.

In the controller you can use the security class to get the CSRF token name and hash like this

PHP Code:

$token = $this->security->get_csrf_token_name();
$hash = $this->security->get_csrf_hash(); 


Then, assuming you will return json data, echo a json encoded array containing this info... and anything else needed to update the page.

PHP Code:

echo json_encode(array('token' => $token, 'hash' => $hash, 'other' => $something, 'more_stuff' => $more); 


Then, back at the .ajax success function, some javascript along these lines to update the CSRF field

Code:

success: function (results) {
   //find the CSRF field and update with new hash value
   $("input[name=" + results.token + "]").val(results.hash);

  // code for refreshing other stuff...
},