CSRF - Multiple form CI 3.0

You should set

Code:

$config['csrf_regenerate'] = FALSE;

The token then wont be updated on each form submission (but will still be unique per visitor).

Tokens may be either regenerated on every submission (default) or kept the same throughout the life of the CSRF cookie. The default regeneration of tokens provides stricter security, but may result in usability concerns as other tokens become invalid (back/forward navigation, multiple tabs/windows, asynchronous actions, etc). You may alter this behavior by editing the following config parameter

https://www.codeigniter.com/user_guide/l...rgery-csrf