Welcome Guest, Not a member yet? Register   Sign In
How to use POST while keeping CSRF as true
#9

The csrf data is clearly being sent to the server as this shows.

(01-01-2018, 11:21 PM)kratisalgia Wrote: Form Data

csrf_token_name:cdbbad48a99402d377961d7348a1bc4c
country_name:Sweden
country_year:2017

But on the headers you show $config['csrf_regenerate'] seems to be set = TRUE. I say this because the value of csrf_cookie_name in "Form Data" is not the same as in the "Response Headers". The values will be the same when $config['csrf_regenerate'] = FALSE;

Maybe some other configuration issue will be spotted if you share the $config settings you are using in Cookie Related Variables and Cross Site Request Forgery variables.
Reply


Messages In This Thread
RE: How to use POST while keeping CSRF as true - by dave friend - 01-02-2018, 06:42 AM



Theme © iAndrew 2016 - Forum software by © MyBB