我尝试通过Yii中的链接发送POST数据时找不到CSRF令牌

Question

for the shopping cart i add 'add to cart' link. Through adding a 'click' event i make it a POST request. The system replies: 'Can't find the csrf token'; Here is the code:

 'add to cart' => array(
               'url'=>'Yii::app()->controller->createUrl("assortment/addtocart", array("id"=>$data[id], "YII_CSRF_TOKEN" => ' . Yii::app()->request->csrfToken. ', "csrf"=>' . Yii::app()->request->csrfToken . ' ))', 

               'click'=>"function(){
                            $.fn.yiiGridView.update('assortment-grid', { 
                                type:'POST',
                                url:$(this).attr('href'),
                            //  data:{YII_CSRF_TOKEN: " . Yii::app()->request->csrfToken . "},
                                /*success:function(data) {
                                      $.fn.yiiGridView.update('assortment-grid'); 
                                }*/
                            })
                            return false;
                          }
                        ",
                    ),

I've added the 'csrf' parameter into the link. When i uncomment data:{YII_CSRF_TOKEN: " . Yii::app()->request->csrfToken . "}, the POST request becomes simple GET redirect (csrf validated). I do not need to update grid, so i've commented out success:function(data) . Since there should not be redirection, i need to keep the request POST and ajax. You might look at screenshots of the POST form:

How to fix it? Can i pass csrf as a POST parameter? Can i add a POST submit button into CGridView?

Answer 1

make sure that you have this code in config

return array(
    'components'=>array(
        'request'=>array(
            'enableCsrfValidation'=>true,
        ),
    ),
);

add token as hidden input(if needed):

$request = Yii:app()->getRequest();
echo CHtml::textField($request->csrfTokenName, $request->getCsrfToken());

and send all form data

data: $('#formId').serialize()