Laravel中的TokenMismatchException

Question

我是Laravel的新手

我想更改評論狀態

{!! Form::open(['method'=>'patch','onchange'=>'submit()','action'=>['CommentController@update',$item->id]]) !!}
{!! Form::select('show',[0 =>'No',1 =>'Yes' ], $show_view) !!}
{!! Form::close() !!}

發送多個表單請求后，laravel向我顯示此錯誤

TokenMismatchException in VerifyCsrfToken.php line 53:

in VerifyCsrfToken.php line 53
at VerifyCsrfToken->handle(object(Request), object(Closure))
at call_user_func_array(array(object(VerifyCsrfToken), 'handle'), array(object(Request), object(Closure))) in Pipeline.php line 124
at Pipeline->Illuminate\Pipeline\{closure}(object(Request)) in ShareErrorsFromSession.php line 54
at ShareErrorsFromSession->handle(object(Request), object(Closure))
at call_user_func_array(array(object(ShareErrorsFromSession), 'handle'), array(object(Request), object(Closure))) in Pipeline.php line 124
at Pipeline->Illuminate\Pipeline\{closure}(object(Request)) in StartSession.php line 62
at StartSession->handle(object(Request), object(Closure))
at call_user_func_array(array(object(StartSession), 'handle'), array(object(Request), object(Closure))) in Pipeline.php line 124
at Pipeline->Illuminate\Pipeline\{closure}(object(Request)) in AddQueuedCookiesToResponse.php line 37
at AddQueuedCookiesToResponse->handle(object(Request), object(Closure))
at call_user_func_array(array(object(AddQueuedCookiesToResponse), 'handle'), array(object(Request), object(Closure))) in Pipeline.php line 124
at Pipeline->Illuminate\Pipeline\{closure}(object(Request)) in EncryptCookies.php line 59
at EncryptCookies->handle(object(Request), object(Closure))
at call_user_func_array(array(object(EncryptCookies), 'handle'), array(object(Request), object(Closure))) in Pipeline.php line 124
at Pipeline->Illuminate\Pipeline\{closure}(object(Request)) in CheckForMaintenanceMode.php line 42
at CheckForMaintenanceMode->handle(object(Request), object(Closure))
at call_user_func_array(array(object(CheckForMaintenanceMode), 'handle'), array(object(Request), object(Closure))) in Pipeline.php line 124
at Pipeline->Illuminate\Pipeline\{closure}(object(Request))
at call_user_func(object(Closure), object(Request)) in Pipeline.php line 103
at Pipeline->then(object(Closure)) in Kernel.php line 122
at Kernel->sendRequestThroughRouter(object(Request)) in Kernel.php line 87
at Kernel->handle(object(Request)) in index.php line 54

Answer 1

您必須在表單提交中擁有令牌（用於防止CSRF攻擊）。

如果您使用Laravel 5，請使用

{!! csrf_field() !!}

如果您正在執行AJAX請求，則可以在標頭X-CSRF-TOKEN添加令牌。請查看此部分： http : //laravel.com/docs/5.1/routing#csrf-x-xsrf-token

如果您使用Laravel 4，則可以在Form::token()中使用Form::token() 。

另一個選擇是將URI從CSRF保護中排除，這是不建議的，但可以在需要時執行： http : //laravel.com/docs/5.1/routing#csrf-clusion-uris