crazedpsyc
unread,Jan 17, 2011, 12:10:42 PM1/17/11Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Django users
I tried to make a quick search box for my site-in-progress and
expected it to be as simple as keeping the database updated.
Unfortunately I ran into the following error as soon as I POSTed a
query:
[QUOTE]
Forbidden (403)
CSRF verification failed. Request aborted.
Help
Reason given for failure:
CSRF token missing or incorrect. In general, this can occur when there
is a genuine Cross Site Request Forgery, or when Django's CSRF
mechanism has not been used correctly. For POST forms, you need to
ensure:
The view function uses RequestContext for the template, instead of
Context.
In the template, there is a {% csrf_token %} template tag inside
each POST form that targets an internal URL.
If you are not using CsrfViewMiddleware, then you must use
csrf_protect on any views that use the csrf_token template tag, as
well as those that accept the POST data.
You're seeing the help section of this page because you have DEBUG =
True in your Django settings file. Change that to False, and only the
initial error message will be displayed.
You can customize this page using the CSRF_FAILURE_VIEW setting.
[/QUOTE]
I tried adding "{% csrf_token %}" to my template, but still got the
same error. I don't really know what the rest of the suggestions mean,
so any translation help would be appreciated