Thanks for the reply.
Upgrading to 1.11 is beyond the budget according to management.
So I'm stuck with 1.6 for now.
The upgrade from 1.1 to 1.6 took much more time that expected.
Anyhow after a reboot today csrf is working as expected.
I'm still mystified as to what the problem may of been.
My only guess is it took a reboot to get the template to see {% csrf_token
%}.
Here is info on the key components.
logon.html contains <form method="post" action=".">{% csrf_token %}
settings.py contains
MIDDLEWARE_CLASSES = (
'django.middleware.common.CommonMiddleware',
'django.contrib.sessions.middleware.SessionMiddleware',
'django.middleware.common.CommonMiddleware',
'django.middleware.csrf.CsrfViewMiddleware', #
'django.contrib.auth.middleware.AuthenticationMiddleware',
'django.middleware.transaction.TransactionMiddleware',
'django.contrib.messages.middleware.MessageMiddleware',
'django.contrib.redirects.middleware.RedirectFallbackMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
'djangosecure.middleware.SecurityMiddleware',
)
On Monday, May 15, 2017 at 10:46:43 PM UTC+2, NoviceSortOf wrote:
>
>
>
> I'm having trouble deploying csrf in Django 1.6
>
> When I enable csrf in settings either we get a Django error
> or accounts can't login.
>
> Are there any special considerations for deploying csrf protection in 1.6?
>
> I heard there was a utility for checking csrf in Django, where can I get
> that utility and is it compatible with Django 1.6.
>
> Any suggestions welcome.
>
>
>
--
You received this message because you are subscribed to the Google Groups
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-users/1c4886d7-9978-428f-9ff0-8db1db76f9ca%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
