Hi Thomas,

Thanks for your quick reply.

in my view there was the following line of code for my csrf_token:
   <?php echo $form['_csrf_token'] ?>

If I use that or the code you gave me the hidden input tag is created
but it has no value assigned to it.

Should the scfr_secret value in my config be wrapped in hash signs or
can I just use some arbitrary string..?

Thanks,

Marijn

On Apr 8, 5:18 pm, "Thomas Rabaix" <[EMAIL PROTECTED]> wrote:
> I am not 100%  sure about that but you sould add a csrf secret in your
> settings.yml
>
> all:
>   .settings:
>     # Form security secret (CSRF protection)
>     csrf_secret:       ##CSRF_SECRET##     # Unique secret to enable
> CSRF protection or false to disable
>
> In the view, check that field csrf is present, if not add
>
> <?= $form[$form->getCSRFFieldName()]->render() ?>
>
> Thomas
>
> On Tue, Apr 8, 2008 at 5:10 PM, Marijn <[EMAIL PROTECTED]> wrote:
>
> >  Hi everybody,
>
> >  I am having trouble finding documentation about csrf support in
> >  symfony 1.1. When I generate crud actions for a Model and try to
> >  populate it with data by using the create web interface it says that
> >  csrf_token is required.
>
> >  Anybody here who knows this problem or who can tell me what I am doing
> >  wrong? I haven't changed a thing after generating the crud actions.
>
> >  Thanks,
>
> >  Marijn
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to