security - Pass Codeigniter CSRF string to server via AJAX -


i have enabled codeigniter's csrf protection on site uses ajax submit user form , handles other user interaction require data submission via ajax. result came against "action not allowed" server side error. worked out data javascript collected , submitted via ajax passed server , result csrf code not being sent.

the generated token tag looks like:

<input type="hidden" name="csrf_test_name" value="dsflkabsdf888ads888xxxxxx" />

so seems me simplest way submit token server verification using jquery selector on csrf_test_name value , adding post data server verify. per code below:

//get csrf token var csrf = $('[name="csrf_test_name"]').val(); //build form data array var form_data = { csrf_test_name: csrf, ... ... ... ... ... ... } //send form data server can stored $.ajax({ type: "post", data: form_data, url: ..., datatype: "html", success: function(msg){ ... ... ... }//end success });//end ajax

i have followed procedure every ajax submission sends data server , server side error fixed , works fine.

to test have hard coded in incorrect csrf token , server detects inconsistency , returns erro code 500 on surface works.

my question this, safe way , there expected best practice follow? have done google searching on , seems other methods more complex , wondering if way creates attack vector can't see/workout.

an easier method pass csrf $.ajaxsetup() way it's included $.ajax() request afterward.

var csrf = $('input[name="csrf_test_name"]').val(); var data = {}; data[csrf] = csrf; $.ajaxsetup({ 'data': data });

then no need include data: { csrf_test_name: 'xxx', ... } in requests after setup.


Comments

Post a Comment

Popular posts from this blog

javascript - backbone.js Collection.add() doesn't `construct` (`initialize`) an object -

<!doctype html public "-//w3c//dtd xhtml 1.0 strict//en" "http://www.w3.org/tr/xhtml1/dtd/xhtml1-strict.dtd"> <html> <head> <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script> <script src="http://documentcloud.github.com/underscore/underscore-min.js"></script> <script src="http://documentcloud.github.com/backbone/backbone-min.js"></script> </head> <body> <button id="cmd_create_event" name="cmd_create_event" type="button">create new `event`</button> <script type="text/javascript"> var eventmodel = backbone.model.extend({ initialize : function() { console.log("`event` initialized. id: " + this.cid); this.bind("change:status", function() { console.log(this.get("status") + " value `status`"); }); this.bind("error", function(model, e...
Read more

php - Get uncommon values from two or more arrays -

is there function in php give array of uncommon values 2 or more arrays? for example: $array1 = array( "green", "red", "blue"); $array2 = array( "green", "yellow", "red"); .... $result = function_needed($array1, $array2,...); print_r($result); should give output: array("blue", "yellow", ...); use array_diff , array_merge : $result = array_merge(array_diff($array1, $array2), array_diff($array2, $array1)); here's demo. for multiple arrays, combine callback , array_reduce : function unique(&$a, $b) { return $a ? array_merge(array_diff($a, $b), array_diff($b, $a)) : $b; } $arrays = array( array('green', 'red', 'blue'), array('green', 'yellow', 'red') ); $result = array_reduce($arrays, 'unique'); and here's demo of that.
Read more

Adding duplicate array rows in Php -

i create function in php adds rows of array shared column value. so input. $test = array( array("c", 5, 6), array("c", 2, 3), array("test", 5, 6) ); and output. $testduplicatefree = array( array("c", 7, 9), array("test", 5, 6) ) ); i'm thinking function combine_duplicates($array,$col){ ... ... return $duplicatefreearray; } where $col duplicate free array. so, in case, combine_duplicates($test,0); would me desired output. this. <?php function combine_duplicates($array,$col) { $index = array(); foreach ($array $row) { $key = $row[$col]; if (!isset($index[$key])) { $index[$key] = $row; } else { ($i = 0; $i < count($row); ++$i) { if ($i != $col) { $index[$key][$i] += $row[$i]; } } } } return array_values($index); } $array = array( array("c", 5, 6), array("c", 2, 3), array("test", 5, 6) ); print_r(combine_duplicates($array, 0)); try here: http://codepad.org/mdhesqhi
Read more