ansaurus

Question

csrf error in django

Answer 1

A:

You need to add csrf(request) to your context.

from django import forms
from django.contrib.auth.forms import UserCreationForm
from django.http import HttpResponseRedirect
from django.shortcuts import render_to_response
from django.core.context_processors import csrf

def register(request):
    if request.method == 'POST':
        form = UserCreationForm(request.POST)
        if form.is_valid():
            new_user = form.save()
            return HttpResponseRedirect("/books/")
    else:
        form = UserCreationForm()
    con = {'form': form}
    con.update(csrf(request))
    return render_to_response("registration/register.html", con)

You might need to turn your context into a Context object for this, not a dict, but the principle is sound.

Blue Peppers 2010-07-07 17:37:13

Answer 2

+3 A:

Assuming you're on Django 1.2.x, just add this before {{form.as_p}}:

{% csrf_token %}

And to understand WHY, check out the CSRF docs

stevejalim 2010-07-07 17:37:27

Answer 3

A:

Add these 2 middlewares to the settings file if you don't want to add {% csrf_token %} to each form.

MIDDLEWARE_CLASSES = (
    #...
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.middleware.csrf.CsrfResponseMiddleware',
)

Laurent De Marez 2010-07-07 21:52:24

The above will work for Django 1.1 but not 1.2

stevejalim 2010-07-07 22:16:24

@stevejalim ironically, [docs](http://docs.djangoproject.com/en/1.2/ref/contrib/csrf/#legacy-method) suggest it would still work for 1.2 but it's deprecated.

rebus 2010-07-07 23:14:06

Ah you're right!

stevejalim 2010-07-08 11:42:13

Answer 4

A:

I was having the exact same issue - and Blue Peppers' answer got me on the right track. Adding a RequestContext to your form view fixes the problem.

from django.template import RequestContext

and:

def register(request):
if request.method == 'POST':
    form = UserCreationForm(request.POST)
    if form.is_valid():
        new_user = form.save()
        return HttpResponseRedirect("/books/")
else:
    form = UserCreationForm()
c = {'form': form}
return render_to_response("registration/register.html", c, context_instance=RequestContext(request))

This fixed it for me.

2010-08-27 14:58:25

ansaurus

tags:

views:

answers:

csrf error in django

related questions