In the case you've set up your setting.py manually, please make sure yours is carefully "spliced" with the one in askbot/setup_templates/settings.py as there are important pieces for the askbot app.
Evgeny (
2011-06-10 12:29:32 -0500
)edit
CSRF token missing or incorrect
asked 2011-06-09 03:52:14 -0500
Anonymous
When I try to change the skin for Askbot, I get the following error:
Forbidden (403)
CSRF verification failed. Request aborted.
Reason given for failure:
CSRF token missing or incorrect. This puts me in a catch 22 situation whereby I need to change the skin to fix the error, but without fixing the error I can't change the skin. Can anyone tell me how to get round this?
Edit: I'm using the default skin. I don't know which templates are used in the settings interface. I would prefer a solution that didn't involve editing the default skin templates as those changes would be harder to maintain.
Comments
4 Answers
Do your templates have {% csrf_token %} inside each <form>?
I'd add them right after the <form> opening tag.
The template tag inserts a hidden field with a token to prevent cross site scripting.
edit maybe you have something missing in the settings.py? Sorry, somehow I assumed you've customized the skin and lost the csrf_tokens.
You'd need:
- 'django.core.context_processors.csrf' in TEMPLATE_CONTEXT_PROCESSORS
- CSRF_COOKIE_NAME - some string
- CSRF_COOKIE_DOMAIN - your domain name - like 'example.com'
If CSRF_COOKIE_DOMAIN does not match yours, you'll see that error.
I had this problem as well. I figured out a csrf token missed at file askbot/deps/livesettings/templates/livesettings/group_settings.html.
No sure whether it's a bug. I added a {% csrf_token %} after <form> tag at line 26. Then this issue solved.
Comments
This 'CSRF verification failed' is still present in the current default skin (Nov 21st 2011), master branch. It prevents the user to log into the admin console, to change the skin. Is there any other way to change the skin? The one this site uses (default in the packaged version of askbot) does work...
Comments
Reliable Askbot Hosting
Create your Q&A site at askbot.com. Managed Askbot hosting at just $15/mo. Dedicated hosting, support contracts, consulting services.
create your Q&A site30 days free trial
Stats
Asked: 2011-06-09 03:52:14 -0500
Seen: 785 times
Last updated: Nov 29 '11
