dhtmlxForm CodeIgniter CSRF

Suite and Optimus Suite 5
#1

Hello,

I’m using dhtmlxForm with CI and I have enabled CSRF in CI, after doing that dhtmlxForm doesn’t work any more.
I add a hidden input {type:“hidden”, name:“csrf_token_name”, value:“csrf_hash”} but still not working.
What can I do?
Thanx.

#2

Can you attach example with dhtmlxForm, CI and CSRF?

#3

Hello Avalon,

I send you the MVC phps + myapp.js

Thanx!!!
demo_app.zip (9.91 KB)

#4

How can I attach CodeIgniter?)

#5

CodeIgniter only need to be copied to your webserver, you don’t need to install anything. Then just copy each file, I send, inside /codeigniter/application/|controllers|models|views| folders.

You also have to set the CI config.php file parameters to enabled CSRF

$config[‘csrf_protection’] = TRUE;
$config[‘csrf_token_name’] = ‘csrf_token_name’;
$config[‘csrf_cookie_name’] = ‘csrf_cookie_name’;
$config[‘csrf_expire’] = 7200;

I hope this can help you
Thanx!

#6

Upload all files (your, css, dhtmlx, jquery-1.11.1.min.js, CI, etc) please . All server folder.

But don’t upload pro version!!!

#7

Hi Avalon,

All app uploaded!!!

Don’t worried is dhtmlx std.

Thanx!!!
demo_app.zip (1020 KB)

#8

Hi Guillermo,

I had ‘Forbidden’. In .htaccess I replaced

RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d
with

RewriteBase /MY_PATH/codeigniter/ RewriteCond $1 !^(index\.php|images|robots\.txt)

and in config.php I remove http://

$config['base_url']	= 'http://';

I have blank page.

#9

Hi Avalon,

I send you a PM with the link of the app running on a free web hosting, also the credentials for FTP and app login.

Thanx!!!

#10

Hi Avalon,

httpd.conf uploaded

I attach the form through a view

myapp.js line 225 - function showView(name,cell){

then

myapp.js line 246 - frmEmpleado = cell.attachForm(frmEmpleadoStr);

Thanx!!!
httpd.zip (12 KB)

#11

Hi Avalon,

Any clue?

#12

Hi Guillermo,
not yet!
Does it work without CI or CSRF?

#13

Hi Avalon,

dhtmlxForm works fine with CI if I disabled CI CSRF.

Thanx!!!

#14

Hi Avalon,

Any news?

Thanx!!!

#15

No. Bad news)

Can you use something instead of CSRF, handshake?

#16

Ok I’ll try!
Thanx Avalon!!!