php - codeigniter CSRF error -

-

i'm trying use codeigniter csrf protection enabled. i've read answered solutions here , here didnt seem resolve issue. @ point "action requested not allowed" error solved, doesnt load form validation helper. throws 'unable load requested file: helpers/form_validation_helper.php` must have gone wrong?

here's controller file: 

class home extends ci_controller {  function __construct(){     parent::__construct();     $this->load->helper('form'); }  public function index(){     $data['title'] = "home";     $data['main_content'] = 'frontend/index';      $this->load->view("frontend/includes/template", $data); }  public function contact(){     $data['title'] = "contact us";     $data['main_content'] = 'frontend/contact';     $this->load->view('frontend/includes/template', $data); }  //submit functions public function contact_submit(){     $send_clicked = $this->input->post('sub');     if(isset($send_clicked)){          $this->load->helper('date');         $this->load->helper('form_validation');          $this->form_validation->set_rules('name', 'name', 'trim|required|max_length[40]|xss_clean');         $this->form_validation->set_rules('email', 'email address', 'trim|required|max_length[50]|xss_clean');         $this->form_validation->set_rules('subject', 'subject', 'trim|required|max_length[100]|xss_clean');         $this->form_validation->set_rules('message', 'message', 'trim|required|max_length[1000]|xss_clean');          if ($this->form_validation->run() == false) {          } else {              $clean_name = $this->input->post('name');             $clean_email = $this->input->post('email');             $clean_subject = $this->input->post('subject');             $clean_message = $this->input->post('message');             $date = now();              $db_data = array(                 'name' => $clean_name,                  'email' => $clean_email,                  'subject' => $clean_subject,                  'message' => $clean_message,                  'date_posted' => $date                 );              print_r($db_data);         }     } }  public function page_missing(){     $data['title'] = "404 page missing";     $data['main_content'] = 'frontend/404';      $this->load->view("frontend/includes/template", $data); }  }

here's configs of config.php made changes to:

$config['sess_cookie_name']     = 'qtd_sess'; $config['sess_expiration']      = 7200; $config['sess_expire_on_close'] = false; $config['sess_encrypt_cookie']  = true; $config['sess_use_database']    = true; $config['sess_table_name']      = 'qtd_sess'; $config['sess_match_ip']        = true; $config['sess_match_useragent'] = true; $config['sess_time_to_update']  = 300;  $config['cookie_prefix']    = ""; $config['cookie_domain']    = ""; $config['cookie_path']      = "/"; $config['cookie_secure']    = false;  $config['global_xss_filtering'] = true;  $config['csrf_protection'] = true; $config['csrf_token_name'] = 'csrf_test_name'; $config['csrf_cookie_name'] = 'csrf_cookie_name'; $config['csrf_expire'] = 7200;

here part of view:

<!-- start contact form -->         <?php $attributes = array('class' => 'contact-form', 'id' => 'contact-form');          echo form_open('home/contact_submit', $attributes); ?>           <div class="form-group">             <div class="controls">               <input type="text" placeholder="name" name="name">             </div>           </div>           <div class="form-group">             <div class="controls">               <input type="email" class="email" placeholder="email" name="email">             </div>           </div>           <div class="form-group">             <div class="controls">               <input type="text" class="requiredfield" placeholder="subject" name="subject">             </div>           </div>            <div class="form-group">              <div class="controls">               <textarea rows="7" placeholder="message" name="message"></textarea>             </div>           </div>           <button type="submit" id="submit" name="sub" class="btn-system btn-large">send</button>           <div id="success" style="color:#34495e;"></div>         </form>         <!-- end contact form -->

form validation not helper. library.

$this->load->helper('form_validation');// wrong  $this->load->library('form_validation');// correct.

for more information see here


Comments

Post a Comment

Popular posts from this blog

javascript - Chart.js (Radar Chart) different scaleLineColor for each scaleLine -

-
Image
i try , create radar chart using chart.js has various colours each scaleline, or coloured between scalelines. wondering if possible? from: to: i have working graph, though there doesn't seem method change individual scale lines. kind regards leigh you can extend radar chart type this, so chart.types.radar.extend({ name: "radaralt", initialize: function (data) { chart.types.radar.prototype.initialize.apply(this, arguments); var originalscaledraw = this.scale.draw; var ctx = this.chart.ctx; this.scale.draw = function () { var linewidth = this.linewidth; // bypasses line drawing in originalscaledraw this.linewidth = linewidth; originalscaledraw.apply(this, arguments); ctx.linewidth = this.linewidth; var scale = this; // draw chart.helpers.each(scale.ylabels, function (label, index) { // color of ...
Read more

apache - Error with PHP mail(): Multiple or malformed newlines found in additional_header -

-
suddenly have started receiving above error without changes having been made script. host 1and1 (i know...) the script still works fine on different server, , suspicion there must have been server config change has lead this, although hosts plead ignorance. there's no information on above error @ in google can find - have ideas? server running apache if helps. had similar problem. came out of blue. no php code changed. what changed: php upgraded 5.5.25-1 5.5.26. a security risk in php mail() function has been fixed , newlines in additional_headers allowed no more. because newlines mean: starts email message (and surely don't want inject newlines through headers followed evil message). what have worked fine, e.g. having newlines after headers or passing whole message additional_headers , function no more. solution : sanitize headers. no multiple newlines in additional_headers argument. these count "multiple or malformed newlines":...
Read more

java - Android – MapFragment overlay button shadow, just like MyLocation button -

-
Image
i'm struggling add shadow custom overlay button on google map. goal make custom button google's mylocation button. here's how app looks now: layout.xml <relativelayout xmlns:android="http://schemas.android.com/apk/res/android" xmlns:tools="http://schemas.android.com/tools" xmlns:map="http://schemas.android.com/apk/res-auto" android:layout_height="match_parent" android:layout_width="match_parent" style="@style/apptheme"> <fragment android:layout_width="match_parent" android:layout_height="match_parent" android:id="@+id/map" tools:context=".mapsactivity" android:name="com.google.android.gms.maps.supportmapfragment" android:layout_alignparentend="true" android:layout_alignparentstart="true" android:layout_alignparentbottom="true" ...
Read more