在我的 Django 應用程式中遇到 CSRF_Token 丟失或不正確的情況，我真的不明白問題是什么，因為我已經在我的模板呈現的任何可能的形式中包含了 {% csrf_token %}。我懷疑這可能與在表單中完成的 ajax 請求有關，以檢索區域名稱等等，也許有人可以告訴我問題是什么。我正在使用 autocomplete-light 從我的資料庫中檢索一些資料，不知道這是否可以發揮作用。我試過在網上搜索，但沒有找到似乎適用于我的問題的解決方案。
視圖.py
Class BreedAutocomplete(autocomplete.Select2QuerySetView):
def get_queryset(self):
if not self.request.user.is_authenticated:
return DogBreeds.objects.none()
qs = DogBreeds.objects.all()
if self.q:
qs = qs.filter(name__istartswith=self.q)
return qs
class AdListTakeMyDog(generic.ListView):
model = Advertisement
context_object_name = 'ads'
template_name = 'core/advertisement_list_take.html'
def get_queryset(self):
queryset = Advertisement.objects.filter(is_offering_own_dog=True)
return queryset
class AdListGetMeADog(generic.ListView):
model = Advertisement
context_object_name = 'ads'
template_name = 'core/advertisement_list_get.html'
def get_queryset(self):
queryset = Advertisement.objects.filter(is_offering_own_dog=False)
return queryset
class NewAdTakeMyDog(CreateView):
model = Advertisement
form_class = NewAdTakeMyDogForm
success_url = reverse_lazy('view_ads_take_my_dog')
template_name = 'core/advertisement_form_take.html'
def form_valid(self, form):
form.instance.author = self.request.user
form.instance.is_offering_own_dog = True
return super().form_valid(form)
class NewAdGetMeADog(CreateView):
model = Advertisement
form_class = NewAdGetMeADogForm
success_url = reverse_lazy('ad_changelist')
template_name = 'core/advertisement_form_get.html'
def form_valid(self, form):
form.instance.author = self.request.user
form.instance.is_offering_own_dog = False
return super().form_valid(form)
廣告創建 - 模板
{% extends '_base.html' %}
{% load static %}
{% block content %}
<body onload="hide_area_field()">
{% block form_title %}
<h2>Ny annons</h2>
{% endblock form_title %}
{% if form.is_multipart %}
<form method="post" enctype="multipart/form-data" id="adForm" data-municipalities-url="{% url 'ajax_load_municipalities' %}" data-areas-url="{% url 'ajax_load_areas' %}" novalidate>
{% csrf_token %}
{% else %}
<form method="post" id="adForm" data-municipalities-url="{% url 'ajax_load_municipalities' %}" data-areas-url="{% url 'ajax_load_areas' %}" novalidate>
{% csrf_token %}
{% endif %}
<table>
{{ form.as_p }}
</table>
<button type="submit">Publicera annons</button>
{{ form.media }}
</form>
</body>
{% endblock content %}
{% block footer %}
{% comment %} Imports for managing Django Autocomplete Light in form {% endcomment %}
<script type="text/javascript" src="{% static 'admin/js/vendor/jquery/jquery.js' %}"></script>
<link rel="stylesheet" type="text/css" href="{% static 'autocomplete_light/select2.css' %}" />
<script type="text/javascript" src="{% static 'autocomplete_light/jquery.init.js' %}"></script>
<script type="text/javascript" src="{% static 'autocomplete_light/autocomplete.init.js' %}"></script>
<script type="text/javascript" src="{% static 'autocomplete_light/select2.js' %}"></script>
<link rel="stylesheet" type="text/css" href="{% static 'autocomplete_light/vendor/select2/dist/css/select2.css' %}" />
<script type="text/javascript" src="{% static 'autocomplete_light/vendor/select2/dist/js/select2.full.js' %}"></script>
<script type="text/javascript" src="{% static 'autocomplete_light/forward.js' %}"></script>
<script type="text/javascript" src="{% static 'admin/js/vendor/jquery/jquery.js' %}"></script>
{% comment %} Functions for handling area selectors {% endcomment %}
<script>
function hide_area_field() {
const area_selector = document.getElementById('id_area');
area_selector.style.display = 'none';
}
/* Get URL for requesting list of municipalities & Areas */
const baseURI = window.location.origin
const municipality_url = document.getElementById('adForm')['attributes']['data-municipalities-url']['value']
const area_url = document.getElementById('adForm')['attributes']['data-areas-url']['value']
/* Get relevant objects from DOM */
const province_selector = document.getElementById('id_province');
const municipality_selector = document.getElementById('id_municipality');
const area_selector = document.getElementById('id_area');
/* Update municipalities when Province have been chosen */
province_selector.addEventListener('change', (event) => {
var xhr = new XMLHttpRequest();
xhr.onload = function () {
if (xhr.readyState === xhr.DONE) {
if (xhr.status === 200) {
municipality_selector.innerHTML = xhr.response
}
}
};
xhr.open('GET', baseURI municipality_url, true);
xhr.setRequestHeader('province', province_selector.value)
xhr.send();
});
/* Update Areas when Municipiality have been chosen */
municipality_selector.addEventListener('change', (event) => {
var xhr = new XMLHttpRequest();
xhr.onload = function () {
if (xhr.readyState === xhr.DONE) {
if (xhr.status === 200) {
if (xhr.response.length > 58) {
area_selector.style.display = ''
area_selector.innerHTML = xhr.response
} else {
area_selector.style.display = 'none'
}
}
}
};
xhr.open('GET', baseURI area_url, true);
xhr.setRequestHeader('municipality', municipality_selector.value)
xhr.send();
});
</script>
{% endblock footer %}
表格.py
class NewAdTakeMyDogForm(forms.ModelForm):
breed = forms.ModelChoiceField(
queryset=DogBreeds.objects.all(),
widget=autocomplete.ModelSelect2(url='breed-autocomplete')
)
class Meta:
model = Advertisement
fields = ('province', 'municipality', 'area', 'title', 'description', 'days_per_week', 'size_offered', 'breed', 'image1', 'image2', 'image3')
def __init__(self, *args, **kwargs):
super(NewAdTakeMyDogForm, self).__init__(*args, **kwargs)
self.fields['municipality'].queryset = Municipality.objects.none()
self.fields['area'].queryset = Area.objects.none()
self.fields['area'].required = False
if 'province' in self.data:
try:
# Set municipality queryset
province_id = int(self.data.get('province'))
self.fields['municipality'].queryset = Municipality.objects.filter(province_id=province_id).order_by('name')
# Set area queryset
municipality_id = int(self.data.get('municipality'))
self.fields['area'].queryset = Area.objects.filter(municipality_id=municipality_id).order_by('name')
except (ValueError, TypeError):
pass # invalid input from the client; ignore and fallback to empty Municipality/Area queryset
uj5u.com熱心網友回復：
您的 AJAX 請求不包含 CSRF 令牌。所以 Django 的跨站點請求偽造保護開始了。
Django檔案 詳細解釋了如何在發送 AJAX POST 請求時獲取 CSRF 令牌以及如何將其包含在請求的標頭中。
uj5u.com熱心網友回復：
錯誤是我查看了錯誤的模板，我有多個帶有繼承的模板，并且把它們弄混了，所以我雖然我在表單中呈現了一個 CSRF 令牌，但它是在一個沒有的模板中完成的用過的。經驗教訓 - 擁有一個基礎模板，您可以從中開始，并且僅將塊用于在基礎模板之間更改的基本代碼。
轉載請註明出處，本文鏈接：https://www.uj5u.com/net/378979.html