Menu
I build the form tag by myself and when I post the form to server it give me a InvalidAuthenticityToken error, so I want to know how to add it in my own in current situation:
<form accept-charset="UTF-8" action="/crops/update" method="post"> <input id="crop_x" name="crop_x" size="30" type="text" /><br /> <input id="crop_y" name="crop_y" size="30" type="text" /><br /> <input id="crop_w" name="crop_w" size="30" type="text" /><br /> <input id="crop_h" name="crop_h" size="30" type="text" /><br /> <input id="crop" name="crop" type="submit" value="Crop!" /> </form> Response error is:
ActionController::InvalidAuthenticityToken in CropsController#update ActionController::InvalidAuthenticityToken Rails.root: /home/mlzboy/my/crop2 Application Trace | Framework Trace | Full Trace 
891
When the user submits the form, Rails looks for the authenticity_token , compares it to the one stored in the session, and if they match the request is allowed to continue. Since the authenticity token is stored in the session, the client cannot know its value.
Rails CSRF TokenThe server generates these tokens, links them to the user session, and stores them in the database. This token is then injected into any form presented to the client as a hidden field. When the client correctly submits the form for validation, it passes the token back to the server.
There is a view helper called form_authenticity_token that returns the current session's authenticity token.
In your view.html.erb:
<form action="/blah" method="POST"> <input name="authenticity_token" value="<%= form_authenticity_token %>" type="hidden"> <input name="first_name" type="text"> </form> If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
