Error login python CSRF

Question

When I submit the login form, I get the following error :

403 Forbidden Reason given for failure:CSRF token missing or incorrect.

Here is my code

urls.py

from datetime import datetime
from django.conf.urls import patterns, url
from django.conf.urls import include
from django.contrib import admin
from django.conf import settings
from app.models import *
from app.views import *

admin.autodiscover()
# Uncomment the next lines to enable the admin:

urlpatterns = patterns('',
    url(r'^tinymce/', include('tinymce.urls')),
    url('', include('django.contrib.auth.urls', namespace='auth')),
    url(r'^social/',include('social.apps.django_app.urls', namespace='social')),
    #url(r'^s$', 'app.views.CategoriaProductoss', name='servicios'),
    #url(r'^s/(?P<id>\d+)$', 'app.views.servicioscategoria', name='servicioscategoria'),
    url(r'^media/(?P<path>.*)$','django.views.static.serve', {'document_root':settings.MEDIA_ROOT,}),
    url(r'^$', 'app.views.index', name='Vulpini.co'),
    url(r'^login$', 'django.contrib.auth.views.login', name='Vulpini.co'),
    url(r'^$', 'django.contrib.auth.views.logout', name='logout'),
    url(r'start$', 'app.views.start', name="start"),
    url(r'ajax-upload$', 'app.views.import_uploader', name="my_ajax_upload"),

    # Uncomment the admin/doc line below to enable admin documentation:
     url(r'^admin/doc/', include('django.contrib.admindocs.urls')),

    # Uncomment the next line to enable the admin:
     url(r'^admin/', include(admin.site.urls)),
)

Here is the template where I have my form:

Layout.html

<form action="/login" class="form-horizontal" formmethod="post">
   {% csrf_token %}
   <h4>Iniciar Sesion.</h4>
   <hr />
   <div class="login-social">                     
      <a href="{% url 'social:begin' 'facebook' %}?next={{ request.path }}" target="iframe">Iniciar sesion con Facebook</a>           
      <a href="{% url 'social:begin' 'twitter' %}?next={{ request.path }}" target="iframe">Iniciar sesion con Twitter</a>
   </div>
   <hr />
   <div class="form-group">
     <label class="control-label" for="inputEmail">Usuario</label>
        <div class="controls">
           <input name="username" type="text" id="inputEmail" placeholder="Usuario"/>
        </div>
   </div>
   <div class="form-group">
     <label class="control-label" for="inputPassword">Contraseña</label>
        <div class="controls">
           <input name="password" type="password" id="inputPassword" placeholder="Contraseña"/>
        </div>
     </div>
   <div class="form-group">
     <label class="checkbox">
        <input type="checkbox" />Recordar</label>
           <button type="submit" class="btn btn-info" formmethod="post" formaction="/login">Ingresar</button>
            <a href="/">Registrar</a>
   </div>
</form>

Why do I get a CSRF failure even though I have included {% csrf_token %} on my form?

Answer 1

The csrf token tag needs access to the request object. In your case, the easiest way to do this is to use the render shortcut instead of render_to_response.

from django.shortcuts import render

def index(request):
    notifi = Notificaciones.objects.all()
    return render(request, 'app/index.html', {'notifi': notifi})