angell-co / Pimp-My-Matrix

A plugin for Craft that lets you enhance a busy Matrix field and organise block types
MIT License
60 stars 5 forks source link

Breaks with CSRF on #11

Closed bossanova808 closed 9 years ago

bossanova808 commented 9 years ago

Hi Josh

As per slack, PMM2 breaks if CSRF is on in config

2015/10/29 22:49:21 [error] [exception.Craft\HttpException.400] exception 'Craft\HttpException' with message 'The CSRF token could not be verified.' in /var/www/vhosts/craft/craft/app/services/HttpRequestService.php:1329
Stack trace:
#0 /var/www/vhosts/craft/craft/app/framework/base/CComponent.php(561): Craft\HttpRequestService->validateCsrfToken(Object(CEvent))
#1 /var/www/vhosts/craft/craft/app/framework/base/CApplication.php(211): CComponent->raiseEvent('onBeginRequest', Object(CEvent))
#2 /var/www/vhosts/craft/craft/app/framework/base/CApplication.php(182): CApplication->onBeginRequest(Object(CEvent))
#3 /var/www/vhosts/craft/craft/app/index.php(62): CApplication->run()
#4 /var/www/vhosts/craft/public_html/index.php(19): require_once('/var/www/vhosts...')
#5 {main}
REQUEST_URI=/index.php/ghost/actions/pimpMyMatrix/blockTypes/saveBlockTypes
HTTP_REFERER=https://*****/pimpmymatrix

---
2015/10/29 22:49:21 [trace] [system.CModule] Loading "errorHandler" application component
in /var/www/vhosts/craft/craft/app/etc/web/WebApp.php (583)
2015/10/29 22:49:21 [error] [application] The CSRF token could not be verified.
in /var/www/vhosts/craft/craft/app/etc/errors/ErrorHandler.php (95)
2015/10/29 22:49:21 [trace] [system.CModule] Loading "urlManager" application component
in /var/www/vhosts/craft/craft/app/etc/web/WebApp.php (583)
in /var/www/vhosts/craft/craft/app/controllers/BaseController.php (50)
in /var/www/vhosts/craft/craft/app/etc/errors/ErrorHandler.php (264)

With it turned off all is well.