Okay, placed {% csrf_token %} in form and

Remember to reload the page!

Now my view function gets called.  

So {% url 'publish' %} is the only format that will work for me.


On Saturday, January 6, 2018 at 1:07:04 PM UTC-8, Luna Tuna wrote:
>
> Now getting this:
>
> Forbidden (403)
>> CSRF verification failed. Request aborted.
>> Help
>> Reason given for failure:
>> CSRF token missing or incorrect.
>> In general, this can occur when there is a genuine Cross Site Request 
>> Forgery, or when Django's CSRF mechanism 
>> <https://docs.djangoproject.com/en/2.0/ref/csrf/> has not been used 
>> correctly. For POST forms, you need to ensure:
>>    
>>    - Your browser is accepting cookies.
>>
>>
>>    - The view function passes a request to the template's render 
>>    
>> <https://docs.djangoproject.com/en/dev/topics/templates/#django.template.backends.base.Template.render>
>>     method.
>>
>>
>>    - In the template, there is a {% csrf_token %} template tag inside 
>>    each POST form that targets an internal URL.
>>
>>
>>    - If you are not using CsrfViewMiddleware, then you must use 
>>    csrf_protect on any views that use the csrf_token template tag, as 
>>    well as those that accept the POST data.
>>
>>
>>    - The form has a valid CSRF token. After logging in in another 
>>    browser tab or hitting the back button after a login, you may need to 
>>    reload the page with the form, because the token is rotated after a login.
>>
>> You're seeing the help section of this page because you have DEBUG = True in 
>> your Django settings file. Change that to False, and only the initial 
>> error message will be displayed.
>> You can customize this page using the CSRF_FAILURE_VIEW setting.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/38614baa-c63a-4550-b5c3-b8d6bc62840c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to