Hey, when you upgraded to satchmo tip did you add the csrf view middleware to your middleware classes?
http://docs.djangoproject.com/en/dev/ref/contrib/csrf/?from=olddocs#how-to-use-it I'm not sure that you need to do that here, but that could be causing the csrf errors. Alex On Thu, Jan 13, 2011 at 12:00 AM, GuyBrush <[email protected]> wrote: > Hello, > > > I upgraded satchmo to tip in December and I'm still getting CSRF errors in > the admin "Site settings" and the cache clear page. > > This is a mystery because I have an older "tip" version running some place > else and it does not have a problem. > I also did not edit/add any admin template files to my template folder. > > Its running with latest django > > Here is the message I'm getting > > Forbidden (403) > CSRF verification failed. Request aborted. > Help > Reason given for failure: > CSRF token missing or incorrect. > > In general, this can occur when there is a genuine Cross Site Request > Forgery, or when Django's CSRF mechanism has not been used correctly. For > POST forms, you need to ensure: > The view function uses RequestContext for the template, instead of Context. > In the template, there is a {% csrf_token %} template tag inside each POST > form that targets an internal URL. > If you are not using CsrfViewMiddleware, then you must use csrf_protect on > any views that use the csrf_token template tag, as well as those that accept > the POST data. > You're seeing the help section of this page because you have DEBUG = True in > your Django settings file. Change that to False, and only the initial error > message will be displayed. > You can customize this page using the CSRF_FAILURE_VIEW setting. > > -- > You received this message because you are subscribed to the Google Groups > "Satchmo users" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/satchmo-users?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Satchmo users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/satchmo-users?hl=en.
