StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POdjango csrf cookie no longer working
primarykey
Id
16701726
data
AcceptedAnswerId
16703297
AnswerCount
1
ClosedDate
CommentCount
7
CommunityOwnedDate
CreationDate
2013-05-22T21:17:20.600
FavoriteCount
0
LastActivityDate
2013-05-22T23:35:54.013
LastEditDate
2013-05-22T21:25:24.070
LastEditorUserId
2397817
OwnerUserId
2397817
ParentId
0
PostTypeId
1
Score
0
ViewCount
917
LastEditorDisplayName
text
Body
<p>I don't understand why, but Django has ceased including the csrf cookie in responses. I have the middleware enabled, have tried using RequestContext and am using render. I have even tried using the csrf_protect and requires_csrf_token decorators.</p> <p>I am working on a dev server right now, and I can print the context after I use RequestContext, and it seems to include a csrf_token.</p> <p>But when I look at the actual headers using Chrome's inspect element, the csrf_token isn't there, also when I use the console and type in "document.cookie" that does not have the csrf token.</p> <p>HELP!</p> <p>Here's an example view</p> <pre><code>@requires_csrf_token def index(request): context = RequestContext(request, {'foo':'bar'}) print context return render(request, 'index.html', context) </code></pre> <p>The CSRF token seems to be in the context:</p> <pre><code>{u'csrf_token': <django.utils.functional.__proxy__ object at 0x1025ab990>}, ... </code></pre> <p>But it fails to make its way through...</p> <pre><code>Accept:text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding:gzip,deflate,sdch Accept-Language:en-US,en;q=0.8 Connection:keep-alive Cookie:__utma=96992031.468590559.1369255550.1369255550.1369255550.1; __utmb=96992031.17.10.1369255550; __utmc=96992031; __utmz=96992031.1369255550.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none) Host:127.0.0.1:8000 Referer:http://127.0.0.1:8000/ User-Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.65 Safari/537.31 </code></pre> <p><b>UPDATE: Here is the template I'm using:</b></p> <pre><code>{% extends "base.html" %} {% block hello %} Basic Stock Event Charts {% endblock %} {% block content %} <div id="leftsidebar"> <p>Use this tool to graph a time series data for a security. You can graph a security and four other features such as volume, call option volume, or implied volatility. The tool will zoom in on the date of interest to show the target audience the changes in the selected vaiables preceeding the event. Because of large movement in variables before the announcement, it may be helpful to use the minimum and maximum tools to zoom in on smaller movements ahead of the event. </p> <div class="ui-widget inline"> <label for="securities">1. Type in a ticker symbol</label> <input id="securities"> </div> <div class="inline"><input type="button" id="reload" value="Reset" class="hide" /></div> <label for="datepicker">2. Pick your event date of interest.</label> <input type="text" id="datepicker" disabled /> <label>3. Choose other series to graph.</label> <p><strong>Primary Axis</strong></p> Left Axis: <select id="series1" class="selectpicker span2" disabled><option value=""></option></select> <div id="series1minmax" class="hide"> Min <input type="text" id="min1" class="input-mini" />&nbsp; Max <input type="text" id="max1" class="input-mini" /> </div><input type="button" id="addaxes1" value="Graph" class="hide" /> <input type="button" id="removeaxes1" value="Remove" class="hide" /><br /> <br/>Right Axis: <select id="series2" class="selectpicker span2" disabled><option value=""></option>></select> <div id="series2minmax" class="hide"> Min <input type="text" id="min2" class="input-mini" />&nbsp; Max <input type="text" id="max2" class="input-mini" /> </div><input type="button" id="addaxes2" value="Graph" class="hide" /> <input type="button" id="removeaxes2" value="Remove" class="hide" /><br /> <input type="button" id="addextraaxis" value="Add Additional Axis" disabled/><br /> <div id="additional" class="hide"> <p><strong>Additional Axis</strong></p> Left Axis: <select id="series3" class="selectpicker span2" disabled><option value=""></option></select> <div id="series3minmax" class="hide"> Min <input type="text" id="min3" class="input-mini" />&nbsp; Max <input type="text" id="max3" class="input-mini" /> </div><input type="button" id="addaxes3" value="Graph" class="hide" /> <input type="button" id="removeaxes3" value="Remove" class="hide" /><br /> <br/>Right Axis: <select id="series4" class="selectpicker span2" disabled><option value=""></option>></select> <div id="series4minmax" class="hide"> Min <input type="text" id="min4" class="input-mini" />&nbsp; Max <input type="text" id="max4" class="input-mini" /> </div><input type="button" id="addaxes4" value="Graph" class="hide" /> <input type="button" id="removeaxes4" value="Remove" class="hide" /><br /> </div> </div> <div id="rightsidebar"> <div id="container" class="hide"></div> </div> </div> <script src="http://code.highcharts.com/stock/highstock.js"></script> <script src="http://code.highcharts.com/modules/exporting.js"></script> <script src="http://code.highcharts.com/stock/highcharts-more.js"></script> <script> $(function() { $("#removefromchart").click(function() { var conceptName = $('#savedseries').find(":selected").remove(); }); $("#reload").click(function() { location.reload(); }) $("#addextraaxis").click(function() { $("#additional").removeClass("hide"); this.disabled = true $("#addextraaxis").addClass("hide"); var chart = $("#container").highcharts(); chart.setSize(null, 650); }) }); $(function() { $("#series1").change(function() { $("#addaxes1").removeClass("hide"); }); $("#series2").change(function() { $("#addaxes2").removeClass("hide"); }); $("#series3").change(function() { $("#addaxes3").removeClass("hide"); }); $("#series4").change(function() { $("#addaxes4").removeClass("hide"); }); }); $(function() { function setExtreme(isMin, axis, value) { console.log("fired"); var chart = $('#container').highcharts(); if (isMin) { console.log(value + " " + chart.yAxis[axis].getExtremes()["max"]) chart.yAxis[axis].setExtremes(value, chart.yAxis[axis].getExtremes()["max"]); } else { console.log(value + " " + chart.yAxis[axis].getExtremes()["min"]) chart.yAxis[axis].setExtremes(chart.yAxis[axis].getExtremes()["min"], value); } console.log(value); } function getAxisNumber(series) { var indicies = {} $.each(chart.yAxis, function(index, element) { indicies[element.options.id] = index; console.log(element.options.id); }); return indicies[series] } $("#max1").change(function() {setExtreme(0, getAxisNumber("#series1"), this.value)}); $("#min1").change(function() {setExtreme(1, getAxisNumber("#series1"), this.value)}); $("#max2").change(function() {setExtreme(0, getAxisNumber("#series2"), this.value)}); $("#min2").change(function() {setExtreme(1, getAxisNumber("#series2"), this.value)}); $("#max3").change(function() {setExtreme(0, getAxisNumber("#series3"), this.value)}); $("#min3").change(function() {setExtreme(1, getAxisNumber("#series3"), this.value)}); $("#max4").change(function() {setExtreme(0, getAxisNumber("#series4"), this.value)}); $("#min4").change(function() {setExtreme(1, getAxisNumber("#series4"), this.value)}); }); $(function() { $("#removefromchart").click(function() { var conceptName = $('#savedseries').find(":selected").remove(); }); }); $(function() { function addPlotLine(ts) { var chart = $('#container').highcharts(); chart.xAxis[0].addPlotBand({ from: ts, to: ((ts + 86400000) * 365), color: 'rgba(68, 170, 213, 0.2)', id: 'tsband' }); chart.xAxis[0].addPlotLine({ value: ts, color: 'rgb(255, 0, 0)', width: 1, id: 'tsline' }); chart.xAxis[0].setExtremes(ts - (86400000 * 30), ts + 86400000) } function removeEventIfExists() { var chart = $("#container").highcharts() chart.xAxis[0].removePlotBand("tsband"); chart.xAxis[0].removePlotLine("tsline"); } $("#datepicker").datepicker({ showButtonPanel: true, /*added by oussama*/ changeMonth: true, /*added by oussama*/ changeYear: true, /*added by oussama*/ dateFormat: 'yy-mm-dd', onSelect: function (dateText, inst) { utcDate = Date.UTC(dateText.split("-")[0], dateText.split("-")[1] - 1, dateText.split("-")[2]); removeEventIfExists(); addPlotLine(utcDate); $("#series1").removeAttr("disabled"); $("#series2").removeAttr("disabled"); $("#series3").removeAttr("disabled"); $("#series4").removeAttr("disabled"); $("#addextraaxis").removeAttr("disabled"); var ticker = $("#securities").val(); var date = $("#datepicker").val(); chart.setTitle({text: ticker + " around " + date}); } }); }); $(function() { function createChart() { var chart = $('#container').highcharts(); var options = {chart: { renderTo: 'container', height: 450, }, events: { load: function(event) { this.setExtremes(); } }, rangeSelector: { enabled: false, }, exporting: { enabled: false, }, navigator: { enabled: true, series: { id: 'navigator' }, }, yAxis: [{ title: { text: 'Price' }, height: 150, }], }, chart = new Highcharts.StockChart(options); return chart; } $("#securities").autocomplete({ source: "/api/get_securities/", minLength: 1, select: function(event, ui) { var ticker = ui.item.label; getSeries(ticker); chart = createChart(); getTimeSeriesData(ticker + "|PX_LAST", 0); $('#container').show(); $('#datepicker').removeAttr("disabled"); $('#reload').removeClass("hide"); chart.setTitle({text: ticker}); this.disabled = 'disabled'; }, }); }); $(function() { function removeAxes(id) { var chart = $('#container').highcharts(); chart.get(id).remove(); } $("#removeaxes1").click(function() { console.log("removeaxes1 clicked"); removeAxes("#series1"); $("#removeaxes1").addClass("hide"); $("#series1minmax").addClass("hide"); $("#series1minmax").removeClass("inline"); $("#series1").val(""); $("#min1").val(""); $("#max1").val(""); $("#series1").removeAttr("disabled"); }); $("#removeaxes2").click(function() { console.log("removeaxes2 clicked"); removeAxes("#series2"); $("#removeaxes2").addClass("hide"); $("#series2minmax").addClass("hide"); $("#series2minmax").removeClass("inline"); $("#series2").val(""); $("#min2").val(""); $("#max2").val(""); $("#series2").removeAttr("disabled"); }); $("#removeaxes3").click(function() { console.log("removeaxes3 clicked"); removeAxes("#series3"); $("#removeaxes3").addClass("hide"); $("#series3minmax").addClass("hide"); $("#series3minmax").removeClass("inline"); $("#series3").val(""); $("#min3").val(""); $("#max3").val(""); $("#series3").removeAttr("disabled"); }); $("#removeaxes4").click(function() { console.log("removeaxes4 clicked"); removeAxes("#series4"); $("#removeaxes4").addClass("hide"); $("#series4minmax").addClass("hide"); $("#series4minmax").removeClass("inline"); $("#series4").val(""); $("#min4").val(""); $("#max4").val(""); $("#series4").removeAttr("disabled"); }); function addSeries(id, minMaxId, isOpposite, isAdditional) { var chart = $('#container').highcharts(); indicies = {} console.log('climlckedaddaxes'); var series = $(id).val() var top = 210 if (isAdditional) top = 380 var options = { title: { text: series.split("|")[1] }, top: top, height: 150, opposite: isOpposite, id: id, offset: -30 } chart.addAxis(options) $.each(chart.yAxis, function(index, element) { indicies[element.options.id] = index; console.log(element.options.id); }); getTimeSeriesData(series, indicies[id]); $(minMaxId).removeClass("hide") $(minMaxId).addClass("inline") } $("#addaxes1").click(function() { addSeries('#series1', "#series1minmax", false, false); $("#addaxes1").addClass("hide") $("#removeaxes1").removeClass("hide") $("#series1").attr("disabled", "disabled") }); $("#addaxes2").click(function() { addSeries('#series2', "#series2minmax", true, false); $("#addaxes2").addClass("hide") $("#removeaxes2").removeClass("hide") $("#series2").attr("disabled", "disabled") }); $("#addaxes3").click(function() { addSeries('#series3', "#series3minmax", false, true); $("#addaxes3").addClass("hide") $("#removeaxes3").removeClass("hide") $("#series3").attr("disabled", "disabled") }); $("#addaxes4").click(function() { addSeries('#series4', "#series4minmax", true, true); $("#addaxes4").addClass("hide") $("#removeaxes4").removeClass("hide") $("#series4").attr("disabled", "disabled") }); }) $('#addtochart').click(function() { var selectedValues = $('#seriesselector').val(); $.each(selectedValues, function(index, value) { $('#savedseries').append($('<option>', { value: value, text: value, selected: true, })); $('#seriesselector option[value="' + value +'"]').remove(); }); }); function getCookie(name) { var cookieValue = null; if (document.cookie && document.cookie != '') { var cookies = document.cookie.split(';'); for (var i = 0; i < cookies.length; i++) { var cookie = jQuery.trim(cookies[i]); // Does this cookie string begin with the name we want? if (cookie.substring(0, name.length + 1) == (name + '=')) { cookieValue = decodeURIComponent(cookie.substring(name.length + 1)); break; } } } return cookieValue; } function parseDate(inputdate, value) { var date = inputdate; var year = parseInt(date.split("-")[0]); var month = parseInt(date.split("-")[1]) - 1; var day = parseInt(date.split("-")[2]); var outputdate = Date.UTC(year, month, day); if (year == 2013 && month == 3) { //console.log(inputdate, outputdate, value); } return outputdate; }; function getTimeSeriesData(seriesName, axis) { var csrftoken = getCookie('csrftoken'); console.log('csrftoken is :: ' + csrftoken); $.ajax({ // create an AJAX call... beforeSend: function(xhr, settings) { var csrftoken = getCookie('csrftoken'); xhr.setRequestHeader("X-CSRFToken", csrftoken); }, data: {'seriesName': seriesName }, // get the form data type: 'POST', url: '/api/get_time_series_data/', success: function(response) { // on success.. console.log(response); var series = {} series['name'] = response[0]['series_name']; series['data'] = [] $.each(response, function(index, value) { series['data'][index] = [ parseDate(response[index]['date'], response[index]['value']), parseFloat(response[index]['value']) ]; }); series['yAxis'] = axis series['marker'] = { enabled : true, radius : 3 } var chart = $('#container').highcharts(); chart.addSeries(series); var nav = chart.get('navigator'); if (axis == 0) nav.setData(series['data']); } }); return false; }; function getSeries(ticker) { var csrftoken = getCookie('csrftoken'); $.ajax({ // create an AJAX call... beforeSend: function(xhr, settings) { var csrftoken = getCookie('csrftoken'); xhr.setRequestHeader("X-CSRFToken", csrftoken); }, data: {'ticker': ticker }, // get the form data type: 'POST', url: '/api/get_series/', success: function(response) { // on success.. $('#seriesselector').empty() for (var i = 0; i < response.length; i++) { if (response[i].value == 'PX_LAST') continue; $('#series1').append($('<option>', { value: ticker + "|" + response[i].value, text: response[i].value })); $('#series2').append($('<option>', { value: ticker + "|" + response[i].value, text: response[i].value })); $('#series3').append($('<option>', { value: ticker + "|" + response[i].value, text: response[i].value })); $('#series4').append($('<option>', { value: ticker + "|" + response[i].value, text: response[i].value })); } } }); return false; }; </script> {% endblock %} </code></pre>
Tags
<django><django-csrf>
Title
django csrf cookie no longer working
singulars
PostAcceptedAnswerId
1. PO
  singulars
  PostTypePostTypeId
  PTAnswer
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. USmatthewlent
UserOwnerUserId
1. USmatthewlent
plurals
PostLinksPostIdRelatedPostId
1. This table or related slice is empty.
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
  singulars
  PostTypePostTypeId
  PTAnswer
VotesPostIdCreationDate
1. This table or related slice is empty.
CommentsPostId

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.