使用Yii2获取Ajax调用的错误请求(#400)-Gettingbadrequest(#400)onAjaxcallsusingYii2

35  

You have a problem with enableCsrfValidation. To read more about it you can read here.

在enableCsrfValidation上有问题。要了解更多，请阅读这里。

To disable CSRF, add this code to your controller:

要禁用CSRF，请将此代码添加到控制器:

public function beforeAction($action) {
    $this->enableCsrfValidation = false;
    return parent::beforeAction($action);
}

This will disable for all actions. You should probably, depending on the $action, disable it only for specific actions.

这将禁用所有操作。根据$action，您可能应该只针对特定的操作禁用它。

Note: See the answer from Skullcrasher to do this in a more proper way.

注意:看看Skullcrasher给出的答案，以一种更合适的方式来做这件事。

26  

As the answer from Mihai P. states, your problem is CSRF validation. It is also true that you could disable the validation for your actions, but this is not considered a good solution.

正如Mihai p的回答，您的问题是CSRF验证。同样，您可以禁用操作的验证，但这并不是一个好的解决方案。

As you have a problem in your Ajax request with the validation, you could also use a Yii Javascript function to add the CSRF token to your formdata that you send in the Ajax request.

由于在Ajax请求中有一个验证问题，您还可以使用Yii Javascript函数将CSRF令牌添加到您在Ajax请求中发送的formdata中。

Just try to add the token to your form data as follows:

请尝试将令牌添加到您的表单数据中，如下所示:

var form_data = {
    zone: zoneId,
    _csrf: yii.getCsrfToken()
};

I hope this helps and you therefore don't have to disable CSRF validation.

我希望这能有所帮助，因此您不必禁用CSRF验证。

In addition to manually add the CSRF token you can check if there is an X-CSRF header set in the request.

除了手动添加CSRF令牌之外，还可以检查请求中是否设置了X-CSRF头。

7  

Add this code at the bottom of your layout:

在布局底部添加以下代码:

4  

Use:

使用:

var csrfToken = $('meta[name="csrf-token"]').attr("content");
$.ajax({
    url: 'request',
    type: 'post',
    dataType: 'json',
    data: {param1: param1, _csrf : csrfToken},
});

More detail: Yii2: Using csrf token

更详细的:Yii2:使用csrf令牌。

2  

You need to disable CSRF validation in the before action function:

您需要在前操作函数中禁用CSRF验证:

public function beforeAction($action) {
    if($action->id == "action name need to disable")
        $this->enableCsrfValidation = false;
    return parent::beforeAction($action);
}

Or using the GET method.

或者使用GET方法。

1  

This works. Change the csrfParam with your own in Config/main.php

这个作品。用自己的配置/main.php修改csrfParam

'components' => [
    'request'=>[
        'csrfParam'=>"othername"
    ],
    ...

Remember that you must include in your requests the token with the same name as you defined in config.

记住，必须在请求中包含与配置中定义的名称相同的令牌。

0  

/backend/config/main-local.php

/后端/ config / main-local.php

'components' => [
    'request' => [
        'COOKIEValidationKey' => 'unique code',
        'csrfCOOKIE' => ['httpOnly' => true, 'path' => '/admin/'],
    ],
],

/frontend/config/main-local.php

/前端/ config / main-local.php

'components' => [
    'request' => [
        'COOKIEValidationKey' => 'unique code',
        'csrfCOOKIE' => ['httpOnly' => true, 'path' => '/'],
    ],
],