blocked method POST php

lucaszephyr · 2022-05-09 15:51:40

I'm creating a new form in glpi, using the GET method, but when I change the method to POST I get "The action you requested is not allowed.". Does GLPI not block the POST method?

cconard96 · 2022-05-10 00:35:14

When using POST calls, you have to have a valid CSRF token in the request (security check).
Typically, this is done by adding a hidden input named "_glpi_csrf_token" with the value equal to the result of "Session::getNewCSRFToken()" which will create the security token and store it in the user's session, then return the token ID.
When the server gets the POST request, it ensures that the token exists in the user session and that it is also not expired (2 hours by default).

The simple option is to just call "Html::closeForm" at the end of the for to add the CSRF token input and echo or add the end form tag.

ec2311 · 2022-09-27 18:32:19

cconard96 wrote:

When using POST calls, you have to have a valid CSRF token in the request (security check).
Typically, this is done by adding a hidden input named "_glpi_csrf_token" with the value equal to the result of "Session::getNewCSRFToken()" which will create the security token and store it in the user's session, then return the token ID.
When the server gets the POST request, it ensures that the token exists in the user session and that it is also not expired (2 hours by default).
The simple option is to just call "Html::closeForm" at the end of the for to add the CSRF token input and echo or add the end form tag.

Hello @cconard96,

I put a html::closeform() just after the submit button.
And I always have the same error.

What could be wrong ?
I know that the script was running.
I have a part of form (inputs) and javascript (set after the closeform function)

as soon as I click on submit -> error message

Thanks for your help

cconard96 · 2022-09-27 22:43:29

The close form method call should be after all form inputs are echoed as it adds the end form tag "</form>". The JavaScript should be OK after the closeForm.

ec2311 · 2022-09-28 11:29:42

Hello @cconard96

thanks for your reply
In spite of your explanation, the problem was always there

But I found the real problem :
the inc/includes.php was done twice in the same script (at the top) (due to differents include)
I update one of it by include_once instead of include, and the problem disapeared

thanks

Forum GLPI-Project

Announcement

#1 2022-05-09 15:51:40

blocked method POST php

#2 2022-05-10 00:35:14

Re: blocked method POST php

#3 2022-09-27 18:32:19

Re: blocked method POST php

#4 2022-09-27 22:43:29

Re: blocked method POST php

#5 2022-09-28 11:29:42

Re: blocked method POST php

Board footer