Re: [Cppcms-users] Blank value within csrf field
Brought to you by:
artyom-beilis
|
From: Artyom B. <art...@ya...> - 2015-03-18 10:24:17
|
Have you created session? (i.e. is your session isn't empty - you defined some value at cppcms session level) Because CSRF does not have sense if nobody "logged in". Artyom Beilis -------------- CppCMS - C++ Web Framework: http://cppcms.com/ CppDB - C++ SQL Connectivity: http://cppcms.com/sql/cppdb/ From: tuq3 <tu...@ya...> To: Artyom Beilis <art...@ya...>; cpp...@li... Sent: Wednesday, March 18, 2015 12:17 PM Subject: Re: [Cppcms-users] Blank value within csrf field 18.03.2015 14:10, Artyom Beilis пишет: http://cppcms.com/wikipp/en/page/cppcms_1x_config#security.csrf You need to enable it. Unfortunately it isn't on by default for backward compatibility. Artyom Beilis -------------- CppCMS - C++ Web Framework: http://cppcms.com/ CppDB - C++ SQL Connectivity: http://cppcms.com/sql/cppdb/ From: tuq3 <tu...@ya...> To: cpp...@li... Sent: Tuesday, March 17, 2015 1:53 PM Subject: [Cppcms-users] Blank value within csrf field Hi everyone! First of I put <%= csrf =%> into <from></form> and while loading page with this form i get error: cppcms, error: Caught exception [Session storage backend is not loaded]. I managed it by adding "session" preferences into config.js, but now I get a blank value within csrf hidden field after loading a page. ------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Cppcms-users mailing list Cpp...@li... https://lists.sourceforge.net/lists/listinfo/cppcms-users ------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Cppcms-users mailing list Cpp...@li... https://lists.sourceforge.net/lists/listinfo/cppcms-users Hmm, I set this option. But the field is still empty. ------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Cppcms-users mailing list Cpp...@li... https://lists.sourceforge.net/lists/listinfo/cppcms-users |