Level 13
Not sure if this helps but do you have this in the template header.
<meta name="csrf-token" content="{{ csrf_token() }}">
and try
@csrf
// instead of
{{ csrf_field() }}
Sep 3, 2020
9
Level 27
(1/1) TokenMismatchException in VerifyCsrfToken.php (line 68)
Hello,
I got this error:
(1/1) TokenMismatchException
in VerifyCsrfToken.php (line 68)
checkout.blade.php
<form action="{{ url('/checkout') }}" method="POST" id="myForm">
{{ csrf_field() }}
<div class="checkout-page">
<div class="row">
<div class="col-sm-12 col-md-6">
<div class="form">
<h3 class="form-title">DELIVERY DETAILS</h3>
....
<div class="paymment-method">
<h3 class="form-title">PAYMENT METHOD</h3>
<div class="checkbox">
<label>
<input type="checkbox" value="">
I’VE READ AND ACCEPT THE TERM & CONDITIONS
</label>
</div>
</div>
<button type="submit" class="button pull-right">Checkout</button>
</div>
</div>
</div>
</form>
Any clue why?
Level 102
Why not just use @csrf ?
Level 75
Try to clear cache in the browser
Level 27
For some reason this does not work out:
<form action="{{ url('/checkout') }}" method="POST" id="myForm">
<meta name="csrf-token" content="{{ csrf_token() }}">
@csrf
Level 102
Why not just use @csrf ?
2 likes
Level 13
You'll need to place the <meta name="csrf-token" content="{{ csrf_token() }}"> up in the header of your main blade template.
Like so
<!doctype html>
<html lang="{{ str_replace('_', '-', app()->getLocale()) }}">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- CSRF Token -->
<meta name="csrf-token" content="{{ csrf_token() }}">
<title>{{ config('app.name', 'MY APP') }}</title>
<!-- Scripts -->
<script src="{{ asset('js/app.js') }}" defer></script>
<!-- Styles -->
<link href="{{ asset('css/app.css') }}" rel="stylesheet">
</head>
<body>
Level 27
I still get the same error message:
(1/1) TokenMismatchException
in VerifyCsrfToken.php (line 68)
Level 75
@davy_yg Do you use ajax request for that?
Level 122
meta tag is for ajax requests and belongs in the header.
@csrf belongs within the form but is only available from version 5.6 onwards
5.5 and earlier must use {{ csrf_field() }}
You also have to have working sessions. It would help to know if forms work on other pages.
1 like
Please or to participate in this conversation.