Django 403 CSRF token missing or incorrect

Question

I've encountered this issue but unfortunately still do not know how to fix it. The form renders perfectly, I enter the info and get a CSRF error. The reason given is token missing or incorrect.

View:

def eventSell(request, id):
    c = {}
    c.update(csrf(request))
    event = SquidEvent.objects.get(pk = id)
    listing_form = ListingForm(request.POST)
    if request.user.is_authenticated():
        if request.method == 'POST':
            listing_form = ListingForm(request.POST)
            if listing_form.is_valid():
                cd = listing_form.cleaned_data
                user = request.user
                item = Object(price = cd['price'], seller = user)
                item.save()
                return HttpResponseRedirect(reverse('tixeng:index'), c)
            #print listing_form
        else:
            return render_to_response('tixeng/list.html', {'event' : event, 'form' : listing_form}, c)
    else:
        return HttpResponseRedirect(reverse('allauth.account.views.login'))

Here is my template:

<form action="{% url 'app:eventSell' event.id %}" method="post">
{% csrf_token %}
{{ form }}
<input type="submit" value="Submit">
</form>

I think I've done everything right, I'm not sure what's causing the CSRF error. Also, in case its relevant I was following along with this as a guide:

http://www.djangobook.com/en/2.0/chapter07.html

possible duplicate of [CSRF Token missing or incorrect](http://stackoverflow.com/questions/8089224/csrf-token-missing-or-incorrect) — Brandon Taylor, Aug 14 '13 at 01:52
try to take off the csrf(request) and keep only request, and what up your settings did you set the middleware for csrf — drabo2005, Aug 14 '13 at 03:29

score 3 · Accepted Answer · edited May 23 '17 at 12:26

3

This stack here Django "The view didn't return an HttpResponse object." was able to help me sort it out. Once I added context_instance = RequestContext(request) to my render_to_response it worked.

edited May 23 '17 at 12:26

Community

1
1

answered Aug 14 '13 at 16:10

apardes

4,272
7
40
66

score 0 · Answer 2 · answered Sep 19 '15 at 16:13

0

context_instance is deprecated since version 1.8. You can use:

return render(request, 'admin/match_main.html', RequestContext(request, locals()))

answered Sep 19 '15 at 16:13

nish

6,952
18
74
128

Django 403 CSRF token missing or incorrect

2 Answers2

Linked