Codeigniter Tutorials

Home » Codeigniter »

How to Send AJAX request with CSRF token in CodeIgniter

Cross-Site Request Forgery (CSRF) is a way to trick the server that a request sent to it is legitimate while it actually is an unauthorized attempt.

if CSRF is not enabled then generate error :- “The action you have requested is not allowed.”.

File Name :

User Table

File Name :

CREATE TABLE `users` (
`id` int(11) NOT NULL PRIMARY KEY AUTO_INCREMENT,
`name` varchar(80) NOT NULL,
`username` varchar(80) NOT NULL,
`gender` varchar(10) NOT NULL,
`email` varchar(80) NOT NULL,
`city` varchar(80) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=utf8;

Config.php

File Name :

$config['csrf_protection'] = TRUE; // Enable CSRF
$config['csrf_token_name'] = 'csrf_hash_name'; // Token name (You can update it)
$config['csrf_regenerate'] = TRUE; // Set TRUE to regenerate Hash

Model

File Name : Main_model.php

<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');

class Main_model extends CI_Model {

function getUserDetails($postData){

$response = array();

if(isset($postData['username']) ){

// Select record
$this->db->select('*');
$this->db->where('username', $postData['username']);
$q = $this->db->get('users');
$response = $q->result_array();

}

return $response;
}

}

Controller

File Name :

<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class User extends CI_Controller {

public function index(){

// load base_url
$this->load->helper('url');

// load view
$this->load->view('user_view');
}

public function userDetails(){

// POST data
$postData = $this->input->post();

// load model
$this->load->model('Main_model');

// get data
$data = $this->Main_model->getUserDetails($postData);

// Read new token and assing in $data['token']
$data['token'] = $this->security->get_csrf_hash();

echo json_encode($data);
}

}

view

File Name :

<!doctype html>
<html>
<head>
<title>How to Send AJAX request with CSRF token in CodeIgniter</title>
</head>
<body>


<input type="text" class="txt_csrfname" name="<?= $this->security->get_csrf_token_name(); ?>" value="<?= $this->security->get_csrf_hash(); ?>"><br>

Select Username : <select id='sel_user'>
<option value='yssyogesh'>yssyogesh</option>
<option value='sonarika'>sonarika</option>
<option value='vishal'>vishal</option>
<option value='sunil'>sunil</option>
</select>


<div >
Username : <span id='suname'></span><br/>
Name : <span id='sname'></span><br/>
Email : <span id='semail'></span><br/>
</div>


<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>
<script type='text/javascript'>
// baseURL variable
var baseURL= "<?= base_url();?>";

$(document).ready(function(){

$('#sel_user').change(function(){
// CSRF Hash
var csrfName = $('.txt_csrfname').attr('name'); // Value specified in $config['csrf_token_name']
var csrfHash = $('.txt_csrfname').val(); // CSRF hash

// Username
var username = $(this).val();

// AJAX request
$.ajax({
url:'<?=base_url()?>index.php/User/userDetails',
method: 'post',
data: {username: username,[csrfName]: csrfHash },
dataType: 'json',
success: function(response){

// Update CSRF hash
$('.txt_csrfname').val(response.token);

// Empty the elements
$('#suname,#sname,#semail').text('');

// Loop on response
$(response[0]).each(function(key,value){

var uname = value.username;
var name = value.name;
var email = value.email;

$('#suname').text(uname);
$('#sname').text(name);
$('#semail').text(email);
});

}
});
});
});
</script>
</body>
</html>

File Name :

Itechtuto

Codeigniter Tutorials

How to Send AJAX request with CSRF token in CodeIgniter

File Name :

User Table

File Name :

Config.php

File Name :

Model

File Name : Main_model.php

Controller

File Name :

view

File Name :

File Name :

File Name :

File Name :

Connect Us Socially:

Quick Links