laravel 5 - 表单 post 出现 403 错误
laravel 5 - 403 error on form post
优秀的stack over flow人，
以下通用表单无法 post 正确，returns 403 禁止错误。
然而，当从 value= 字段中删除随机文本块时，它可以 post。
<form method="POST" action="http://domain.com/generic" accept-charset="UTF-8">
<input type="hidden" name="items" value="[{"sku":"ttwvslyvjblc","name":"5 on 5 - 1 hour indoor (Loose Cannons)","price":14,"quantity":1,"detail":{"utc_offset":36000000,"venue":{"country":"au","localized_country_name":"Australia","city":"Kensington","address_1":"Corner of Kensington Road and Altona Street","name":"YMCA Kensington Community Recreation Centre ","lon":144.924556,"id":1412922,"lat":-37.795941,"repinned":false},"rsvp_limit":14,"headcount":0,"visibility":"public_limited","waitlist_count":0,"created":1461736046000,"fee":{"amount":14,"accepts":"paypal","description":"per person","currency":"AUD","label":"Price","required":"1"},"maybe_rsvp_count":0,"description":"<p>*Please note that this session is for advanced players only with the title Loose Cannons*</p> <p>Each week we play a friendly competitive game of basketball. There is a half time break of 2 mins where teams have the chance to discuss strategies. We have a 4 minute substitution which is notified with a whistle. Maximise your fitness each game while we pump some tunes!</p> <p>Points are totalled and the team with the most wins.</p> <p>Some of our members are casual, while many are regular, this creates a dynamic mix of friends and new faces, this <a href=\"http://www.basketball613.com.au/code-of-conduct/\">culture</a> is what separates Basketball613 apart from standard league competition basketball.</p> <p>The rules are refereed by the players, for the players. We use the FIBA rule system.</p> <p>Coloured sashes are provided to players to identify which team you'r on, so you just need to bring comfortable clothes.</p> <p>If you are attending a game for the first time, you will be allocated to the Intermediate/beginners session to start of with. We will then assess and allocate you to the appropriate skill level game after your first game. To find out which group you have been allocated to, please view your profile title before you book in your next session. When you arrive ask reception where the basketball courts are.</p> <p>Payment is made online, preferably 1 week in advance.</p> <p>Facilities: Showers, Parking, Trains, Drinking Water.</p>","how_to_find_us":"When you arrive ask reception where the basketball courts are.","event_url":"http://www.meetup.com/basketball613/events/231502076/","yes_rsvp_count":6,"duration":3600000,"announced":false,"name":"5 on 5 - 1 hour indoor (Loose Cannons)","id":"ttwvslyvjblc","time":1467104400000,"updated":1461817693000,"group":{"join_mode":"open","created":1358743637000,"name":"Melbourne Basketball 613","group_lon":144.96000671387,"id":6760582,"urlname":"basketball613","group_lat":-37.810001373291,"who":"Ballers"},"status":"upcoming","numspotsleft":8,"url":"http://api.basketball613.com.au/members-area/event/ttwvslyvjblc","date":{"date_usa":"06-28-2016","date_aus":"28-06-2016","time":"07:00pm","day":"28","monthname":"Jun","dayname":"Tuesday"},"quantity":1}}]">
<input class="btn btn-flat btn-success" type="submit" value="Checkout to play!">
</form>
路线有效：
Route::post('/generic', function() {
dd('ok!');
});
注意：我已禁用 csrf 以隔离问题。
为什么我无法收到 post 输入的项目？
为什么要创建 403 Forbidden Access to this resource on the server is denied!？
您的路线：
route::post('generic',['as' => 'generic'],function() {
});
您的表单代码：
<form method="POST" action="{{route('generic')}}" accept-charset="UTF-8">
<input type="hidden" name="items" value="your value">
<input class="btn btn-flat btn-success" type="submit" value="Checkout to play!">
</form>
希望能帮到你
这原来是服务器上的问题。
mod_security 已更新，需要将域列入白名单。
优秀的stack over flow人，
以下通用表单无法 post 正确，returns 403 禁止错误。
然而，当从 value= 字段中删除随机文本块时，它可以 post。
<form method="POST" action="http://domain.com/generic" accept-charset="UTF-8">
<input type="hidden" name="items" value="[{"sku":"ttwvslyvjblc","name":"5 on 5 - 1 hour indoor (Loose Cannons)","price":14,"quantity":1,"detail":{"utc_offset":36000000,"venue":{"country":"au","localized_country_name":"Australia","city":"Kensington","address_1":"Corner of Kensington Road and Altona Street","name":"YMCA Kensington Community Recreation Centre ","lon":144.924556,"id":1412922,"lat":-37.795941,"repinned":false},"rsvp_limit":14,"headcount":0,"visibility":"public_limited","waitlist_count":0,"created":1461736046000,"fee":{"amount":14,"accepts":"paypal","description":"per person","currency":"AUD","label":"Price","required":"1"},"maybe_rsvp_count":0,"description":"<p>*Please note that this session is for advanced players only with the title Loose Cannons*</p> <p>Each week we play a friendly competitive game of basketball. There is a half time break of 2 mins where teams have the chance to discuss strategies. We have a 4 minute substitution which is notified with a whistle. Maximise your fitness each game while we pump some tunes!</p> <p>Points are totalled and the team with the most wins.</p> <p>Some of our members are casual, while many are regular, this creates a dynamic mix of friends and new faces, this <a href=\"http://www.basketball613.com.au/code-of-conduct/\">culture</a> is what separates Basketball613 apart from standard league competition basketball.</p> <p>The rules are refereed by the players, for the players. We use the FIBA rule system.</p> <p>Coloured sashes are provided to players to identify which team you'r on, so you just need to bring comfortable clothes.</p> <p>If you are attending a game for the first time, you will be allocated to the Intermediate/beginners session to start of with. We will then assess and allocate you to the appropriate skill level game after your first game. To find out which group you have been allocated to, please view your profile title before you book in your next session. When you arrive ask reception where the basketball courts are.</p> <p>Payment is made online, preferably 1 week in advance.</p> <p>Facilities: Showers, Parking, Trains, Drinking Water.</p>","how_to_find_us":"When you arrive ask reception where the basketball courts are.","event_url":"http://www.meetup.com/basketball613/events/231502076/","yes_rsvp_count":6,"duration":3600000,"announced":false,"name":"5 on 5 - 1 hour indoor (Loose Cannons)","id":"ttwvslyvjblc","time":1467104400000,"updated":1461817693000,"group":{"join_mode":"open","created":1358743637000,"name":"Melbourne Basketball 613","group_lon":144.96000671387,"id":6760582,"urlname":"basketball613","group_lat":-37.810001373291,"who":"Ballers"},"status":"upcoming","numspotsleft":8,"url":"http://api.basketball613.com.au/members-area/event/ttwvslyvjblc","date":{"date_usa":"06-28-2016","date_aus":"28-06-2016","time":"07:00pm","day":"28","monthname":"Jun","dayname":"Tuesday"},"quantity":1}}]">
<input class="btn btn-flat btn-success" type="submit" value="Checkout to play!">
</form>
路线有效：
Route::post('/generic', function() {
dd('ok!');
});
注意：我已禁用 csrf 以隔离问题。
为什么我无法收到 post 输入的项目？
为什么要创建 403 Forbidden Access to this resource on the server is denied!？
您的路线：
route::post('generic',['as' => 'generic'],function() {
});
您的表单代码：
<form method="POST" action="{{route('generic')}}" accept-charset="UTF-8">
<input type="hidden" name="items" value="your value">
<input class="btn btn-flat btn-success" type="submit" value="Checkout to play!">
</form>
希望能帮到你
这原来是服务器上的问题。
mod_security 已更新，需要将域列入白名单。