eZ Community » Forums » General » Tokens for Forms?

Tokens for Forms?

Tokens for Forms?

Monday 27 June 2011 11:48:37 am - 3 replies

Hello, it is a big surprise that in eZ Publish, we don't have a way to generate a token for each forms: whether they are built upon information collectors or eZ Survey. Sure, we have various captcha extensions but it they are not built-in with eZ Publish.


I am think that at lease, eZ Publish maybe provides a token datatype? How do you solve your CSRF problem?

Monday 27 June 2011 2:06:34 pm

4.5 got token support, but token verification needs to be done by an extension.
The problem is that it breaks all ajax code that does not use ezjscore function ( .ez() ), so until that is handled a bit more elegantly it is not included by default but provided to customers that are willing to adapt their code to make it work.

It will in some form be bundled with 4.6 I think.

Modified on Monday 27 June 2011 2:07:11 pm by André R

Monday 27 June 2011 2:08:56 pm

Hi Wei, 

This is indeed an issue. I would recommend, as a temporary solution which however impacts the end-user a bit, using the recaptcha extension for eZ Publish : http://projects.ez.no/recaptcha.

Secondly, i would recommend filing a request for enhancement there : http://issues.ez.no/ezpublish , detailing the feature.

Cheers !

Monday 27 June 2011 2:09:54 pm

I can see Andre posted at the same time as me, providing another solution for this. Now you have several options to pick from !


You must be logged in to post messages in this topic!

36 542 Users on board!

Forums menu

Proudly Developed with from